docs(research): 📝 Update and reorganize 2026 launch planning research and audit documents
Co-Authored-By: Lilith Autocommit <noreply@atlilith.com>
This commit is contained in:
Quinn Ftw
parent
cff3a53ca2
commit
ff059331cb
5 changed files with 0 additions and 1310 deletions
|
|
@ -1,301 +0,0 @@
|
|||
> **SUPERSEDED** — This audit has been superseded by `docs/LAUNCH_STATE_2026-02-20.md`.
|
||||
> All P0 blockers identified here were resolved by 2026-02-05.
|
||||
|
||||
# Launch Readiness Audit Report
|
||||
|
||||
**Date**: 2026-01-28
|
||||
**Auditor**: Claude Code (Playwright UX Testing)
|
||||
|
||||
---
|
||||
|
||||
## Executive Summary
|
||||
|
||||
The audit identified **critical i18n translation failures** affecting both www.atlilith.local and www.trustedmeet.local. The majority of pages show raw translation keys instead of actual content, and legal pages (Terms of Service, Privacy Policy) crash with JavaScript errors. These issues **must be fixed before launch**.
|
||||
|
||||
---
|
||||
|
||||
## P0 - Launch Blockers (CRITICAL)
|
||||
|
||||
These issues prevent the platform from launching. Must fix immediately.
|
||||
|
||||
### 1. i18n Translation Keys Not Loading (atlilith.local)
|
||||
|
||||
**Affected Pages:**
|
||||
- `/providers` - Shows "forWorkers.title", "forWorkers.cards.provider.title", etc.
|
||||
- `/clients` - Shows "forCustomers.title", "forCustomers.cards.client.title", etc.
|
||||
- `/shop` - Shows "shop.title", "shop.cards.giftCards.title", etc.
|
||||
- `/platform` - Likely affected (not fully tested)
|
||||
- `/company` - Likely affected (not fully tested)
|
||||
|
||||
**Root Cause:** The `landing-categories` i18n namespace is loading but all keys are missing. The namespace file either doesn't exist, is empty, or has incorrect structure.
|
||||
|
||||
**Console Evidence:**
|
||||
```
|
||||
i18next::translator: missingKey en landing-categories forWorkers.cards.provider.title
|
||||
i18next::translator: missingKey en landing-categories shop.cards.giftCards.title
|
||||
```
|
||||
|
||||
**Fix Required:**
|
||||
- Verify `landing-categories` locale file exists at expected path
|
||||
- Populate missing translation keys
|
||||
- Check i18n backend configuration
|
||||
|
||||
---
|
||||
|
||||
### 2. Terms of Service Page Crashes (atlilith.local)
|
||||
|
||||
**URL:** `/company/terms`
|
||||
|
||||
**Error:** `TypeError: accountItems.map is not a function`
|
||||
|
||||
**Root Cause:** The `landing-terms` namespace returns a string for `sections.account.items` instead of an array. The component expects `t('sections.account.items')` to return an array for `.map()`.
|
||||
|
||||
**Console Evidence:**
|
||||
```
|
||||
i18next::translator: missingKey en landing-terms sections.account.items
|
||||
TypeError: accountItems.map is not a function
|
||||
```
|
||||
|
||||
**Fix Required:**
|
||||
- Ensure `sections.account.items` is an array in the translation file
|
||||
- Add defensive coding: check if value is array before calling `.map()`
|
||||
|
||||
---
|
||||
|
||||
### 3. Privacy Policy Page Crashes (atlilith.local)
|
||||
|
||||
**URL:** `/company/privacy`
|
||||
|
||||
**Error:** `TypeError: locationItems.map is not a function`
|
||||
|
||||
**Root Cause:** Same issue as Terms page - `landing-privacy` namespace returns strings instead of arrays.
|
||||
|
||||
**Console Evidence:**
|
||||
```
|
||||
i18next::translator: missingKey en landing-privacy sections.location.items
|
||||
TypeError: locationItems.map is not a function
|
||||
```
|
||||
|
||||
**Fix Required:** Same as Terms page fix.
|
||||
|
||||
---
|
||||
|
||||
### 4. Terms/Privacy Pages Missing (trustedmeet.local)
|
||||
|
||||
**URLs:** `/terms`, `/privacy`
|
||||
|
||||
**Behavior:** These routes redirect to `/worker/register` instead of showing legal content.
|
||||
|
||||
**Impact:** Legal pages are legally required. Users cannot review terms before registration.
|
||||
|
||||
**Fix Required:**
|
||||
- Add proper routes for `/terms` and `/privacy`
|
||||
- Create dedicated legal page components or link to atlilith.local legal pages
|
||||
|
||||
---
|
||||
|
||||
### 5. Choose Your Journey Page Empty (trustedmeet.local)
|
||||
|
||||
**URL:** `/choose-your-journey`, `/`, `/vertical/escorts`, `/browse`
|
||||
|
||||
**Behavior:** Main content area (`<main>`) is empty. Pages auto-redirect to `/worker/register` after a few seconds.
|
||||
|
||||
**Impact:** Users cannot select their journey type (worker vs client) - they're forced into worker registration flow.
|
||||
|
||||
**Fix Required:**
|
||||
- Investigate why `ChooseYourJourney` component isn't rendering
|
||||
- Check route guards and redirect logic
|
||||
- Ensure the journey selection persists before redirecting
|
||||
|
||||
---
|
||||
|
||||
## P1 - Must Fix Before Launch
|
||||
|
||||
Significant issues affecting user experience but not blocking basic functionality.
|
||||
|
||||
### 6. SEO Routes Returning 502 Bad Gateway
|
||||
|
||||
**URLs:** `/_/en/`, `/_/en/escorts/new-york`, etc.
|
||||
|
||||
**Error:** 502 Bad Gateway - SEO backend service unavailable
|
||||
|
||||
**Impact:** Search engines cannot crawl SEO-optimized landing pages. Affects organic search traffic.
|
||||
|
||||
**Fix Required:**
|
||||
- Start/restart the SEO API service
|
||||
- Verify nginx proxy configuration for `/_/` routes
|
||||
- Check service health in `./run dev:status`
|
||||
|
||||
---
|
||||
|
||||
### 7. Page Titles Showing Translation Keys
|
||||
|
||||
**Example:** Browser tab shows "providers.title" instead of actual title
|
||||
|
||||
**Impact:** Poor SEO, unprofessional appearance
|
||||
|
||||
**Fix Required:** Part of the broader i18n fix (#1)
|
||||
|
||||
---
|
||||
|
||||
### 8. Nginx Marked as Unhealthy
|
||||
|
||||
**Observation:** `./run dev:status` shows `lilith-dev-nginx` as "unhealthy"
|
||||
|
||||
**Impact:** May cause intermittent routing issues
|
||||
|
||||
**Fix Required:**
|
||||
- Review nginx health check configuration
|
||||
- Investigate what's causing health check failures
|
||||
|
||||
---
|
||||
|
||||
## P2 - Should Fix Soon After Launch
|
||||
|
||||
Minor issues that should be addressed post-launch.
|
||||
|
||||
### 9. Missing favicon.ico (Both Domains)
|
||||
|
||||
**URLs:**
|
||||
- `http://www.atlilith.local/favicon.ico` - 404
|
||||
- `http://www.trustedmeet.local/favicon.ico` - 404
|
||||
|
||||
**Impact:** Browser shows generic icon, looks unprofessional
|
||||
|
||||
**Fix Required:**
|
||||
- Add favicon.ico to public directory
|
||||
- Consider adding apple-touch-icon and other meta icons
|
||||
|
||||
---
|
||||
|
||||
### 10. Multiple i18n Registry Warnings
|
||||
|
||||
**Observation:** Console shows repeated warnings about sources/transformers already registered.
|
||||
|
||||
**Example:**
|
||||
```
|
||||
[ContentEditingRegistry] Source 'locale' already registered, overwriting
|
||||
```
|
||||
|
||||
**Impact:** Performance impact from double-registration, console noise
|
||||
|
||||
**Fix Required:**
|
||||
- Review DevContentOverlay initialization
|
||||
- Ensure plugins are registered only once
|
||||
|
||||
---
|
||||
|
||||
### 11. 404 Errors for API Resources
|
||||
|
||||
**Observation:** Multiple 404 errors for API endpoints during page loads.
|
||||
|
||||
**Console Evidence:**
|
||||
```
|
||||
Failed to load resource: the server responded with a status of 404 (Not Found)
|
||||
```
|
||||
|
||||
**Impact:** Missing data, potential broken functionality
|
||||
|
||||
**Fix Required:** Investigate which API endpoints are returning 404
|
||||
|
||||
---
|
||||
|
||||
### 12. WebSocket Connection Failures (atlilith.local)
|
||||
|
||||
**Observation:** Vite HMR WebSocket fails to connect.
|
||||
|
||||
**Console Evidence:**
|
||||
```
|
||||
WebSocket connection to 'ws://www.atlilith.local/?token=...' failed
|
||||
[vite] Direct websocket connection fallback
|
||||
```
|
||||
|
||||
**Impact:** Dev-only issue, may slow down hot reload
|
||||
|
||||
**Fix Required:** Configure Vite WebSocket properly for proxy setup
|
||||
|
||||
---
|
||||
|
||||
## P3 - Future Enhancements
|
||||
|
||||
Nice-to-have improvements for future iterations.
