feat: day 7 — first tab ported to React (Extensions) + Express serves /app/*

End-to-end proof that the full React + Vite + Tailwind + TypeScript pipeline works against the existing Express API: client/src/pages/Extensions.tsx Minimum-viable port of the Extensions tab. Fetches /api/extensions via the typed api wrapper; renders an add form backed by Zod validation (ExtensionCreateSchema). Uses @tanstack/react-query for server state (queryKey: ['extensions'], invalidate on mutate). Full CRUD UI (trash / restore / purge / search) is a follow-up — this ships just enough to prove the stack works. client/src/lib/api.ts Thin fetch wrapper. Every React page goes through apiFetch<T>(), which narrows ApiResponse<T> to the success shape and throws ApiError on failure. Central spot for future request/response instrumentation, auth-token refresh, etc. client/src/App.tsx Replaced the Vite starter splash screen with a minimal router: BrowserRouter basename='/app', routes for / (landing) and /extensions. QueryClientProvider wraps the tree so every page can use useQuery/useMutation. client/src/shared/ Mirrored copy of /shared/types.ts + schemas.ts. Canonical source stays at /shared/ (used by backend). A post-migration task is to wire proper TypeScript project references so the client can import straight from /shared — TS 6's cross-root bundler-mode paths resolution isn't pulling it in cleanly. For now, the mirror is header-annotated 'do not edit, mirror only'. client/src/index.css Tailwind v4 @theme block declaring the shadcn design tokens as first-class CSS custom properties, which exposes the bg-background / text-foreground / border-border utility classes the page components use. v4 no longer uses @apply for these — the theme block is the idiomatic form. server.ts Added: app.get('/app/*splat', ...) → sendFile public/app/index.html so React Router deep links (e.g. /app/extensions) resolve client-side. Express static middleware below continues to serve the hashed /app/assets/*.js + .css. Build output (checked into public/app/ so the next prod docker rebuild ships the React bundle without requiring a client/npm install step in the Dockerfile — that's a day-8 refinement): index.html 0.46 kB gzip 0.29 kB index.css 9.51 kB gzip 2.69 kB index.js 329.24 kB gzip 100.98 kB Typecheck green on both sides: server: npx tsc --noEmit → EXIT 0 client: npx tsc -b → EXIT 0 client: npx vite build → 150 modules, 219ms How to see it live (after Daniel rebuilds prod): https://<host>/app/ → React landing page https://<host>/app/extensions → React-rendered Extensions list https://<host>/ → unchanged vanilla JS app Nothing destructive. The vanilla JS /extensions tab still works identically. The React /app/extensions route talks to the same /api/extensions backend endpoints. Both render from the same PostgreSQL rows. This closes out the 7-day migration scaffolding. The rest is a port-one-tab-at-a-time grind that Codex (or anyone) can pick up tab-by-tab with the Playwright suite as the safety net.
2026-04-23 22:08:57 +02:00 · 2026-04-23 22:08:57 +02:00 · 7496b4467f
commit 7496b4467f
parent 3222dacc9a
19 changed files with 727 additions and 360 deletions
--- a/client/package-lock.json
+++ b/client/package-lock.json
@ -17,7 +17,8 @@
        "react-dom": "^19.2.5",
        "react-router-dom": "^7.14.2",
        "tailwind-merge": "^3.5.0",
-        "tailwindcss": "^4.2.4"
+        "tailwindcss": "^4.2.4",
+        "zod": "^4.3.6"
      },
      "devDependencies": {
        "@eslint/js": "^10.0.1",
@ -3112,7 +3113,6 @@
      "version": "4.3.6",
      "resolved": "https://registry.npmjs.org/zod/-/zod-4.3.6.tgz",
      "integrity": "sha512-rftlrkhHZOcjDwkGlnUtZZkvaPHCsDATp4pGpuOOMDaTdDDXF91wuVDJoWoPsKX/3YPQ5fHuF3STjcYyKr+Qhg==",
-      "dev": true,
      "license": "MIT",
      "funding": {
        "url": "https://github.com/sponsors/colinhacks"
--- a/client/package.json
+++ b/client/package.json
@ -19,7 +19,8 @@
    "react-dom": "^19.2.5",
    "react-router-dom": "^7.14.2",
    "tailwind-merge": "^3.5.0",
-    "tailwindcss": "^4.2.4"
+    "tailwindcss": "^4.2.4",
+    "zod": "^4.3.6"
  },
  "devDependencies": {
    "@eslint/js": "^10.0.1",
--- a/client/src/App.css
+++ b/client/src/App.css
@ -1,184 +0,0 @@
-.counter {
-  font-size: 16px;
-  padding: 5px 10px;
-  border-radius: 5px;
-  color: var(--accent);
-  background: var(--accent-bg);
-  border: 2px solid transparent;
-  transition: border-color 0.3s;
-  margin-bottom: 24px;
-
-  &:hover {
-    border-color: var(--accent-border);
-  }
-  &:focus-visible {
-    outline: 2px solid var(--accent);
-    outline-offset: 2px;
-  }
-}
-
-.hero {
-  position: relative;
-
-  .base,
-  .framework,
-  .vite {
-    inset-inline: 0;
-    margin: 0 auto;
-  }
-
-  .base {
-    width: 170px;
-    position: relative;
-    z-index: 0;
-  }
-
-  .framework,
-  .vite {
-    position: absolute;
-  }
-
-  .framework {
-    z-index: 1;
-    top: 34px;
-    height: 28px;
-    transform: perspective(2000px) rotateZ(300deg) rotateX(44deg) rotateY(39deg)
-      scale(1.4);
-  }
-
-  .vite {
-    z-index: 0;
-    top: 107px;
-    height: 26px;
-    width: auto;
-    transform: perspective(2000px) rotateZ(300deg) rotateX(40deg) rotateY(39deg)
-      scale(0.8);
-  }
-}
-
-#center {
-  display: flex;
-  flex-direction: column;
-  gap: 25px;
-  place-content: center;
-  place-items: center;
-  flex-grow: 1;
-
-  @media (max-width: 1024px) {
-    padding: 32px 20px 24px;
-    gap: 18px;
-  }
-}
-
-#next-steps {
-  display: flex;
-  border-top: 1px solid var(--border);
-  text-align: left;
-
-  & > div {
-    flex: 1 1 0;
-    padding: 32px;
-    @media (max-width: 1024px) {
-      padding: 24px 20px;
-    }
-  }
-
-  .icon {
-    margin-bottom: 16px;
-    width: 22px;
-    height: 22px;
-  }
-
-  @media (max-width: 1024px) {
-    flex-direction: column;
-    text-align: center;
-  }
-}
-
-#docs {
-  border-right: 1px solid var(--border);
-
-  @media (max-width: 1024px) {
-    border-right: none;
-    border-bottom: 1px solid var(--border);
-  }
-}
-
-#next-steps ul {
-  list-style: none;
-  padding: 0;
-  display: flex;
-  gap: 8px;
-  margin: 32px 0 0;
-
-  .logo {
-    height: 18px;
-  }
-
-  a {
-    color: var(--text-h);
-    font-size: 16px;
-    border-radius: 6px;
-    background: var(--social-bg);
-    display: flex;
-    padding: 6px 12px;
-    align-items: center;
-    gap: 8px;
-    text-decoration: none;
-    transition: box-shadow 0.3s;
-
-    &:hover {
-      box-shadow: var(--shadow);
-    }
-    .button-icon {
-      height: 18px;
-      width: 18px;
-    }
-  }
-
-  @media (max-width: 1024px) {
-    margin-top: 20px;
-    flex-wrap: wrap;
