Sync from kink_cli (Docker Space)

.dockerignore

@@ -1,6 +1,8 @@
 .venv
 .hypothesis
 .git
+.env
+.env.local
 **/__pycache__
 .pytest_cache
 data/

.gitignore

@@ -19,10 +19,16 @@ data/recsys/
 __pycache__/
 *.pyc
 *.egg-info/
+mutants/
+.mutmut-cache/
 
 # Node
 node_modules/
 audit/node_modules/
+frontend/dist/
+.stryker-tmp/
+frontend/.stryker-tmp/
+stryker.log
 
 # IDE (Cursor): track `.cursor/hooks`, `.cursor/rules`, and `hooks.json`; ignore volatile state only.
 .cursor/hooks/state/

.semgrepignore

@@ -1,6 +1,9 @@
 .venv/
+node_modules/
 data/
 audit/
+.cursor/
+frontend/dist/
 frontend/node_modules/
 **/__pycache__/
 *.egg-info/

Dockerfile

@@ -20,7 +20,12 @@ ENV KINK_MEDIA_STRICT=0
 ENV KINK_HF_SPACE_IMAGE=1
 
 COPY . /app
-RUN pip install --no-cache-dir pip setuptools wheel \
+RUN apt-get update \
+    && apt-get install -y --no-install-recommends nodejs npm \
+    && rm -rf /var/lib/apt/lists/* \
+    && npm ci \
+    && npm run build \
+    && pip install --no-cache-dir pip setuptools wheel \
     && pip install --no-cache-dir . \
     && chmod +x /app/deploy/hf/entrypoint.sh
 

Makefile

@@ -5,6 +5,11 @@ PARSER_ROOT ?= $(HOME)/PycharmProjects/parser
 PYTHON ?= $(shell if test -x "$(CURDIR)/.venv/bin/python"; then echo "$(CURDIR)/.venv/bin/python"; else command -v python3; fi)
 SEMGREP_BIN ?= $(CURDIR)/.venv/bin/semgrep
 SEMGREP_CONFIG ?= $(CURDIR)/semgrep.yml
+MUTMUT_STATS ?= $(CURDIR)/mutants/mutmut-cicd-stats.json
+MUTMUT_MIN_SCORE ?= 100
+MUTMUT_MAX_SURVIVED ?= 0
+MUTMUT_MAX_TIMEOUT ?= 0
+MUTMUT_MAX_NO_TESTS ?= 0
 # Broad-scan excludes: parser-parity rules that are not yet adopted repo-wide (trim over time).
 SEMGREP_KINK_EXCLUDE_RULES ?= \
 	python-enforce-readable-line-length \
@@ -26,7 +31,7 @@ SEMGREP_KINK_EXCLUDE_RULES ?= \
 
 SEMGREP_EXCLUDE_FLAGS := $(foreach r,$(SEMGREP_KINK_EXCLUDE_RULES),--exclude-rule $(r))
 
-.PHONY: semgrep-kink semgrep-recsys-core semgrep-recsys-strict ruff-kink dead-kink policy-kink test recsys-benchmark adv-probes-http prove-hf-media-placeholder publish-hf-verify verify-hf-live
+.PHONY: semgrep-kink semgrep-recsys-core semgrep-recsys-strict ruff-kink dead-kink policy-kink test mutation-python recsys-benchmark adv-probes-http prove-hf-media-placeholder publish-hf-verify verify-hf-live
 
 # Python sources only (exclude data/, audit/node_modules, deploy artifacts).
 semgrep-kink:
@@ -79,6 +84,15 @@ policy-kink: ruff-kink semgrep-recsys-strict
 test:
 	"$(PYTHON)" -m pytest -q
 
+mutation-python:
+	"$(PYTHON)" -m mutmut run
+	"$(PYTHON)" -m mutmut export-cicd-stats
+	"$(PYTHON)" "$(CURDIR)/scripts/check_mutmut_stats.py" "$(MUTMUT_STATS)" \
+		--min-score "$(MUTMUT_MIN_SCORE)" \
+		--max-survived "$(MUTMUT_MAX_SURVIVED)" \
+		--max-timeout "$(MUTMUT_MAX_TIMEOUT)" \
+		--max-no-tests "$(MUTMUT_MAX_NO_TESTS)"
+
 # Build HF Docker image and assert missing ``/media/fetlife_fetishes/...`` returns JPEG fallback
 # (``KINK_HF_SPACE_IMAGE`` + strict env ignored). Requires Docker.
 prove-hf-media-placeholder:

README.md

@@ -35,8 +35,9 @@ This repo runs as a **Docker Space** with the **same FastAPI backend** as local
 | `KINK_CATALOG_URL_BEARER` | Optional bearer for private **HTTP** catalog URLs. |
 | `B2_KEY_ID`, `B2_APPLICATION_KEY`, `B2_BUCKET`, `B2_REGION` | B2 S3 credentials (Space secrets; **parser**-compatible). With `KINK_B2_OBJECT_KEY`, downloads the catalog without a public URL. |
 | `KINK_B2_OBJECT_KEY` | Object path in the bucket (default `kink/catalog/store_slim.db`). |
-| `KINK_HF_DATASET_REPO` | Hub dataset id (set with full-catalog mode when you do not use URL or B2). |
+| `KINK_HF_DATASET_REPO` | Hub dataset id (with `KINK_HF_REQUIRE_FULL_CATALOG=1`, or with `KINK_HF_USE_HUB_DATASET=1` when full catalog is off). |
 | `KINK_HF_DATASET_FILENAME` | Remote filename in the dataset (e.g. `store_slim.db`). |
+| `KINK_HF_USE_HUB_DATASET` | **`1`** = Hub download even when `KINK_HF_REQUIRE_FULL_CATALOG=0`. If unset, a leftover `KINK_HF_DATASET_REPO` variable is ignored and the **bundled** seed is used. |
 | `HF_TOKEN` | Required if the Hub dataset is **private** (not needed for public HTTPS URLs). |
 | `KINK_CORS_ORIGINS` | Only if you split frontend/API origins. Same-origin Space UI usually needs no change. |
 | `KINK_RECSYS_SOURCE` | Optional. When set and the app is **not** constructed with `recsys_settings=`, overrides `recsys/settings.json` for `source` (`graph` / `ots` / `hybrid`). |

api.py

@@ -18,13 +18,15 @@ from sse_starlette.sse import EventSourceResponse
 from backend import Backend, VALID_RATINGS
 from backend.hf_bootstrap import ensure_store_db
 
-_data_dir = Path(__file__).resolve().parent / "data"
+_app_dir = Path(__file__).resolve().parent
+_data_dir = _app_dir / "data"
 # App uses the slim DB (local: scripts/build_slim_store.py). Override with KINK_STORE_PATH.
 # On HF: point KINK_STORE_PATH at a mounted bucket path; Dockerfile defaults to bundled seed (set KINK_HF_DATASET_* for Hub catalog).
 _default_store = Path(os.environ["KINK_STORE_PATH"]) if os.environ.get("KINK_STORE_PATH") else _data_dir / "store_slim.db"
-FRONTEND_PATH = Path(__file__).resolve().parent / "frontend" / "index.html"
-FRONTEND_DIR = Path(__file__).resolve().parent / "frontend"
-MEDIA_ROOT = Path(__file__).resolve().parent / "data" / "cached_assets"
+FRONTEND_DIR = _app_dir / "frontend"
+FRONTEND_DIST_DIR = FRONTEND_DIR / "dist"
+FRONTEND_PATH = FRONTEND_DIST_DIR / "index.html"
+MEDIA_ROOT = _app_dir / "data" / "cached_assets"
 ADMIN_SECRET = os.environ.get("KINK_ADMIN_SECRET", "")
 
 _MEDIA_CACHE = "public, max-age=86400, immutable"
@@ -32,14 +34,23 @@ _MEDIA_FALLBACK_CACHE = "public, max-age=3600"
 
 
 def _frontend_static_cache_control(target: Path) -> str:
-    """Browser e2e and local iteration can set ``KINK_FRONTEND_NO_CACHE=1`` so module graphs always match disk."""
+    """Browser e2e and local iteration can disable static caching for built assets."""
     if os.environ.get("KINK_FRONTEND_NO_CACHE") == "1":
         return "no-store"
-    if target.suffix in {".js", ".css"}:
-        return "public, max-age=300, stale-while-revalidate=60"
+    if target.suffix in {".js", ".css"} and target.parent.name == "assets":
+        return "public, max-age=31536000, immutable"
     return "no-store"
 
 
+def _require_frontend_build() -> None:
+    if FRONTEND_PATH.is_file():
+        return
+    raise HTTPException(
+        status_code=503,
+        detail="Frontend build missing. Run `npm ci && npm run build` before serving the app.",
+    )
+
+
 def _hf_space_published_image() -> bool:
     """True in the Hugging Face Space Docker image (``Dockerfile`` sets ``KINK_HF_SPACE_IMAGE=1``).
 
@@ -172,21 +183,19 @@ app.add_middleware(
 @app.middleware("http")
 async def add_security_headers(request: Request, call_next):
     response = await call_next(request)
-    # connect-src: ES module graph (esm.sh), dynamic import (e.g. web-vitals from unpkg), fetch, beacon, WS.
+    # connect-src covers fetch/beacon/WS. Frontend dependencies are bundled by Vite and served same-origin.
     connect_src = " ".join(
         sorted(
             {
                 "'self'",
-                "https://esm.sh",
-                "https://unpkg.com",
                 *(origin.strip() for origin in cors_origins if origin.strip()),
             }
         )
     )
     csp = (
-        "default-src 'self' https://esm.sh https://unpkg.com data:; "
+        "default-src 'self' data:; "
         "base-uri 'self'; frame-ancestors 'none'; form-action 'self'; frame-src 'none'; object-src 'none'; "
-        "script-src 'self' https://esm.sh https://unpkg.com; script-src-attr 'none'; "
+        "script-src 'self'; script-src-attr 'none'; "
         "style-src 'self' 'unsafe-inline'; style-src-attr 'unsafe-inline'; "
         "img-src 'self' data: https:; media-src 'self' data: https:; font-src 'self' data: https:; "
         f"connect-src {connect_src}; "
@@ -361,13 +370,15 @@ async def run_blocking(func, /, *args, **kwargs):
 
 @app.get("/", response_class=HTMLResponse, responses={200: {"content": {"text/html": {}}}})
 def frontend() -> FileResponse:
+    _require_frontend_build()
     return FileResponse(FRONTEND_PATH, headers={"Cache-Control": "no-store"})
 
 
 @app.get("/frontend/{filepath:path}")
 def frontend_static(filepath: str) -> FileResponse:
-    target = (FRONTEND_DIR / filepath).resolve()
-    if FRONTEND_DIR.resolve() not in target.parents and target != FRONTEND_DIR.resolve():
+    _require_frontend_build()
+    target = (FRONTEND_DIST_DIR / filepath).resolve()
+    if FRONTEND_DIST_DIR.resolve() not in target.parents and target != FRONTEND_DIST_DIR.resolve():
         raise HTTPException(status_code=404, detail="Not found")
     if not target.exists() or not target.is_file():
         raise HTTPException(status_code=404, detail="Not found")

backend/enrichment.py

@@ -218,7 +218,7 @@ def _detail_summary_text(self, definition: str, summary: str, examples: list[str
         ex = _finalize_kink_card_blurb(kink_name, example.strip())
         if ex:
             return ex
-    return "No sourced summary yet."
+    return ""
 
 def _image_trust_state(self, raw_asset_count: int, filtered_asset_count: int) -> str:
     if filtered_asset_count > 0:

backend/hf_bootstrap.py

@@ -6,8 +6,9 @@ Priority when the store file is missing:
 2. **Backblaze B2 (S3 API)** — if ``B2_KEY_ID``, ``B2_APPLICATION_KEY``, ``B2_BUCKET``, ``B2_REGION`` are set
    (same names as ``parser`` ``hf_deploy.py`` Space secrets), download ``KINK_B2_OBJECT_KEY`` (default
    ``kink/catalog/store_slim.db``). Works with **private** buckets; requires ``boto3``.
-3. ``KINK_HF_DATASET_REPO`` — Hub **dataset** download.
-4. Bundled seed (only when ``KINK_HF_REQUIRE_FULL_CATALOG`` is off).
+3. ``KINK_HF_DATASET_REPO`` — Hub **dataset** download (only when ``KINK_HF_REQUIRE_FULL_CATALOG`` is on, or when
+   ``KINK_HF_USE_HUB_DATASET=1`` while full catalog is off — see below).
+4. Bundled seed when full catalog is off and Hub dataset is not explicitly requested.
 