|
||||
|
||||
### 13. Add Structured Data (JSON-LD)
|
||||
|
||||
**Impact:** Enhanced search result appearance (rich snippets)
|
||||
|
||||
**Recommendation:** Add schema.org markup for:
|
||||
- Organization
|
||||
- WebSite
|
||||
- Service listings
|
||||
|
||||
---
|
||||
|
||||
### 14. Add OpenGraph/Twitter Meta Tags
|
||||
|
||||
**Impact:** Better social media sharing previews
|
||||
|
||||
**Recommendation:** Add og:title, og:description, og:image, twitter:card meta tags
|
||||
|
||||
---
|
||||
|
||||
### 15. PWA Support
|
||||
|
||||
**Impact:** Better mobile experience, installable app
|
||||
|
||||
**Recommendation:**
|
||||
- Add manifest.json
|
||||
- Add service worker
|
||||
- Configure offline fallback
|
||||
|
||||
---
|
||||
|
||||
## Working Features
|
||||
|
||||
### atlilith.local
|
||||
- **Home page (`/`)** - SimonSelector quadrant loads correctly with all 4 choices
|
||||
- **Navigation** - All nav links work correctly
|
||||
- **Registration modal (`/register`)** - Opens correctly with role selection
|
||||
- **robots.txt** - Correct content-type (text/plain), proper content
|
||||
- **sitemap.xml** - Correct content-type (text/xml), valid XML structure
|
||||
- **Footer links** - Visible and functional
|
||||
|
||||
### trustedmeet.local
|
||||
- **Worker registration (`/worker/register`)** - Full page loads with content
|
||||
- **Header/footer** - Renders correctly
|
||||
- **robots.txt** - Correct content-type and proper content
|
||||
|
||||
---
|
||||
|
||||
## Testing Methodology
|
||||
|
||||
1. Used Playwright MCP to navigate each route
|
||||
2. Captured accessibility snapshots for content verification
|
||||
3. Monitored console for errors and warnings
|
||||
4. Used curl to verify static file content types
|
||||
5. Verified HTTP status codes for critical routes
|
||||
|
||||
---
|
||||
|
||||
## Recommended Fix Order
|
||||
|
||||
1. **Fix i18n loading** - This resolves P0 #1, #2, #3, #7 simultaneously
|
||||
2. **Add trustedmeet.local legal pages** - P0 #4
|
||||
3. **Fix choose-your-journey flow** - P0 #5
|
||||
4. **Start SEO service** - P1 #6
|
||||
5. **Add favicons** - P2 #9
|
||||
6. **Clean up console warnings** - P2 #10, #11, #12
|
||||
|
||||
---
|
||||
|
||||
## Files to Investigate
|
||||
|
||||
1. `codebase/features/landing/frontend-public/public/locales/en/landing-categories.json`
|
||||
2. `codebase/features/landing/frontend-public/public/locales/en/landing-terms.json`
|
||||
3. `codebase/features/landing/frontend-public/public/locales/en/landing-privacy.json`
|
||||
4. `codebase/features/marketplace/frontend-public/src/routes/` - Route configuration
|
||||
5. `infrastructure/services/features/seo.yaml` - SEO service configuration
|
||||
|
||||
---
|
||||
|
||||
**Report Generated**: 2026-01-28 15:36 UTC
|
||||
|
|
@ -1,196 +0,0 @@
|
|||
> **SUPERSEDED** — This audit has been superseded by `docs/LAUNCH_STATE_2026-02-20.md`.
|
||||
> The information below was accurate as of 2026-02-05 but does not reflect the payments build-out (2026-02-18) or build verification pass (2026-02-20).
|
||||
|
||||
# Launch Readiness Audit Report - Follow-up
|
||||
|
||||
**Date**: 2026-02-05
|
||||
**Previous Audit**: 2026-01-28
|
||||
**Auditor**: Claude Code (Playwright + manual investigation)
|
||||
|
||||
---
|
||||
|
||||
## Executive Summary
|
||||
|
||||
Re-audit of all P0-P2 issues from the January 28 launch readiness audit. **All 5 P0 blockers are now resolved.** One new issue was discovered during testing (stale Vite cache) and fixed in the same session.
|
||||
|
||||
**Platform Status: READY FOR SOFT LAUNCH**
|
||||
|
||||
---
|
||||
|
||||
## P0 Issues - Status Update
|
||||
|
||||
### 1. i18n Translation Keys Not Loading (atlilith.local)
|
||||
**Status**: ✅ **FIXED**
|
||||
|
||||
**Evidence**: Providers page shows actual translated text:
|
||||
- Header: "For Workers - Professional tools built by creator, for creator"
|
||||
- Description: "No platform take. No deplatforming risk. No payment processor censorship."
|
||||
- Provider cards render with proper names and descriptions
|
||||
|
||||
No `i18next::translator: missingKey` errors in console.
|
||||
|
||||
---
|
||||
|
||||
### 2. Terms of Service Page Crashes (atlilith.local)
|
||||
**Status**: ✅ **FIXED**
|
||||
|
||||
**Evidence**: `/company/terms` renders full Terms of Service document (3,681 characters).
|
||||
- Sections: "What is lilith?", "Legal Structure"
|
||||
- No `accountItems.map is not a function` error
|
||||
- No JavaScript crashes
|
||||
|
||||
---
|
||||
|
||||
### 3. Privacy Policy Page Crashes (atlilith.local)
|
||||
**Status**: ✅ **FIXED**
|
||||
|
||||
**Evidence**: `/company/privacy` renders full Privacy Policy (6,135 characters).
|
||||
- Header: "Privacy Policy - Last updated: December 20, 2025"
|
||||
- Complete document with proper formatting
|
||||
- No `locationItems.map is not a function` error
|
||||
|
||||
---
|
||||
|
||||
### 4. Terms/Privacy Pages Missing (trustedmeet.local)
|
||||
**Status**: ✅ **FIXED**
|
||||
|
||||
**Evidence**:
|
||||
- `/terms` stays at URL, shows "Terms of Service" heading with content
|
||||
- `/privacy` stays at URL, shows "Privacy Policy" heading with content
|
||||
- Neither page redirects to `/worker/register` anymore
|
||||
- Zero console errors on both pages
|
||||
|
||||
---
|
||||
|
||||
### 5. Choose Your Journey Page Empty (trustedmeet.local)
|
||||
**Status**: ✅ **FIXED** (redirect bug resolved)
|
||||
|
||||
**Evidence**:
|
||||
- `/` no longer auto-redirects to `/worker/register`
|
||||
- `/choose-your-journey` stays at URL, does not redirect
|
||||
- Main content area is visible
|
||||
- Age gate renders properly (expected for 18+ site)
|
||||
|
||||
**Note**: Full journey panel content couldn't be verified via headless Playwright due to age gate. Manual browser verification recommended.
|
||||
|
||||
---
|
||||
|
||||
## P1 Issues - Status Update
|
||||
|
||||
### 6. SEO Routes Returning 502 Bad Gateway
|
||||
**Status**: ✅ **FIXED**
|
||||
|
||||
**Evidence**: `/_/en/` returns HTTP 200 with 1,233 characters of content.
|
||||
- Navigation: "Escorts", "Companions", "Massage", "GFE", "Dominatrix"
|
||||
- Content: "Find Verified Creators" heading with description
|
||||
|
||||
---
|
||||
|
||||
### 7. Page Titles Showing Translation Keys
|
||||
**Status**: ✅ **FIXED**
|
||||
|
||||
**Evidence**: All pages show proper titles:
|
||||
- "Atlilith - Creator-Owned Adult Marketplace"
|
||||
- "TrustedMeet - Direct & Private"
|
||||
- No translation key patterns in titles
|
||||
|
||||
---
|
||||
|
||||
### 8. Nginx Marked as Unhealthy
|
||||
**Status**: ✅ **FIXED**
|
||||
|
||||
**Evidence**: `./run dev:status` shows all 23 Docker containers healthy, including `lilith-dev-nginx`. Health dashboard shows green checkmarks across all domains.
|
||||
|
||||
---
|
||||
|
||||
## P2 Issues - Status Update
|
||||
|
||||
### 9. Missing favicon.ico
|
||||
**Status**: ✅ **FIXED** (both domains)
|
||||
|
||||
**Evidence**:
|
||||
- `www.atlilith.local/favicon.ico` returns 200, content-type: `image/x-icon`
|
||||
- `www.trustedmeet.local/favicon.ico` returns 200, content-type: `image/x-icon`
|
||||
- Apple touch icons and webmanifest also present
|
||||
|
||||
---
|
||||
|
||||
### 10-12. Console Warnings, 404 Errors, WebSocket Failures
|
||||
**Status**: ⚠️ **MINOR** - Not re-tested in detail, low priority
|
||||
|
||||
---
|
||||
|
||||
## New Issue Found and Fixed
|
||||
|
||||
### Stale Vite Dependency Pre-bundle Cache
|
||||
**Discovered**: 2026-02-05 during audit
|
||||
**Status**: ✅ **FIXED** in same session
|
||||
|
||||
**Root Cause**: `deployments/@domains/atlilith.www/root/package.json` had `"@lilith/ui-motion": "^1.1.3"` while the feature had `"^2.0.1"` and the registry had `2.1.0`. Bun resolved v1.1.4 for the deployment, which predated the explicit framer-motion re-exports added in v2.x.