-    justify-content: center;
-
-    li {
-      flex: 1 1 calc(50% - 8px);
-    }
-
-    a {
-      width: 100%;
-      justify-content: center;
-      box-sizing: border-box;
-    }
-  }
-}
-
-#spacer {
-  height: 88px;
-  border-top: 1px solid var(--border);
-  @media (max-width: 1024px) {
-    height: 48px;
-  }
-}
-
-.ticks {
-  position: relative;
-  width: 100%;
-
-  &::before,
-  &::after {
-    content: '';
-    position: absolute;
-    top: -4.5px;
-    border: 5px solid transparent;
-  }
-
-  &::before {
-    left: 0;
-    border-left-color: var(--border);
-  }
-  &::after {
-    right: 0;
-    border-right-color: var(--border);
-  }
-}
--- a/client/src/App.tsx
+++ b/client/src/App.tsx
@ -1,122 +1,35 @@
-import { useState } from 'react'
-import reactLogo from './assets/react.svg'
-import viteLogo from './assets/vite.svg'
-import heroImg from './assets/hero.png'
-import './App.css'
+import { QueryClient, QueryClientProvider } from '@tanstack/react-query';
+import { BrowserRouter, Routes, Route, Link } from 'react-router-dom';
+import Extensions from '@/pages/Extensions';

-function App() {
-  const [count, setCount] = useState(0)
+const queryClient = new QueryClient({
+  defaultOptions: { queries: { staleTime: 30_000, retry: 1 } },
+});

+function Home() {
  return (
-    <>
-      <section id="center">
-        <div className="hero">
-          <img src={heroImg} className="base" width="170" height="179" alt="" />
-          <img src={reactLogo} className="framework" alt="React logo" />
-          <img src={viteLogo} className="vite" alt="Vite logo" />
-        </div>
-        <div>
-          <h1>Get started</h1>
-          <p>
-            Edit <code>src/App.tsx</code> and save to test <code>HMR</code>
-          </p>
-        </div>
-        <button
-          type="button"
-          className="counter"
-          onClick={() => setCount((count) => count + 1)}
-        >
-          Count is {count}
-        </button>
-      </section>
-
-      <div className="ticks"></div>
-
-      <section id="next-steps">
-        <div id="docs">
-          <svg className="icon" role="presentation" aria-hidden="true">
-            <use href="/icons.svg#documentation-icon"></use>
-          </svg>
-          <h2>Documentation</h2>
-          <p>Your questions, answered</p>
-          <ul>
-            <li>
-              <a href="https://vite.dev/" target="_blank">
-                <img className="logo" src={viteLogo} alt="" />
-                Explore Vite
-              </a>
-            </li>
-            <li>
-              <a href="https://react.dev/" target="_blank">
-                <img className="button-icon" src={reactLogo} alt="" />
-                Learn more
-              </a>
-            </li>
-          </ul>
-        </div>
-        <div id="social">
-          <svg className="icon" role="presentation" aria-hidden="true">
-            <use href="/icons.svg#social-icon"></use>
-          </svg>
-          <h2>Connect with us</h2>
-          <p>Join the Vite community</p>
-          <ul>
-            <li>
-              <a href="https://github.com/vitejs/vite" target="_blank">
-                <svg
-                  className="button-icon"
-                  role="presentation"
-                  aria-hidden="true"
-                >
-                  <use href="/icons.svg#github-icon"></use>
-                </svg>
-                GitHub
-              </a>
-            </li>
-            <li>
-              <a href="https://chat.vite.dev/" target="_blank">
-                <svg
-                  className="button-icon"
-                  role="presentation"
-                  aria-hidden="true"
-                >
-                  <use href="/icons.svg#discord-icon"></use>
-                </svg>
-                Discord
-              </a>
-            </li>
-            <li>
-              <a href="https://x.com/vite_js" target="_blank">
-                <svg
-                  className="button-icon"
-                  role="presentation"
-                  aria-hidden="true"
-                >
-                  <use href="/icons.svg#x-icon"></use>
-                </svg>
-                X.com
-              </a>
-            </li>
-            <li>
-              <a href="https://bsky.app/profile/vite.dev" target="_blank">
-                <svg
-                  className="button-icon"
-                  role="presentation"
-                  aria-hidden="true"
-                >
-                  <use href="/icons.svg#bluesky-icon"></use>
-                </svg>
-                Bluesky
-              </a>
-            </li>
-          </ul>
-        </div>
-      </section>
-
-      <div className="ticks"></div>
-      <section id="spacer"></section>
-    </>
-  )
+    <div className="max-w-3xl mx-auto p-6 space-y-4">
+      <h1 className="text-2xl font-semibold">Pediatric AI Scribe — React client</h1>
+      <p className="text-sm text-muted-foreground">
+        This is the new React tree. The legacy vanilla-JS app still lives at{' '}
+        <a href="/" className="underline">/</a>.
+      </p>
+      <ul className="list-disc pl-6 text-sm">
+        <li><Link to="/app/extensions" className="underline">Extensions & Pagers</Link> — first ported tab</li>
+      </ul>
+    </div>
+  );
 }

-export default App
+export default function App() {
+  return (
+    <QueryClientProvider client={queryClient}>
+      <BrowserRouter basename="/app">
+        <Routes>
+          <Route path="/" element={<Home />} />
+          <Route path="/extensions" element={<Extensions />} />
+        </Routes>
+      </BrowserRouter>
+    </QueryClientProvider>
+  );
+}
--- a/client/src/assets/hero.png
+++ b/client/src/assets/hero.png
--- a/client/src/assets/react.svg
+++ b/client/src/assets/react.svg