 On Spaces: mount persistent storage and set ``KINK_STORE_PATH`` so the file survives restarts.
 """
@@ -80,8 +81,9 @@ def _download_store_from_http(url: str, dest: Path) -> None:
     if token:
         headers["Authorization"] = f"Bearer {token}"
 
+    timeout = httpx.Timeout(connect=30.0, read=None, write=30.0, pool=30.0)
     try:
-        with httpx.Client(timeout=None, follow_redirects=True, headers=headers) as client:
+        with httpx.Client(timeout=timeout, follow_redirects=True, headers=headers) as client:
             with client.stream("GET", url) as response:
                 response.raise_for_status()
                 with partial.open("wb") as out:
@@ -122,6 +124,10 @@ def ensure_store_db(target: Path) -> Path:
         return target
 
     repo = os.environ.get("KINK_HF_DATASET_REPO", "").strip()
+    if not require_full and repo and not _env_truthy("KINK_HF_USE_HUB_DATASET"):
+        # HF Space "Variables" often keep KINK_HF_DATASET_REPO after switching the image to bundled-only.
+        # That triggered anonymous hf_hub_download (slow / OOM) and ignored the bundled seed.
+        repo = ""
 
     if require_full and not repo:
         repo = (
@@ -139,7 +145,8 @@ def ensure_store_db(target: Path) -> Path:
             f"SQLite database not found: {target}. "
             "Locally: run python scripts/build_slim_store.py. "
             "On Hugging Face: set KINK_CATALOG_URL (public HTTPS), or B2_KEY_ID/B2_APPLICATION_KEY/B2_BUCKET/B2_REGION "
-            "(and KINK_B2_OBJECT_KEY), or KINK_HF_DATASET_REPO (Hub dataset), "
+            "(and KINK_B2_OBJECT_KEY), or KINK_HF_REQUIRE_FULL_CATALOG=1 plus KINK_HF_DATASET_REPO (Hub dataset), "
+            "or KINK_HF_USE_HUB_DATASET=1 with KINK_HF_DATASET_REPO when full catalog is off, "
             "KINK_STORE_PATH on a mounted bucket if you need persistence, "
             "or upload an existing DB to the bucket first. "
             "For the Docker image, ensure deploy/hf/seed/hf_bundled_store.db is included in the build context."

deploy/hf/README.md

@@ -53,8 +53,9 @@ For the Space, set **`KINK_CATALOG_URL`** (public HTTPS), or **`B2_*`** + **`KIN
 | `KINK_CATALOG_URL_BEARER` | Optional bearer token for private HTTP object URLs |
 | `B2_KEY_ID`, `B2_APPLICATION_KEY`, `B2_BUCKET`, `B2_REGION` | Backblaze S3 credentials (Space secrets; same names as **parser**). Used when `KINK_CATALOG_URL` is unset. |
 | `KINK_B2_OBJECT_KEY` | Object key inside the bucket (default `kink/catalog/store_slim.db`) |
-| `KINK_HF_DATASET_REPO` | Hub dataset id (set on the Space with `KINK_HF_REQUIRE_FULL_CATALOG=1` when using Hub instead of URL/B2) |
+| `KINK_HF_DATASET_REPO` | Hub dataset id (used when `KINK_HF_REQUIRE_FULL_CATALOG=1`, or with `KINK_HF_USE_HUB_DATASET=1` while full catalog is off) |
 | `KINK_HF_DATASET_FILENAME` | Remote filename in the dataset (e.g. `store_slim.db`) |
+| `KINK_HF_USE_HUB_DATASET` | Set **`1`** only if you want a Hub download while **`KINK_HF_REQUIRE_FULL_CATALOG=0`**. Otherwise a leftover `KINK_HF_DATASET_REPO` Space variable is **ignored** so the bundled seed is used (avoids anonymous Hub traffic and OOMs). |
 | `HF_TOKEN` | If the Hub dataset is private |
 | `KINK_SKIP_HEAVY_WARM` | **`1` in the published Docker image** skips only **PPR / similarity-graph** warm-up (saves RAM on **cpu-basic**). The **in-memory catalog** is still built at process start so the first recommendations request is not blocked. Set to **`0`** on larger hardware for full graph warm-up (better cold recs for heavy graph users, higher memory). |
 | `KINK_CORS_ORIGINS` | Your Space URL for browser API calls |

deploy/hf/entrypoint.sh

@@ -8,7 +8,9 @@ export KINK_STORE_PATH
 if [ ! -f "$KINK_STORE_PATH" ]; then
   mkdir -p "$(dirname "$KINK_STORE_PATH")"
   # Full-catalog images: never copy the bundled seed. If Hub dataset or HTTPS URL is set, leave DB missing for bootstrap.
-  if [ "${KINK_HF_REQUIRE_FULL_CATALOG:-0}" != "1" ] && [ -z "${KINK_HF_DATASET_REPO:-}" ] && [ -z "${KINK_CATALOG_URL:-}" ] && [ -z "${B2_BUCKET:-}" ] && [ -z "${B2_KEY_ID:-}" ] && [ -f "$KINK_SEED_PATH" ]; then
+  # Do not require KINK_HF_DATASET_REPO to be unset: Spaces often keep a stale repo id; bundled mode still wins in api.
+  # Skip copy when opting into Hub dataset without full-catalog flag (KINK_HF_USE_HUB_DATASET=1).
+  if [ "${KINK_HF_REQUIRE_FULL_CATALOG:-0}" != "1" ] && [ "${KINK_HF_USE_HUB_DATASET:-0}" != "1" ] && [ -z "${KINK_CATALOG_URL:-}" ] && [ -z "${B2_BUCKET:-}" ] && [ -z "${B2_KEY_ID:-}" ] && [ -f "$KINK_SEED_PATH" ]; then
     cp "$KINK_SEED_PATH" "$KINK_STORE_PATH"
   fi
 fi

deploy/hf/seed/hf_bundled_store.db

@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:ab62f5134733efd6d8dec33f0a4d034549e3ca255eef494a4802ba7d3eae7267
+oid sha256:c2984f10e868979a832daedf7c51ae45c1e37214fe312d700140a457227eeb2a
 size 376832

frontend/api.js

@@ -75,4 +75,4 @@ export function currentDirectionsFor(plays, kinkId) {
   return plays?.[kinkId]?.directions || [];
 }
 
-export { directionColumnsForPlay, directionsAfterColumnDrop } from "./direction-logic.js?v=32";
+export { directionColumnsForPlay, directionsAfterColumnDrop } from "./direction-logic.js";

frontend/app.js

@@ -1,21 +1,21 @@
-import React, { useEffect, useMemo, useRef, useState, useCallback } from "https://esm.sh/react@18.3.1";
-import { createRoot } from "https://esm.sh/react-dom@18.3.1/client";
+import React, { useEffect, useMemo, useRef, useState, useCallback } from "react";
+import { createRoot } from "react-dom/client";
 import {
   QueryClient,
   QueryClientProvider,
   useQueryClient,
-} from "https://esm.sh/@tanstack/react-query@5.59.20?deps=react@18.3.1";
+} from "@tanstack/react-query";
 
-import { html, VIEWS } from "./constants.js?v=33";
-import { currentDirectionsFor } from "./api.js?v=33";
-import { directionsAfterColumnDrop } from "./direction-logic.js?v=32";
-import { StatusText, RoleChip } from "./components.js?v=32";
+import { html, VIEWS } from "./constants.js";
+import { currentDirectionsFor } from "./api.js";
+import { directionsAfterColumnDrop } from "./direction-logic.js";
+import { StatusText, RoleChip } from "./components.js";
 import {
   useUserQuery,
   useGroupsQuery,
   useRolesQuery,
   useRoleSearchQuery,
-} from "./queries.js?v=41";
+} from "./queries.js";
 import {
   useLoginMutation,
   useCreateMutation,
@@ -28,17 +28,17 @@ import {
   useRemoveGroupMemberMutation,
   useShareToggleMutation,
   usePartnerRequestMutations,
-} from "./mutations.js?v=52";
-import { optimisticBoard, removeKinkFromItemsPayload, playCommitKey } from "./board-utils.js?v=33";
-import { DiscoverView } from "./discover.js?v=65";
-import { normalizeDiscoverSheetDirections } from "./discover-flow.js?v=1";
-import { ScenariosView } from "./scenarios.js?v=1";
-import { MyPlaysView } from "./my-plays.js?v=37";
-import { TogetherView } from "./together.js?v=37";
-import { SettingsView } from "./settings.js?v=32";
-import { initTelemetry } from "./telemetry.js?v=33";
-import { preferredPartnerGroupId, resolvedPartnerGroups } from "./partner-groups.js?v=33";
-import { nextStarterCompleted, starterViewState } from "./starter-flow.js?v=34";
+} from "./mutations.js";
+import { optimisticBoard, removeKinkFromItemsPayload, playCommitKey } from "./board-utils.js";
+import { DiscoverView } from "./discover.js";
+import { normalizeDiscoverSheetDirections } from "./discover-flow.js";
+import { ScenariosView } from "./scenarios.js";
+import { MyPlaysView } from "./my-plays.js";
+import { TogetherView } from "./together.js";
+import { SettingsView } from "./settings.js";
+import { initTelemetry } from "./telemetry.js";
+import { preferredPartnerGroupId, resolvedPartnerGroups } from "./partner-groups.js";
+import { nextStarterCompleted, starterViewState } from "./starter-flow.js";
 
 const queryClient = new QueryClient();
 const EMPTY_BOARD = { to_me: [], by_me: [], together: [], hidden: [], no_go: [] };

frontend/board-utils.test.mjs

@@ -5,7 +5,24 @@
 import assert from "node:assert/strict";
 import test from "node:test";
 
-import { optimisticBoard } from "./board-utils.js";
+import {
+  findBoardItemInData,
+  optimisticBoard,
+  playCommitKey,
+  removeKinkFromItemsPayload,
+  sortedBoardItems,
+} from "./board-utils.js";
+
+test("sortedBoardItems orders by popularity descending then name ascending without mutating input", () => {
+  const input = [
+    { id: "low", name: "Zed", popularity: 5 },
+    { id: "b", name: "Beta", popularity: 10 },
+    { id: "a", name: "Alpha", popularity: 10 },
+  ];
+
+  assert.deepEqual(sortedBoardItems(input).map((item) => item.id), ["a", "b", "low"]);
+  assert.deepEqual(input.map((item) => item.id), ["low", "b", "a"]);
+});
 
 test("optimisticBoard places stub when no server board and no query cache", () => {
   const b = optimisticBoard(null, "fetlife_999", "like", ["by_me", "to_me"], null, null);
@@ -13,3 +30,176 @@ test("optimisticBoard places stub when no server board and no query cache", () =
   const inBy = b.by_me.some((x) => x.id === "fetlife_999");
   assert.ok(inTo && inBy, "stub row must appear in every direction bucket requested");
 });
+
+test("optimisticBoard removes stale copies and routes hard_no / not_interested to private buckets", () => {
+  const previous = {
+    to_me: [{ id: "k1", name: "Alpha", popularity: 1 }],
+    by_me: [{ id: "k1", name: "Alpha", popularity: 1 }],
+    together: [{ id: "k2", name: "Beta", popularity: 2 }],
+    hidden: [],
+    no_go: [],
+  };
+
+  const hidden = optimisticBoard(previous, "k1", "not_interested", ["to_me"], null, null);
+  assert.deepEqual(hidden.to_me, []);
+  assert.deepEqual(hidden.by_me, []);
+  assert.deepEqual(hidden.hidden.map((item) => item.id), ["k1"]);
+
+  const noGo = optimisticBoard(previous, "k1", "hard_no", ["to_me"], null, null);
+  assert.deepEqual(noGo.to_me, []);
+  assert.deepEqual(noGo.by_me, []);
+  assert.deepEqual(noGo.no_go.map((item) => item.id), ["k1"]);
+});
+
+test("optimisticBoard uses together when positive directions are empty", () => {
+  const b = optimisticBoard(null, "k1", "love", [], null, null);
+  assert.deepEqual(b.together.map((item) => item.id), ["k1"]);
+  assert.deepEqual(b.to_me, []);
+  assert.deepEqual(b.by_me, []);
+});
+
+test("optimisticBoard can hydrate item details from query caches", () => {
+  const queries = [
+    { queryKey: ["search", "Bond"], state: { data: { items: [{ kink: { id: "k1", name: "Bondage", definition: "Fixture", popularity: 42 } }] } } },
+  ];
+  const qc = {
+    getQueryData(key) {
+      if (JSON.stringify(key) === JSON.stringify(["kink", "k2"])) {
+        return { id: "k2", name: "Spanking", detail_summary: "Fixture", popularity: 11 };
+      }
+      return null;
+    },
+    getQueryCache() {
+      return { findAll: ({ predicate }) => queries.filter(predicate) };
+    },
+  };
+
+  const fromSearch = optimisticBoard(null, "k1", "like", ["to_me"], qc, { userId: "u1" });
+  assert.deepEqual(fromSearch.to_me[0], {
+    id: "k1",
+    name: "Bondage",
+    summary: "Fixture",
+    popularity: 42,
+    interest_state: "like",
+    directions: ["to_me"],
+  });
+
+  const fromDetail = optimisticBoard(null, "k2", "like", ["by_me"], qc, { userId: "u1" });
+  assert.equal(fromDetail.by_me[0].name, "Spanking");
+  assert.equal(fromDetail.by_me[0].summary, "Fixture");
+});
+
+test("optimisticBoard hydrates from scoped rec and prompt caches before falling back to global scans", () => {
+  const scoped = new Map([
+    [
+      JSON.stringify(["recs", "u1", ""]),
+      { items: [{ kink: { id: "rec-hit", name: "Rec Hit", summary: "rec", popularity: 9 } }] },
+    ],
+    [
+      JSON.stringify(["prompts", "u1", ""]),
+      { items: [{ kink: { id: "prompt-hit", name: "Prompt Hit", definition: "prompt", popularity: 8 } }] },
+    ],
+  ]);
+  const qc = {
+    getQueryData(key) {
+      return scoped.get(JSON.stringify(key)) || null;
+    },
+    getQueryCache() {
+      return { findAll: () => [] };
+    },
+  };
+
+  const fromRec = optimisticBoard(null, "rec-hit", "like", ["to_me"], qc, { userId: "u1" });
+  const fromPrompt = optimisticBoard(null, "prompt-hit", "like", ["by_me"], qc, { userId: "u1" });
+
+  assert.equal(fromRec.to_me[0].name, "Rec Hit");
+  assert.equal(fromRec.to_me[0].summary, "rec");
+  assert.equal(fromPrompt.by_me[0].name, "Prompt Hit");
+  assert.equal(fromPrompt.by_me[0].summary, "prompt");
+});
+
+test("optimisticBoard hydrates from group-overlap direct and similar caches only", () => {
+  const queries = [
+    {
+      queryKey: ["group-overlap", "u1", "g1"],
+      state: {
+        data: {
+          direct_matches: [{ id: "direct-hit", name: "Direct Hit", summary: "direct", popularity: 7 }],
+          similar_matches: [{ kink: { id: "similar-hit", name: "Similar Hit", detail_summary: "similar", popularity: 6 } }],
+        },
+      },
+    },
+    {
+      queryKey: ["other", "u1"],
+      state: {
+        data: {
+          direct_matches: [{ id: "wrong-hit", name: "Wrong Hit", popularity: 99 }],
+        },
+      },
+    },
+  ];
+  const qc = {
+    getQueryData() {
+      return null;
+    },
+    getQueryCache() {
+      return { findAll: ({ predicate }) => queries.filter(predicate) };
+    },
+  };
+
+  const direct = optimisticBoard(null, "direct-hit", "love", ["together"], qc, { userId: "u1" });
+  const similar = optimisticBoard(null, "similar-hit", "like", ["to_me"], qc, { userId: "u1" });
+  const wrong = optimisticBoard(null, "wrong-hit", "like", ["by_me"], qc, { userId: "u1" });
+
+  assert.equal(direct.together[0].name, "Direct Hit");
+  assert.equal(direct.together[0].summary, "direct");
+  assert.equal(similar.to_me[0].name, "Similar Hit");
+  assert.equal(similar.to_me[0].summary, "similar");
+  assert.equal(wrong.by_me[0].name, "wrong-hit");
+});
+
+test("findBoardItemInData scans every bucket and tolerates missing boards", () => {
+  const board = {
+    to_me: [],
+    by_me: [{ id: 7, name: "Seven" }],
+    together: [],
+    hidden: [],
+    no_go: [],
+  };
+  assert.equal(findBoardItemInData(null, 7), null);
+  assert.deepEqual(findBoardItemInData(board, "7"), { id: 7, name: "Seven" });
+});
+
+test("removeKinkFromItemsPayload filters by kink id while preserving payload metadata", () => {
+  const payload = {
+    cursor: "next",
+    items: [{ kink: { id: "keep" } }, { kink: { id: 12 } }, { kink: { id: "12" } }],
+  };
+
+  assert.equal(removeKinkFromItemsPayload(null, "x"), null);
+  assert.deepEqual(removeKinkFromItemsPayload(payload, 12), {
+    cursor: "next",
+    items: [{ kink: { id: "keep" } }],
+  });
+});
+
+test("removeKinkFromItemsPayload preserves malformed rows that are not the removed kink", () => {
+  const payload = {
+    items: [
+      {},
+      { kink: null },
+      { kink: { id: "remove" } },
+      { kink: { id: "keep" } },
+    ],
+  };
+
+  assert.deepEqual(removeKinkFromItemsPayload(payload, "remove"), {
+    items: [{}, { kink: null }, { kink: { id: "keep" } }],
+  });
+});
+
+test("playCommitKey is stable for direction ordering and empty directions", () => {
+  assert.equal(playCommitKey("k1", "like", ["by_me", "to_me"]), "k1::like::by_me|to_me");
+  assert.equal(playCommitKey("k1", "like", ["to_me", "by_me"]), "k1::like::by_me|to_me");
+  assert.equal(playCommitKey("k1", "hard_no"), "k1::hard_no::");
+});

