Thoughts

Budget

A budget tracker built around the add flow: a three-tap bottom sheet, money kept in integer cents, analytics that take the clock as an argument, and an invite link that carries the whole budget because there is no server yet

Updates

A public changelog that isn't a parse of the internal one: curated entries, pure search/sort logic, and a ticket board that says out loud it has no server

Research Explorer

Finding a research topic by measuring the literature: PubMed counts as evidence levels, a curated query layer, and demographic coverage as the gap finder

Particle Lab

Two point clouds instead of an object per particle, and why the connection-distance slider is really the performance dial

Explore Toronto

A walkable 3D Toronto built from primitives: a TDD'd pure movement core, an R3F shell around it, a seeded procedural skyline over a real street grid, and exhibits that deep-link back into the site

Gallery Wall

An arranger built pure-core-first: standard frame sizes, an aspect-matching auto-framer with a medium tie-break, a centered shelf-packing layout with overflow detection, and an inches-internal model with a cm toggle at the input edge

The To-Do List

Soft delete so a mis-click survives, positions assigned server-side so two adds cannot claim the same slot, and an optimistic insert that rolls back the row it added rather than the last one

TCG Pages

API proxy, server/client split, pagination patterns

Calendar

Views, timezone handling, BFF auth pattern

NFL Fantasy Matchups

A weekly points scoreboard next to the NBA's category one, a date guess deleted for a payload read, and a win probability derived from projected finals since ESPN doesn't provide one

Fantasy TCG

Minting rarity-tiered trading cards from real ESPN fantasy performances, rarity set relative to the pool

Operator Dashboard

Fleet management with tiered polling, optimistic updates, data freshness, and a globalThis singleton for in-memory state

Ketsup

A social app for image and text posts, built and shipped at its own domain

Draft Lab

A Firefox extension living inside the ESPN draft room: pick sync, tier supply, keepers, and live recommendations

AI Agent Patterns

SSE streaming, state machines, tool call UI, approval gates, and streaming markdown — the patterns behind modern agent interfaces

Craft

A page that reframes the whole site as evidence: ten lead front-end traits, each expandable to the real work that proves it, with a data-integrity test that fails on a dead evidence link

Command Palette

The site-wide ⌘K palette: one globally mounted instance opened from a hotkey or a window event, a registry reused from the hub's FEATURES and THOUGHTS, a hand-rolled fuzzy matcher, and an honest ARIA combobox

Shared Design System

Extracting tokens and components into @paul-portfolio npm packages — CSS custom properties, thin framework wrappers, and token aliasing across React and Angular apps

Framework-Agnostic Charts

Rebuilding recharts and unovis charts as pure SVG from one dependency-free geometry core — Sparkline, BarChart, DonutChart rendering identically in React and Angular, with a token palette and role=img a11y

Design System Showcase

Building a live, in-app gallery for the shared design system: dogfooding the primitives, a data-driven catalog with an integrity test, an interactive props playground, and an axe-checked accessibility contract

Apple Design

Auditing the whole app against Apple's fluid-interface principles and fixing the gaps: the accessibility settings a glass-heavy UI ignored (reduced transparency, contrast, eased theme change), press-down feedback, a critically-damped modal, menus that spring from their trigger, and size-specific typography

Error Toasts

Catching every failed write at one layer: a React Query MutationCache onError that raises a toast app-wide, an imperative toast() built in the design system so it works outside React, an SSR-safe portal, and an accessible live region

Styling Decisions

CSS Modules vs Tailwind v4 and design tokens

Accessibility

WCAG 2.1 AA compliance — vitest-axe for unit-level scans, systematic primitive audits, and where automated tooling helps vs. where it doesn't

Render Performance

Runtime rendering costs: context instability, resize allocation, backdrop-filter GPU pressure, and unbounded DOM growth

Web Vitals

Real-user metrics, sendBeacon, P75, the collection pipeline, and alerting when a vital goes bad

Bundle Analysis

How the analyzer found Auth0Provider shipping jose to the browser for no reason

Tree Shaking, Round 2

A second pass from green dead-code checks: tree-shaking the barrels Next doesn't optimize by default for a measured 148KB, then a real LCP fix — moving the entrance reveal off the JS bundle and lazy-loading the operator charts

ZeroProof: A No-Loss Sportsbook

Betting with the loss taken out: a double-entry ledger from the first row, closing-line value captured on every bet, and seven stacked PRs that each deploy on their own

GraphQL

Why GraphQL, why plain fetch over Apollo

Hybrid Rendering

Giving each Angular route the render mode it needs — the Thoughts pages prerender to static HTML at build time via per-route RenderMode, a SeoService writes the head and JSON-LD on the server, and the interactive shell stays client-rendered

API Backend Overhaul

Rebuilding portfolio_api into a typed, layered TypeScript backend across twelve phases, without breaking a single contract paul-explore depends on

Taking the Database Off the Public Internet

A front-end engineer working through the backend half: a Postgres reachable from anywhere, a TLS rabbit hole worth abandoning, migrations nothing ran, and four minutes of downtime from a rotation whose failure arrives late

Login Redirect

Landing back on the route you logged in from, and turning a denied consent screen from a bare 500 into a toast, both fixed at the Auth0 choke point

Project Review

An evidence-backed review of the whole codebase — engineering, system design, architecture overfit, and per-feature UX gains

Refactor Pass

The maintainability roadmap after the review — deduping against existing abstractions, the overfits I avoid, and the order I ship in

Testing

3499+ tests (3432 unit + 67 e2e), Vitest + MSW + Playwright, and the delay() trick for proving optimistic updates fire before the server responds

CI E2E Reliability

Auth0 crashing all middleware from a module-level throw, and a search test that needed page.route to stop depending on an external API

Green Checks

Four green checks in the design system that were each measuring something other than what they claimed — the suite nothing ran, the visual gate with no quota, the contrast figure taken under the gloss, and the count that moved when you built

Tiered Testing Strategy

Why you shouldn't run every test on every commit: split by cost — fast unit tests per push, integration on merge, e2e nightly, flaky ones quarantined

AI Security & Bare Repo Attacks

Prompt injection via CLAUDE.md, hardened least-privilege configs, deny lists, and sandboxed environments for untrusted code

Auditing for Absences

AI-written code passes security tests 56% of the time and fails worst on what is missing. A cross-repo audit, and the seven shapes of absence it actually found

Bundlers

Which bundler this project runs and why, whether it's the right one, and the real situations where a lead reaches for a different bundler — the deliverable and the dominant constraint pick it, not taste

Deployment

Deployment as five separate jobs, choosing a platform from the app's runtime shape, when to decide, the trade-offs that bite, and the Vercel + Cloudflare setup behind this site

PR Screenshots From an Unattended Agent

Embedding before/after screenshots inline in PR descriptions with only the gh CLI — why user-attachments, gists, and release assets all failed, and why we don't prune the PNGs

Visual Plans

Why I bracket every change with a visual plan before code and a recap after: structured wireframes over prose, the RED list as the plan, and an honest record of where reality drifted

Crawlers

The five files a site is supposed to serve and this one didn't: what to leave out of robots.txt, why the sitemap carries no lastModified, and the test that stops it going stale