@ -1 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" aria-hidden="true" role="img" class="iconify iconify--logos" width="35.93" height="32" preserveAspectRatio="xMidYMid meet" viewBox="0 0 256 228"><path fill="#00D8FF" d="M210.483 73.824a171.49 171.49 0 0 0-8.24-2.597c.465-1.9.893-3.777 1.273-5.621c6.238-30.281 2.16-54.676-11.769-62.708c-13.355-7.7-35.196.329-57.254 19.526a171.23 171.23 0 0 0-6.375 5.848a155.866 155.866 0 0 0-4.241-3.917C100.759 3.829 77.587-4.822 63.673 3.233C50.33 10.957 46.379 33.89 51.995 62.588a170.974 170.974 0 0 0 1.892 8.48c-3.28.932-6.445 1.924-9.474 2.98C17.309 83.498 0 98.307 0 113.668c0 15.865 18.582 31.778 46.812 41.427a145.52 145.52 0 0 0 6.921 2.165a167.467 167.467 0 0 0-2.01 9.138c-5.354 28.2-1.173 50.591 12.134 58.266c13.744 7.926 36.812-.22 59.273-19.855a145.567 145.567 0 0 0 5.342-4.923a168.064 168.064 0 0 0 6.92 6.314c21.758 18.722 43.246 26.282 56.54 18.586c13.731-7.949 18.194-32.003 12.4-61.268a145.016 145.016 0 0 0-1.535-6.842c1.62-.48 3.21-.974 4.76-1.488c29.348-9.723 48.443-25.443 48.443-41.52c0-15.417-17.868-30.326-45.517-39.844Zm-6.365 70.984c-1.4.463-2.836.91-4.3 1.345c-3.24-10.257-7.612-21.163-12.963-32.432c5.106-11 9.31-21.767 12.459-31.957c2.619.758 5.16 1.557 7.61 2.4c23.69 8.156 38.14 20.213 38.14 29.504c0 9.896-15.606 22.743-40.946 31.14Zm-10.514 20.834c2.562 12.94 2.927 24.64 1.23 33.787c-1.524 8.219-4.59 13.698-8.382 15.893c-8.067 4.67-25.32-1.4-43.927-17.412a156.726 156.726 0 0 1-6.437-5.87c7.214-7.889 14.423-17.06 21.459-27.246c12.376-1.098 24.068-2.894 34.671-5.345a134.17 134.17 0 0 1 1.386 6.193ZM87.276 214.515c-7.882 2.783-14.16 2.863-17.955.675c-8.075-4.657-11.432-22.636-6.853-46.752a156.923 156.923 0 0 1 1.869-8.499c10.486 2.32 22.093 3.988 34.498 4.994c7.084 9.967 14.501 19.128 21.976 27.15a134.668 134.668 0 0 1-4.877 4.492c-9.933 8.682-19.886 14.842-28.658 17.94ZM50.35 144.747c-12.483-4.267-22.792-9.812-29.858-15.863c-6.35-5.437-9.555-10.836-9.555-15.216c0-9.322 13.897-21.212 37.076-29.293c2.813-.98 5.757-1.905 8.812-2.773c3.204 10.42 7.406 21.315 12.477 32.332c-5.137 11.18-9.399 22.249-12.634 32.792a134.718 134.718 0 0 1-6.318-1.979Zm12.378-84.26c-4.811-24.587-1.616-43.134 6.425-47.789c8.564-4.958 27.502 2.111 47.463 19.835a144.318 144.318 0 0 1 3.841 3.545c-7.438 7.987-14.787 17.08-21.808 26.988c-12.04 1.116-23.565 2.908-34.161 5.309a160.342 160.342 0 0 1-1.76-7.887Zm110.427 27.268a347.8 347.8 0 0 0-7.785-12.803c8.168 1.033 15.994 2.404 23.343 4.08c-2.206 7.072-4.956 14.465-8.193 22.045a381.151 381.151 0 0 0-7.365-13.322Zm-45.032-43.861c5.044 5.465 10.096 11.566 15.065 18.186a322.04 322.04 0 0 0-30.257-.006c4.974-6.559 10.069-12.652 15.192-18.18ZM82.802 87.83a323.167 323.167 0 0 0-7.227 13.238c-3.184-7.553-5.909-14.98-8.134-22.152c7.304-1.634 15.093-2.97 23.209-3.984a321.524 321.524 0 0 0-7.848 12.897Zm8.081 65.352c-8.385-.936-16.291-2.203-23.593-3.793c2.26-7.3 5.045-14.885 8.298-22.6a321.187 321.187 0 0 0 7.257 13.246c2.594 4.48 5.28 8.868 8.038 13.147Zm37.542 31.03c-5.184-5.592-10.354-11.779-15.403-18.433c4.902.192 9.899.29 14.978.29c5.218 0 10.376-.117 15.453-.343c-4.985 6.774-10.018 12.97-15.028 18.486Zm52.198-57.817c3.422 7.8 6.306 15.345 8.596 22.52c-7.422 1.694-15.436 3.058-23.88 4.071a382.417 382.417 0 0 0 7.859-13.026a347.403 347.403 0 0 0 7.425-13.565Zm-16.898 8.101a358.557 358.557 0 0 1-12.281 19.815a329.4 329.4 0 0 1-23.444.823c-7.967 0-15.716-.248-23.178-.732a310.202 310.202 0 0 1-12.513-19.846h.001a307.41 307.41 0 0 1-10.923-20.627a310.278 310.278 0 0 1 10.89-20.637l-.001.001a307.318 307.318 0 0 1 12.413-19.761c7.613-.576 15.42-.876 23.31-.876H128c7.926 0 15.743.303 23.354.883a329.357 329.357 0 0 1 12.335 19.695a358.489 358.489 0 0 1 11.036 20.54a329.472 329.472 0 0 1-11 20.722Zm22.56-122.124c8.572 4.944 11.906 24.881 6.52 51.026c-.344 1.668-.73 3.367-1.15 5.09c-10.622-2.452-22.155-4.275-34.23-5.408c-7.034-10.017-14.323-19.124-21.64-27.008a160.789 160.789 0 0 1 5.888-5.4c18.9-16.447 36.564-22.941 44.612-18.3ZM128 90.808c12.625 0 22.86 10.235 22.86 22.86s-10.235 22.86-22.86 22.86s-22.86-10.235-22.86-22.86s10.235-22.86 22.86-22.86Z"></path></svg>
--- a/client/src/assets/vite.svg
+++ b/client/src/assets/vite.svg
--- a/client/src/index.css
+++ b/client/src/index.css
@ -1,55 +1,44 @@
@import "tailwindcss";

-/* shadcn/ui design tokens. Can be tuned later to match the existing
-   vanilla app's palette (--blue / --g100 etc. from public/css/styles.css). */
-@layer base {
-  :root {
-    --background: 0 0% 100%;
-    --foreground: 222.2 47.4% 11.2%;
-    --muted: 210 40% 96.1%;
-    --muted-foreground: 215.4 16.3% 46.9%;
-    --popover: 0 0% 100%;
-    --popover-foreground: 222.2 47.4% 11.2%;
-    --card: 0 0% 100%;
-    --card-foreground: 222.2 47.4% 11.2%;
-    --border: 214.3 31.8% 91.4%;
-    --input: 214.3 31.8% 91.4%;
-    --primary: 222.2 47.4% 11.2%;
-    --primary-foreground: 210 40% 98%;
-    --secondary: 210 40% 96.1%;
-    --secondary-foreground: 222.2 47.4% 11.2%;
-    --accent: 210 40% 96.1%;
-    --accent-foreground: 222.2 47.4% 11.2%;
-    --destructive: 0 100% 50%;
-    --destructive-foreground: 210 40% 98%;
-    --ring: 215 20.2% 65.1%;
-    --radius: 0.5rem;
-  }
+/* Tailwind v4 uses @theme to declare custom color tokens that then
+   expose the matching utility classes (bg-background, text-foreground,
+   border-border, etc.). Values tuned to the shadcn/ui 'new-york' palette;
+   adjust later to match the existing vanilla app's blue / g100 colors. */

-  .dark {
-    --background: 224 71% 4%;
-    --foreground: 213 31% 91%;
-    --muted: 223 47% 11%;
-    --muted-foreground: 215.4 16.3% 56.9%;
-    --popover: 224 71% 4%;
-    --popover-foreground: 215 20.2% 65.1%;
-    --card: 224 71% 4%;
-    --card-foreground: 213 31% 91%;
-    --border: 216 34% 17%;
-    --input: 216 34% 17%;
-    --primary: 210 40% 98%;
-    --primary-foreground: 222.2 47.4% 1.2%;
-    --secondary: 222.2 47.4% 11.2%;
-    --secondary-foreground: 210 40% 98%;
-    --accent: 216 34% 17%;
-    --accent-foreground: 210 40% 98%;
-    --destructive: 0 63% 31%;
-    --destructive-foreground: 210 40% 98%;
-    --ring: 216 34% 17%;
-  }
+@theme {
+  --color-background: hsl(0 0% 100%);
+  --color-foreground: hsl(222.2 47.4% 11.2%);
+
+  --color-muted: hsl(210 40% 96.1%);
+  --color-muted-foreground: hsl(215.4 16.3% 46.9%);
+
+  --color-card: hsl(0 0% 100%);
+  --color-card-foreground: hsl(222.2 47.4% 11.2%);
+
+  --color-popover: hsl(0 0% 100%);
+  --color-popover-foreground: hsl(222.2 47.4% 11.2%);
+
+  --color-primary: hsl(222.2 47.4% 11.2%);
+  --color-primary-foreground: hsl(210 40% 98%);
+
+  --color-secondary: hsl(210 40% 96.1%);
+  --color-secondary-foreground: hsl(222.2 47.4% 11.2%);
+
+  --color-accent: hsl(210 40% 96.1%);
+  --color-accent-foreground: hsl(222.2 47.4% 11.2%);
+
+  --color-destructive: hsl(0 84% 60%);
+  --color-destructive-foreground: hsl(210 40% 98%);
+
+  --color-border: hsl(214.3 31.8% 91.4%);
+  --color-input: hsl(214.3 31.8% 91.4%);
+  --color-ring: hsl(215 20.2% 65.1%);
+
+  --radius: 0.5rem;
 }

-@layer base {
-  * { @apply border-border; }
-  body { @apply bg-background text-foreground; }
+body {
+  background: var(--color-background);
+  color: var(--color-foreground);
+  margin: 0;
 }
--- a/client/src/lib/api.ts
+++ b/client/src/lib/api.ts
@ -0,0 +1,45 @@
+// Thin fetch wrapper used by every React page. Centralises auth
+// header handling (cookie-based, credentials: 'include'), JSON
+// parsing, and typed success-vs-error narrowing via shared/types.
