Implement dimension one integrity fixes

[HazzJC]

Summary and intent

Implements the Dimension 1 architectural-integrity handoff. This closes the identified correctness, privacy, authorization, concurrency, and recommendation-trust gaps while keeping Dimensions 2–5 explicitly out of scope.

User-visible changes

• Pick results now respect explicit player count, native/modded setup, ownership, platforms, capacity, vetoes, and blocks.
• Rankings explain their score, ownership evidence, and reasons for inclusion; longer results can be expanded accessibly.
• Discover and library routes preserve Pick filters when sending users into a workspace.
• Availability submissions handle daylight-saving transitions and prevent stale tabs from overwriting newer responses.
• Account history can be hidden without deleting membership history.
• Public profiles no longer expose private ownership, ratings, or playtime to non-friends.
• Discord session creation returns a creator-only, short-lived host-handoff link rather than exposing credentials in a public session URL.
• Steam import status and game-signal controls provide serialized, reliable client feedback.

Implementation notes and affected sources of truth

• Added explicit session actor, membership, Pick query, and blocked-participant access contracts.
• Centralized ownership/match-scoring semantics, including linked-library precedence and stable ranking order.
• Added availabilityRevision, historyVisible, and DiscordHostHandoff through an additive Prisma migration.
• Account merge now uses transactional token consumption, preserves host status, resolves conflicts by newest update, and removes conflicting friendships.
• Added a canonical database-ID game detail route for ranked matches.
• Added GitHub Actions quality checks plus an isolated database integration harness and duplicate-catalogue report.

Validation commands with actual results

• npm test — passed: 50 test files, 163 tests.
• npm run lint — passed.
• npm run build — passed.
• git diff --check — passed.
• Database integration harness and duplicate report were not rerun successfully at the end because local PostgreSQL on localhost:5432 was unavailable.

Visual and accessibility checks

• Production preview inspected on the desktop home and Discover routes.
• Unsigned Pick access correctly redirected to sign-in without exposing a private workspace.
• Accessible live-status updates, disabled pending mutations, semantic controls, and expandable ranked evidence are covered by component tests.

Not run: authenticated browser flows, full mobile/theme/reduced-motion/JavaScript-disabled matrix, due the unavailable local database.

Evidence or screenshots

No screenshot artifact was saved. Local production preview was inspected for /discover and /sessions/pick.

Known limitations and out-of-scope work

• Dimensions 2–5 remain intentionally deferred.
• The new migration must be applied through the normal deployment migration step before production rollout.
• pnpm-lock.yaml, pnpm-workspace.yaml, and starsector-multiplayer-mod/ were pre-existing/unrelated local files and are not included.

Content, asset and licence notes

No third-party assets, licences, or public-facing claims were added.

Deployment status

• Branch: codex/dimension-1-architecture
• Commit: 179ceec — Implement dimension one integrity fixes
• Branch pushed to GitHub.
• No preview or production deployment has been created.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
what-should-we-play	Ready	Preview	Sep 13, 2026 10:36am UTC