frontend/components.js

@@ -1,6 +1,6 @@
-import React, { useState, useCallback, useEffect } from "https://esm.sh/react@18.3.1";
-import { html, UI_REACTIONS, DIRECTION_PILLS } from "./constants.js?v=32";
-import { kinkCategoryLabel } from "./ui-labels.js?v=32";
+import React, { useState, useCallback, useEffect } from "react";
+import { html, UI_REACTIONS, DIRECTION_PILLS } from "./constants.js";
+import { kinkCategoryLabel } from "./ui-labels.js";
 
 /** One photo at a time; tap left/right edges to change. */
 function KinkMediaScroll({ assets, imageRevealed, kinkName, onReveal, resetKey }) {
@@ -178,10 +178,13 @@ export function KinkCard({
 
   if (layout === "tinder") {
     const expanded = Boolean(infoExpanded);
-    const tappable = typeof onToggleInfo === "function";
+    const notes = (kink.notes || "").trim();
     const blurb = discoverCollapsedBlurb(kink);
     const fullDef = discoverFullDefinition(kink);
-    const notes = (kink.notes || "").trim();
+    /** No "Tap for full info" when collapsed blurb, full text, and notes are all empty (or full text equals blurb). */
+    const tinderExpandable =
+      Boolean(notes) || (Boolean(fullDef) && (!blurb || fullDef !== blurb));
+    const tappable = typeof onToggleInfo === "function" && tinderExpandable;
     const tinderBody = html`
       ${category ? html`<div className="kink-pill">${category}</div>` : null}
       <h2 className="card-title">${kink.name}</h2>

frontend/constants.js

@@ -1,5 +1,5 @@
-import React from "https://esm.sh/react@18.3.1";
-import htm from "https://esm.sh/htm@3.1.1";
+import React from "react";
+import htm from "htm";
 
 export const html = htm.bind(React.createElement);
 

frontend/direction-logic.test.mjs

@@ -22,6 +22,11 @@ test("direction columns: empty directions defaults to together", () => {
   assert.deepEqual(directionColumnsForPlay("x", {}), ["together"]);
 });
 
+test("direction columns: invalid stored directions are ignored", () => {
+  assert.deepEqual(directionColumnsForPlay("x", { x: { directions: ["sideways"] } }), ["together"]);
+  assert.deepEqual(directionColumnsForPlay("x", { x: { directions: ["sideways", "by_me"] } }), ["by_me"]);
+});
+
 test("REGRESSION: primary-first-column collapses dual directions — must NOT match contract", () => {
   /** Old UI bug: only the first DIR_ORDER hit was used, hiding by_me when to_me was also set. */
   function legacyPrimaryDirectionColumn(playId, currentPlays) {
@@ -46,3 +51,9 @@ test("directionsAfterColumnDrop: dragging onto by_me merges with existing to_me"
 test("directionsAfterColumnDrop: together column replaces specifics", () => {
   assert.deepEqual(directionsAfterColumnDrop(["to_me", "by_me"], "together"), ["together"]);
 });
+
+test("directionsAfterColumnDrop: together and invalid existing directions do not survive specific drops", () => {
+  assert.deepEqual(directionsAfterColumnDrop(["together"], "to_me"), ["to_me"]);
+  assert.deepEqual(directionsAfterColumnDrop(["sideways", "to_me"], "by_me"), ["by_me", "to_me"]);
+  assert.deepEqual(directionsAfterColumnDrop(["by_me", "to_me"], "by_me"), ["by_me", "to_me"]);
+});

frontend/discover-flow.test.mjs

@@ -11,6 +11,7 @@ import {
 
 test("positive discover reactions require direction follow-up", () => {
   assert.equal(isPositiveDiscoverRating("love"), true);
+  assert.equal(isPositiveDiscoverRating(" like "), true);
   assert.equal(isPositiveDiscoverRating("like"), true);
   assert.equal(isPositiveDiscoverRating("curious"), true);
   assert.equal(isPositiveDiscoverRating("not_interested"), false);
@@ -57,3 +58,7 @@ test("applyDiscoverDirectionChoice: together to together then to_me", () => {
   assert.deepEqual(applyDiscoverDirectionChoice(["together"], "to_me"), ["to_me"]);
   assert.deepEqual(applyDiscoverDirectionChoice(["to_me"], "together"), ["together"]);
 });
+
+test("applyDiscoverDirectionChoice: invalid keys reset to together", () => {
+  assert.deepEqual(applyDiscoverDirectionChoice(["to_me"], "sideways"), ["together"]);
+});

frontend/discover-scenarios.test.mjs

@@ -28,3 +28,24 @@ test("discoverScenarioWrites only emits changed draft scenario choices", () => {
     { scenarioKinkId: "scene_a", interestState: "love", directions: ["together"] },
   ]);
 });
+
+test("discoverScenarioWrites accepts kink/raw scenario shapes and normalizes directions", () => {
+  const writes = discoverScenarioWrites({
+    draftStates: { scene_a: "love", scene_b: "like", scene_c: "curious" },
+    scenarioItems: [
+      { kink: { id: "scene_a" } },
+      { id: "scene_b" },
+      { scenario: { id: "" } },
+      null,
+    ],
+    scenarioPreferences: {
+      scene_c: { interest_state: "hard_no" },
+    },
+    directions: ["to_me", "", "to_me", "by_me"],
+  });
+
+  assert.deepEqual(writes, [
+    { scenarioKinkId: "scene_a", interestState: "love", directions: ["to_me", "by_me"] },
+    { scenarioKinkId: "scene_b", interestState: "like", directions: ["to_me", "by_me"] },
+  ]);
+});

frontend/discover-state.test.mjs

@@ -27,6 +27,19 @@ test("visibleDiscoveryItems drops already-rated raw recommendation rows", () =>
   assert.deepEqual(visibleDiscoveryItems(rawItems, currentPlays).map((row) => row.kink.id), ["b"]);
 });
 
+test("visibleDiscoveryItems skips malformed rows, blank ids, and duplicate ids", () => {
+  const rawItems = [
+    null,
+    { kink: null },
+    { kink: { id: "" } },
+    { kink: { id: "a" } },
+    { kink: { id: "a" } },
+    { kink: { id: 9 } },
+  ];
+
+  assert.deepEqual(visibleDiscoveryItems(rawItems, {}).map((row) => row.kink.id), ["a", 9]);
+});
+
 test("empty visible deck refetches even when raw cache still has only already-rated rows", () => {
   const rawItems = [{ kink: { id: "a" } }, { kink: { id: "b" } }];
   const currentPlays = {

frontend/discover.js

@@ -1,12 +1,12 @@
-import React, { useState, useCallback, useEffect, useRef, useMemo } from "https://esm.sh/react@18.3.1";
-import { useQueryClient } from "https://esm.sh/@tanstack/react-query@5.59.20?deps=react@18.3.1";
-import { html, partnerGroupChipLabel, partnerGroupPartnerIdsTitle, DIRECTION_PILLS } from "./constants.js?v=33";
-import { KinkCard, ActionBar, SearchOverlay } from "./components.js?v=41";
-import { normalizeDiscoverSheetDirections, applyDiscoverDirectionChoice } from "./discover-flow.js?v=1";
-import { useRecsQuery, useSearchQuery, useDetailQuery } from "./queries.js?v=41";
-import { shouldRefetchEmptyDeck, visibleDiscoveryItems } from "./discover-state.js?v=33";
-import { api } from "./api.js?v=33";
-import { sendTelemetry } from "./telemetry.js?v=33";
+import React, { useState, useCallback, useEffect, useRef, useMemo } from "react";
+import { useQueryClient } from "@tanstack/react-query";
+import { html, partnerGroupChipLabel, partnerGroupPartnerIdsTitle, DIRECTION_PILLS } from "./constants.js";
+import { KinkCard, ActionBar, SearchOverlay } from "./components.js";
+import { normalizeDiscoverSheetDirections, applyDiscoverDirectionChoice } from "./discover-flow.js";
+import { useRecsQuery, useSearchQuery, useDetailQuery } from "./queries.js";
+import { shouldRefetchEmptyDeck, visibleDiscoveryItems } from "./discover-state.js";
+import { api } from "./api.js";
+import { sendTelemetry } from "./telemetry.js";
 