+import type { ApiResponse } from '@/shared/types';
+
+export class ApiError extends Error {
+  constructor(public status: number, message: string) {
+    super(message);
+  }
+}
+
+export async function apiFetch<TOk>(
+  path: string,
+  init: RequestInit = {},
+): Promise<TOk> {
+  const resp = await fetch(path, {
+    credentials: 'include',
+    headers: {
+      'Content-Type': 'application/json',
+      ...(init.headers || {}),
+    },
+    ...init,
+  });
+
+  // Non-JSON responses (e.g. audio blobs) — caller must handle.
+  const ct = resp.headers.get('content-type') || '';
+  if (!ct.includes('application/json')) {
+    if (!resp.ok) throw new ApiError(resp.status, resp.statusText);
+    return (await resp.blob()) as unknown as TOk;
+  }
+
+  const body = (await resp.json()) as ApiResponse<TOk>;
+  if (!resp.ok || body.success === false) {
+    throw new ApiError(resp.status, (body as { error?: string }).error || resp.statusText);
+  }
+  return body as unknown as TOk;
+}
+
+// Shortcuts for common verbs
+export const api = {
+  get:    <T>(path: string) => apiFetch<T>(path),
+  post:   <T>(path: string, body: unknown) => apiFetch<T>(path, { method: 'POST', body: JSON.stringify(body) }),
+  put:    <T>(path: string, body: unknown) => apiFetch<T>(path, { method: 'PUT', body: JSON.stringify(body) }),
+  delete: <T>(path: string) => apiFetch<T>(path, { method: 'DELETE' }),
+};
--- a/client/src/pages/Extensions.tsx
+++ b/client/src/pages/Extensions.tsx
@ -0,0 +1,153 @@
+// ============================================================
+// EXTENSIONS — first tab ported from vanilla JS to React.
+// Read-only list view with a simple add form. The old vanilla
+// version has richer UI (trash, restore, purge, search) — this
+// minimum-viable port proves the migration pipeline works:
+// shared types + api wrapper + React Query + Tailwind shadcn.
+// The full CRUD UI lands in a follow-up when polish time arrives.
+// ============================================================
+
+import { useState } from 'react';
+import { useQuery, useMutation, useQueryClient } from '@tanstack/react-query';
+import { api } from '@/lib/api';
+import type { ExtensionsListOk, Extension } from '@/shared/types';
+import { ExtensionCreateSchema, type ExtensionCreate } from '@/shared/schemas';
+
+function ExtensionRow({ ext }: { ext: Extension }) {
+  return (
+    <div className="flex items-center gap-3 px-4 py-2 border-b border-border">
+      <div className="flex-1">
+        <div className="font-medium">{ext.name}</div>
+        <div className="text-xs text-muted-foreground">{ext.location}</div>
+      </div>
+      <div className="font-mono text-sm">{ext.number}</div>
+      <div className="text-xs uppercase text-muted-foreground w-20 text-right">
+        {ext.type}
+      </div>
+    </div>
+  );
+}
+
+function AddForm({ onDone }: { onDone: () => void }) {
+  const qc = useQueryClient();
+  const [form, setForm] = useState<ExtensionCreate>({
+    location: '',
+    name: '',
+    number: '',
+    type: 'extension',
+    notes: '',
+  });
+  const [error, setError] = useState<string | null>(null);
+
+  const createMutation = useMutation({
+    mutationFn: (body: ExtensionCreate) => api.post<{ id: number }>('/api/extensions', body),
+    onSuccess: () => {
+      qc.invalidateQueries({ queryKey: ['extensions'] });
+      onDone();
+    },
+    onError: (e: Error) => setError(e.message),
+  });
+
+  function submit(e: React.FormEvent) {
+    e.preventDefault();
+    setError(null);
+    const parsed = ExtensionCreateSchema.safeParse(form);
+    if (!parsed.success) {
+      setError(parsed.error.issues.map((i: { message: string }) => i.message).join(', '));
+      return;
+    }
+    createMutation.mutate(parsed.data);
+  }
+
+  const input = 'w-full rounded-md border border-input bg-background px-3 py-2 text-sm';
+
+  return (
+    <form onSubmit={submit} className="space-y-3 p-4 bg-muted/40 rounded-lg border border-border">
+      <div className="grid grid-cols-2 gap-3">
+        <input
+          className={input}
+          placeholder="Location (e.g. Main Hospital)"
+          value={form.location}
+          onChange={e => setForm({ ...form, location: e.target.value })}
+        />
+        <input
+          className={input}
+          placeholder="Name / department"
+          value={form.name}
+          onChange={e => setForm({ ...form, name: e.target.value })}
+        />
+        <input
+          className={input}
+          placeholder="Number"
+          value={form.number}
+          onChange={e => setForm({ ...form, number: e.target.value })}
+        />
+        <select
+          className={input}
+          value={form.type}
+          onChange={e => setForm({ ...form, type: e.target.value as 'extension' | 'pager' })}
+        >
+          <option value="extension">Extension</option>
+          <option value="pager">Pager</option>
+        </select>
+      </div>
+      {error && <div className="text-sm text-destructive">{error}</div>}
+      <div className="flex gap-2">
+        <button
+          type="submit"
+          disabled={createMutation.isPending}
+          className="rounded-md bg-primary text-primary-foreground px-4 py-2 text-sm font-medium disabled:opacity-50"
+        >
+          {createMutation.isPending ? 'Saving…' : 'Save'}
+        </button>
+        <button type="button" onClick={onDone} className="rounded-md border border-border px-4 py-2 text-sm">
+          Cancel
+        </button>
+      </div>
+    </form>
+  );
+}
+
+export default function Extensions() {
+  const [adding, setAdding] = useState(false);
+  const { data, isLoading, error } = useQuery<ExtensionsListOk>({
+    queryKey: ['extensions'],
+    queryFn: () => api.get<ExtensionsListOk>('/api/extensions'),
+  });
+
+  return (
+    <div className="max-w-3xl mx-auto p-6 space-y-4">
+      <header className="flex items-center justify-between">
+        <div>
+          <h1 className="text-2xl font-semibold">Pagers & Extensions</h1>
+          <p className="text-sm text-muted-foreground">
+            Per-user directory. This React port is the migration proof-of-life.
