WHWord Hamster

WP7 Auth Foundation

Sharper words, tighter loops.

Word Hamster now has a real auth baseline: email/password and magic link flows, redirect sanitization, a fail-closed protected surface, and a durable non-production E2E user lifecycle future agents can reuse instead of rediscovering.

Sign inCreate an accountCheck health JSON

Public marketing surface

This landing page is the public shell for early messaging, smoke tests, and deploy verification.

Public auth surface

Login and signup now support email/password plus magic-link auth without changing the original route map.

Protected app gate

The `/app` surface now verifies a real Supabase session and still fails closed when auth config is missing.

Persistence API

WP6 adds a repository-controlled Drizzle path at `/api/lexicon` so migrations and live reads can be verified without dashboard edits.