I spent today in Bangalore. Sometimes, getting out of your physical workspace is the fastest way to expand your mental one. I was there talking about a product admin role at a company called Lightforms—a conversation that quickly turned into a broader discussion about building, learning, and the product craft.

Meeting Tanuj Arora was refreshing. In an industry that often indexes heavily on rigid years of experience, he was genuinely excited about listening to fresh talent, learning from new perspectives, and understanding how the next generation of builders thinks. It was a reminder that the best builders don't build in an echo chamber; they remain perpetually curious.

EP-016: Great products are built by listening, not just directing.

It reinforced exactly what I’ve been reflecting on recently: shipping features is only half the battle. The real work is in understanding people, aligning systems to support them, and keeping that curiosity alive. Getting to talk shop, trade ideas, and see how other teams approach product operations was the perfect energy boost.

Hoping for the best on this front, but regardless of the outcome, today was a great validation of stepping into the product world.

I've stepped away from the codebase for the last few days. It's dangerously easy to get trapped in the momentum of shipping — building feature after feature, refining the architecture, tweaking the design. But building for the sake of building leads to products that look great on a shelf but never get used.

I took this time for a deep retrospection, completely immersing myself in real user needs. I had to remind myself that my core identity here isn't just "developer." I am a product person.

EP-015: Fall in love with the problem, not the architecture.

The business side of Dream Wall demands as much rigor as the engineering side. Solving real problems means understanding exactly who this is for and why they need it.

Simultaneously, we've hit an infrastructure ceiling. The free tier of Render has started to bottleneck our growth — blocking custom domains, custom emails, and restricting database capabilities. While I hear they are rolling out updates to their Hobby tier soon, these constraints are forcing a broader conversation about our long-term deployment strategy.

Sometimes, the most productive thing you can do for a system is to stop typing and start thinking.

I started the day away from the code. Before writing another line, I wanted to ground myself in real user problems — scraping forums, reading threads, understanding the actual pain points people share online. It's easy to get lost in architecture and forget that systems exist to serve humans.

That research clarified something I'd been feeling for a while. Dream Wall started as a physical wall inside my room — sticky notes, scribbled ideas, things I wanted to see every day. The digital version should honor that origin. Not a task manager. Not a notes app. A visual wall for the ideas and dreams you want to see often.

EP-014: Build for the human on the other side of the screen.

With that direction locked in, I moved to design. I used Claude to rapidly scaffold an MVP design foundation — colors, typography, spacing, component patterns. Having an AI pair for design is a genuine game changer. What would normally take days of iteration compressed into hours.

Then came the final push to ship. The entire day funneled into getting v3.0.0 live. And of course, the last boss before deployment was an old nemesis: CORS. The same class of error that bit me on Day 10, but this time with a twist — trailing slashes on the API URL were causing the preflight requests to fail silently on Render. A quick, clever fix to normalize the URLs, and the deploy went through.

v3.0.0 is live and working. The system is secure, the architecture is clean, and for the first time, it actually looks like a product someone would want to use.

Yesterday, React was just a mental model. Today, I needed to prove it works. I gave myself one goal for the day: one complete user journey. Open the app, log in, see the home page, log out. No shortcuts, no mocks.

I started by building out the frontend's service layer — api.ts and auth.ts. And immediately, a pattern I've been feeling all project long finally crystallized. api.ts is to the frontend what Prisma is to the backend. It's a data access layer. It shouldn't know about business logic, it shouldn't know about UI state. It should only know how to make HTTP requests. Same principle, different side of the stack.

EP-013: Things that change together should live together.

That's cohesion. When I noticed the token logic was scattered between api.ts and auth.ts, I extracted it into its own storage.ts module. One place that knows about localStorage. One place to change if we ever swap the storage mechanism. Things that change together, live together.

Then came the wall. I wired the Login page to the backend, hit submit, and... CORS. The browser just silently refused to talk to my own server. The error message didn't scream "you need a cors package." It just looked like the request vanished. It took me longer than I'd like to admit to trace it back to a missing middleware on the Express side. A one-line fix after a not-so-one-line debugging session.

But once CORS was resolved, something quietly remarkable happened. I typed in an email, entered a password, clicked Login — and the app navigated to the home page. A real JWT, stored in the browser, issued by my own backend, validated by my own middleware. For the first time, a user can actually use this thing end-to-end.

I closed the loop with a logout button, then paused. The engineering is solid. The architecture is clean. But staring at the raw, unstyled React pages, I realized something: nobody cares how clean your code is if the product doesn't feel real. I started sketching out an MVP Design System. It's time to stop building only for the compiler and start building for the human on the other side of the screen.

The frontend has been running on vanilla HTML, CSS, and JS since v1.0. It worked, but there was a fundamental friction I couldn't ignore any longer.

With plain HTML, you're constantly telling the browser what to change. "Update this div. Remove that element. Append this child." It's imperative, and it's exhausting. With React, you simply describe how the UI should look, and React figures out what to change. It's the difference between micromanaging and delegating.

EP-012: Declare intent, don't dictate steps.

Today, I initiated the React architecture. The first thing that clicked was that React components are just functions that return UI. That's it. No magic. And once I saw it that way, a symmetry with the backend became impossible to unsee:

Backend:  Input (Request)  →  Function (Route)     →  Output (JSON)
Frontend: Input (Props)    →  Function (Component)  →  Output (HTML)

Both sides of the stack are just functions that transform inputs into outputs. The shapes are different, but the pattern is identical.