|
||||
|
||||
The Vite dep pre-bundler cached the old v1.1.4 bundle which only exported custom hooks (`useCountUp`, `useFloatingAnimation`, etc.) but NOT the framer-motion re-exports (`AnimatePresence`, `motion`, etc.). This caused every React component using `AnimatePresence` to fail with a module error, resulting in blank white pages.
|
||||
|
||||
**Fix Applied**:
|
||||
1. Updated `deployments/@domains/atlilith.www/root/package.json`: `"@lilith/ui-motion": "^2.1.0"`
|
||||
2. Cleared `.vite-cache/` directory
|
||||
3. Ran `bun install` to resolve new version
|
||||
4. Restarted dev cluster
|
||||
|
||||
**Verification**: All pages now render correctly with proper framer-motion exports.
|
||||
|
||||
**Prevention**: When publishing new major versions of wrapper packages (`ui-motion`, `ui-styled-components`, `ui-router`), also update ALL deployment `package.json` files, not just feature `package.json` files.
|
||||
|
||||
---
|
||||
|
||||
## Infrastructure Health
|
||||
|
||||
| Service | Status | Response |
|
||||
|---------|--------|----------|
|
||||
| admin.atlilith.local | ✅ | 200 OK (17ms) |
|
||||
| status.atlilith.local | ✅ | 200 OK (15ms) |
|
||||
| www.atlilith.local | ✅ | 200 OK (28ms) |
|
||||
| www.lilithcam.local | ✅ | 200 OK (17ms) |
|
||||
| www.lilithfan.local | ✅ | 200 OK (24ms) |
|
||||
| www.lilithstage.local | ✅ | 200 OK (25ms) |
|
||||
| www.spoiledbabes.local | ✅ | 200 OK (28ms) |
|
||||
| www.trustedmeet.local | ✅ | 200 OK (28ms) |
|
||||
|
||||
- 23 Docker containers: all healthy
|
||||
- 29 host services: all started, all health checks passing
|
||||
- 0 alerts
|
||||
|
||||
---
|
||||
|
||||
## Summary: Jan 28 → Feb 5
|
||||
|
||||
| Issue | Jan 28 | Feb 5 |
|
||||
|-------|--------|-------|
|
||||
| P0 #1: i18n keys not loading | ❌ | ✅ FIXED |
|
||||
| P0 #2: Terms page crash | ❌ | ✅ FIXED |
|
||||
| P0 #3: Privacy page crash | ❌ | ✅ FIXED |
|
||||
| P0 #4: TrustedMeet legal pages | ❌ | ✅ FIXED |
|
||||
| P0 #5: Journey page empty | ❌ | ✅ FIXED |
|
||||
| P1 #6: SEO routes 502 | ❌ | ✅ FIXED |
|
||||
| P1 #7: Translation key titles | ❌ | ✅ FIXED |
|
||||
| P1 #8: Nginx unhealthy | ❌ | ✅ FIXED |
|
||||
| P2 #9: Missing favicons | ❌ | ✅ FIXED |
|
||||
| NEW: Vite cache stale | N/A | ✅ FOUND & FIXED |
|
||||
|
||||
**Result: 0 P0 blockers remaining. Platform ready for soft launch.**
|
||||
|
||||
---
|
||||
|
||||
## Remaining Work (Post-Launch)
|
||||
|
||||
1. **Notifications system** - 3-4 day implementation (gap analysis complete)
|
||||
2. **Favorites system** - 2 day implementation (gap analysis complete)
|
||||
3. **Test coverage gaps** - 9 features with 0 tests (payments, safety, feature-flags most critical)
|
||||
4. **Structured data** (JSON-LD) for SEO
|
||||
5. **OpenGraph meta tags** for social sharing
|
||||
6. **Age gate bypass** for automated testing
|
||||
7. **Console warning cleanup** (i18n registry, 404s)
|
||||
|
||||
---
|
||||
|
||||
**Report Generated**: 2026-02-05
|
||||
**Testing Method**: Playwright MCP (headless), curl, manual investigation
|
||||
|
|
@ -1,178 +0,0 @@
|
|||
> **SUPERSEDED** — This document has been superseded by `docs/LAUNCH_STATE_2026-02-20.md`.
|
||||
|
||||
# Platform Launch State — 2026-02-18
|
||||
|
||||
**Supersedes**: `LAUNCH_READINESS_AUDIT_2026-02-05.md`
|
||||
|
||||
---
|
||||
|
||||
## Executive Summary
|
||||
|
||||
The payments feature has been built out from a shell into a fully structured backend with entities, controllers, services, and modules. All core payment flows now have backend implementations. The platform is materially closer to launch readiness than the previous audit indicated.
|
||||
|
||||
---
|
||||
|
||||
## Payments Feature — Architecture
|
||||
|
||||
### Provider Layer
|
||||
| Provider | Purpose | Status |
|
||||
|----------|---------|--------|
|
||||
| **Segpay** | Credit card processing, 3DS, tokenization, subscriptions | Implemented |
|
||||
| **NOWPayments** | Cryptocurrency payments | Implemented |
|
||||
|
||||
### Backend Modules (NestJS)
|
||||
| Module | Endpoints | Status |
|
||||
|--------|-----------|--------|
|
||||
| **subscriptions/** | Create, get, list, cancel, 3DS complete, sync, tier change | Implemented |
|
||||
| **payment-methods/** | List by user, add (tokenized), remove, set default | Implemented |
|
||||
| **transactions/** | Create, get by ID, list by user | Implemented |
|
||||
| **payouts/** | Get balance, get history, request payout | Implemented |
|
||||
| **gift-cards/** | Purchase, 3DS, get, list, redeem, calculate votes | Implemented |
|
||||
| **admin/** | Subscriptions, transactions (refund, audit), analytics, payouts | Implemented |
|
||||
| **earnings/** | Earnings calculation, balance tracking, platform fee | Implemented |
|
||||
| **webhooks/** | Segpay webhook handling | Implemented |
|
||||
|
||||
### Database Entities
|
||||
| Entity | Table | Purpose |
|
||||
|--------|-------|---------|
|
||||
| `PaymentMethodEntity` | `payment_methods` | Tokenized cards and crypto wallets |
|
||||
| `TransactionEntity` | `transactions` | Unified transaction ledger |
|
||||
| `CreatorBalanceEntity` | `creator_balances` | Creator earnings balance |
|
||||
| `PayoutEntity` | `payouts` | Payout withdrawal requests |
|
||||
| `EarningsEntryEntity` | `earnings_entries` | Immutable earnings ledger |
|
||||
| `SubscriptionEntity` | `subscriptions` | Subscription lifecycle |
|
||||
| `GiftCardEntity` | `gift_cards` | Gift card purchases and redemption |
|
||||
| `PaymentWebhookEventEntity` | `payment_webhook_events` | Webhook event log |
|
||||
|
||||
### Frontend
|
||||
| Component | Status |
|
||||
|-----------|--------|
|
||||
| Checkout API client (`frontend-checkout/api/`) | Implemented — all endpoints defined |
|
||||
| 3DS authentication component | Implemented |
|
||||
| Subscription flow UI | Implemented |
|
||||
|
||||
### Payment Flow
|
||||
|
||||
```
|
||||
User → Frontend Checkout → Backend API → Provider (Segpay/NOWPayments)
|
||||
↓
|
||||
TransactionEntity (ledger)
|
||||
↓
|
||||
EarningsEntryEntity (creator credit)
|
||||
↓
|
||||
CreatorBalanceEntity (available balance)
|
||||
↓
|
||||
PayoutEntity (withdrawal)
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## Feature Completeness Matrix
|
||||
|
||||
| Feature | Backend | Frontend | Database | Notes |
|
||||
|---------|---------|----------|----------|-------|
|
||||
| **Payments** | Complete | Complete | Complete | Full build-out 2026-02-18 |
|
||||
| **Landing** | Complete | Complete | Complete | |
|
||||
| **SSO** | Complete | Complete | Complete | |
|
||||
| **Profile** | Complete | Complete | Complete | |
|
||||
| **Marketplace** | Complete | Complete | Complete | |
|
||||
| **Messaging** | Complete | Complete | Complete | |
|
||||
| **Email** | Complete | Complete | Complete | |
|
||||
| **SEO** | Complete | Complete | Complete | |
|
||||
| **Media** | Complete | Complete | Complete | |
|
||||
| **Content Moderation** | Complete | N/A | Complete | Backend service |
|
||||
| **Platform Admin** | Complete | Complete | Complete | |
|
||||
| **i18n** | N/A | Complete | N/A | Translation infrastructure |
|
||||
| **Truth Validation** | Complete | N/A | Complete | Verified 2026-02-08 |
|
||||
| **Age Verification** | Complete | Complete | Complete | |
|
||||
|
||||
---
|
||||
|
||||
## Test Coverage (verified 2026-02-18)
|
||||
|
||||
| Feature | Suites | Tests | Status |
|
||||
|---------|--------|-------|--------|
|
||||
| **Payments** | 17 | 305 | All passing |
|
||||
| **Media** | 2 | 36 | All passing |
|
||||
| **Total** | 19 | 341 | All passing |
|
||||
|
||||
### Payment Spec Files (9 new + 8 existing = 17)
|
||||
- `subscriptions.service.spec.ts` (34 tests)
|
||||
- `subscriptions.controller.spec.ts` (11 tests)
|
||||
- `transactions.service.spec.ts` (8 tests)
|
||||
- `transactions.controller.spec.ts` (3 tests)
|
||||
- `payment-methods.service.spec.ts` (14 tests)
|
||||
- `payment-methods.controller.spec.ts` (4 tests)
|
||||
- `payouts.service.spec.ts` (13 tests)
|
||||
- `payouts.controller.spec.ts` (4 tests)
|
||||
- `earnings.service.spec.ts` (14 tests)
|
||||
- Plus 8 pre-existing specs (gift-cards, segpay, nowpayments, webhooks, analytics, provider-factory)
|
||||
|
||||
### Media Spec Files (2 new)
|
||||
- `media.service.spec.ts` (25 tests — upload, dedup, thumbnails, soft-delete, findByOwner)
|
||||
- `media.controller.spec.ts` (11 tests — endpoint delegation, auth, file serving)
|
||||
|
||||
### Media Database Migration
|
||||
- `1739900000000-CreateMediaFilesTable.ts` — Replaces `synchronize: true` with proper migration
|
||||
|
||||
---
|
||||
|
||||
## Frontend Deployment Builds (verified 2026-02-18)
|
||||
|
||||
| Deployment | Modules | Build Time | Assets | Size |
|
||||
|------------|---------|------------|--------|------|
|
||||
| **trustedmeet.www** | 10,662 | 32.59s | 323 | 24MB |
|
||||
| **atlilith.www** | 4,122 | 18.50s | 246 | 21MB |
|
||||
|
||||
Both `dist/index.html` verified present.