 export function DiscoverView({
   auth,

frontend/dist/assets/index-B1No5j6D.css

@@ -0,0 +1 @@
+:root{--bg: #f5efe7;--bg-2: #efe5d7;--surface: rgba(255, 251, 246, .92);--surface-strong: #fffaf3;--ink: #1d1815;--muted: #6d6157;--line: #dbcdbd;--accent: #b33636;--accent-2: #264653;--accent-soft: #f0ddd0;--ok: #236b45;--radius: 18px;--radius-sm: 12px;--radius-pill: 999px;--tab-height: 56px}*{box-sizing:border-box}body{margin:0;color:var(--ink);font-family:IBM Plex Sans,Inter,system-ui,sans-serif;background:radial-gradient(circle at top left,rgba(179,54,54,.14),transparent 24%),radial-gradient(circle at bottom right,rgba(38,70,83,.12),transparent 22%),linear-gradient(180deg,var(--bg-2),var(--bg));min-height:100vh;padding-bottom:calc(var(--tab-height) + 12px)}button,input,textarea{font:inherit}button{border:0;border-radius:var(--radius-pill);background:var(--accent);color:#fff;padding:10px 16px;cursor:pointer;transition:transform .12s ease,opacity .12s ease;font-size:.88rem}button:hover{transform:translateY(-1px)}button:active{transform:scale(.97)}button.secondary{background:var(--accent-2)}button.ghost{background:transparent;color:var(--ink);border:1px solid var(--line)}button.sm{padding:6px 12px;font-size:.82rem}input,textarea{width:100%;border:1px solid var(--line);border-radius:14px;padding:12px 14px;background:var(--surface-strong);color:var(--ink)}.page{max-width:680px;margin:0 auto;padding:16px}.app-global-bar{display:flex;justify-content:flex-end;align-items:center;margin:0 0 10px;min-height:36px}.app-graph-debug-toggle--on{border-color:var(--accent-2);background:#2646531a;color:var(--accent-2)}.tab-bar{position:fixed;bottom:0;left:0;right:0;display:flex;justify-content:center;gap:0;height:var(--tab-height);background:var(--surface-strong);border-top:1px solid var(--line);z-index:90}.tab-btn{flex:1;max-width:180px;display:flex;flex-direction:column;align-items:center;justify-content:center;gap:2px;background:transparent;color:var(--muted);border:none;border-radius:0;padding:4px 0;font-size:.72rem;font-weight:600;letter-spacing:.02em;transition:color .1s ease}.tab-btn:hover{transform:none}.tab-btn.active{color:var(--accent)}.tab-icon{font-size:1.3rem;line-height:1}.tab-badge{display:inline-flex;align-items:center;justify-content:center;min-width:18px;height:18px;border-radius:var(--radius-pill);background:var(--accent);color:#fff;font-size:.66rem;font-weight:700;padding:0 5px;position:absolute;top:4px;right:calc(50% - 20px)}.top-bar{display:flex;align-items:center;justify-content:space-between;gap:12px;margin-bottom:16px}.top-bar-title{font-size:1.4rem;font-weight:800;letter-spacing:-.03em;line-height:1}.top-bar-right{display:flex;align-items:center;gap:8px;font-size:.82rem;color:var(--muted)}.top-bar-right strong{color:var(--ink)}.card{background:var(--surface);border:1px solid var(--line);border-radius:var(--radius);padding:20px;box-shadow:0 8px 24px #0000000a}.card-lg{padding:28px 24px;text-align:center}.card-title{margin:0 0 8px;font-size:1.8rem;font-weight:800;letter-spacing:-.03em;line-height:1.1}.card-definition{color:var(--muted);font-size:1rem;line-height:1.5;max-width:480px;margin:0 auto 16px}.kink-pill,.card-cluster{display:inline-block;padding:5px 11px;border-radius:var(--radius-pill);background:#26465314;color:var(--accent-2);font-size:.7rem;font-weight:700;letter-spacing:.06em;text-transform:uppercase;margin-bottom:12px}.card-image-area{width:100%;aspect-ratio:16 / 9;border-radius:var(--radius-sm);background:linear-gradient(135deg,#c9b8a7,#a89584);overflow:hidden;margin-bottom:16px;position:relative;cursor:pointer}.card-image-area img{width:100%;height:100%;object-fit:cover;filter:blur(20px);transition:filter .3s ease}.card-image-area.revealed img{filter:none}.card-counter{font-size:.84rem;color:var(--muted);font-weight:600}.card-image-area--preview{cursor:pointer}.card-image-area--preview .card-image-blur{width:100%;height:100%;object-fit:cover;filter:blur(20px);transform:scale(1.04);display:block}.card-image-cta{position:absolute;top:0;right:0;bottom:0;left:0;display:flex;align-items:center;justify-content:center;color:#fff;font-size:.95rem;font-weight:700;text-shadow:0 1px 8px rgba(0,0,0,.75);pointer-events:none}.card-image-scroll{max-height:340px;overflow-y:auto;overflow-x:hidden;scroll-snap-type:y mandatory;border-radius:var(--radius-sm);margin-bottom:16px;border:1px solid var(--line);-webkit-overflow-scrolling:touch;overscroll-behavior:contain;scrollbar-width:thin}.card-image-slide{min-height:220px;scroll-snap-align:start;scroll-snap-stop:always}.card-image-slide img{width:100%;height:100%;min-height:220px;object-fit:cover;display:block}.discover-card-wrap{margin:0 auto 10px;max-width:420px;border-radius:22px;box-shadow:0 12px 40px #0000001f}.discover-photo-hint{text-align:center;line-height:1.45;max-width:420px;margin:0 auto 8px;padding:0 8px}.discover-photo-hint strong{color:var(--ink);font-weight:800}.discover-reason-row{max-width:420px;margin:0 auto 8px;padding:0 8px}.discover-reason-pill{display:inline-flex;align-items:center;padding:6px 12px;border-radius:var(--radius-pill);background:#1d18150f;color:var(--ink);font-size:.78rem;font-weight:600;line-height:1.3}.discover-reason-pill--partner_influenced{background:#b336361f;color:var(--accent)}.discover-reason-pill--starter{background:#2646531a;color:var(--accent-2)}.discover-group-row{max-width:420px;margin:0 auto 14px;padding:0 4px}.discover-group-label{font-size:.72rem;font-weight:700;text-transform:uppercase;letter-spacing:.06em;color:var(--muted);margin-bottom:8px}.partner-group-picker{margin-bottom:8px}.discover-photo-toggle{display:flex;align-items:center;gap:10px;margin:0 auto 12px;max-width:420px;font-size:.86rem;color:var(--muted);cursor:pointer;-webkit-user-select:none;user-select:none}.discover-photo-toggle input{width:1.05rem;height:1.05rem;accent-color:var(--accent, #c62828)}.discover-directions{max-width:420px;margin:4px auto 6px;padding:0 10px}.discover-dir-label{font-size:.72rem;font-weight:700;text-transform:uppercase;letter-spacing:.07em;color:var(--muted);margin-bottom:8px}.discover-direction-sheet{max-width:420px;margin:0 auto 14px;padding:14px;border:1px solid var(--line);border-radius:var(--radius);background:#ffffffe0;display:grid;gap:10px}.discover-direction-actions{display:flex;gap:8px;flex-wrap:wrap}.discover-scenario-hint{display:flex;align-items:center;justify-content:space-between;gap:12px;margin-bottom:12px}.discover-scenario-hint strong{display:block;margin-bottom:2px}.tinder-card{background:var(--surface-strong);border:1px solid var(--line);border-radius:22px;overflow:hidden;text-align:left}.tinder-card__media{position:relative;background:linear-gradient(145deg,#3d3430,#1a1513)}.tinder-card__media-inner{position:relative;height:min(58vh,520px);height:min(58dvh,520px);min-height:280px;overflow:hidden}.tinder-card__carousel{position:relative;width:100%;height:100%}.tinder-card__slide--solo{height:100%}.tinder-card__slide--solo img{width:100%;height:100%;min-height:min(58vh,520px);min-height:min(58dvh,520px);object-fit:cover;display:block}.tinder-edge{position:absolute;top:0;bottom:calc(104px + env(safe-area-inset-bottom,0px));width:30%;max-width:150px;z-index:4;cursor:pointer;background:transparent;border:none;padding:0;-webkit-tap-highlight-color:transparent}.tinder-edge--left{left:0;background:linear-gradient(90deg,rgba(0,0,0,.14),transparent)}.tinder-edge--right{right:0;background:linear-gradient(270deg,rgba(0,0,0,.14),transparent)}.tinder-edge:active{opacity:.85}.tinder-dots{position:absolute;bottom:14px;left:50%;transform:translate(-50%);display:flex;gap:7px;z-index:5;pointer-events:none}.tinder-dots span{width:7px;height:7px;border-radius:50%;background:#ffffff61;transition:transform .12s ease,background .12s ease}.tinder-dots span.on{background:#fff;transform:scale(1.12)}.tinder-card__media-scroll{height:100%;overflow-y:auto;overflow-x:hidden;scroll-snap-type:y mandatory;-webkit-overflow-scrolling:touch;overscroll-behavior:contain;scrollbar-width:thin}.tinder-card__slide{min-height:100%;scroll-snap-align:start;scroll-snap-stop:always;box-sizing:border-box}.tinder-card__slide img{width:100%;height:100%;min-height:min(58vh,520px);object-fit:cover;display:block}.tinder-card__img-blur{filter:blur(22px);transform:scale(1.06)}.tinder-card__media--placeholder{display:flex;align-items:center;justify-content:center;aspect-ratio:3 / 4;max-height:58vh;min-height:280px}.tinder-card__placeholder-letters{font-size:3.5rem;font-weight:800;color:#ffffff38;letter-spacing:-.06em}.tinder-card__photo-badge{position:absolute;top:12px;right:12px;left:auto;bottom:auto;transform:none;z-index:4;padding:5px 12px;border-radius:var(--radius-pill);background:#00000080;color:#fff;font-size:.74rem;font-weight:700;letter-spacing:.04em;pointer-events:none}.tinder-card__gradient{position:absolute;top:0;right:0;bottom:0;left:0;background:linear-gradient(180deg,transparent 38%,rgba(0,0,0,.55) 100%);pointer-events:none;z-index:2}.tinder-card__reveal-row{position:absolute;left:0;right:0;bottom:0;height:calc(104px + env(safe-area-inset-bottom,0px));display:flex;align-items:center;justify-content:center;z-index:6;pointer-events:none;box-sizing:border-box;padding-bottom:env(safe-area-inset-bottom,0px)}.tinder-card__reveal{position:relative;flex:0 0 auto;width:max-content;max-width:min(280px,calc(100% - 32px));margin:0;padding:11px 20px;border-radius:var(--radius-pill);border:1px solid rgba(255,255,255,.5);background:#00000080;color:#fff;font-size:.84rem;font-weight:700;cursor:pointer;box-shadow:0 6px 24px #00000059;touch-action:manipulation;-webkit-user-select:none;user-select:none;pointer-events:auto;outline:none}@media (hover: hover) and (pointer: fine){.tinder-card__reveal:hover{background:#0000009e}}.tinder-card__reveal:focus-visible{box-shadow:0 6px 24px #00000059,0 0 0 2px #ffffff73}.tinder-card__body{padding:16px 18px 20px}button.tinder-card__body.tinder-card__body--tappable{display:block;width:100%;border:none;margin:0;padding:16px 18px 20px;font:inherit;color:inherit;text-align:left;background:var(--surface-strong);-moz-appearance:none;appearance:none;-webkit-appearance:none;border-radius:0;box-sizing:border-box}.tinder-card__body--tappable{cursor:pointer;border-radius:0 0 18px 18px;transition:background .14s ease;touch-action:manipulation;-webkit-tap-highlight-color:transparent}.tinder-card__body--tappable:focus-visible{outline:none;box-shadow:inset 0 0 0 2px #6450c859}.tinder-card__body--tappable:active{background:#0000000b}.tinder-card__body--expanded{max-height:min(52vh,420px);overflow-y:auto;overscroll-behavior:contain;-webkit-overflow-scrolling:touch}.tinder-card__body .kink-pill{margin-bottom:8px}.tinder-card__body .card-title{font-size:1.55rem;text-align:left;margin-bottom:6px}.tinder-card__body:not(.tinder-card__body--expanded) .card-definition{text-align:left;font-size:.92rem;line-height:1.45;display:block;overflow:visible;margin-bottom:0;color:var(--ink)}.tinder-card__body--expanded .card-definition--discover-full{text-align:left;font-size:.92rem;line-height:1.5;display:block;margin-bottom:0;overflow:visible;color:var(--ink)}.tinder-card__notes{margin-top:10px;font-size:.84rem;line-height:1.45;white-space:pre-wrap;word-break:break-word;color:#5c5c5c}.tinder-card__info-cue{margin-top:10px;font-size:.72rem;font-weight:600;letter-spacing:.02em;color:#888;text-align:center}.tinder-card .safety-badge{margin-top:8px}.action-bar{display:flex;flex-wrap:wrap;justify-content:center;gap:10px;padding:16px 8px;max-width:520px;margin:0 auto}.action-btn{display:flex;flex-direction:column;align-items:center;gap:4px;padding:12px 20px;border-radius:16px;border:1px solid var(--line);background:#fff;color:var(--ink);font-size:.76rem;font-weight:600;min-width:64px;transition:transform .1s ease,background .1s ease,border-color .1s ease}.action-btn:hover{transform:translateY(-2px)}.action-btn:active{transform:scale(.94)}.action-btn .action-icon{font-size:1.4rem;line-height:1}.action-btn.love{border-color:#e57373;background:#fff5f5}.action-btn.like{border-color:#81c784;background:#f5fff5}.action-btn.maybe{border-color:#b39ddb;background:#f3e5f5}.action-btn.skip{border-color:var(--line)}.action-btn.nogo{border-color:#bbb;background:#fafafa}.chip-flow{display:flex;flex-wrap:wrap;gap:6px;align-items:flex-start}.chip-flow--with-dnd{flex-direction:column;align-items:stretch}.plays-board-card--inline{width:100%}.play-chip{display:inline-flex;align-items:center;gap:6px;padding:6px 10px;border:1px solid var(--line);border-radius:var(--radius-sm);background:#ffffffd1;font-size:.88rem;font-weight:600;cursor:pointer;transition:border-color .1s ease,box-shadow .1s ease;max-width:100%}.chip-top-row{display:inline-flex;align-items:center;gap:6px;min-width:0;flex:1}.chip-near-title{flex-shrink:0;opacity:.55;font-size:.85em;font-weight:600;cursor:help}.play-chip:hover{border-color:var(--accent)}.play-chip .chip-emoji{flex-shrink:0}.play-chip .chip-name{overflow:hidden;text-overflow:ellipsis;white-space:nowrap;min-width:0}.play-chip.expanded{width:100%;max-width:100%;min-width:0;box-sizing:border-box;flex-direction:column;align-items:stretch;gap:10px;padding:12px;background:#fff;border-color:var(--accent);box-shadow:0 4px 16px #0000000f}.play-chip.expanded .chip-top-row{align-items:flex-start}.play-chip.expanded .chip-name{display:-webkit-box;-webkit-box-orient:vertical;-webkit-line-clamp:3;overflow:hidden;text-overflow:ellipsis;white-space:normal;word-break:break-word}.plays-inspector{scroll-margin-top:12px}.plays-inspector-head{display:flex;align-items:flex-start;justify-content:space-between;gap:12px}.plays-inspector-copy{min-width:0}.plays-inspector-label{text-transform:uppercase;letter-spacing:.05em;font-weight:700;color:var(--muted)}.plays-inspector-title-row{display:flex;align-items:flex-start;gap:8px;min-width:0}.plays-inspector-title{margin:0;font-size:1.2rem;line-height:1.2;overflow-wrap:anywhere;word-break:break-word}.plays-inspector-emoji{flex-shrink:0;font-size:1.2rem;line-height:1}.plays-inspector-definition{margin:0}.plays-inspector-actions,.plays-inspector-actions-row,.plays-inspector-section{display:grid;gap:10px}.inline-detail{display:grid;gap:10px;min-width:0;max-width:100%}.inline-detail .detail-def{font-size:.9rem;line-height:1.45;color:var(--muted);font-weight:400;overflow-wrap:anywhere;word-break:break-word}.scenario-panel{display:grid;gap:8px;padding:10px;border:1px solid var(--line);border-radius:var(--radius-sm);background:#00000005}.scenario-panel-head{display:flex;align-items:flex-start;justify-content:space-between;gap:10px}.scenario-panel-mother{display:grid;gap:2px;min-width:0}.scenario-panel-mother-label{text-transform:uppercase;letter-spacing:.05em;font-weight:700;color:var(--muted)}.scenario-panel-mother-name{font-size:.95rem;font-weight:700;line-height:1.35;overflow-wrap:anywhere;word-break:break-word}.scenario-panel-hint{margin:0 0 4px;line-height:1.4}.scenario-list{display:grid;gap:8px}.scenario-list--page{gap:10px}.scenario-row{display:grid;grid-template-columns:minmax(0,1fr) auto;align-items:center;gap:8px;min-width:0}.scenario-row-text{display:grid;gap:2px;min-width:0}.scenario-name{font-size:.84rem;font-weight:650;line-height:1.4;overflow-wrap:anywhere;word-break:break-word;white-space:normal}.scenario-match-chip .chip-name{white-space:normal;overflow-wrap:anywhere}.scenario-row--page{padding:12px;border:1px solid var(--line);border-radius:var(--radius-sm);background:#ffffffd1}.scenario-row--highlight{border-color:var(--accent);box-shadow:0 0 0 2px #b336361f}.scenario-row-actions{display:flex;align-items:center;justify-content:flex-end}.scenarios-parent-head,.scenarios-detail-head{display:flex;align-items:flex-start;justify-content:space-between;gap:12px;flex-wrap:wrap}.scenarios-parent-search{max-width:240px}.scenarios-parent-list{display:grid;gap:8px}.scenarios-parent-item{width:100%;display:grid;gap:3px;justify-items:start;text-align:left;border-radius:var(--radius-sm);border:1px solid var(--line);background:#ffffffd1;color:var(--ink);padding:12px 14px}.scenarios-parent-item.active{border-color:var(--accent);background:#fff}.scenarios-parent-name{font-weight:700;overflow-wrap:anywhere;word-break:break-word}.scenarios-parent-meta{font-size:.78rem;color:var(--muted)}.scenarios-detail-label{text-transform:uppercase;letter-spacing:.05em;font-weight:700;color:var(--muted)}.scenarios-detail-title{margin:4px 0;line-height:1.15}@media (max-width: 560px){.discover-scenario-hint{align-items:stretch;flex-direction:column}.scenario-row{grid-template-columns:1fr}.scenario-row-actions{justify-content:flex-start}}.dir-pills{display:flex;gap:6px;flex-wrap:wrap}.dir-pill{display:inline-flex;align-items:center;gap:5px;padding:5px 10px;border:1px solid var(--line);border-radius:var(--radius-pill);background:#fff;color:var(--ink);font-size:.8rem;font-weight:500;touch-action:manipulation;-webkit-tap-highlight-color:transparent}.dir-pill.active{background:var(--accent-2);color:#fff;border-color:transparent}.dir-pill:disabled{opacity:.55;cursor:not-allowed}.discover-dir-strip{margin:.65rem 0 .35rem;padding:0 2px}.discover-dir-strip__label{margin-bottom:6px;text-align:center;line-height:1.35}.discover-dir-strip__pills{justify-content:center}.reaction-bar{display:flex;gap:6px;flex-wrap:wrap}.react-btn{display:inline-flex;align-items:center;justify-content:center;padding:5px 8px;border-radius:var(--radius-pill);border:1px solid var(--line);background:#fff;font-size:.9rem;min-width:32px;min-height:32px;transition:transform 80ms ease,background 80ms ease}.react-btn:active{transform:scale(.92)}.react-btn.active{background:var(--accent-soft);border-color:transparent}.section-header{display:flex;align-items:center;justify-content:space-between;gap:8px;margin-bottom:8px}.section-title{margin:0;font-size:.88rem;font-weight:700;text-transform:uppercase;letter-spacing:.06em;color:var(--muted)}.section-count{font-size:.76rem;color:var(--muted);font-weight:600}.plays-direction-board{margin-bottom:20px}.plays-board-hint{margin:0 0 12px;line-height:1.45}.plays-board-columns{display:grid;grid-template-columns:repeat(3,minmax(0,1fr));gap:10px;align-items:stretch}.plays-board-columns>.plays-board-column{min-width:0}@media (max-width: 780px){.plays-board-columns{grid-template-columns:1fr}.plays-board-card{flex-wrap:wrap;align-items:flex-start}.plays-board-card .plays-dnd-handle{margin-top:4px}.plays-board-card-body{flex:1 1 calc(100% - 48px);min-width:0}.plays-touch-moves{display:flex;order:3}}.plays-board-column{display:flex;flex-direction:column;min-height:140px;border:2px dashed var(--line);border-radius:var(--radius);background:#ffffff8c;padding:8px;transition:border-color .12s ease,background .12s ease,box-shadow .12s ease}.plays-board-column--over{border-color:var(--accent);background:#ffecec73;box-shadow:0 0 0 1px #c6282826}.plays-board-column-head{display:flex;align-items:center;gap:6px;margin-bottom:8px;font-size:.78rem;font-weight:700;text-transform:uppercase;letter-spacing:.05em;color:var(--muted)}.plays-board-column-icon{font-size:1rem}.plays-board-column-body{flex:1;min-width:0;display:flex;flex-direction:column;gap:8px}.plays-board-empty{flex:1;display:flex;align-items:center;justify-content:center;padding:16px 8px;text-align:center;color:var(--muted);opacity:.9}.plays-board-card{display:flex;gap:6px;align-items:flex-start;min-width:0;max-width:100%;width:100%;box-sizing:border-box}.plays-dnd-handle{flex-shrink:0;cursor:grab;-webkit-user-select:none;user-select:none;padding:4px 6px;margin-top:2px;border-radius:6px;color:var(--muted);font-size:1rem;line-height:1;touch-action:none}.plays-dnd-handle:hover{background:#0000000a;color:var(--ink)}.plays-dnd-handle:active{cursor:grabbing}.plays-touch-moves{display:none;flex:1 1 100%;flex-wrap:wrap;gap:6px;align-items:stretch;margin-top:2px}.plays-touch-move-btn{flex:1 1 auto;min-width:0;display:inline-flex;align-items:center;justify-content:center;gap:4px;padding:8px 6px;border:1px solid var(--line);border-radius:var(--radius-sm);background:#ffffffeb;font-size:.72rem;font-weight:600;color:var(--ink);cursor:pointer;touch-action:manipulation;-webkit-tap-highlight-color:transparent}.plays-touch-move-btn:active{background:#c6282814}.plays-touch-move-icon{font-size:.95rem;line-height:1}.plays-board-card-body{flex:1;min-width:0;overflow-x:hidden}.plays-board-card-body .play-chip,.plays-board-card-body .inline-detail .reaction-bar,.plays-board-card-body .inline-detail .dir-pills,.plays-board-card-body .inline-detail .chips{max-width:100%}.inline-detail .chips .chip{max-width:100%;min-width:0;display:-webkit-box;-webkit-box-orient:vertical;-webkit-line-clamp:2;overflow:hidden;text-overflow:ellipsis;line-height:1.35;text-align:left;white-space:normal;word-break:break-word}.plays-board-card-body .inline-detail button.ghost.sm{max-width:100%;justify-self:start}.plays-board-card-body .play-assets,.plays-board-card-body .play-assets-carousel{max-width:100%;box-sizing:border-box}.collapse-toggle{all:unset;cursor:pointer;display:flex;align-items:center;gap:6px;font-size:.84rem;font-weight:600;color:var(--muted);padding:6px 0}.collapse-toggle .arrow{transition:transform .2s ease}.collapse-toggle.open .arrow{transform:rotate(90deg)}.partner-code{display:flex;align-items:center;gap:10px;padding:12px 14px;border:1px solid var(--line);border-radius:var(--radius);background:#ffffffb8}.partner-code code{font-size:1.1rem;font-weight:700;flex:1;overflow-wrap:anywhere}.sub-tabs{display:flex;gap:0;border-bottom:2px solid var(--line);margin-bottom:12px}.sub-tab{padding:8px 16px;background:transparent;border:none;border-bottom:2px solid transparent;border-radius:0;color:var(--muted);font-weight:600;font-size:.84rem;margin-bottom:-2px;transition:color .1s,border-color .1s}.sub-tab:hover{transform:none;color:var(--ink)}.sub-tab.active{color:var(--accent);border-bottom-color:var(--accent)}.match-indicator{display:inline-flex;align-items:center;gap:4px;padding:3px 8px;border-radius:var(--radius-pill);font-size:.74rem;font-weight:600}.match-indicator.perfect{background:#e8f5e9;color:#2e7d32}.match-indicator.partial{background:#fff3e0;color:#e65100}.together-scenario-card{flex-direction:column;align-items:stretch;gap:10px}.together-scenario-copy{display:grid;gap:4px;min-width:0}.together-mother-label,.together-scenario-label{text-transform:uppercase;letter-spacing:.05em;font-weight:700;color:var(--muted);font-size:.68rem}.together-mother-name{font-size:.95rem;font-weight:700;line-height:1.35;overflow-wrap:anywhere;word-break:break-word}button.together-mother-link{all:unset;cursor:pointer;font-size:.95rem;font-weight:700;line-height:1.35;overflow-wrap:anywhere;word-break:break-word;color:var(--accent);text-decoration:underline;text-underline-offset:2px}button.together-mother-link:focus-visible{outline:2px solid var(--accent);outline-offset:2px}.together-scenario-title{font-size:.88rem;font-weight:650;line-height:1.45;overflow-wrap:anywhere;word-break:break-word;white-space:normal}.together-scenario-meta{display:flex;flex-direction:column;gap:8px;min-width:0}.together-scenario-you{display:grid;gap:4px;padding-top:4px;border-top:1px solid var(--line)}.onboard{min-height:100vh;display:flex;flex-direction:column;align-items:center;justify-content:center;padding:24px;text-align:center}.onboard .card{width:100%;max-width:440px;text-align:left}.onboard h1{font-size:2.4rem;letter-spacing:-.04em;line-height:1;margin:0 0 8px}.onboard .sub{color:var(--muted);margin:0 0 24px;font-size:.96rem}.starter-page{padding-top:24px}.starter-hero{display:flex;align-items:flex-start;justify-content:space-between;gap:16px;margin-bottom:16px}.starter-hero .sub{margin:8px 0 0;max-width:520px}.creds{border:1px solid var(--line);border-radius:var(--radius);padding:14px;background:#ffffffb8}.creds code{display:block;margin-top:6px;padding:8px 10px;border-radius:var(--radius-sm);background:#f5eee4;overflow-wrap:anywhere;font-weight:600}.settings-code{display:inline-block;margin-top:6px;padding:8px 10px;border-radius:var(--radius-sm);background:#f5eee4;overflow-wrap:anywhere;font-weight:600}.settings-toggle{margin:0;max-width:none}.settings-share-row{padding:10px 12px;border:1px solid var(--line);border-radius:var(--radius-sm);background:#ffffffb8}.settings-share-title{font-size:.9rem;font-weight:700;margin-bottom:4px}.search-overlay{position:fixed;top:0;right:0;bottom:0;left:0;z-index:80;background:#1d18156b;-webkit-backdrop-filter:blur(6px);backdrop-filter:blur(6px);display:flex;flex-direction:column;align-items:center;padding:16px}.search-overlay .search-inner{width:100%;max-width:560px;display:grid;gap:12px}.search-overlay input{font-size:1.1rem;padding:14px 16px}.play-assets{width:100%}.play-assets-carousel{position:relative;border-radius:var(--radius-sm);border:1px solid var(--line);overflow:hidden;background:var(--surface)}.play-assets-carousel .play-assets-slide{min-height:200px;max-height:min(48vh,340px)}.play-assets-carousel .play-assets-slide img{width:100%;height:100%;min-height:200px;max-height:min(48vh,340px);object-fit:cover;display:block}.play-edge{position:absolute;top:0;bottom:0;width:28%;max-width:120px;z-index:2;cursor:pointer;border:none;padding:0;background:transparent;-webkit-tap-highlight-color:transparent}.play-edge--left{left:0;background:linear-gradient(90deg,rgba(0,0,0,.08),transparent)}.play-edge--right{right:0;background:linear-gradient(270deg,rgba(0,0,0,.08),transparent)}.play-assets-dots{position:absolute;bottom:10px;left:50%;transform:translate(-50%);display:flex;gap:6px;z-index:3;pointer-events:none}.play-assets-dots span{width:6px;height:6px;border-radius:50%;background:#ffffff73}.play-assets-dots span.on{background:#fff}.play-assets-badge{position:absolute;top:8px;right:8px;z-index:3;padding:4px 10px;border-radius:var(--radius-pill);background:#0000007a;color:#fff;font-size:.72rem;font-weight:700;pointer-events:none}.image-grid{display:grid;grid-template-columns:repeat(2,1fr);gap:8px}.image-tile{position:relative;aspect-ratio:1;background:#c9b8a7;border-radius:var(--radius-sm);overflow:hidden}.image-tile img{width:100%;height:100%;object-fit:cover}.image-tile .reveal-btn{position:absolute;top:0;right:0;bottom:0;left:0;border-radius:0;background:linear-gradient(180deg,#0000001f,#000000b3);display:flex;align-items:center;justify-content:center;font-size:.82rem}.safety-badge{padding:4px 8px;border-radius:8px;font-size:.78rem;font-weight:600;display:inline-block}.safety-badge.extreme{background:#ffebee;color:#c62828;border:1px solid #ef9a9a}.safety-badge.advanced{background:#fff3e0;color:#e65100;border:1px solid #ffcc80}.stack{display:grid;gap:12px}.stack-sm{display:grid;gap:8px}.row{display:flex;gap:8px;align-items:center;flex-wrap:wrap}.muted{color:var(--muted)}.tiny{font-size:.82rem;color:var(--muted)}.empty{color:var(--muted);border:1px dashed rgba(219,205,189,.7);border-radius:14px;padding:10px 12px;background:#ffffff59;font-size:.88rem}.chips{display:flex;gap:6px;flex-wrap:wrap}.chip{border:1px solid var(--line);border-radius:var(--radius-pill);padding:5px 10px;font-size:.82rem;background:#fff;color:var(--ink);cursor:pointer;font-weight:500}.chip.active{border-color:var(--accent);background:var(--accent-soft);color:var(--accent);font-weight:600}.status{min-height:1.2em;color:var(--muted);font-size:.86rem}.together-scope-hint{margin:0 0 10px;color:var(--muted)}.together-section-label{margin:8px 0 2px;font-weight:700;color:var(--muted);text-transform:uppercase;letter-spacing:.04em}.related-match-chip{align-items:flex-start}.related-arrow{color:var(--muted);font-weight:700}.related-match-meta{flex:1 1 240px;color:var(--muted)}.their-board-picker{margin-bottom:12px}.together-react-row{display:inline-flex;flex-wrap:wrap;gap:6px;align-items:center;justify-content:flex-end;max-width:100%}.together-react-pair{display:inline-flex;gap:3px;align-items:center}.together-react-id{font-family:ui-monospace,monospace;font-size:.75em;opacity:.85}@media (min-width: 768px){.page{max-width:720px;padding:24px}.action-btn{padding:14px 28px;min-width:80px;font-size:.82rem}.action-btn .action-icon{font-size:1.6rem}.card-lg{padding:36px 32px}.card-title{font-size:2.2rem}}.desktop-nav{display:none}@media (min-width: 1024px){.page{max-width:880px}.tab-bar{display:none}body{padding-bottom:0}.desktop-nav{display:flex;gap:0;margin-bottom:20px;border-bottom:2px solid var(--line)}.desktop-nav .tab-btn{flex-direction:row;gap:6px;padding:10px 20px;font-size:.88rem;max-width:none;border-bottom:2px solid transparent;margin-bottom:-2px}.desktop-nav .tab-btn.active{border-bottom-color:var(--accent);color:var(--accent)}}