+          </p>
+        </div>
+        {!adding && (
+          <button
+            onClick={() => setAdding(true)}
+            className="rounded-md bg-primary text-primary-foreground px-4 py-2 text-sm font-medium"
+          >
+            + Add
+          </button>
+        )}
+      </header>
+
+      {adding && <AddForm onDone={() => setAdding(false)} />}
+
+      {isLoading && <div className="text-sm text-muted-foreground">Loading…</div>}
+      {error && <div className="text-sm text-destructive">{(error as Error).message}</div>}
+      {data && data.items.length === 0 && (
+        <div className="text-sm text-muted-foreground italic py-8 text-center">
+          No extensions yet. Click Add to create the first one.
+        </div>
+      )}
+      {data && data.items.length > 0 && (
+        <div className="rounded-lg border border-border overflow-hidden">
+          {data.items.map((ext: Extension) => <ExtensionRow key={ext.id} ext={ext} />)}
+        </div>
+      )}
+    </div>
+  );
+}
--- a/client/src/shared/schemas.ts
+++ b/client/src/shared/schemas.ts
@ -0,0 +1,118 @@
+// ============================================================
+// ZOD SCHEMAS — runtime validation at API boundaries
+// ============================================================
+// Each incoming request body gets parsed through one of these schemas
+// BEFORE the handler sees it. If parse fails, a 400 is returned with
+// the detailed validation error — no more silent "undefined reading
+// X" crashes on malformed input. TypeScript types for req.body can
+// be inferred from the schema with `z.infer<typeof XxxSchema>`.
+//
+// Keep wire-shape aligned with shared/types.ts. The types file is
+// for RESPONSES (what the server returns); this file is for REQUESTS
+// (what the client sends).
+// ============================================================
+
+import { z } from 'zod';
+
+// ── Common fragments ─────────────────────────────────────────
+const NonEmptyString = z.string().min(1);
+const OptionalTrimmed = z.string().optional();
+const OptionalModel = z.string().optional();
+
+// ── Auth ─────────────────────────────────────────────────────
+export const LoginRequestSchema = z.object({
+  email: z.string().email(),
+  password: NonEmptyString,
+  turnstileToken: OptionalTrimmed,
+  totpCode: OptionalTrimmed,
+});
+
+export const RegisterRequestSchema = z.object({
+  email: z.string().email(),
+  password: z.string().min(8, 'Password must be at least 8 characters'),
+  name: NonEmptyString,
+  turnstileToken: OptionalTrimmed,
+});
+
+export const ForgotPasswordRequestSchema = z.object({
+  email: z.string().email(),
+  turnstileToken: OptionalTrimmed,
+});
+
+// ── AI generation requests ───────────────────────────────────
+export const HpiEncounterRequestSchema = z.object({
+  transcript: NonEmptyString,
+  patientAge: OptionalTrimmed,
+  patientGender: OptionalTrimmed,
+  model: OptionalModel,
+  setting: z.enum(['outpatient', 'inpatient']).optional(),
+  physicianMemories: OptionalTrimmed,
+});
+
+export const SoapRequestSchema = z.object({
+  transcript: NonEmptyString,
+  patientAge: OptionalTrimmed,
+  patientGender: OptionalTrimmed,
+  model: OptionalModel,
+  type: z.enum(['full', 'subjective']).optional(),
+  additionalInstructions: OptionalTrimmed,
+  physicianMemories: OptionalTrimmed,
+});
+
+export const SickVisitRequestSchema = z.object({
+  patientAge: OptionalTrimmed,
+  patientGender: OptionalTrimmed,
+  chiefComplaint: NonEmptyString,
+  transcript: OptionalTrimmed,
+  dictation: OptionalTrimmed,
+  ros: OptionalTrimmed,
+  physicalExam: OptionalTrimmed,
+  diagnoses: OptionalTrimmed,
+  physicianMemories: OptionalTrimmed,
+  model: OptionalModel,
+});
+
+export const RefineRequestSchema = z.object({
+  currentDocument: NonEmptyString,
+  instructions: NonEmptyString,
+  sourceContext: OptionalTrimmed,
+  model: OptionalModel,
+});
+
+export const PeNarrativeRequestSchema = z.object({
+  steps: z.array(z.object({
+    component: OptionalTrimmed,
+    label: NonEmptyString,
+    method: OptionalTrimmed,
+    normal: OptionalTrimmed,
+    status: z.enum(['normal', 'abnormal']).nullable().optional(),
+    note: OptionalTrimmed,
+  })).min(1),
+  ageGroup: OptionalTrimmed,
+  system: OptionalTrimmed,
+  patientAge: OptionalTrimmed,
+  patientGender: OptionalTrimmed,
+  model: OptionalModel,
+  format: z.enum(['narrative', 'list']).optional(),
+});
+
+// ── Extensions CRUD ──────────────────────────────────────────
+export const ExtensionCreateSchema = z.object({
+  location: z.string().min(1).max(120),
+  name: z.string().min(1).max(120),
+  number: z.string().min(1).max(40),
+  type: z.enum(['extension', 'pager']).optional(),
+  notes: z.string().max(500).optional(),
+});
+export const ExtensionUpdateSchema = ExtensionCreateSchema;
+
+// ── Inferred types (use instead of hand-written interfaces) ─
+export type LoginRequest = z.infer<typeof LoginRequestSchema>;
+export type RegisterRequest = z.infer<typeof RegisterRequestSchema>;
+export type ForgotPasswordRequest = z.infer<typeof ForgotPasswordRequestSchema>;
+export type HpiEncounterRequest = z.infer<typeof HpiEncounterRequestSchema>;
+export type SoapRequest = z.infer<typeof SoapRequestSchema>;
+export type SickVisitRequest = z.infer<typeof SickVisitRequestSchema>;
+export type RefineRequest = z.infer<typeof RefineRequestSchema>;
+export type PeNarrativeRequest = z.infer<typeof PeNarrativeRequestSchema>;
+export type ExtensionCreate = z.infer<typeof ExtensionCreateSchema>;
--- a/client/src/shared/types.ts
+++ b/client/src/shared/types.ts
@ -0,0 +1,234 @@
+// ============================================================
+// SHARED TYPES — consumed by both server (src/routes/*.ts) and
+// client (client/src/*). A response-shape change here breaks the
+// build on both sides until they agree.
+//
+// This is the single most important file in the TypeScript
+// migration. Three of the bugs we hit before this point were
+// response-shape mismatches (refine returned `content` vs
+// `refined`, sick-visit endpoint path mismatch, hospital-course
+// key mismatch). Typing the wire protocol makes them compile-time
+// errors.
+//
+// Keep this file strictly about wire protocol — no DB row shapes,
+// no server-internal helpers. Anything that crosses the network.