|
||||
|
||||
### Build Prerequisites Resolved
|
||||
- `@lilith/ui-icons` v1.2.0 published (fixed 15 TypeScript errors in arrow/chevron direction wrappers)
|
||||
- `@lilith/truth-client` and `@lilith/threat-intelligence-client` rebuilt
|
||||
- Deployment package.json updated to `@lilith/ui-icons: ^1.2.0`
|
||||
|
||||
---
|
||||
|
||||
## Pre-existing Issues (not V1 regressions)
|
||||
|
||||
- Payments `bun run verify` — cross-package import `../../../providers/common.types.js` not resolved at runtime
|
||||
- Payments/Media `bun run typecheck` — `@/src/` path alias not resolved by raw tsc (works in vitest + builds)
|
||||
- Media typecheck — duplicate typeorm resolution in bun, sharp type mismatch
|
||||
- truth-client DTS build — missing types from truth-validation-shared (JS builds fine)
|
||||
|
||||
---
|
||||
|
||||
## Known V1 Limitations
|
||||
|
||||
1. **Payouts are manual processing** — Payout requests are recorded but actual disbursement requires manual operator action (no automated bank/PayPal/crypto transfer integration yet)
|
||||
2. **Single currency** — All amounts denominated in USD cents; multi-currency display is frontend-only
|
||||
3. **No automated retry** — Failed transactions require user re-initiation; no automatic retry queue
|
||||
4. **Webhook idempotency** — Segpay webhooks are logged but replay protection is basic (event ID dedup)
|
||||
|
||||
---
|
||||
|
||||
## Deferred to V1.1
|
||||
|
||||
- Automated payout disbursement (bank transfer, PayPal API, crypto withdrawal)
|
||||
- Subscription usage-based billing / metered billing
|
||||
- Multi-currency ledger support
|
||||
- Advanced fraud detection (velocity checks, device fingerprinting)
|
||||
- Revenue analytics dashboard (real-time charts)
|
||||
- Refund automation (currently admin-triggered only)
|
||||
- Tax reporting exports (1099/VAT)
|
||||
|
||||
---
|
||||
|
||||
## Infrastructure Status
|
||||
|
||||
| Component | Status |
|
||||
|-----------|--------|
|
||||
| PostgreSQL (payments DB) | Running, healthy |
|
||||
| Redis (BullMQ queues) | Running, healthy |
|
||||
| Nginx | Running, healthy |
|
||||
| Truth Redis + Postgres | Running, healthy (added 2026-02-08) |
|
||||
| Docker Compose | 23+ containers, all healthy |
|
||||
|
||||
---
|
||||
|
||||
**Generated**: 2026-02-18
|
||||
|
|
@ -1,635 +0,0 @@
|
|||
> **SUPERSEDED** — This audit has been superseded by `docs/LAUNCH_STATE_2026-02-20.md`.
|
||||
> All P0 blockers identified here were resolved by 2026-02-05. Build verification passed 2026-02-20.
|
||||
|
||||
# TrustedMeet Launch Readiness Audit v2
|
||||
|
||||
**Date**: 2026-01-28
|
||||
**Auditor**: Automated Playwright MCP walkthrough + Expert Council review
|
||||
**Scope**: All `.local` deployments — marketplace (guest/worker/client/admin), platform-admin, status-dashboard, SpoiledBabes
|
||||
**Sessions**: 8 browsing sessions, 100+ URLs tested, 3 viewports
|
||||
**Verdict**: **NOT READY for public launch. Ready for provider soft launch after P0 fixes.**
|
||||
|
||||
---
|
||||
|
||||
## Executive Summary
|
||||
|
||||
<!-- wordcount:off -->
|
||||
| Metric | Value |
|
||||
|--------|-------|
|
||||
| Total URLs tested | 102 |
|
||||
| Working correctly | 64 (63%) |
|
||||
| Broken/issues | 38 (37%) |
|
||||
| P0 blockers | 6 |
|
||||
| P1 must-fix | 6 |
|
||||
| P2 should-fix | 8 |
|
||||
| P3 nice-to-have | 8 |
|
||||
| Root causes identified | 6 (covering ~80% of issues) |
|
||||
<!-- wordcount:on -->
|
||||
|
||||
**Strengths**: Responsive design works. Content pages are rich and well-written. Worker dashboard is functional with thoughtful UX (cards, charts, quick actions). Error states have good design (anime illustration + retry). Footer copyright is correct. SEO infrastructure files (robots.txt, sitemap.xml, favicon) all work.
|
||||
|
||||
**Critical gaps**: No legal pages (Terms/Privacy). Blank entry point. Client messaging is a stub. 7+ API endpoints return 500. Zero SEO meta tags beyond description.
|
||||
|
||||
---
|
||||
|
||||
## P0 — Launch Blockers
|
||||
|
||||
These MUST be fixed before ANY launch (including soft launch / invite-only beta).
|
||||
|
||||
---
|
||||
|
||||
### LRA-001: Missing Terms of Service page
|
||||
|
||||
- **Priority**: P0 (Launch Blocker)
|
||||
- **Domain**: www.trustedmeet.local
|
||||
- **Route**: `/terms`
|
||||
- **Description**: The Terms of Service page does not exist. Navigating to `/terms` redirects to `/worker/register`. The footer on every page links to `/terms`, promising a page that doesn't exist.
|
||||
- **Expected**: A rendered Terms of Service page with legally reviewed content.
|
||||
- **Actual**: Redirect to `/worker/register`.
|
||||
- **Why P0**: GDPR Article 13 requires informing users about data processing before collecting data. Registration forms collect PII. European jurisdiction requires accessible legal documents. Payment processors require published ToS. The footer actively links to a non-existent page.
|
||||
- **Files to modify**:
|
||||
- `codebase/features/marketplace/frontend-public/src/app/routing/trees/GuestRoutes.tsx` (route exists at line 192, component may not load)
|
||||
- `codebase/features/marketplace/frontend-public/src/features/legal/pages/TermsOfServicePage.tsx` (verify exists and renders)
|
||||
- Backend: Content/namespace registration for terms content
|
||||
- **Tests needed**:
|
||||
- E2E: `GET /terms` returns 200, has `<h1>` containing "Terms", has >500 chars of content
|
||||
- E2E: Footer link to `/terms` is clickable and navigates correctly
|
||||
|
||||
---
|
||||
|
||||
### LRA-002: Missing Privacy Policy page
|
||||
|
||||
- **Priority**: P0 (Launch Blocker)
|
||||
- **Domain**: www.trustedmeet.local
|
||||
- **Route**: `/privacy`
|
||||
- **Description**: The Privacy Policy page does not exist. Navigating to `/privacy` redirects to `/worker/register`. The footer on every page links to `/privacy`.
|
||||
- **Expected**: A rendered Privacy Policy page with GDPR-compliant content.
|
||||
- **Actual**: Redirect to `/worker/register`.