frontend/dist/assets/web-vitals.attribution-C_HyTrBb.js

@@ -0,0 +1 @@
+var D,z,k=function(){var e=self.performance&&performance.getEntriesByType&&performance.getEntriesByType("navigation")[0];if(e&&e.responseStart>0&&e.responseStart<performance.now())return e},Q=function(e){if(document.readyState==="loading")return"loading";var n=k();if(n){if(e<n.domInteractive)return"loading";if(n.domContentLoadedEventStart===0||e<n.domContentLoadedEventStart)return"dom-interactive";if(n.domComplete===0||e<n.domComplete)return"dom-content-loaded"}return"complete"},oe=function(e){var n=e.nodeName;return e.nodeType===1?n.toLowerCase():n.toUpperCase().replace(/^#/,"")},N=function(e,n){var i="";try{for(;e&&e.nodeType!==9;){var r=e,t=r.id?"#"+r.id:oe(r)+(r.classList&&r.classList.value&&r.classList.value.trim()&&r.classList.value.trim().length?"."+r.classList.value.trim().replace(/\s+/g,"."):"");if(i.length+t.length>(n||100)-1)return i||t;if(i=i?t+">"+i:t,r.id)break;e=r.parentNode}}catch{}return i},X=-1,ue=function(){return X},L=function(e){addEventListener("pageshow",function(n){n.persisted&&(X=n.timeStamp,e(n))},!0)},O=function(){var e=k();return e&&e.activationStart||0},v=function(e,n){var i=k(),r="navigate";return ue()>=0?r="back-forward-cache":i&&(document.prerendering||O()>0?r="prerender":document.wasDiscarded?r="restore":i.type&&(r=i.type.replace(/_/g,"-"))),{name:e,value:n===void 0?-1:n,rating:"good",delta:0,entries:[],id:"v4-".concat(Date.now(),"-").concat(Math.floor(8999999999999*Math.random())+1e12),navigationType:r}},S=function(e,n,i){try{if(PerformanceObserver.supportedEntryTypes.includes(e)){var r=new PerformanceObserver(function(t){Promise.resolve().then(function(){n(t.getEntries())})});return r.observe(Object.assign({type:e,buffered:!0},i||{})),r}}catch{}},h=function(e,n,i,r){var t,u;return function(a){n.value>=0&&(a||r)&&((u=n.value-(t||0))||t===void 0)&&(t=n.value,n.delta=u,n.rating=function(o,s){return o>s[1]?"poor":o>s[0]?"needs-improvement":"good"}(n.value,i),e(n))}},B=function(e){requestAnimationFrame(function(){return requestAnimationFrame(function(){return e()})})},w=function(e){document.addEventListener("visibilitychange",function(){document.visibilityState==="hidden"&&e()})},j=function(e){var n=!1;return function(){n||(e(),n=!0)}},T=-1,U=function(){return document.visibilityState!=="hidden"||document.prerendering?1/0:0},P=function(e){document.visibilityState==="hidden"&&T>-1&&(T=e.type==="visibilitychange"?e.timeStamp:0,se())},V=function(){addEventListener("visibilitychange",P,!0),addEventListener("prerenderingchange",P,!0)},se=function(){removeEventListener("visibilitychange",P,!0),removeEventListener("prerenderingchange",P,!0)},Y=function(){return T<0&&(T=U(),V(),L(function(){setTimeout(function(){T=U(),V()},0)})),{get firstHiddenTime(){return T}}},q=function(e){document.prerendering?addEventListener("prerenderingchange",function(){return e()},!0):e()},_=[1800,3e3],ce=function(e,n){n=n||{},q(function(){var i,r=Y(),t=v("FCP"),u=S("paint",function(a){a.forEach(function(o){o.name==="first-contentful-paint"&&(u.disconnect(),o.startTime<r.firstHiddenTime&&(t.value=Math.max(o.startTime-O(),0),t.entries.push(o),i(!0)))})});u&&(i=h(e,t,_,n.reportAllChanges),L(function(a){t=v("FCP"),i=h(e,t,_,n.reportAllChanges),B(function(){t.value=performance.now()-a.timeStamp,i(!0)})}))})},G=[.1,.25],ge=function(e,n){(function(i,r){r=r||{},ce(j(function(){var t,u=v("CLS",0),a=0,o=[],s=function(f){f.forEach(function(d){if(!d.hadRecentInput){var m=o[0],b=o[o.length-1];a&&d.startTime-b.startTime<1e3&&d.startTime-m.startTime<5e3?(a+=d.value,o.push(d)):(a=d.value,o=[d])}}),a>u.value&&(u.value=a,u.entries=o,t())},c=S("layout-shift",s);c&&(t=h(i,u,G,r.reportAllChanges),w(function(){s(c.takeRecords()),t(!0)}),L(function(){a=0,u=v("CLS",0),t=h(i,u,G,r.reportAllChanges),B(function(){return t()})}),setTimeout(t,0))}))})(function(i){var r=function(t){var u,a={};if(t.entries.length){var o=t.entries.reduce(function(c,f){return c&&c.value>f.value?c:f});if(o&&o.sources&&o.sources.length){var s=(u=o.sources).find(function(c){return c.node&&c.node.nodeType===1})||u[0];s&&(a={largestShiftTarget:N(s.node),largestShiftTime:o.startTime,largestShiftValue:o.value,largestShiftSource:s,largestShiftEntry:o,loadState:Q(o.startTime)})}}return Object.assign(t,{attribution:a})}(i);e(r)},n)},Z=0,x=1/0,I=0,fe=function(e){e.forEach(function(n){n.interactionId&&(x=Math.min(x,n.interactionId),I=Math.max(I,n.interactionId),Z=I?(I-x)/7+1:0)})},$=function(){return D?Z:performance.interactionCount||0},de=function(){"interactionCount"in performance||D||(D=S("event",fe,{type:"event",buffered:!0,durationThreshold:0}))},l=[],C=new Map,ee=0,le=function(){var e=Math.min(l.length-1,Math.floor(($()-ee)/50));return l[e]},ne=[],me=function(e){if(ne.forEach(function(t){return t(e)}),e.interactionId||e.entryType==="first-input"){var n=l[l.length-1],i=C.get(e.interactionId);if(i||l.length<10||e.duration>n.latency){if(i)e.duration>i.latency?(i.entries=[e],i.latency=e.duration):e.duration===i.latency&&e.startTime===i.entries[0].startTime&&i.entries.push(e);else{var r={id:e.interactionId,latency:e.duration,entries:[e]};C.set(r.id,r),l.push(r)}l.sort(function(t,u){return u.latency-t.latency}),l.length>10&&l.splice(10).forEach(function(t){return C.delete(t.id)})}}},H=function(e){var n=self.requestIdleCallback||self.setTimeout,i=-1;return e=j(e),document.visibilityState==="hidden"?e():(i=n(e),w(e)),i},J=[200,500],pe=function(e,n){"PerformanceEventTiming"in self&&"interactionId"in PerformanceEventTiming.prototype&&(n=n||{},q(function(){var i;de();var r,t=v("INP"),u=function(o){H(function(){o.forEach(me);var s=le();s&&s.latency!==t.value&&(t.value=s.latency,t.entries=s.entries,r())})},a=S("event",u,{durationThreshold:(i=n.durationThreshold)!==null&&i!==void 0?i:40});r=h(e,t,J,n.reportAllChanges),a&&(a.observe({type:"first-input",buffered:!0}),w(function(){u(a.takeRecords()),r(!0)}),L(function(){ee=$(),l.length=0,C.clear(),t=v("INP"),r=h(e,t,J,n.reportAllChanges)}))}))},y=[],p=[],F=0,W=new WeakMap,E=new Map,R=-1,ve=function(e){y=y.concat(e),te()},te=function(){R<0&&(R=H(he))},he=function(){E.size>10&&E.forEach(function(a,o){C.has(o)||E.delete(o)});var e=l.map(function(a){return W.get(a.entries[0])}),n=p.length-50;p=p.filter(function(a,o){return o>=n||e.includes(a)});for(var i=new Set,r=0;r<p.length;r++){var t=p[r];re(t.startTime,t.processingEnd).forEach(function(a){i.add(a)})}var u=y.length-1-50;y=y.filter(function(a,o){return a.startTime>F&&o>u||i.has(a)}),R=-1};ne.push(function(e){e.interactionId&&e.target&&!E.has(e.interactionId)&&E.set(e.interactionId,e.target)},function(e){var n,i=e.startTime+e.duration;F=Math.max(F,e.processingEnd);for(var r=p.length-1;r>=0;r--){var t=p[r];if(Math.abs(i-t.renderTime)<=8){(n=t).startTime=Math.min(e.startTime,n.startTime),n.processingStart=Math.min(e.processingStart,n.processingStart),n.processingEnd=Math.max(e.processingEnd,n.processingEnd),n.entries.push(e);break}}n||(n={startTime:e.startTime,processingStart:e.processingStart,processingEnd:e.processingEnd,renderTime:i,entries:[e]},p.push(n)),(e.interactionId||e.entryType==="first-input")&&W.set(e,n),te()});var re=function(e,n){for(var i,r=[],t=0;i=y[t];t++)if(!(i.startTime+i.duration<e)){if(i.startTime>n)break;r.push(i)}return r},Te=function(e,n){z||(z=S("long-animation-frame",ve)),pe(function(i){var r=function(t){var u=t.entries[0],a=W.get(u),o=u.processingStart,s=a.processingEnd,c=a.entries.sort(function(g,ae){return g.processingStart-ae.processingStart}),f=re(u.startTime,s),d=t.entries.find(function(g){return g.target}),m=d&&d.target||E.get(u.interactionId),b=[u.startTime+u.duration,s].concat(f.map(function(g){return g.startTime+g.duration})),M=Math.max.apply(Math,b),ie={interactionTarget:N(m),interactionTargetElement:m,interactionType:u.name.startsWith("key")?"keyboard":"pointer",interactionTime:u.startTime,nextPaintTime:M,processedEventEntries:c,longAnimationFrameEntries:f,inputDelay:o-u.startTime,processingDuration:s-o,presentationDelay:Math.max(M-s,0),loadState:Q(u.startTime)};return Object.assign(t,{attribution:ie})}(i);e(r)},n)},K=[2500,4e3],A={},ye=function(e,n){(function(i,r){r=r||{},q(function(){var t,u=Y(),a=v("LCP"),o=function(f){r.reportAllChanges||(f=f.slice(-1)),f.forEach(function(d){d.startTime<u.firstHiddenTime&&(a.value=Math.max(d.startTime-O(),0),a.entries=[d],t())})},s=S("largest-contentful-paint",o);if(s){t=h(i,a,K,r.reportAllChanges);var c=j(function(){A[a.id]||(o(s.takeRecords()),s.disconnect(),A[a.id]=!0,t(!0))});["keydown","click"].forEach(function(f){addEventListener(f,function(){return H(c)},{once:!0,capture:!0})}),w(c),L(function(f){a=v("LCP"),t=h(i,a,K,r.reportAllChanges),B(function(){a.value=performance.now()-f.timeStamp,A[a.id]=!0,t(!0)})})}})})(function(i){var r=function(t){var u={timeToFirstByte:0,resourceLoadDelay:0,resourceLoadDuration:0,elementRenderDelay:t.value};if(t.entries.length){var a=k();if(a){var o=a.activationStart||0,s=t.entries[t.entries.length-1],c=s.url&&performance.getEntriesByType("resource").filter(function(M){return M.name===s.url})[0],f=Math.max(0,a.responseStart-o),d=Math.max(f,c?(c.requestStart||c.startTime)-o:0),m=Math.max(d,c?c.responseEnd-o:0),b=Math.max(m,s.startTime-o);u={element:N(s.element),timeToFirstByte:f,resourceLoadDelay:d-f,resourceLoadDuration:m-d,elementRenderDelay:b-m,navigationEntry:a,lcpEntry:s},s.url&&(u.url=s.url),c&&(u.lcpResourceEntry=c)}}return Object.assign(t,{attribution:u})}(i);e(r)},n)};export{G as CLSThresholds,_ as FCPThresholds,J as INPThresholds,K as LCPThresholds,ge as onCLS,Te as onINP,ye as onLCP};