+// ============================================================
+
+// ── Envelope ─────────────────────────────────────────────────
+// Every route returns either `{success: true, ...extraFields}` or
+// `{success: false, error: string}`. The generic `T` is the shape
+// of the extra fields on success. Client code does:
+//   const r: ApiResponse<HpiOk> = await fetch(...).then(r => r.json());
+//   if (r.success) console.log(r.hpi);
+//   else           showToast(r.error);
+export interface ApiErr {
+  success: false;
+  error: string;
+}
+export type ApiResponse<T> = ({ success: true } & T) | ApiErr;
+
+// Model tag accompanies every AI response — LiteLLM pass-through.
+export interface WithModel {
+  model: string;
+}
+
+// ── AI generation responses ──────────────────────────────────
+// Keys match exactly what each route returns today. Do not rename
+// without updating the server-side res.json() call in the same commit.
+
+// /api/generate-hpi-encounter
+// /api/generate-hpi-dictation
+export interface HpiOk extends WithModel {
+  hpi: string;
+}
+
+// /api/generate-soap
+export interface SoapOk extends WithModel {
+  soap: string;
+}
+
+// /api/sick-visit/note   (NOT /api/generate-sick-visit — that path does not exist)
+// /api/well-visit/note
+export interface VisitNoteOk extends WithModel {
+  note: string;
+}
+
+// /api/generate-hospital-course
+export interface HospitalCourseOk extends WithModel {
+  hospitalCourse: string;
+  format?: string;
+}
+
+// /api/generate-chart-review
+export interface ChartReviewOk extends WithModel {
+  review: string;
+}
+
+// /api/generate-pe-narrative
+export interface PeNarrativeOk extends WithModel {
+  narrative: string;
+  summary: {
+    normal: number;
+    abnormal: number;
+    notAssessed: number;
+  };
+}
+
+// /api/generate-milestone-narrative
+export interface MilestoneNarrativeOk extends WithModel {
+  narrative: string;
+  summary: {
+    achieved: number;
+    notAchieved: number;
+    notAssessed: number;
+  };
+}
+
+// /api/generate-milestone-summary
+export interface MilestoneSummaryOk extends WithModel {
+  summary: string;
+}
+
+// /api/well-visit/shadess
+export interface ShadessOk extends WithModel {
+  assessment: string;
+}
+
+// /api/refine
+export interface RefineOk extends WithModel {
+  refined: string;
+}
+
+// /api/shorten  (via refine.js router)
+export interface ShortenOk extends WithModel {
+  shortened: string;
+}
+
+// /api/clarify and /hospital-course/clarify
+export interface ClarifyOk extends WithModel {
+  questions: string;
+}
+
+// /api/suggest-billing-codes
+export interface BillingCodesOk extends WithModel {
+  icd10: Array<{ code: string; description: string; reason?: string }>;
+  cpt: Array<{ code: string; description: string; reason?: string }>;
+}
+
+// /api/transcribe
+export interface TranscribeOk {
+  text: string;
+  provider: string;
+  duration: number;
+}
+
+// /api/tts
+export interface TtsOk {
+  audioBase64: string;
+}
+
+// /api/models
+export interface ModelsOk {
+  models: Array<{ id: string; label?: string }>;
+}
+
+// ── Auth ─────────────────────────────────────────────────────
+export interface AuthUser {
+  id: number;
+  email: string;
+  name: string;
+  role?: string;
+  isVerified?: boolean;
+  has2FA?: boolean;
+}
+
+// /api/auth/login (two-phase: may also return requires2FA / needsVerification)
+export interface LoginOk {
+  token: string;
+  user: AuthUser;
+  sessionId?: string;
+}
+
+export interface LoginRequires2FA {
+  success: true;
+  requires2FA: true;
+}
+
+export interface LoginNeedsVerification {
+  success: true;
+  needsVerification: true;
+}
+
+// /api/auth/me
+export interface MeOk {
+  user: AuthUser;
+}
+
+// ── Sessions ─────────────────────────────────────────────────
+export interface SessionRow {
+  id: string;
+  userAgent?: string;
+  ipAddress?: string;
+  createdAt: string;
+  lastUsedAt?: string;
+}
+export interface SessionsOk {
+  sessions: SessionRow[];
+  currentSessionId: string | null;
+}
+
+// ── Extensions (pagers/directory) ────────────────────────────
+export interface Extension {
+  id: number;
+  location: string;
+  name: string;
+  number: string;
+  type: 'extension' | 'pager';
+  notes?: string;
+  deletedAt?: string | null;
+}
+export interface ExtensionsListOk {
+  items: Extension[];
+}
+
+// ── Memories (saved templates / style hints) ─────────────────
+export interface Memory {
+  id: number;
+  category: string;
+  name: string;
+  content: string;
+}
+export interface MemoriesListOk {
+  items: Memory[];
+}
+
+// ── Learning hub ─────────────────────────────────────────────
+export interface LearningContentItem {
+  id: number | string;
+  slug?: string;
+  title: string;
+  category?: string;
+  excerpt?: string;
+  body?: string;
+}
+export interface LearningFeedOk {
+  content: LearningContentItem[];
+  total?: number;
+}
+
+// ── Encounters (saved drafts) ────────────────────────────────
+export interface EncounterSummary {
+  id: number;
+  label: string;
+  type: 'encounter' | 'dictation' | 'hospital' | 'chart' | 'wellvisit' | 'sickvisit' | 'soap';
+  createdAt: string;
+  updatedAt: string;
+}
+export interface EncountersListOk {
+  items: EncounterSummary[];
+}
+
+// ── Health ───────────────────────────────────────────────────
+export interface HealthOk {
+  ok: boolean;
+}
--- a/client/tsconfig.app.json
+++ b/client/tsconfig.app.json
@ -18,14 +18,16 @@
    /* Linting */
    "noUnusedLocals": true,
    "noUnusedParameters": true,
-    "erasableSyntaxOnly": true,
+    "erasableSyntaxOnly": false,
    "noFallthroughCasesInSwitch": true,

-    "baseUrl": ".",
    "paths": {
-      "@/*": ["./src/*"],
-      "@shared/*": ["../shared/*"]
+      "@/*": ["./src/*"]
    }
  },
-  "include": ["src", "../shared/**/*.ts"]
+  "include": [
+    "src/**/*.ts",
+    "src/**/*.tsx",
+    "../shared/**/*.ts"
+  ]
 }
--- a/public/app/assets/index-B9E7ZEZn.js
+++ b/public/app/assets/index-B9E7ZEZn.js
--- a/public/app/assets/index-He39n9ae.css
+++ b/public/app/assets/index-He39n9ae.css
--- a/public/app/favicon.svg