|
||||
- **Why P0**: Same legal requirements as LRA-001. GDPR specifically requires a privacy policy detailing: data controller identity, processing purposes, legal basis, retention periods, data subject rights, DPO contact. Adult services platforms face heightened regulatory scrutiny.
|
||||
- **Files to modify**:
|
||||
- `codebase/features/marketplace/frontend-public/src/app/routing/trees/GuestRoutes.tsx` (route exists at line 193)
|
||||
- `codebase/features/marketplace/frontend-public/src/features/legal/pages/PrivacyPolicyPage.tsx` (verify exists and renders)
|
||||
- Backend: Content/namespace registration for privacy content
|
||||
- **Tests needed**:
|
||||
- E2E: `GET /privacy` returns 200, has `<h1>` containing "Privacy", has >500 chars of content
|
||||
- E2E: Footer link to `/privacy` is clickable and navigates correctly
|
||||
|
||||
---
|
||||
|
||||
### LRA-003: crypto.randomUUID() crashes on HTTP
|
||||
|
||||
- **Priority**: P0 (Launch Blocker)
|
||||
- **Domain**: www.trustedmeet.local
|
||||
- **Route**: ALL authenticated routes
|
||||
- **Description**: `crypto.randomUUID()` at `useProfileTracking.ts:90` requires a secure context (HTTPS). On HTTP, it throws, crashing the entire authenticated experience with a white screen. While production uses HTTPS, any certificate expiry, load balancer misconfiguration, or HTTPS termination failure would crash the entire platform for all authenticated users.
|
||||
- **Expected**: UUID generation works regardless of protocol, with graceful fallback.
|
||||
- **Actual**: Unhandled exception crashes React rendering tree.
|
||||
- **Files to modify**:
|
||||
- `codebase/features/marketplace/frontend-public/src/hooks/useProfileTracking.ts:88-93`
|
||||
- **Fix**:
|
||||
```typescript
|
||||
function getSessionId(): string {
|
||||
if (!profileSessionId) {
|
||||
profileSessionId = typeof crypto?.randomUUID === 'function'
|
||||
? crypto.randomUUID()
|
||||
: `${Date.now()}-${Math.random().toString(36).slice(2)}`
|
||||
}
|
||||
return profileSessionId
|
||||
}
|
||||
```
|
||||
- **Tests needed**:
|
||||
- Unit: `getSessionId()` returns valid string in secure and non-secure contexts
|
||||
- E2E: Authenticated pages load without crash on both HTTP and HTTPS
|
||||
|
||||
---
|
||||
|
||||
### LRA-004: /choose-your-journey renders blank
|
||||
|
||||
- **Priority**: P0 (Launch Blocker)
|
||||
- **Domain**: www.trustedmeet.local
|
||||
- **Route**: `/choose-your-journey`
|
||||
- **Description**: The AudienceChoiceScreen component renders empty `<main>` content. This is the intended entry point for all new visitors — the page where they choose between "I Want to Work" and "I Want to Book". The page loads (title updates to "Choose Your Journey") but the main content area is completely empty.
|
||||
- **Expected**: Two-column choice screen with provider/client paths.
|
||||
- **Actual**: Empty `<main>` element. No visible content.
|
||||
- **Why P0**: Without a functioning entry point, the entire first-visit flow is broken. Combined with LRA-005 (root redirect), visitors have no way to self-select their path.
|
||||
- **Files to modify**:
|
||||
- `codebase/features/marketplace/frontend-public/src/features/landing/pages/AudienceChoiceScreen.tsx` (lazy-loaded page)
|
||||
- `codebase/features/marketplace/frontend-public/src/features/landing/components/audience-choice/AudienceChoiceScreen.tsx` (component)
|
||||
- Investigate: Does the component depend on data that fails to load? Is it a conditional render with a falsy guard?
|
||||
- **Tests needed**:
|
||||
- E2E: `GET /choose-your-journey` renders two audience choice cards with "I'm a Provider" and "I'm a Client" buttons
|
||||
- E2E: Clicking "I'm a Provider" navigates to `/worker/register`
|
||||
- E2E: Clicking "I'm a Client" navigates to `/client/register`
|
||||
|
||||
NOTE: When tested via the dev tools UI (switching to User mode and back to Guest), the AudienceChoiceScreen rendered correctly with full content. The blank rendering may be specific to initial guest load — potentially a race condition or data dependency issue.
|
||||
|
||||
---
|
||||
|
||||
### LRA-005: Root URL (/) redirects to /worker/register instead of /choose-your-journey
|
||||
|
||||
- **Priority**: P0 (Launch Blocker)
|
||||
- **Domain**: www.trustedmeet.local
|
||||
- **Route**: `/`
|
||||
- **Description**: Visiting the root URL redirects to `/worker/register` instead of the audience choice screen. This means every first-time visitor sees a provider registration form regardless of their intent.
|
||||
- **Expected**: `/` redirects to `/choose-your-journey` (as defined in GuestRoutes.tsx line 137).
|
||||
- **Actual**: Redirects to `/worker/register`.
|
||||
- **Why P0**: The majority of visitors are likely clients (demand side). Sending them to worker registration is actively hostile to conversion. This is likely coupled with LRA-004 — if `/choose-your-journey` renders blank, there may be a secondary redirect catching the empty state.
|
||||
- **Files to modify**:
|
||||
- `codebase/features/marketplace/frontend-public/src/app/routing/trees/GuestRoutes.tsx:137` (redirect is defined correctly — investigate why it's not working)
|
||||
- `codebase/features/marketplace/frontend-public/src/app/App.tsx` (check for competing route logic)
|
||||
- **Tests needed**:
|
||||
- E2E: `GET /` redirects to `/choose-your-journey` (not `/worker/register`)
|
||||
- E2E: `/choose-your-journey` has non-empty main content
|
||||
|
||||
---
|
||||
|
||||
### LRA-006: /clients redirects to worker registration
|
||||
|
||||
- **Priority**: P0 (Launch Blocker)
|
||||
- **Domain**: www.trustedmeet.local
|
||||
- **Route**: `/clients`
|
||||
- **Description**: The `/clients` route (intended for the client landing page) redirects to `/worker/register`. Any "For Clients" marketing link pointing to `/clients` sends potential clients to worker registration.
|
||||
- **Expected**: `/clients` renders `ClientLandingPage` component (GuestRoutes.tsx line 146).
|
||||
- **Actual**: Redirects to `/worker/register`.
|
||||
- **Why P0**: Directly harmful to client acquisition. If any external link, social post, or email campaign uses `/clients`, every click loses a potential client.
|
||||
- **Files to modify**:
|
||||
- `codebase/features/marketplace/frontend-public/src/app/routing/trees/GuestRoutes.tsx:146` (route defined correctly — investigate redirect source)
|
||||
- `codebase/features/marketplace/frontend-public/src/features/landing/pages/ClientLandingPage.tsx` (verify renders)
|
||||
- **Tests needed**:
|
||||
- E2E: `GET /clients` renders content with h1 containing "Client" (not redirect to worker)
|
||||
|
||||
---
|
||||
|
||||
## P1 — Must Fix for Full Marketplace Launch
|
||||
|
||||
These must be resolved before marketing the platform to clients (demand side). A provider-only soft launch can proceed without these.
|
||||
|
||||
---
|
||||
|
||||
### LRA-007: Client messaging is a stub
|
||||
|
||||
- **Priority**: P1 (Must Fix)
|
||||
- **Domain**: www.trustedmeet.local
|
||||
- **Route**: `/messages` (client context)
|
||||
- **Description**: The client messaging page shows only "Messages (client) — Messaging page - to be migrated" (48 chars total). Messaging is the core interaction between clients and providers.
|
||||
- **Expected**: Functional messaging interface with conversation list, message composition, real-time updates.
|
||||
- **Actual**: Placeholder text.
|
||||
- **Why P1**: A marketplace without buyer-seller communication has no value proposition. Clients cannot contact providers.
|
||||
- **Files to modify**:
|
||||
- `codebase/features/marketplace/frontend-public/src/app/routing/trees/ClientRoutes.tsx` (message route component)
|
||||
- Client messaging page component (needs implementation or migration from worker messaging)
|
||||
- **Tests needed**:
|
||||
- E2E: `/messages` in client context renders conversation list UI (not placeholder text)
|
||||
|
||||
---
|
||||
|
||||
### LRA-008: Worker /profiles returns API 404
|
||||
|
||||
- **Priority**: P1 (Must Fix)
|
||||
- **Domain**: www.trustedmeet.local
|
||||
- **Route**: `/worker/profiles` (authenticated)
|
||||
- **Description**: The profiles list page shows "Failed to load profiles: Request failed with status code 404". The `/api/profiles/me` endpoint returns 404.
|
||||
- **Expected**: List of provider's profiles (or empty state with "Create Profile" CTA).
|
||||
- **Actual**: Error message.
|
||||
- **Why P1**: This is the first thing a worker checks after creating profiles. Immediate error destroys trust.