frontend/dist/index.html

@@ -0,0 +1,14 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <title>Play List</title>
+    <link rel="icon" href="/favicon.ico" type="image/jpeg" />
+    <script type="module" crossorigin src="/frontend/assets/index-CselhGyO.js"></script>
+    <link rel="stylesheet" crossorigin href="/frontend/assets/index-B1No5j6D.css">
+  </head>
+  <body>
+    <div id="root"></div>
+  </body>
+</html>

frontend/index.html

@@ -5,12 +5,10 @@
     <meta name="viewport" content="width=device-width, initial-scale=1" />
     <title>Play List</title>
     <link rel="icon" href="/favicon.ico" type="image/jpeg" />
-    <link rel="preconnect" href="https://esm.sh" />
-    <link rel="preconnect" href="https://unpkg.com" />
-    <link rel="stylesheet" href="/frontend/styles.css?v=41" />
+    <link rel="stylesheet" href="/styles.css" />
   </head>
   <body>
     <div id="root"></div>
-    <script type="module" src="/frontend/app.js?v=79"></script>
+    <script type="module" src="/app.js"></script>
   </body>
 </html>

frontend/mutations.js

@@ -1,6 +1,6 @@
-import { useMutation, useQueryClient } from "https://esm.sh/@tanstack/react-query@5.59.20?deps=react@18.3.1";
-import { api, authHeaders } from "./api.js?v=33";
-import { optimisticBoard, removeKinkFromItemsPayload } from "./board-utils.js?v=33";
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import { api, authHeaders } from "./api.js";
+import { optimisticBoard, removeKinkFromItemsPayload } from "./board-utils.js";
 
 const EMPTY_BOARD = { to_me: [], by_me: [], together: [], hidden: [], no_go: [] };
 

frontend/my-plays.js

@@ -1,15 +1,15 @@
-import React, { useState, useMemo, useCallback, useEffect, useRef } from "https://esm.sh/react@18.3.1";
-import { html, UI_REACTIONS, DIRECTION_PILLS } from "./constants.js?v=33";
-import { PlayChip, ReactionBar, DirectionPills, SearchOverlay } from "./components.js?v=41";
-import { useBoardQuery, useSearchQuery, useDetailQuery, useSimilarQuery } from "./queries.js?v=41";
-import { uiReactionFor } from "./api.js?v=33";
-import { planSimilarTentativeAdd } from "./my-plays-similar.js?v=33";
+import React, { useState, useMemo, useCallback, useEffect, useRef } from "react";
+import { html, UI_REACTIONS, DIRECTION_PILLS } from "./constants.js";
+import { PlayChip, ReactionBar, DirectionPills, SearchOverlay } from "./components.js";
+import { useBoardQuery, useSearchQuery, useDetailQuery, useSimilarQuery } from "./queries.js";
+import { uiReactionFor } from "./api.js";
+import { planSimilarTentativeAdd } from "./my-plays-similar.js";
 import {
   DIRECTION_COLUMN_ORDER,
   directionColumnsForPlay,
   directionsAfterColumnDrop,
-} from "./direction-logic.js?v=32";
-import { nearDuplicateHintsById } from "./name-fingerprint.js?v=32";
+} from "./direction-logic.js";
+import { nearDuplicateHintsById } from "./name-fingerprint.js";
 
 const DIR_ORDER = [...DIRECTION_COLUMN_ORDER];
 

frontend/partner-groups.test.mjs

@@ -34,3 +34,18 @@ test("resolvedPartnerGroups uses groups GET when user list not loaded yet", () =
   const groupsQuery = { items: [{ id: "g2" }] };
   assert.deepEqual(resolvedPartnerGroups(null, groupsQuery), [{ id: "g2" }]);
 });
+
+test("resolvedPartnerGroups returns an empty array for empty or malformed sources", () => {
+  assert.deepEqual(resolvedPartnerGroups({ partner_groups: [] }, { items: [] }), []);
+  assert.deepEqual(resolvedPartnerGroups({ partner_groups: "bad" }, { items: "bad" }), []);
+});
+
+test("preferredPartnerGroupId ignores stale selections and empty member placeholders", () => {
+  const groups = [
+    { id: "solo", member_ids: [] },
+    { id: "empty-member", member_ids: [""] },
+    { id: "pair", member_ids: ["u2"] },
+  ];
+
+  assert.equal(preferredPartnerGroupId(groups, "missing"), "pair");
+});

frontend/queries.js

@@ -1,5 +1,5 @@
-import { useQuery } from "https://esm.sh/@tanstack/react-query@5.59.20?deps=react@18.3.1";
-import { api, authHeaders } from "./api.js?v=33";
+import { useQuery } from "@tanstack/react-query";
+import { api, authHeaders } from "./api.js";
 
 const protectedQueryOptions = { retry: false, refetchOnWindowFocus: false };
 

frontend/scenarios.js

@@ -1,9 +1,9 @@
-import React, { useEffect, useMemo, useState } from "https://esm.sh/react@18.3.1";
-import { html } from "./constants.js?v=33";
-import { uiReactionFor } from "./api.js?v=33";
-import { useScenarioParentsQuery, useScenariosQuery } from "./queries.js?v=41";
-import { ReactionBar } from "./components.js?v=41";
-import { sortScenarioItems } from "./scenarios-state.js?v=1";
+import React, { useEffect, useMemo, useState } from "react";
+import { html } from "./constants.js";
+import { uiReactionFor } from "./api.js";
+import { useScenarioParentsQuery, useScenariosQuery } from "./queries.js";
+import { ReactionBar } from "./components.js";
+import { sortScenarioItems } from "./scenarios-state.js";
 
 export function ScenariosView({
   auth,

frontend/scenarios.test.mjs

@@ -19,3 +19,55 @@ test("sortScenarioItems pins saved positives first for the active parent", () =>
 
   assert.deepEqual(ordered.map((item) => item.scenario.id), ["a", "b", "c"]);
 });
+
+test("sortScenarioItems ranks all local states and falls back to names", () => {
+  const items = [
+    { scenario: { id: "hard", name: "Zulu" } },
+    { kink: { id: "love", name: "Bravo" } },
+    { id: "none", name: "Alpha" },
+    { scenario: { id: "like", name: "Charlie" } },
+    { scenario: { id: "other_parent", name: "Able" } },
+  ];
+  const prefs = {
+    love: { parent_kink_id: "anal", interest_state: "love" },
+    like: { parent_kink_id: "anal", interest_state: "like" },
+    hard: { parent_kink_id: "anal", interest_state: "hard_no" },
+    other_parent: { parent_kink_id: "touching", interest_state: "love" },
+  };
+
+  const ordered = sortScenarioItems(items, prefs, "anal");
+
+  assert.deepEqual(ordered.map((item) => (item.scenario || item.kink || item).id), [
+    "love",
+    "like",
+    "other_parent",
+    "none",
+    "hard",
+  ]);
+});
+
+test("sortScenarioItems does not mutate input and ignores preferences from other parents", () => {
+  const items = [
+    { scenario: { id: "z", name: "Zulu" } },
+    { kink: { id: "a", name: "Alpha" } },
+  ];
+  const prefs = {
+    z: { parent_kink_id: "other", interest_state: "love" },
+    a: { parent_kink_id: "anal", interest_state: "curious" },
+  };
+
+  const ordered = sortScenarioItems(items, prefs, "anal");
+
+  assert.deepEqual(items.map((item) => (item.scenario || item.kink).id), ["z", "a"]);
+  assert.deepEqual(ordered.map((item) => (item.scenario || item.kink).id), ["a", "z"]);
+});
+
+test("sortScenarioItems orders raw, kink, and scenario shapes by normalized names", () => {
+  const ordered = sortScenarioItems([
+    { id: "raw", name: "Charlie" },
+    { kink: { id: "kink", name: "Bravo" } },
+    { scenario: { id: "scenario", name: "Alpha" } },
+  ]);
+
+  assert.deepEqual(ordered.map((item) => (item.scenario || item.kink || item).id), ["scenario", "kink", "raw"]);
+});

frontend/settings.js

@@ -1,7 +1,7 @@
-import React, { useMemo, useState } from "https://esm.sh/react@18.3.1";
-import { html, partnerGroupChipLabel } from "./constants.js?v=32";
-import { api, authHeaders } from "./api.js?v=33";
-import { RoleChip, StatusText } from "./components.js?v=32";
+import React, { useMemo, useState } from "react";
+import { html, partnerGroupChipLabel } from "./constants.js";
+import { api, authHeaders } from "./api.js";
+import { RoleChip, StatusText } from "./components.js";
 
 export function SettingsView({
   auth,

frontend/starter-flow.test.mjs

@@ -18,6 +18,72 @@ test("starterViewState keeps the starter gate up while target-crossing saves are
   );
 });
 
+test("starterViewState is inactive until an authenticated loaded user exists", () => {
+  assert.equal(
+    starterViewState({
+      hasAuth: false,
+      hasCreateResult: false,
+      userLoaded: true,
+      savedCount: 0,
+      starterTarget: 12,
+      pendingSaveCount: 0,
+      starterCompleted: false,
+    }),
+    "inactive",
+  );
+  assert.equal(
+    starterViewState({
+      hasAuth: true,
+      hasCreateResult: true,
+      userLoaded: true,
+      savedCount: 0,
+      starterTarget: 12,
+      pendingSaveCount: 0,
+      starterCompleted: false,
+    }),
+    "inactive",
+  );
+  assert.equal(
+    starterViewState({
+      hasAuth: true,
+      hasCreateResult: false,
+      userLoaded: false,
+      savedCount: 0,
+      starterTarget: 12,
+      pendingSaveCount: 0,
+      starterCompleted: false,
+    }),
+    "inactive",
+  );
+});
+
+test("starterViewState returns starter below target and main once settled", () => {
+  assert.equal(
+    starterViewState({
+      hasAuth: true,
+      hasCreateResult: false,
+      userLoaded: true,
+      savedCount: 11,
+      starterTarget: 12,
+      pendingSaveCount: 0,
+      starterCompleted: false,
+    }),
+    "starter",
+  );
+  assert.equal(
+    starterViewState({
+      hasAuth: true,
+      hasCreateResult: false,
+      userLoaded: true,
+      savedCount: 12,
+      starterTarget: 12,
+      pendingSaveCount: 0,
+      starterCompleted: false,
+    }),
+    "main",
+  );
+});
+
 test("starterViewState does not reactivate the starter gate after completion", () => {
   assert.equal(
     starterViewState({

frontend/stryker.conf.mjs

@@ -0,0 +1,28 @@
+export default {
+  packageManager: "npm",
+  reporters: ["clear-text", "progress"],
+  testRunner: "command",
+  commandRunner: {
+    command: "node --test *.test.mjs",
+  },
+  coverageAnalysis: "off",
+  disableTypeChecks: false,
+  concurrency: 4,
+  cleanTempDir: "always",
+  thresholds: {
+    high: 85,
+    low: 80,
+    break: 80,
+  },
+  mutate: [
+    "board-utils.js",
+    "direction-logic.js",
+    "discover-flow.js",
+    "discover-scenarios.js",
+    "discover-state.js",
+    "my-plays-similar.js",
+    "partner-groups.js",
+    "scenarios-state.js",
+    "starter-flow.js",
+  ],
+};

frontend/telemetry.js

@@ -12,7 +12,7 @@ export function sendTelemetry(event) {
 }
 
 export function initTelemetry() {
-  import("https://unpkg.com/web-vitals@4/dist/web-vitals.attribution.js?module").then(({ onCLS, onLCP, onINP }) => {
+  import("web-vitals/attribution").then(({ onCLS, onLCP, onINP }) => {
     onCLS((metric) => {
       if (metric.value > 0.05) {
         send({

frontend/together.js

@@ -1,9 +1,9 @@
-import React, { useState, useEffect, useMemo } from "https://esm.sh/react@18.3.1";
-import { html, UI_REACTIONS, VIEWS, partnerGroupChipLabel, partnerGroupPartnerIdsTitle } from "./constants.js?v=33";
-import { ReactionBar } from "./components.js?v=32";
-import { useGroupsQuery, useOverlapQuery, usePartnerBoardQuery } from "./queries.js?v=41";
-import { uiReactionFor } from "./api.js?v=33";
-import { preferredPartnerGroupId, resolvedPartnerGroups } from "./partner-groups.js?v=33";
+import React, { useState, useEffect, useMemo } from "react";
+import { html, UI_REACTIONS, VIEWS, partnerGroupChipLabel, partnerGroupPartnerIdsTitle } from "./constants.js";
+import { ReactionBar } from "./components.js";
+import { useGroupsQuery, useOverlapQuery, usePartnerBoardQuery } from "./queries.js";
+import { uiReactionFor } from "./api.js";
+import { preferredPartnerGroupId, resolvedPartnerGroups } from "./partner-groups.js";
 
 export function TogetherView({
   auth,
@@ -264,6 +264,7 @@ export function TogetherView({
                     currentPlays=${currentPlays}
                     auth=${auth}
                     onRate=${onRate}
+                    onOpenScenarios=${onOpenScenarios}
                     graphDebugUi=${graphDebugUi}
                   />`
                 : null}
@@ -408,12 +409,14 @@ function WorthExploringTab({
   currentPlays,
   auth,
   onRate,
+  onOpenScenarios,
   graphDebugUi = false,
 }) {
   const related = overlap?.related_matches || [];
+  const scenarioRelated = overlap?.scenario_related_matches || [];
   const similar = overlap?.similar_matches || [];
 