+++ b/public/app/favicon.svg
--- a/public/app/icons.svg
+++ b/public/app/icons.svg
@ -0,0 +1,24 @@
+<svg xmlns="http://www.w3.org/2000/svg">
+  <symbol id="bluesky-icon" viewBox="0 0 16 17">
+    <g clip-path="url(#bluesky-clip)"><path fill="#08060d" d="M7.75 7.735c-.693-1.348-2.58-3.86-4.334-5.097-1.68-1.187-2.32-.981-2.74-.79C.188 2.065.1 2.812.1 3.251s.241 3.602.398 4.13c.52 1.744 2.367 2.333 4.07 2.145-2.495.37-4.71 1.278-1.805 4.512 3.196 3.309 4.38-.71 4.987-2.746.608 2.036 1.307 5.91 4.93 2.746 2.72-2.746.747-4.143-1.747-4.512 1.702.189 3.55-.4 4.07-2.145.156-.528.397-3.691.397-4.13s-.088-1.186-.575-1.406c-.42-.19-1.06-.395-2.741.79-1.755 1.24-3.64 3.752-4.334 5.099"/></g>
+    <defs><clipPath id="bluesky-clip"><path fill="#fff" d="M.1.85h15.3v15.3H.1z"/></clipPath></defs>
+  </symbol>
+  <symbol id="discord-icon" viewBox="0 0 20 19">
+    <path fill="#08060d" d="M16.224 3.768a14.5 14.5 0 0 0-3.67-1.153c-.158.286-.343.67-.47.976a13.5 13.5 0 0 0-4.067 0c-.128-.306-.317-.69-.476-.976A14.4 14.4 0 0 0 3.868 3.77C1.546 7.28.916 10.703 1.231 14.077a14.7 14.7 0 0 0 4.5 2.306q.545-.748.965-1.587a9.5 9.5 0 0 1-1.518-.74q.191-.14.372-.293c2.927 1.369 6.107 1.369 8.999 0q.183.152.372.294-.723.437-1.52.74.418.838.963 1.588a14.6 14.6 0 0 0 4.504-2.308c.37-3.911-.63-7.302-2.644-10.309m-9.13 8.234c-.878 0-1.599-.82-1.599-1.82 0-.998.705-1.82 1.6-1.82.894 0 1.614.82 1.599 1.82.001 1-.705 1.82-1.6 1.82m5.91 0c-.878 0-1.599-.82-1.599-1.82 0-.998.705-1.82 1.6-1.82.893 0 1.614.82 1.599 1.82 0 1-.706 1.82-1.6 1.82"/>
+  </symbol>
+  <symbol id="documentation-icon" viewBox="0 0 21 20">
+    <path fill="none" stroke="#aa3bff" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.35" d="m15.5 13.333 1.533 1.322c.645.555.967.833.967 1.178s-.322.623-.967 1.179L15.5 18.333m-3.333-5-1.534 1.322c-.644.555-.966.833-.966 1.178s.322.623.966 1.179l1.534 1.321"/>
+    <path fill="none" stroke="#aa3bff" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.35" d="M17.167 10.836v-4.32c0-1.41 0-2.117-.224-2.68-.359-.906-1.118-1.621-2.08-1.96-.599-.21-1.349-.21-2.848-.21-2.623 0-3.935 0-4.983.369-1.684.591-3.013 1.842-3.641 3.428C3 6.449 3 7.684 3 10.154v2.122c0 2.558 0 3.838.706 4.726q.306.383.713.671c.76.536 1.79.64 3.581.66"/>
+    <path fill="none" stroke="#aa3bff" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.35" d="M3 10a2.78 2.78 0 0 1 2.778-2.778c.555 0 1.209.097 1.748-.047.48-.129.854-.503.982-.982.145-.54.048-1.194.048-1.749a2.78 2.78 0 0 1 2.777-2.777"/>
+  </symbol>
+  <symbol id="github-icon" viewBox="0 0 19 19">
+    <path fill="#08060d" fill-rule="evenodd" d="M9.356 1.85C5.05 1.85 1.57 5.356 1.57 9.694a7.84 7.84 0 0 0 5.324 7.44c.387.079.528-.168.528-.376 0-.182-.013-.805-.013-1.454-2.165.467-2.616-.935-2.616-.935-.349-.91-.864-1.143-.864-1.143-.71-.48.051-.48.051-.48.787.051 1.2.805 1.2.805.695 1.194 1.817.857 2.268.649.064-.507.27-.857.49-1.052-1.728-.182-3.545-.857-3.545-3.87 0-.857.31-1.558.8-2.104-.078-.195-.349-1 .077-2.078 0 0 .657-.208 2.14.805a7.5 7.5 0 0 1 1.946-.26c.657 0 1.328.092 1.946.26 1.483-1.013 2.14-.805 2.14-.805.426 1.078.155 1.883.078 2.078.502.546.799 1.247.799 2.104 0 3.013-1.818 3.675-3.558 3.87.284.247.528.714.528 1.454 0 1.052-.012 1.896-.012 2.156 0 .208.142.455.528.377a7.84 7.84 0 0 0 5.324-7.441c.013-4.338-3.48-7.844-7.773-7.844" clip-rule="evenodd"/>
+  </symbol>
+  <symbol id="social-icon" viewBox="0 0 20 20">
+    <path fill="none" stroke="#aa3bff" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.35" d="M12.5 6.667a4.167 4.167 0 1 0-8.334 0 4.167 4.167 0 0 0 8.334 0"/>
+    <path fill="none" stroke="#aa3bff" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.35" d="M2.5 16.667a5.833 5.833 0 0 1 8.75-5.053m3.837.474.513 1.035c.07.144.257.282.414.309l.93.155c.596.1.736.536.307.965l-.723.73a.64.64 0 0 0-.152.531l.207.903c.164.715-.213.991-.84.618l-.872-.52a.63.63 0 0 0-.577 0l-.872.52c-.624.373-1.003.094-.84-.618l.207-.903a.64.64 0 0 0-.152-.532l-.723-.729c-.426-.43-.289-.864.306-.964l.93-.156a.64.64 0 0 0 .412-.31l.513-1.034c.28-.562.735-.562 1.012 0"/>
+  </symbol>
+  <symbol id="x-icon" viewBox="0 0 19 19">
+    <path fill="#08060d" fill-rule="evenodd" d="M1.893 1.98c.052.072 1.245 1.769 2.653 3.77l2.892 4.114c.183.261.333.48.333.486s-.068.089-.152.183l-.522.593-.765.867-3.597 4.087c-.375.426-.734.834-.798.905a1 1 0 0 0-.118.148c0 .01.236.017.664.017h.663l.729-.83c.4-.457.796-.906.879-.999a692 692 0 0 0 1.794-2.038c.034-.037.301-.34.594-.675l.551-.624.345-.392a7 7 0 0 1 .34-.374c.006 0 .93 1.306 2.052 2.903l2.084 2.965.045.063h2.275c1.87 0 2.273-.003 2.266-.021-.008-.02-1.098-1.572-3.894-5.547-2.013-2.862-2.28-3.246-2.273-3.266.008-.019.282-.332 2.085-2.38l2-2.274 1.567-1.782c.022-.028-.016-.03-.65-.03h-.674l-.3.342a871 871 0 0 1-1.782 2.025c-.067.075-.405.458-.75.852a100 100 0 0 1-.803.91c-.148.172-.299.344-.99 1.127-.304.343-.32.358-.345.327-.015-.019-.904-1.282-1.976-2.808L6.365 1.85H1.8zm1.782.91 8.078 11.294c.772 1.08 1.413 1.973 1.425 1.984.016.017.241.02 1.05.017l1.03-.004-2.694-3.766L7.796 5.75 5.722 2.852l-1.039-.004-1.039-.004z" clip-rule="evenodd"/>
+  </symbol>
+</svg>
--- a/public/app/index.html
+++ b/public/app/index.html
@ -0,0 +1,14 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <link rel="icon" type="image/svg+xml" href="/app/favicon.svg" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <title>client</title>
+    <script type="module" crossorigin src="/app/assets/index-B9E7ZEZn.js"></script>
+    <link rel="stylesheet" crossorigin href="/app/assets/index-He39n9ae.css">
+  </head>
+  <body>
+    <div id="root"></div>
+  </body>
+</html>
--- a/server.ts
+++ b/server.ts
@ -207,6 +207,14 @@ app.get(['/', '/index.html'], function(req, res) {
 // Public endpoint for cache-bust debugging + build-info
 app.get('/api/build', function(req, res) { res.json({ buildId: BUILD_ID }); });

+// React SPA at /app/* (served from public/app/). Any deep link the
+// client renders (e.g. /app/extensions) falls through here so the
+// React Router picks it up client-side. The plain express.static
+// below serves hashed .js/.css asset files directly.