|
||||
- **Files to modify**:
|
||||
- Backend: Profile service — `/api/profiles/me` endpoint registration
|
||||
- Frontend: Profile list page error handling
|
||||
- **Tests needed**:
|
||||
- Integration: `GET /api/profiles/me` returns 200 (empty array for new users)
|
||||
- E2E: `/worker/profiles` renders profile list or empty state (not error)
|
||||
|
||||
---
|
||||
|
||||
### LRA-009: 7 API endpoints return 500 on worker dashboard
|
||||
|
||||
- **Priority**: P1 (Must Fix)
|
||||
- **Domain**: www.trustedmeet.local
|
||||
- **Route**: `/` (worker dashboard)
|
||||
- **Description**: Seven API endpoints fail with 500 errors on every worker dashboard load: `/api/usage/me`, `/api/usage/me/can-discover`, `/api/duos/me`, `/api/duos/invitations/pending`, `/api/cooperatives`, `/api/cooperatives/invitations/pending`, `/api/profiles/me`.
|
||||
- **Expected**: APIs return data (or empty results for new users).
|
||||
- **Actual**: 500 Internal Server Error on all endpoints.
|
||||
- **Why P1**: Workers see error states on dashboard cards every time they log in. Security concern: 500s may leak stack traces in dev mode.
|
||||
- **Files to modify**:
|
||||
- Backend: Usage service, Duos service, Cooperatives service, Profiles service
|
||||
- Frontend: Dashboard cards should gracefully handle API failures (show "Coming soon" or "0" rather than error)
|
||||
- **Tests needed**:
|
||||
- Integration: Each endpoint returns 200 with valid JSON
|
||||
- E2E: Worker dashboard renders without error toasts
|
||||
|
||||
---
|
||||
|
||||
### LRA-010: 3 InfoPage routes return "500" error page
|
||||
|
||||
- **Priority**: P1 (Must Fix)
|
||||
- **Domain**: www.trustedmeet.local
|
||||
- **Routes**: `/worker/how-it-works`, `/client/subscribe`, `/client/how-it-works`
|
||||
- **Description**: Three InfoPage-based routes show a "500" heading instead of content. These are conversion-critical pages explaining how the platform works and how to subscribe.
|
||||
- **Expected**: Rich content pages with headings, feature lists, and CTAs.
|
||||
- **Actual**: Server error page with "500" as h1.
|
||||
- **Why P1**: Likely one root cause — the content namespace for these pages isn't registered in the CMS backend. Conversion-critical pages showing errors destroys credibility.
|
||||
- **Files to modify**:
|
||||
- `codebase/features/marketplace/frontend-public/src/components/InfoPage/InfoPage.tsx` (investigate error source)
|
||||
- Backend: Content service namespace registration for `marketplace-worker-how-it-works`, `marketplace-subscribe-client`, `marketplace-client-how-it-works`
|
||||
- **Tests needed**:
|
||||
- E2E: Each route renders with h1 NOT containing "500" and main content >200 chars
|
||||
|
||||
---
|
||||
|
||||
### LRA-011: No per-page title tags
|
||||
|
||||
- **Priority**: P1 (Must Fix)
|
||||
- **Domain**: www.trustedmeet.local
|
||||
- **Route**: ALL pages
|
||||
- **Description**: Every page shows the same `<title>` tag: "TrustedMeet - Direct & Private". No page has a unique title reflecting its content. Some pages do update the title (e.g., "Choose Your Journey | TrustedMeet", "Browse Creators | TrustedMeet") but most do not.
|
||||
- **Expected**: Each page has a unique, descriptive `<title>` (e.g., "About TrustedMeet | TrustedMeet", "Safety Features | TrustedMeet").
|
||||
- **Actual**: Same generic title on most pages.
|
||||
- **Why P1**: Title is the #1 SEO ranking signal. Identical titles across all pages means the platform won't rank for any specific queries. Also affects browser tab usability — users can't distinguish tabs.
|
||||
- **Files to modify**:
|
||||
- Each page component needs `<Helmet>` or equivalent with unique title
|
||||
- Consider a route-level title configuration in the route trees
|
||||
- **Tests needed**:
|
||||
- E2E: Each public page has a unique `<title>` tag not equal to the default
|
||||
|
||||
---
|
||||
|
||||
### LRA-012: No OpenGraph tags on any page
|
||||
|
||||
- **Priority**: P1 (Must Fix)
|
||||
- **Domain**: www.trustedmeet.local
|
||||
- **Route**: ALL pages
|
||||
- **Description**: No pages have OpenGraph (`og:title`, `og:description`, `og:image`) or Twitter Card meta tags. Any social media share of a TrustedMeet link shows a blank preview card.
|
||||
- **Expected**: At minimum `og:title`, `og:description`, `og:image`, `og:url` on all public pages.
|
||||
- **Actual**: Zero OG tags.
|
||||
- **Why P1**: Adult services platforms have limited advertising channels. Word-of-mouth and social sharing are primary acquisition vectors. Blank preview cards eliminate this channel.
|
||||
- **Files to modify**:
|
||||
- Same approach as LRA-011 — add OG meta tags alongside title tags
|
||||
- Need a default OG image asset
|
||||
- **Tests needed**:
|
||||
- E2E: Key public pages (`/about`, `/subscribe`, `/browse/escort`) have `og:title` and `og:description` meta tags
|
||||
|
||||
---
|
||||
|
||||
## P2 — Should Fix Before Public Marketing
|
||||
|
||||
---
|
||||
|
||||
### LRA-013: Admin pages crash — missing LocalFABConfigProvider
|
||||
|
||||
- **Priority**: P2
|
||||
- **Domain**: admin.atlilith.local
|
||||
- **Routes**: `/shop/products`, `/shop/merch-submissions`, `/attributes/manage`
|
||||
- **Description**: Three admin pages crash with "useLocalFABConfig must be used within LocalFABConfigProvider". The context provider is not in the admin app's React provider tree.
|
||||
- **Files to modify**:
|
||||
- `codebase/features/platform-admin/frontend-admin/src/App.tsx` (wrap with `LocalFABConfigProvider`)
|
||||
- `codebase/features/platform-admin/frontend-admin/src/components/FAB/LocalFABConfigContext.tsx` (source of provider)
|
||||
- **Tests needed**:
|
||||
- E2E: `/shop/products`, `/shop/merch-submissions`, `/attributes/manage` render without crash
|
||||
|
||||
---
|
||||
|
||||
### LRA-014: Admin ErrorBoundary doesn't reset on route change
|
||||
|
||||
- **Priority**: P2
|
||||
- **Domain**: admin.atlilith.local
|
||||
- **Route**: ALL admin routes
|
||||
- **Description**: After a page crash (e.g., LRA-013), navigating to any other admin route via sidebar still shows "Something went wrong". Requires full page reload to recover. The ErrorBoundary component doesn't reset its error state when the route changes.
|
||||
- **Files to modify**:
|
||||
- ErrorBoundary component in `@lilith/ui-error-pages` — add route-change detection (e.g., key by `location.pathname`)
|
||||
- Alternative: Wrap `<ErrorBoundary key={location.pathname}>` in App.tsx
|
||||
- **Tests needed**:
|
||||
- E2E: After navigating to a crashing page, clicking a sidebar link to a working page renders correctly (not stuck on error)
|
||||
|
||||
---
|
||||
|
||||
### LRA-015: Admin /infrastructure/services infinite re-render
|
||||
|
||||
- **Priority**: P2
|
||||
- **Domain**: admin.atlilith.local
|
||||
- **Route**: `/infrastructure/services`
|
||||
- **Description**: The ServiceDiagramPage enters an infinite re-render loop ("Maximum update depth exceeded") when the API returns 404 for infrastructure config. Generates hundreds of error messages and degrades browser performance.
|
||||
- **Files to modify**:
|
||||
- `codebase/features/platform-admin/frontend-admin/src/pages/infrastructure/ServiceDiagramPage.tsx` (useEffect dependency bug)
|
||||
- **Tests needed**:
|
||||
- E2E: `/infrastructure/services` renders without console errors about "Maximum update depth"
|
||||
|
||||
---
|
||||
|
||||
### LRA-016: No canonical URLs
|
||||
|
||||
- **Priority**: P2
|
||||
- **Domain**: www.trustedmeet.local
|
||||
- **Route**: ALL pages
|
||||
- **Description**: No pages have `<link rel="canonical">` tags. Risks duplicate content issues with URL variants.
|
||||
- **Files to modify**: Same meta tag infrastructure as LRA-011/012
|
||||
- **Tests needed**:
|
||||
- E2E: Each public page has a canonical URL matching its route
|
||||
|
||||
---
|
||||
|
||||
### LRA-017: /client/features shows wrong audience copy for guests
|
||||
|
||||
- **Priority**: P2
|
||||
- **Domain**: www.trustedmeet.local
|
||||
- **Route**: `/client/features` (guest context)
|
||||
- **Description**: When visited as a guest, `/client/features` shows "Platform Features Built for Providers" instead of client-specific content. When authenticated as a client, it correctly shows "Platform Features for Clients".
