fix: start game event

FEATURE_ROADMAP.md

@@ -0,0 +1,278 @@
+# Feature Implementation Roadmap
+
+## Priority Levels
+
+- **🔥 HIGH**: Core functionality, user safety, or significant user value
+- **🟡 MEDIUM**: Quality of life improvements, engagement features
+- **🔵 LOW**: Nice-to-have, future expansion
+
+---
+
+## 🔥 HIGH PRIORITY
+
+### 1. Custom Game UI (Frontend)
+**Status**: Backend ready, needs frontend
+**Effort**: Small
+**Impact**: High
+**Description**: Allow hosts to configure games with custom settings (languages, duration, mode)
+**Tasks**:
+- Create game options form component
+- Add mode selector (FASTEST/SHORTEST/RATED/CASUAL)
+- Add language multi-select
+- Add duration slider
+- Wire up to existing backend API
+
+**Files to modify**:
+- `libs/frontend/src/routes/(authenticated)/multiplayer/+page.svelte`
+
+---
+
+### 2. Private Games
+**Status**: Not started
+**Effort**: Small-Medium
+**Impact**: High
+**Description**: Allow users to create invite-only games
+**Tasks**:
+- Add `inviteCode` to Game model
+- Generate unique codes for private games
+- Add join-by-code UI
+- Filter private games from public lobby
+
+**Implementation**:
+```typescript
+// Backend
+interface GameOptions {
+  visibility: "public" | "private";
+  inviteCode?: string; // Auto-generated for private games
+}
+
+// Frontend
+<Button onclick={copyInviteLink}>Share Invite Link</Button>
+```
+
+---
+
+### 3. Reporting System
+**Status**: Partially implemented (user bans exist)
+**Effort**: Medium
+**Impact**: High (user safety)
+**Description**: Allow users to report inappropriate content/behavior
+**Tasks**:
+- Create Report model (reporter, reported, category, description, status)
+- Add report button to user profiles, puzzles, comments
+- Create admin moderation dashboard
+- Implement automated escalation for repeat offenders
+
+**Existing**:
+- User ban system already implemented
+- Ban types (temporary, permanent)
+- Check user ban middleware
+
+**New**:
+```typescript
+interface Report {
+  reporter: ObjectId;
+  reported: ObjectId;
+  category: "spam" | "harassment" | "cheating" | "inappropriate";
+  description: string;
+  status: "pending" | "resolved" | "dismissed";
+  evidence?: string[];
+}
+```
+
+---
+
+### 4. User Blocking
+**Status**: Not started
+**Effort**: Small
+**Impact**: Medium (user experience)
+**Description**: Allow users to block others
+**Tasks**:
+- Add `blockedUsers` array to User model
+- Create block/unblock endpoints
+- Filter blocked users from matchmaking
+- Hide blocked users' comments/content
+
+---
+
+## 🟡 MEDIUM PRIORITY
+
+### 5. Ranked Matchmaking
+**Status**: Mode exists, needs matchmaking
+**Effort**: Large
+**Impact**: High (engagement)
+**Description**: Implement ELO/Glicko2 ranking system with skill-based matchmaking
+**Tasks**:
+- Implement Glicko2 rating algorithm
+- Add rating, ratingDeviation, volatility to User model
+- Create matchmaking queue system
+- Match players by skill level
+- Update ratings after games
+
+**Recommended**: Use existing library like `glicko2` npm package
+
+---
+
+### 6. Community Challenges
+**Status**: Puzzle voting exists
+**Effort**: Medium
+**Impact**: Medium (engagement)
+**Description**: User-created challenges with voting
+**Tasks**:
+- Already have puzzle creation & approval system
+- Add challenge categories/tags
+- Implement challenge series/folders
+- Add difficulty ratings
+- Community curation features
+
+**Leverage existing**:
+- Puzzle approval system
+- User voting on puzzles
+- Comment system
+
+---
+
+### 7. General Chat
+**Status**: Not started
+**Effort**: Medium
+**Impact**: Medium
+**Description**: Global chat room for community
+**Tasks**:
+- Create ChatMessage model
+- Implement WebSocket-based chat
+- Add message history pagination
+- Moderation tools (delete, timeout)
+- Rate limiting
+
+**Reuse**:
+- Existing WebSocket infrastructure
+- ConnectionManager pattern
+
+---
+
+### 8. Events System
+**Status**: Not started
+**Effort**: Large
+**Impact**: High (engagement, but complex)
+**Description**: Scheduled competitions with leaderboards
+**Tasks**:
+- Create Event model (type, startTime, endTime, puzzles, prizes)
+- Event registration system
+- Event-specific leaderboards
+- Automated event scheduling
+- Prize distribution
+
+**Event Types**:
+- Daily challenges
+- Weekly competitions
+- Monthly tournaments
+- Themed events (Python month, etc.)
+
+---
+
+## 🔵 LOW PRIORITY
+
+### 9. Private Messages
+**Status**: Not started
+**Effort**: Medium
+**Description**: DM system between users
+**Tasks**:
+- Create Conversation & Message models
+- Message thread UI
+- Real-time message delivery (WebSocket)
+- Read receipts
+- Message notifications
+
+---
+
+### 10. Collaborative Puzzles
+**Status**: Not started
+**Effort**: Large (very complex)
+**Description**: Real-time collaborative code editing
+**Tasks**:
+- Implement operational transformation or CRDT
+- Shared code editor state
+- Cursor positions for all users
+- Team formation system
+- Team scoring
+
+**Note**: Very complex, requires careful architecture
+
+---
+
+### 11. Streaming Integration
+**Status**: Not started
+**Effort**: Medium
+**Description**: Twitch/YouTube integration for streamers
+**Tasks**:
+- OAuth with streaming platforms
+- Overlay widgets for streams
+- Streamer mode (hide sensitive info)
+- Stream chat integration
+
+---
+
+## Implementation Recommendations
+
+### Immediate Next Steps (in order):
+
+1. **Custom Game UI** (1-2 hours)
+   - Quick win, backend already done
+   - High user value
+
+2. **Private Games** (3-4 hours)
+   - Small backend changes
+   - Frequently requested feature
+
+3. **Reporting System** (1-2 days)
+   - User safety is critical
+   - Foundation for healthy community
+
+4. **User Blocking** (3-4 hours)
+   - Complements reporting system
+   - Low complexity, high UX value
+
+5. **Ranked Matchmaking** (3-5 days)
+   - High engagement potential
+   - Requires careful testing
+
+### Technical Debt to Address:
+
+- Refactor remaining routes to use service layer
+- Add comprehensive error handling
+- Implement rate limiting on all endpoints
+- Add WebSocket reconnection logic
+- Create automated tests for game modes
+
+### Architecture Notes:
+
+- **Services First**: Always use service layer for DB operations
+- **WebSocket Patterns**: Reuse existing ConnectionManager pattern
+- **Type Safety**: Leverage Zod schemas from types library
+- **Game Modes**: Use strategy pattern for new competitive modes
+- **Lean Code**: Avoid over-engineering, iterate quickly
+
+---
+
+## Estimated Timeline
+
+**Month 1**:
+- Custom Game UI
+- Private Games
+- Reporting System
+- User Blocking
+
+**Month 2**:
+- Ranked Matchmaking
+- General Chat
+- Community Challenges improvements
+
+**Month 3**:
+- Events System (MVP)
+- Private Messages
+- Platform polish
+
+**Long-term**:
+- Collaborative Puzzles
+- Streaming Integration
+- Mobile app

