Post-MVP Improvements

[up2dul]

Implementation Roadmap Summary

• Phase 6: Authentication & Security Enhancements #9

• Phase 7: User Preferences & Localization #10

• Phase 8: Search Deduplication #11

• Phase 9: Progressive Web App (PWA) #12

• UI adjustments based on Figma #15

Execution Order (with Dependencies)

Phase 6: Auth & Security
├─ Backend: Google OAuth setup + rate limiting + forbidden words
├─ Frontend: Google Sign-In button replacement
└─ Shared: Update auth API methods

Phase 7: User Preferences
├─ Backend: Add preferences column + OpenAI English enforcement
├─ Frontend: Font store + settings UI + styling
└─ Shared: Update users API methods

Phase 8: Search Deduplication
├─ Backend: Dedup logic in create_search() service
└─ (No frontend changes needed)

Phase 9: PWA
├─ Frontend: Manifest + Service Worker + icons
├─ HTML: Meta tags
├─ Vite: Asset configuration
└─ Testing: Install + offline verification

Total Effort Estimate

Phase	Backend	Frontend	Shared	Migration	Testing	Est. Time
6	4h	2h	1h	—	1h	8h
7	3h	4h	1h	1h	1h	10h
8	2h	—	—	—	1h	3h
9	—	5h	—	—	2h	7h
Total	9h	11h	2h	1h	5h	~28 hours

---

Key Notes

1. Phase 6 & 7 can overlap — they're independent except both need API regeneration
2. Phase 8 depends on Phase 7 — migration must be applied first
3. Phase 9 is independent — can be done in parallel with Phases 6-8
4. Rate limiting uses Redis — ensure Redis is running in development/production
5. Google OAuth requires OAuth credentials — set up Google Cloud project and add GOOGLE_CLIENT_ID to .env
6. PWA testing is device-specific — test on actual mobile devices or Chrome DevTools device emulation
7. Service Worker cache versioning — increment CACHE_VERSION on each deployment to invalidate old caches