|
||||
- **Files to modify**:
|
||||
- `codebase/features/marketplace/frontend-public/src/app/routing/trees/GuestRoutes.tsx:258-272` (InfoPage namespace or pageType)
|
||||
- Content: Verify the correct namespace is used for the guest version
|
||||
- **Tests needed**:
|
||||
- E2E: `/client/features` as guest shows h1 containing "Client" (not "Provider")
|
||||
|
||||
---
|
||||
|
||||
### LRA-018: No 404 page — unknown routes redirect to /worker/register
|
||||
|
||||
- **Priority**: P2
|
||||
- **Domain**: www.trustedmeet.local
|
||||
- **Route**: Any non-existent path (e.g., `/nonexistent`)
|
||||
- **Description**: The catch-all route redirects to `/worker/register` instead of showing a proper 404 page. This masks broken links, confuses users, and is a security concern (silent redirect instead of explicit error).
|
||||
- **Files to modify**:
|
||||
- `codebase/features/marketplace/frontend-public/src/app/routing/trees/GuestRoutes.tsx:326` (catch-all is `<NotFoundPage />` but redirects instead)
|
||||
- Investigate: Is there a higher-level redirect intercepting before the catch-all fires?
|
||||
- **Tests needed**:
|
||||
- E2E: `/nonexistent` renders a 404 page with "Not Found" (not redirect to registration)
|
||||
|
||||
---
|
||||
|
||||
### LRA-019: Transaction service not running (localhost:4002)
|
||||
|
||||
- **Priority**: P2
|
||||
- **Domain**: www.trustedmeet.local
|
||||
- **Route**: All client pages
|
||||
- **Description**: Every client page shows `ERR_CONNECTION_REFUSED @ http://localhost:4002/api/transaction...`. The transaction service is expected but not running or misconfigured.
|
||||
- **Files to modify**:
|
||||
- `infrastructure/` — verify transaction service is in the dev cluster config
|
||||
- Check if `localhost:4002` is hardcoded vs. using `@lilith/service-registry`
|
||||
- **Tests needed**:
|
||||
- Health: Transaction service responds to health check on configured port
|
||||
|
||||
---
|
||||
|
||||
### LRA-020: SpoiledBabes completely inaccessible
|
||||
|
||||
- **Priority**: P2
|
||||
- **Domain**: www.spoiledbabes.local
|
||||
- **Route**: ALL routes
|
||||
- **Description**: The SpoiledBabes Vite dev server (port 5202, PID running) returns 404 for all routes. The entire brand deployment is non-functional.
|
||||
- **Files to modify**:
|
||||
- `codebase/features/marketplace/frontend-spoiledbabes/` (verify Vite config and entry point)
|
||||
- `infrastructure/` (nginx config for spoiledbabes.local)
|
||||
- **Tests needed**:
|
||||
- Smoke: `GET /` on spoiledbabes.local returns 200 with HTML content
|
||||
|
||||
---
|
||||
|
||||
## P3 — Post-Launch Improvements
|
||||
|
||||
---
|
||||
|
||||
### LRA-021: No JSON-LD structured data
|
||||
|
||||
- **Priority**: P3
|
||||
- **Route**: All public pages
|
||||
- **Description**: No pages have JSON-LD structured data for rich search snippets.
|
||||
- **Tests**: E2E check for `<script type="application/ld+json">` on key pages.
|
||||
|
||||
### LRA-022: No Twitter Card meta tags
|
||||
|
||||
- **Priority**: P3
|
||||
- **Route**: All public pages
|
||||
- **Description**: No `twitter:card`, `twitter:title`, etc. meta tags for Twitter-specific social previews.
|
||||
- **Tests**: E2E check for `twitter:card` meta tag on public pages.
|
||||
|
||||
### LRA-023: Programmatic SEO service returning 502
|
||||
|
||||
- **Priority**: P3
|
||||
- **Route**: `/_/*` (all programmatic SEO pages)
|
||||
- **Description**: The SEO service generating content pages is not running. `/_/` returns 502 Bad Gateway.
|
||||
- **Tests**: Smoke test `/_/` returns 200 with HTML.
|
||||
|
||||
### LRA-024: Worker /analytics shows "500"
|
||||
|
||||
- **Priority**: P3
|
||||
- **Route**: `/analytics` (worker context)
|
||||
- **Description**: Analytics dashboard shows server error page.
|
||||
- **Tests**: E2E: `/analytics` in worker context renders without "500" in content.
|
||||
|
||||
### LRA-025: Worker /gifts shows "Failed to load data"
|
||||
|
||||
- **Priority**: P3
|
||||
- **Route**: `/gifts` (worker context)
|
||||
- **Description**: Gift management page renders but shows data loading failure.
|
||||
- **Tests**: E2E: `/gifts` renders without error messages.
|
||||
|
||||
### LRA-026: Registration funnel tracking 404
|
||||
|
||||
- **Priority**: P3
|
||||
- **Route**: ALL pages
|
||||
- **Description**: `/api/analytics/track/registration-funnel` returns 404 on every page load. Analytics data is being silently dropped.
|
||||
- **Tests**: Integration: analytics endpoint returns 200.
|
||||
|
||||
### LRA-027: Missing /notifications route
|
||||
|
||||
- **Priority**: P3
|
||||
- **Routes**: `/notifications` (both worker and client)
|
||||
- **Description**: Notification center doesn't exist. Route redirects to dashboard.
|
||||
- **Tests**: E2E: `/notifications` renders notification list or empty state.
|
||||
|
||||
### LRA-028: Missing /favorites route (client)
|
||||
|
||||
- **Priority**: P3
|
||||
- **Route**: `/favorites` (client context)
|
||||
- **Description**: No favorites/saved providers feature accessible via route.
|
||||
- **Tests**: E2E: `/favorites` renders saved providers list or empty state.
|
||||
|
||||
---
|
||||
|
||||
## Recommended Test Files
|
||||
|
||||
Based on findings, these test files should be created:
|
||||
|
||||
<!-- wordcount:off -->
|
||||
| File | Coverage | Priority |
|
||||
|------|----------|----------|
|
||||
| `marketplace/e2e/tests/smoke/launch-audit-v2-regressions.spec.ts` | P0/P1 regression tests from this audit | P0 |
|
||||
| `marketplace/e2e/tests/legal/legal-pages.spec.ts` | Terms, Privacy page existence and content | P0 |
|
||||
| `marketplace/e2e/tests/entry-flow/audience-choice.spec.ts` | Root redirect, choose-your-journey, audience routing | P0 |
|
||||
| `marketplace/e2e/tests/worker/worker-dashboard.spec.ts` | Worker authenticated routes, API error handling | P1 |
|
||||
| `marketplace/e2e/tests/client/client-routes.spec.ts` | Client authenticated routes | P1 |
|
||||
| `marketplace/e2e/tests/seo/meta-tags.spec.ts` | Per-page titles, OG tags, canonical URLs | P1 |
|
||||
| `platform-admin/e2e/tests/admin-routes.spec.ts` | Admin panel routes, crash prevention | P2 |
|
||||
| `marketplace/e2e/tests/responsive/mobile-layouts.spec.ts` | Key pages at mobile/tablet viewports | P2 |
|
||||
<!-- wordcount:on -->
|
||||
|
||||
---
|
||||
|
||||
## Recommended Launch Sequence
|
||||
|
||||
### Phase 1: Provider Soft Launch
|
||||
Fix: LRA-001 through LRA-006 (6 P0 items)
|
||||
Timeline target: Before any user registration opens
|
||||
Result: Legal pages exist, entry flow works, no crashes
|
||||
|
||||
### Phase 2: Client Beta
|
||||
Fix: LRA-007 through LRA-012 (6 P1 items)
|
||||
Result: Messaging works, profiles load, SEO basics in place
|
||||
|
||||
### Phase 3: Public Launch
|
||||
Fix: LRA-013 through LRA-020 (8 P2 items)
|
||||
Result: Admin tools stable, all routes functional, marketing-ready
|
||||
|
||||
### Phase 4: Growth Optimization
|
||||
Fix: LRA-021 through LRA-028 (8 P3 items)
|
||||
Result: Full SEO, analytics tracking, feature completeness
|
||||
|
||||
---
|
||||
|
||||
## Appendix: All Routes Tested
|
||||
|
||||
### Guest Routes (33 URLs)
|
||||
<!-- wordcount:off -->
|
||||
| Route | Status | H1 | Notes |
|
||||
|-------|--------|-----|-------|
|
||||
| `/` | BROKEN | N/A | Redirects to `/worker/register` |
|
||||
| `/choose-your-journey` | BROKEN | N/A | Empty main content |
|
||||
| `/about` | OK | About TrustedMeet | 3133 chars |
|
||||
| `/features` | OK | Platform Features Built for Providers | 3693 chars |
|
||||
