Claude's design docs and implementation plans for thalida.com.
12 items
Chat / Client Identity
Mar 2026Replace blind-trust client IDs with HMAC-signed client tokens so the API is the source of truth for identity.
Chat / Client Identity
Mar 2026Client identity (clientId) is currently generated on the frontend and trusted blindly by the API. A malicious user can send any clientId to impersonate another user.
Chat / Idle Websocket Disconnect
Mar 2026The ChatRoom Durable Object accumulates wall-clock duration as long as any WebSocket is connected. Idle browser tabs keep connections open indefinitely, which exceeded the Cloudflare free tier limit (2,147,483,647 ms/day).
Chat / Idle Websocket Disconnect
Mar 2026Disconnect idle chat WebSockets after 5 minutes to reduce Cloudflare Durable Object duration usage on the free tier.
Chat / Client Identity
Mar 2026Replace IP-based identity with clientId throughout the chat system so flag, block, delete-by-user, and rename operate per-browser, and users on the same network are independent.
Chat / Client Identity
Mar 2026Replace IP-based identity with clientId throughout the chat system. This makes flag, block, delete-by-user, and rename all operate per-browser rather than per-IP, so users on the same network are independent.
Chat / Admin Help Command
Mar 2026Add an admin-only `/help` slash command to the chat that shows available commands as a system notice. Build a command registry so `/help` auto-generates from registered commands.
Chat / Admin Moderation Tools
Mar 2026Add three admin moderation features to the chat: a delete message button, a flag/ban button, and a `/blocked` command to list all blocked users.
Chat / Admin Help Command
Mar 2026Add an admin-only `/help` command and a command registry that auto-generates the help output.
Chat / Admin Moderation Tools
Mar 2026Add admin-only delete message button, flag/ban button, and `/blocked` command to the chat system.
Chat / Chat Auto Page Context
Feb 2026Silently attach the current page path to every chat message automatically, removing the user-facing page/general context selector entirely.
Chat / Chat Auto Page Context
Feb 2026The chat currently has a user-facing dropdown letting visitors choose between "page" and "general" context when sending a message. This is unnecessary UI complexity. The right behavior is to silently attach the current page path to every message automatically.