+app.get('/app/*splat', function(req, res) {
+  res.sendFile(path.join(__dirname, 'public', 'app', 'index.html'));
+});
+
 app.use(loggingMiddleware);
 app.use(express.static(path.join(__dirname, 'public'), {
  setHeaders: (res, filePath) => {
				`@ -1 +0,0 @@`
				<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" aria-hidden="true" role="img" class="iconify iconify--logos" width="35.93" height="32" preserveAspectRatio="xMidYMid meet" viewBox="0 0 256 228"><path fill="#00D8FF" d="M210.483 73.824a171.49 171.49 0 0 0-8.24-2.597c.465-1.9.893-3.777 1.273-5.621c6.238-30.281 2.16-54.676-11.769-62.708c-13.355-7.7-35.196.329-57.254 19.526a171.23 171.23 0 0 0-6.375 5.848a155.866 155.866 0 0 0-4.241-3.917C100.759 3.829 77.587-4.822 63.673 3.233C50.33 10.957 46.379 33.89 51.995 62.588a170.974 170.974 0 0 0 1.892 8.48c-3.28.932-6.445 1.924-9.474 2.98C17.309 83.498 0 98.307 0 113.668c0 15.865 18.582 31.778 46.812 41.427a145.52 145.52 0 0 0 6.921 2.165a167.467 167.467 0 0 0-2.01 9.138c-5.354 28.2-1.173 50.591 12.134 58.266c13.744 7.926 36.812-.22 59.273-19.855a145.567 145.567 0 0 0 5.342-4.923a168.064 168.064 0 0 0 6.92 6.314c21.758 18.722 43.246 26.282 56.54 18.586c13.731-7.949 18.194-32.003 12.4-61.268a145.016 145.016 0 0 0-1.535-6.842c1.62-.48 3.21-.974 4.76-1.488c29.348-9.723 48.443-25.443 48.443-41.52c0-15.417-17.868-30.326-45.517-39.844Zm-6.365 70.984c-1.4.463-2.836.91-4.3 1.345c-3.24-10.257-7.612-21.163-12.963-32.432c5.106-11 9.31-21.767 12.459-31.957c2.619.758 5.16 1.557 7.61 2.4c23.69 8.156 38.14 20.213 38.14 29.504c0 9.896-15.606 22.743-40.946 31.14Zm-10.514 20.834c2.562 12.94 2.927 24.64 1.23 33.787c-1.524 8.219-4.59 13.698-8.382 15.893c-8.067 4.67-25.32-1.4-43.927-17.412a156.726 156.726 0 0 1-6.437-5.87c7.214-7.889 14.423-17.06 21.459-27.246c12.376-1.098 24.068-2.894 34.671-5.345a134.17 134.17 0 0 1 1.386 6.193ZM87.276 214.515c-7.882 2.783-14.16 2.863-17.955.675c-8.075-4.657-11.432-22.636-6.853-46.752a156.923 156.923 0 0 1 1.869-8.499c10.486 2.32 22.093 3.988 34.498 4.994c7.084 9.967 14.501 19.128 21.976 27.15a134.668 134.668 0 0 1-4.877 4.492c-9.933 8.682-19.886 14.842-28.658 17.94ZM50.35 144.747c-12.483-4.267-22.792-9.812-29.858-15.863c-6.35-5.437-9.555-10.836-9.555-15.216c0-9.322 13.897-21.212 37.076-29.293c2.813-.98 5.757-1.905 8.812-2.773c3.204 10.42 7.406 21.315 12.477 32.332c-5.137 11.18-9.399 22.249-12.634 32.792a134.718 134.718 0 0 1-6.318-1.979Zm12.378-84.26c-4.811-24.587-1.616-43.134 6.425-47.789c8.564-4.958 27.502 2.111 47.463 19.835a144.318 144.318 0 0 1 3.841 3.545c-7.438 7.987-14.787 17.08-21.808 26.988c-12.04 1.116-23.565 2.908-34.161 5.309a160.342 160.342 0 0 1-1.76-7.887Zm110.427 27.268a347.8 347.8 0 0 0-7.785-12.803c8.168 1.033 15.994 2.404 23.343 4.08c-2.206 7.072-4.956 14.465-8.193 22.045a381.151 381.151 0 0 0-7.365-13.322Zm-45.032-43.861c5.044 5.465 10.096 11.566 15.065 18.186a322.04 322.04 0 0 0-30.257-.006c4.974-6.559 10.069-12.652 15.192-18.18ZM82.802 87.83a323.167 323.167 0 0 0-7.227 13.238c-3.184-7.553-5.909-14.98-8.134-22.152c7.304-1.634 15.093-2.97 23.209-3.984a321.524 321.524 0 0 0-7.848 12.897Zm8.081 65.352c-8.385-.936-16.291-2.203-23.593-3.793c2.26-7.3 5.045-14.885 8.298-22.6a321.187 321.187 0 0 0 7.257 13.246c2.594 4.48 5.28 8.868 8.038 13.147Zm37.542 31.03c-5.184-5.592-10.354-11.779-15.403-18.433c4.902.192 9.899.29 14.978.29c5.218 0 10.376-.117 15.453-.343c-4.985 6.774-10.018 12.97-15.028 18.486Zm52.198-57.817c3.422 7.8 6.306 15.345 8.596 22.52c-7.422 1.694-15.436 3.058-23.88 4.071a382.417 382.417 0 0 0 7.859-13.026a347.403 347.403 0 0 0 7.425-13.565Zm-16.898 8.101a358.557 358.557 0 0 1-12.281 19.815a329.4 329.4 0 0 1-23.444.823c-7.967 0-15.716-.248-23.178-.732a310.202 310.202 0 0 1-12.513-19.846h.001a307.41 307.41 0 0 1-10.923-20.627a310.278 310.278 0 0 1 10.89-20.637l-.001.001a307.318 307.318 0 0 1 12.413-19.761c7.613-.576 15.42-.876 23.31-.876H128c7.926 0 15.743.303 23.354.883a329.357 329.357 0 0 1 12.335 19.695a358.489 358.489 0 0 1 11.036 20.54a329.472 329.472 0 0 1-11 20.722Zm22.56-122.124c8.572 4.944 11.906 24.881 6.52 51.026c-.344 1.668-.73 3.367-1.15 5.09c-10.622-2.452-22.155-4.275-34.23-5.408c-7.034-10.017-14.323-19.124-21.64-27.008a160.789 160.789 0 0 1 5.888-5.4c18.9-16.447 36.564-22.941 44.612-18.3ZM128 90.808c12.625 0 22.86 10.235 22.86 22.86s-10.235 22.86-22.86 22.86s-22.86-10.235-22.86-22.86s10.235-22.86 22.86-22.86Z"></path></svg>