libs/backend/src/migrations/migrations/2025-10-26-migrate-user-roles-to-role.ts

@@ -67,7 +67,7 @@ export class MigrateUserRolesToRoleMigration implements Migration {
 		let rolledBack = 0;
 
 		for (const user of users) {
-			const currentRole = (user as any).role;
+			const currentRole = user.role;
 
 			if (!currentRole) {
 				continue;

libs/backend/src/models/submission/submission.ts

@@ -22,6 +22,10 @@ const submissionSchema = new Schema<SubmissionDocument>({
 		type: String,
 		select: false
 	},
+	codeLength: {
+		required: false,
+		type: Number
+	},
 	createdAt: {
 		default: Date.now,
 		type: Date

libs/backend/src/plugins/middleware/authenticated.ts

@@ -1,10 +1,5 @@
 import { FastifyReply, FastifyRequest } from "fastify";
-import {
-	httpResponseCodes,
-	cookieKeys,
-	environment,
-	AuthenticatedInfo
-} from "types";
+import { httpResponseCodes, cookieKeys, AuthenticatedInfo } from "types";
 
 export default async function authenticated(
 	request: FastifyRequest,
@@ -19,7 +14,7 @@ export default async function authenticated(
 				.send({ message: "No authentication token provided" });
 		}
 
-		await request.jwtVerify();
+		await request.jwtVerify<AuthenticatedInfo>();
 	} catch (err) {
 		if (err instanceof Error) {
 			return reply

libs/backend/src/plugins/middleware/check-user-ban.ts

@@ -1,10 +1,5 @@
 import { FastifyReply, FastifyRequest } from "fastify";
-import {
-	httpResponseCodes,
-	isAuthenticatedInfo,
-	banTypeEnum,
-	environment
-} from "types";
+import { httpResponseCodes, isAuthenticatedInfo, banTypeEnum } from "types";
 import { checkUserBanStatus } from "../../utils/moderation/escalation.js";
 
 export default async function checkUserBan(

libs/backend/src/routes/puzzle/[id]/solution/index.ts

@@ -1,6 +1,5 @@
 import { FastifyInstance } from "fastify";
 import {
-	environment,
 	ErrorResponse,
 	getUserIdFromUser,
 	httpResponseCodes,

libs/backend/src/routes/submission/game/index.ts

@@ -9,10 +9,10 @@ import {
 	SubmissionEntity
 } from "types";
 import { isValidationError } from "../../../utils/functions/is-validation-error.js";
-import Game from "@/models/game/game.js";
 import Submission from "@/models/submission/submission.js";
 import authenticated from "@/plugins/middleware/authenticated.js";
 import checkUserBan from "@/plugins/middleware/check-user-ban.js";
+import { gameService } from "@/services/game.service.js";
 
 export default async function submissionGameRoutes(fastify: FastifyInstance) {
 	fastify.post<{ Body: GameSubmissionParams }>(
@@ -40,9 +40,7 @@ export default async function submissionGameRoutes(fastify: FastifyInstance) {
 					});
 				}
 
-				const matchingGame = await Game.findById(gameId)
-					.populate("playerSubmissions")
-					.exec();
+				const matchingGame = await gameService.findByIdPopulated(gameId);
 
 				if (!matchingGame) {
 					return reply

libs/backend/src/routes/submission/index.ts

@@ -126,6 +126,7 @@ export default async function submissionRoutes(fastify: FastifyInstance) {
 
 				const submissionData: SubmissionEntity = {
 					code: code,
+					codeLength: code.length,
 					puzzle: puzzleId,
 					user: userId,
 					createdAt: new Date(),