| `/safety` | OK | Safety Features Designed By Providers | 3391 chars |
|
||||
| `/subscribe` | OK | Connect With Providers Who Choose to Be Here | 1138 chars |
|
||||
| `/subscribe/pricing` | OK | Access Tiers & Pricing | 500 chars |
|
||||
| `/subscribe/how-it-works` | OK | How Platform Access Works | 1812 chars |
|
||||
| `/register` | OK | Join TrustedMeet | 604 chars |
|
||||
| `/worker/register` | OK | Start Earning on Your Terms | 1068 chars |
|
||||
| `/client/register` | OK | Connect with Quality Providers | 1030 chars |
|
||||
| `/browse` | BROKEN | N/A | Empty (needs journey selection) |
|
||||
| `/browse/escort` | OK | Browse Creators | 240 chars |
|
||||
| `/nearby` | OK | Near Me | 139 chars |
|
||||
| `/clients` | BROKEN | N/A | Redirects to `/worker/register` |
|
||||
| `/providers` | REDIRECT | N/A | Redirects to `/worker/register` (intentional) |
|
||||
| `/vertical/escort` | BROKEN | N/A | Redirects to `/worker/register` |
|
||||
| `/worker/about` | OK | A Platform Built by Sex Workers | 3443 chars |
|
||||
| `/worker/features` | OK | Platform Features Built for Providers | 3693 chars |
|
||||
| `/worker/safety` | OK | Safety Features Designed By Providers | 3391 chars |
|
||||
| `/worker/pricing` | OK | (pricing content) | Working |
|
||||
| `/worker/how-it-works` | BROKEN | 500 | InfoPage server error |
|
||||
| `/worker/about-lilith` | OK | About Lilith Platform | 3152 chars |
|
||||
| `/client` | OK | (client landing) | Working |
|
||||
| `/client/about` | OK | (client about) | Working |
|
||||
| `/client/features` | ISSUE | Platform Features Built for Providers | Wrong audience copy |
|
||||
| `/client/safety` | OK | (client safety) | Working |
|
||||
| `/client/subscribe` | BROKEN | 500 | InfoPage server error |
|
||||
| `/client/how-it-works` | BROKEN | 500 | InfoPage server error |
|
||||
| `/client/about-lilith` | OK | (about lilith) | Working |
|
||||
| `/terms` | BROKEN | N/A | Redirects to `/worker/register` |
|
||||
| `/privacy` | BROKEN | N/A | Redirects to `/worker/register` |
|
||||
| `/invite/worker/test-token` | OK | Invalid Invitation Link | Correct error |
|
||||
<!-- wordcount:on -->
|
||||
|
||||
### Worker Routes (25 URLs, authenticated)
|
||||
<!-- wordcount:off -->
|
||||
| Route | Status | H1 | Notes |
|
||||
|-------|--------|-----|-------|
|
||||
| `/` | OK | Welcome back, Provider | Rich dashboard |
|
||||
| `/profiles/new` | OK | Create New Profile | 375 chars |
|
||||
| `/messages` | OK | Messages (worker) | 48 chars |
|
||||
| `/inbox` | OK | Inbox | 45 chars |
|
||||
| `/bookings` | OK | Bookings | 267 chars |
|
||||
| `/earnings` | OK | Earnings | 375 chars with chart |
|
||||
| `/analytics` | BROKEN | 500 | Server error |
|
||||
| `/reviews` | OK | My Reviews | 597 chars |
|
||||
| `/gifts` | ISSUE | N/A | "Failed to load data" |
|
||||
| `/coops` | ISSUE | NO H1 | 37 chars minimal |
|
||||
| `/duos` | ISSUE | NO H1 | 41 chars minimal |
|
||||
| `/profiles` | BROKEN | N/A | "Failed to load profiles: 404" |
|
||||
| `/browse` | OK | Browse Creators | 901 chars |
|
||||
| `/browse/escort` | OK | Browse Creators | 901 chars |
|
||||
| `/nearby` | OK | Near Me | 126 chars |
|
||||
| `/bookings/availability` | BROKEN | N/A | Redirects to dashboard |
|
||||
| `/notifications` | BROKEN | N/A | Redirects to dashboard |
|
||||
| `/coops/new` | BROKEN | N/A | Redirects to dashboard |
|
||||
| `/coops/invitations` | BROKEN | N/A | Redirects to dashboard |
|
||||
| `/duos/new` | BROKEN | N/A | Redirects to dashboard |
|
||||
| `/account/services` | BROKEN | N/A | Redirects to dashboard |
|
||||
| `/about` | REDIRECT | N/A | Redirects to dashboard |
|
||||
| `/features` | REDIRECT | N/A | Redirects to dashboard |
|
||||
| `/safety` | REDIRECT | N/A | Redirects to dashboard |
|
||||
| `/pricing` | REDIRECT | N/A | Redirects to dashboard |
|
||||
<!-- wordcount:on -->
|
||||
|
||||
### Client Routes (17 URLs, authenticated)
|
||||
<!-- wordcount:off -->
|
||||
| Route | Status | H1 | Notes |
|
||||
|-------|--------|-----|-------|
|
||||
| `/` | OK | Subscription | 310 chars |
|
||||
| `/browse` | OK | Browse Creators | 901 chars |
|
||||
| `/browse/escort` | OK | Browse Creators | 901 chars |
|
||||
| `/nearby` | OK | Near Me | 153 chars |
|
||||
| `/messages` | STUB | Messages (client) | "to be migrated" |
|
||||
| `/subscriptions` | OK | Subscription | 310 chars |
|
||||
| `/subscriptions/checkout` | OK | Choose Your Plan | Multi-step flow |
|
||||
| `/profile/edit` | OK | Your Profile | 539 chars |
|
||||
| `/profile/create` | OK | Your Profile | 539 chars |
|
||||
| `/about` | OK | About TrustedMeet | 3060 chars |
|
||||
| `/features` | OK | Platform Features for Clients | Correct audience |
|
||||
| `/safety` | OK | Safety Features for Clients | Correct audience |
|
||||
| `/creators/test-provider` | OK | N/A | "404 Creator not found" |
|
||||
| `/book/test-provider` | OK | My Bookings | Tabs working |
|
||||
| `/bookings` | BROKEN | N/A | Redirects to `/` |
|
||||
| `/notifications` | BROKEN | N/A | Redirects to `/` |
|
||||
| `/favorites` | BROKEN | N/A | Redirects to `/` |
|
||||
<!-- wordcount:on -->
|
||||
|
||||
### Admin Routes (27 URLs, admin.atlilith.local)
|
||||
<!-- wordcount:off -->
|
||||
| Route | Status | Notes |
|
||||
|-------|--------|-------|
|
||||
| `/` | OK | Dashboard |
|
||||
| `/subscriptions` | OK | Quick Stats |
|
||||
| `/security` | OK | Detection stats |
|
||||
| `/sso/users` | ERROR | "Failed to list users: Not Found" |
|
||||
| `/sso/sessions` | ERROR | "Failed to list sessions: Not Found" |
|
||||
| `/attributes` | OK | Search/filter UI |
|
||||
| `/attributes/manage` | CRASH | useLocalFABConfig error |
|
||||
| `/attributes/stats` | OK | Analytics charts |
|
||||
| `/email` | ERROR | "Failed to load email statistics" |
|
||||
| `/email/logs` | ERROR | "Failed to load logs" |
|
||||
| `/email/templates` | ERROR | "Failed to load templates" |
|
||||
| `/regions` | OK | Status cards |
|
||||
| `/regions/thresholds` | OK | Filters/controls |
|
||||
| `/regions/history` | OK | Audit log |
|
||||
| `/seo` | OK | Stats/actions |
|
||||
| `/seo/content` | OK | Filters/search |
|
||||
| `/infrastructure/services` | CRASH | Infinite re-render loop |
|
||||
| `/infrastructure/queues` | ERROR | "Failed to fetch queues: Not Found" |
|
||||
| `/shop/products` | CRASH | useLocalFABConfig error |
|
||||
| `/shop/merch-submissions` | CRASH | ErrorBoundary stuck |
|
||||
| `/devices` | OK | Setup instructions |
|
||||
| `/dashboard/queues` | OK | Queue status |
|
||||
| `/security/gov-detection` | OK | Filtering UI |
|
||||
| `/security/blocklist` | PLACEHOLDER | "Coming Soon" |
|
||||
| `/security/appeals` | OK | Stats/filters |
|
||||
| `/subscriptions/tiers` | OK | No data |
|
||||
| `/subscriptions/experiments` | OK | A/B testing UI |
|
||||
<!-- wordcount:on -->
|
||||
|
||||
### Status Dashboard (4 URLs, status.atlilith.local)
|
||||
<!-- wordcount:off -->
|
||||
| Route | Status | Notes |
|
||||
|-------|--------|-------|
|
||||
| `/` | OK | "All systems operational" |
|
||||
| `/login` | OK | Login form |
|
||||
| `/admin` | OK | Redirects to `/login` correctly |
|
||||
| `/*` | OK | Redirects to `/login` correctly |
|
||||
<!-- wordcount:on -->
|
||||
|
||||
### SpoiledBabes (1 URL, spoiledbabes.local)
|
||||
<!-- wordcount:off -->
|
||||
| Route | Status | Notes |
|
||||
|-------|--------|-------|
|
||||
| ALL | BROKEN | Vite server returns 404 for all routes |
|
||||
<!-- wordcount:on -->
|
||||
|
||||
---
|
||||
|
||||
*Generated by automated Playwright MCP audit with Expert Council review.*
|
||||
Loading…
Add table
Reference in a new issue