feat: error handling, logging, analytics, OG tags, and sticky sidebar (#44)

## Summary

- Add comprehensive try/catch error handling across all API routes, middleware, and the Hono global error handler, piping every unhandled error to the `@nhcarrigan/logger` service to prevent silent crashes and unhandled Promise rejections
- Add a `logError` utility on the frontend that forwards errors through the overridden `console.error` to the backend telemetry endpoint; apply it to every silent `catch {}` block in the game context, sound, notification, and clipboard utilities, and wrap the React tree in an `ErrorBoundary`
- Add Plausible analytics, Open Graph + Twitter Card meta tags, Tree-Nation widget, and Google Ads to `index.html`
- Make the game sidebar sticky with a `--resource-bar-height` CSS custom property offset so it stays viewport-height without overlapping the resource bar; reset sticky behaviour in the mobile responsive override

## Test plan

- [ ] Lint passes: `pnpm lint`
- [ ] Build passes: `pnpm build`
- [ ] Verify errors thrown in API routes appear in the logger service rather than crashing the process
- [ ] Verify frontend errors appear in the `/api/fe/error` backend log
- [ ] Verify Open Graph tags render correctly when sharing the URL
- [ ] Verify Plausible analytics fires on page load
- [ ] Verify Tree-Nation badge renders in the sidebar
- [ ] Verify sidebar stays fixed while the main content scrolls on desktop
- [ ] Verify mobile layout is unaffected

✨ This issue was created with help from Hikari~ 🌸

Reviewed-on: #44
Co-authored-by: Hikari <hikari@nhcarrigan.com>
Co-committed-by: Hikari <hikari@nhcarrigan.com>

apps/api/package.json

@@ -15,6 +15,7 @@
   "dependencies": {
     "@elysium/types": "workspace:*",
     "@hono/node-server": "1.13.7",
+    "@nhcarrigan/logger": "1.1.1",
     "@prisma/client": "6.5.0",
     "hono": "4.7.4",
     "prisma": "6.5.0"

apps/api/prod.env

@@ -10,3 +10,4 @@ DISCORD_MILESTONE_WEBHOOK="op://Environment Variables - Naomi/Elysium/discord mi
 DISCORD_BOT_TOKEN="op://Environment Variables - Naomi/Elysium/discord bot token"
 DISCORD_GUILD_ID="op://Environment Variables - Naomi/Elysium/discord guild id"
 DISCORD_APOTHEOSIS_ROLE_ID="op://Environment Variables - Naomi/Elysium/discord apotheosis role id"
+LOG_TOKEN="op://Environment Variables - Naomi/Alert Server/api_auth"

apps/api/src/index.ts

@@ -7,22 +7,24 @@
 import { serve } from "@hono/node-server";
 import { Hono } from "hono";
 import { cors } from "hono/cors";
-import { logger } from "hono/logger";
+import { logger as honoLogger } from "hono/logger";
 import { aboutRouter } from "./routes/about.js";
 import { apotheosisRouter } from "./routes/apotheosis.js";
 import { authRouter } from "./routes/auth.js";
 import { bossRouter } from "./routes/boss.js";
 import { craftRouter } from "./routes/craft.js";
 import { exploreRouter } from "./routes/explore.js";
+import { frontendRouter } from "./routes/frontend.js";
 import { gameRouter } from "./routes/game.js";
 import { leaderboardRouter } from "./routes/leaderboards.js";
 import { prestigeRouter } from "./routes/prestige.js";
 import { profileRouter } from "./routes/profile.js";
 import { transcendenceRouter } from "./routes/transcendence.js";
+import { logger } from "./services/logger.js";
 
 const app = new Hono();
 
-app.use("*", logger());
+app.use("*", honoLogger());
 app.use(
   "*",
   cors({
@@ -33,6 +35,7 @@ app.use(
 );
 
 app.route("/about", aboutRouter);
+app.route("/fe", frontendRouter);
 app.route("/auth", authRouter);
 app.route("/game", gameRouter);
 app.route("/boss", bossRouter);
@@ -48,8 +51,27 @@ app.get("/health", (context) => {
   return context.json({ status: "ok" });
 });
 
+app.onError((error, context) => {
+  void logger.error(
+    "hono_unhandled_error",
+    error instanceof Error
+      ? error
+      : new Error(String(error)),
+  );
+  return context.json({ error: "Internal server error" }, 500);
+});
+
 const port = Number(process.env.PORT ?? 3001);
 
-serve({ fetch: app.fetch, port: port }, () => {
+try {
+  serve({ fetch: app.fetch, port: port }, () => {
     process.stdout.write(`Elysium API running on port ${String(port)}\n`);
-});
+  });
+} catch (error) {
+  void logger.error(
+    "server_startup",
+    error instanceof Error
+      ? error
+      : new Error(String(error)),
+  );
+}

apps/api/src/middleware/auth.ts

@@ -6,6 +6,7 @@
  */
 
 import { verifyToken } from "../services/jwt.js";
+import { logger } from "../services/logger.js";
 import type { HonoEnvironment } from "../types/hono.js";
 import type { MiddlewareHandler } from "hono";
 