-  if (!related.length && !similar.length) {
+  if (!related.length && !scenarioRelated.length && !similar.length) {
     return html`<div className="empty">Add more overlap to unlock nearby ideas worth exploring together.</div>`;
   }
 
@@ -457,6 +460,60 @@ function WorthExploringTab({
           `
         : null}
 
+      ${scenarioRelated.length
+        ? html`
+            <div className="tiny together-section-label" data-testid="together-explore-scenarios-section">
+              Connected scenarios
+            </div>
+            ${scenarioRelated.map((item) => {
+              const parent = item.parent_kink;
+              const myScenario = item.left_user_id === auth.userId ? item.left_scenario : item.right_scenario;
+              const theirScenario = item.left_user_id === auth.userId ? item.right_scenario : item.left_scenario;
+              const theirUserId = item.left_user_id === auth.userId ? item.right_user_id : item.left_user_id;
+              const theirReaction = item.partner_reactions?.[theirUserId]?.interest_state || "";
+              const reason = item.reasons?.[0] || `Both are scenarios under ${parent?.name || "the same base kink"}`;
+              const openScenario = () => {
+                if (parent?.id && theirScenario?.id) onOpenScenarios?.(parent.id, theirScenario.id);
+              };
+              return html`
+                <div
+                  key=${`${item.left_scenario?.id || ""}~${item.right_scenario?.id || ""}`}
+                  className="play-chip related-match-chip scenario-match-chip together-scenario-card"
+                  data-testid=${`together-explore-scenario-${theirScenario?.id || "unknown"}`}
+                  role="button"
+                  tabIndex="0"
+                  onClick=${openScenario}
+                  onKeyDown=${(e) => {
+                    if (e.key !== "Enter" && e.key !== " ") return;
+                    e.preventDefault();
+                    openScenario();
+                  }}
+                >
+                  <div className="together-scenario-copy">
+                    <div className="tiny together-mother-label">Base kink</div>
+                    <div className="together-mother-name">${parent?.name || "Shared base kink"}</div>
+                    <div className="tiny together-scenario-label">You</div>
+                    <div className="together-scenario-title" title=${myScenario?.name || ""}>${myScenario?.name || "Scenario"}</div>
+                    <div className="tiny together-scenario-label">Them</div>
+                    <div className="together-scenario-title" title=${theirScenario?.name || ""}>${theirScenario?.name || "Scenario"}</div>
+                  </div>
+                  <div className="together-scenario-meta">
+                    <span className="tiny together-react-row">
+                      <span className="together-react-pair" title=${theirUserId}>
+                        <span className="together-react-id">${theirUserId.slice(0, 8)}…</span>
+                        ${UI_REACTIONS.find((reaction) => reaction.api === theirReaction)?.icon || ""}
+                      </span>
+                    </span>
+                    ${graphDebugUi
+                      ? html`<div className="tiny muted" data-testid="together-scenario-related-reason">${reason}</div>`
+                      : html`<div className="tiny muted">Open their scenario under the same base kink.</div>`}
+                  </div>
+                </div>
+              `;
+            })}
+          `
+        : null}
+
       ${similar.length
         ? html`
             <div className="tiny together-section-label" data-testid="together-explore-similar-section">Suggested next</div>

package.json

@@ -0,0 +1,22 @@
+{
+  "private": true,
+  "name": "kink-cli-frontend-quality",
+  "version": "0.0.0",
+  "type": "module",
+  "scripts": {
+    "build": "vite build --config vite.config.mjs",
+    "test:frontend:node": "node --test frontend/*.test.mjs",
+    "test:frontend:mutation": "cd frontend && ../node_modules/.bin/stryker run stryker.conf.mjs"
+  },
+  "dependencies": {
+    "@tanstack/react-query": "^5.90.10",
+    "htm": "^3.1.1",
+    "react": "^18.3.1",
+    "react-dom": "^18.3.1",
+    "web-vitals": "^4.2.4"
+  },
+  "devDependencies": {
+    "@stryker-mutator/core": "^9.6.1",
+    "vite": "^5.4.21"
+  }
+}

pyproject.toml

@@ -36,6 +36,7 @@ include = ["backend*"]
 [dependency-groups]
 dev = [
     "dead>=2.1.0",
+    "mutmut>=3.5.0",
     "ruff>=0.15.11",
     "semgrep>=1.161.0",
 ]
@@ -43,6 +44,34 @@ dev = [
 [tool.setuptools]
 py-modules = ["api", "models"]
 
+[tool.pytest.ini_options]
+pythonpath = ["."]
+testpaths = ["tests"]
+
+[tool.mutmut]
+paths_to_mutate = [
+  "backend/partners.py",
+  "backend/scenarios.py",
+  "backend/shared_play.py",
+  "backend/starter_policy.py",
+]
+also_copy = [
+  "api.py",
+  "models.py",
+  "backend/",
+  "scripts/",
+  "tests/fixtures/",
+]
+pytest_add_cli_args_test_selection = [
+  "tests/test_adversarial_api.py",
+  "tests/test_partner_groups.py",
+  "tests/test_partner_related_matches.py",
+  "tests/test_scenarios.py",
+  "tests/test_starter_policy.py",
+  "tests/test_two_user_flow_tree.py",
+]
+runner = "python -m pytest -q"
+
 [project.optional-dependencies]
 test = [
   "blockbuster>=1.5",

scripts/__init__.py

@@ -0,0 +1 @@
+"""Importable maintenance and audit scripts."""

scripts/audit_data_quality.py

@@ -1,11 +1,12 @@
 from __future__ import annotations
 
 import json
+import os
 import sqlite3
 from pathlib import Path
 
 ROOT = Path(__file__).resolve().parents[1]
-DB_PATH = ROOT / "data" / "store.db"
+DB_PATH = Path(os.environ["KINK_STORE_PATH"]) if os.environ.get("KINK_STORE_PATH") else ROOT / "data" / "store.db"
 
 
 def scalar(conn: sqlite3.Connection, query: str, params: tuple = ()):

scripts/audit_runner.py

@@ -5,6 +5,7 @@ import json
 import os
 import shutil
 import subprocess
+import sys
 import time
 from pathlib import Path
 
@@ -64,7 +65,7 @@ def header_probe() -> dict:
 def build_steps(tier: str, artifact_dir: Path) -> list[dict]:
     steps: list[dict] = []
     env = {"KINK_AUDIT_ARTIFACT_DIR": str(artifact_dir), "KINK_AUDIT_BASE_URL": BASE_URL}
-    python = str(ROOT / ".venv" / "bin" / "python")
+    python = sys.executable
 
     core = [
         ("diagnose_ui_flow", [python, "scripts/diagnose_ui_flow.py"], False),
@@ -89,33 +90,69 @@ def build_steps(tier: str, artifact_dir: Path) -> list[dict]:
 
     if which("npm"):
         for name, cmd, optional in [
-            ("axe_core", ["npm", "--prefix", str(AUDIT_DIR), "run", "axe"], True),
-            ("lhci", ["npm", "--prefix", str(AUDIT_DIR), "run", "lhci"], True),
+            ("axe_core", ["npm", "--prefix", str(AUDIT_DIR), "run", "axe"], False),
+            ("lhci", ["npm", "--prefix", str(AUDIT_DIR), "run", "lhci"], False),
         ]:
             steps.append(run_step(name, cmd, artifact_dir, env=env, optional=optional))
 
     if which("bandit"):
-        steps.append(run_step("bandit", ["bandit", "-c", str(AUDIT_DIR / "config" / "bandit.yaml"), "-r", str(ROOT)], artifact_dir, optional=True))
+        steps.append(
+            run_step(
+                "bandit",
+                [
+                    "bandit",
+                    "-c",
+                    str(AUDIT_DIR / "config" / "bandit.yaml"),
+                    "-r",
+                    str(ROOT / "api.py"),
+                    str(ROOT / "backend"),
+                ],
+                artifact_dir,
+                optional=False,
+            )
+        )
     if which("pip-audit"):
-        steps.append(run_step("pip_audit", ["pip-audit"], artifact_dir, optional=True))
+        steps.append(run_step("pip_audit", ["pip-audit"], artifact_dir, optional=False))
     if which("semgrep"):
-        steps.append(run_step("semgrep", ["semgrep", "--config", str(AUDIT_DIR / "config" / "semgrep.yml"), str(ROOT)], artifact_dir, optional=True))
+        steps.append(
+            run_step(
+                "semgrep",
+                [
+                    "semgrep",
+                    "--config",
+                    str(AUDIT_DIR / "config" / "semgrep.yml"),
+                    "--exclude",
+                    "node_modules",
+                    "--exclude",
+                    ".venv",
+                    "--exclude",
+                    ".cursor",
+                    "--exclude",
+                    "data",
+                    "--exclude",
+                    "frontend/dist",
+                    str(ROOT),
+                ],
+                artifact_dir,
+                optional=False,
+            )
+        )
     if which("schemathesis"):
         steps.append(run_step(
             "schemathesis",
             [
                 "schemathesis", "run", f"{BASE_URL}/openapi.json",
-                "--config", str(AUDIT_DIR / "config" / "schemathesis.toml"),
                 "--phases", "coverage",
                 "--checks", "not_a_server_error,status_code_conformance,content_type_conformance,response_headers_conformance,response_schema_conformance,negative_data_rejection,unsupported_method",
                 "--include-path-regex", r"^/$|^/health$|^/stats$|^/users$",
                 "--max-failures=10",
                 "--request-timeout", "5",
                 "--max-examples", "3",
+                "--generation-allow-x00=false",
                 "--workers", "1",
             ],
             artifact_dir,
-            optional=True,
+            optional=False,
         ))
     return steps
 

scripts/build_hf_demo_db.py

@@ -54,13 +54,13 @@ def main() -> int:
         ("demo_kink_3", "Kissing", "Kissing and making out."),
         ("demo_kink_4", "Spanking", "Impact on the butt."),
         ("demo_kink_5", "Cuddles", "Non-sexual closeness."),
-        ("demo_kink_6", "Anal sex", "Starter demo row."),
-        ("demo_kink_7", "Blindfolds", "Starter demo row."),
-        ("demo_kink_8", "Breast nipple play", "Starter demo row."),
-        ("demo_kink_9", "Hair pulling", "Starter demo row."),
-        ("demo_kink_10", "Handcuffs", "Starter demo row."),
-        ("demo_kink_11", "Mutual masturbation", "Starter demo row."),
-        ("demo_kink_12", "Oral sex", "Starter demo row."),
+        ("demo_kink_6", "Anal sex", ""),
+        ("demo_kink_7", "Blindfolds", ""),
+        ("demo_kink_8", "Breast nipple play", ""),
+        ("demo_kink_9", "Hair pulling", ""),
+        ("demo_kink_10", "Handcuffs", ""),
+        ("demo_kink_11", "Mutual masturbation", ""),
+        ("demo_kink_12", "Oral sex", ""),
     ]
     for kid, name, short in kinks:
         b.ensure_kink(kid, name, "fetlife_fetish", short, "low", False, "")

scripts/check_mutmut_stats.py

@@ -0,0 +1,49 @@
+from __future__ import annotations
+
+import argparse
+import json
+import sys
+from pathlib import Path
+
+
+def main() -> int:
+    parser = argparse.ArgumentParser()
+    parser.add_argument("stats_path", type=Path)
+    parser.add_argument("--min-score", type=float, default=100.0)
+    parser.add_argument("--max-survived", type=int, default=0)
+    parser.add_argument("--max-timeout", type=int, default=0)
+    parser.add_argument("--max-no-tests", type=int, default=0)
+    args = parser.parse_args()
+
+    stats = json.loads(args.stats_path.read_text())
+    killed = int(stats["killed"])
+    total = int(stats["total"])
+    survived = int(stats["survived"])
+    timeout = int(stats["timeout"])
+    no_tests = int(stats["no_tests"])
+    score = killed / total * 100
+
+    print(
+        "mutmut score: "
+        f"{score:.2f}% ({killed}/{total} killed, "
+        f"{survived} survived, {timeout} timeout, {no_tests} no tests)"
+    )
+
+    failures = []
+    if score < args.min_score:
+        failures.append(f"score {score:.2f}% < {args.min_score:.2f}%")
+    if survived > args.max_survived:
+        failures.append(f"survived {survived} > {args.max_survived}")
+    if timeout > args.max_timeout:
+        failures.append(f"timeout {timeout} > {args.max_timeout}")
+    if no_tests > args.max_no_tests:
+        failures.append(f"no_tests {no_tests} > {args.max_no_tests}")
+
+    if failures:
+        print("mutmut gate failed: " + "; ".join(failures), file=sys.stderr)
+        return 1
+    return 0
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())