Even the orchestration mirrors itself. On the backend, the Server orchestrates and the Routes implement. On the frontend, the App orchestrates and the Pages implement. Same architecture, different rendering target.

The migration is just getting started, but the mental model already feels right. And when the mental model feels right, the code tends to follow.

We've officially entered v3.0.0 territory. Today, I implemented a complete JWT-based authentication system from scratch using bcrypt and jsonwebtoken.

While building this, the distinction between two often-confused concepts became impossible to mix up — because the code forces them apart:

• Authentication asks: "Who are you?" (Handled by the /auth/login route generating a token).
• Authorization asks: "Does this resource belong to you?" (Handled by strict Prisma queries tying dreams to a specific userId).

To enforce this, I wrote an authenticate middleware. Here's how the protected data flow looks now:

[ Browser ] 
    │ (Bearer Token)
    ▼
[ Authorization Header ]
    │
    ▼
[ authenticate Middleware ] ── (Validates JWT)
    │
    ▼
[ req.user.id ] ── (Injects Identity)
    │
    ▼
[ Route ] ── (Extracts req.body & req.user.id)
    │
    ▼
[ Service ] ── (Business Logic)
    │
    ▼
[ Prisma ORM ] ── (where: { id, userId })
    │
    ▼
[ PostgreSQL Database ]

By passing userId all the way down to the database layer, we guarantee that users can only ever touch their own dreams. Not through permission checks in the UI, not through frontend validation — through the query itself. The system isn't just functional anymore; it's secure by design.

We've reached v2.5.0. The goal was never just to add features — it was to build a system the right way.

Today, I implemented a global Error Handling middleware and strict route validation. Before this, a malformed request could slip through and cause cryptic failures deep in the service layer. Now, bad input gets caught at the door.

EP-011: Code should be optimistic. Infrastructure should be defensive.

The application code trusts its inputs — because the middleware has already validated them. The infrastructure assumes the worst — because users and networks are unpredictable. It's a clean separation of optimism and paranoia.

I also took time to write out Architectural Decision Records (ADRs) to document why these systems were built this way. Not just what I chose, but what I considered and rejected. The monolithic v1.0 script has evolved into a beautifully layered, maintainable, production-ready backend.

Onwards to v3.

Writing raw SQL strings inside TypeScript felt like wearing a seatbelt with the buckle undone. You have type safety everywhere except the most dangerous part — the database boundary.

EP-004: Depend on abstractions, not implementations.

Today, I migrated every database read and write to Prisma. Prisma acts as an abstraction over PostgreSQL, and now every single query is fully type-checked. If I misspell a column name, the app won't even compile. That's not just convenient — it's a fundamentally different relationship with your data layer.

With this, the complete migration from JavaScript to TypeScript is done. Every raw PostgreSQL call has been replaced. The backend is now strictly typed from the route handler all the way down to the database. No gaps, no escape hatches.

As the backend grew, the route files started doing too much. They were parsing requests, writing database queries, and handling responses — all in the same function. Every time I touched one thing, I risked breaking something else.

EP-003: Organize by feature, not by generic names.

I introduced a dedicated Service Layer. The route files now strictly handle the HTTP context — extracting req.body, setting status codes, sending responses. Everything else gets passed down to the services, which own the actual business logic.

It's the kind of refactor that doesn't change what the app does, but fundamentally changes how it feels to work on. The code reads like clear responsibilities now, not tangled spaghetti. And for the first time, I can look at a route and know exactly where to find the logic it depends on.

The honeymoon phase of v1.0 is over. It's time to get serious.

If this were a production system — the kind that handles real users, real data, real stakes — JavaScript's dynamic typing and SQLite's file-based locking wouldn't cut it. I've been putting off this migration because everything "works." But "works" and "works correctly under pressure" are two very different standards.

Today, I began the great migration. First, I initialized the TypeScript compiler to bring end-to-end type safety to the backend. There's a specific kind of relief that comes from catching a misspelled property name at compile-time instead of discovering it in a 2 AM production bug.

Then, I ripped out SQLite and connected the app to PostgreSQL. The code is getting stricter, and the infrastructure is getting stronger. It feels less like a side project now and more like a real system.

Today was all about giving the dreams a place to live. I wired up a lightweight Express.js API and hooked it into SQLite.

The first thing I wrote was an auto-creation sequence in db.js — a small script that initializes the database cleanly on startup, no manual setup required.

db.run(`
  CREATE TABLE IF NOT EXISTS dreams (
    id INTEGER PRIMARY KEY AUTOINCREMENT,
    text TEXT NOT NULL
  )
`);

It's a small detail, but it makes a real difference. Anyone who clones this repo gets a working database on the first npm start. No README steps to miss, no "did you run the migration?" messages in Slack.

There's something deeply satisfying about watching your first POST request land and knowing the data is safely persisted. The dreams have a home now.

Focusing on Interaction Design

I wanted to deliver something that feels like more than just another CRUD app.

The mission for today: completely replace the standard vertical list with a free-flowing, true "wall" canvas—all without breaking a single existing feature.

The goal is to shift the user's perspective. They shouldn't feel like they're looking at a rigid list anymore; they should feel like they're looking at a physical wall.

Here's the scope for today's transition:

• The Wall Experience: Users immediately see an expansive, immersive canvas.
• Card Positioning: Cards need to be naturally placed and fully functional.
• Empty State: Crafting a beautiful, welcoming empty state for first-time visitors.
• Under the Hood: Keeping the exact same authentication flow intact.