@@ -33,7 +34,13 @@ export const authMiddleware: MiddlewareHandler<HonoEnvironment> = async(
   try {
     const payload = verifyToken(token);
     context.set("discordId", payload.discordId);
-  } catch {
+  } catch (error) {
+    void logger.error(
+      "auth_middleware",
+      error instanceof Error
+        ? error
+        : new Error(String(error)),
+    );
     return context.json({ error: "Invalid or expired token" }, 401);
   }
 

apps/api/src/routes/about.ts

@@ -7,6 +7,7 @@
 /* eslint-disable stylistic/max-len -- URL cannot be shortened */
 /* eslint-disable require-atomic-updates -- Simple cache; race condition is acceptable */
 import { Hono } from "hono";
+import { logger } from "../services/logger.js";
 import type { AboutResponse, GiteaRelease } from "@elysium/types";
 
 // eslint-disable-next-line capitalized-comments -- v8 ignore
@@ -46,12 +47,24 @@ const fetchReleases = async(): Promise<Array<GiteaRelease>> => {
 const aboutRouter = new Hono();
 
 aboutRouter.get("/", async(context) => {
+  try {
     const releases = await fetchReleases();
     const body: AboutResponse = {
       apiVersion,
       releases,
     };
     return context.json(body);
+  // eslint-disable-next-line capitalized-comments -- v8 ignore
+  /* v8 ignore next 9 -- @preserve */
+  } catch (error) {
+    void logger.error(
+      "about",
+      error instanceof Error
+        ? error
+        : new Error(String(error)),
+    );
+    return context.json({ error: "Internal server error" }, 500);
+  }
 });
 
 export { aboutRouter };

apps/api/src/routes/apotheosis.ts

@@ -5,6 +5,8 @@
  * @author Naomi Carrigan
  */
 /* eslint-disable max-lines-per-function -- Route handler requires many steps */
+/* eslint-disable max-statements -- Route handler requires many statements */
+
 /* eslint-disable stylistic/max-len -- Description string cannot be shortened */
 import { Hono } from "hono";
 import { prisma } from "../db/client.js";
@@ -13,6 +15,7 @@ import {
   buildPostApotheosisState,
   isEligibleForApotheosis,
 } from "../services/apotheosis.js";
+import { logger } from "../services/logger.js";
 import {
   grantApotheosisRole,
   postMilestoneWebhook,
@@ -25,6 +28,7 @@ const apotheosisRouter = new Hono<HonoEnvironment>();
 apotheosisRouter.use("*", authMiddleware);
 
 apotheosisRouter.post("/", async(context) => {
+  try {
     const discordId = context.get("discordId");
 
     const record = await prisma.gameState.findUnique({ where: { discordId } });
@@ -103,6 +107,8 @@ apotheosisRouter.post("/", async(context) => {
       where: { discordId },
     });
 
+    const apotheosisCount = updatedApotheosisData.count;
+    void logger.metric("apotheosis", 1, { apotheosisCount, discordId });
     void grantApotheosisRole(discordId);
     void postMilestoneWebhook(discordId, "apotheosis", {
       apotheosis:    updatedApotheosisData.count,
@@ -113,6 +119,15 @@ apotheosisRouter.post("/", async(context) => {
     });
 
     return context.json({ apotheosisCount: updatedApotheosisData.count });
+  } catch (error) {
+    void logger.error(
+      "apotheosis",
+      error instanceof Error
+        ? error
+        : new Error(String(error)),
+    );
+    return context.json({ error: "Internal server error" }, 500);
+  }
 });
 
 export { apotheosisRouter };

apps/api/src/routes/auth.ts

@@ -15,6 +15,7 @@ import {
   fetchDiscordUser,
 } from "../services/discord.js";
 import { signToken } from "../services/jwt.js";
+import { logger } from "../services/logger.js";
 import type { Player } from "@elysium/types";
 
 const authRouter = new Hono();
@@ -92,6 +93,8 @@ authRouter.get("/callback", async(context) => {
       });
 
       const jwtToken = signToken(player.discordId);
+      void logger.log("info", `New player registered: ${player.discordId}`);
+      void logger.metric("user_registered", 1, { discordId: player.discordId });
 
       // eslint-disable-next-line capitalized-comments -- v8 ignore
       /* v8 ignore next -- @preserve */
@@ -111,6 +114,8 @@ authRouter.get("/callback", async(context) => {
     });
 
     const jwtToken = signToken(updated.discordId);
+    void logger.log("info", `Player logged in: ${updated.discordId}`);
+    void logger.metric("user_login", 1, { discordId: updated.discordId });
 
     // eslint-disable-next-line capitalized-comments -- v8 ignore
     /* v8 ignore next -- @preserve */
@@ -118,7 +123,13 @@ authRouter.get("/callback", async(context) => {
     return context.redirect(
       `${clientUrl}/auth/callback?token=${jwtToken}&isNew=false`,
     );
-  } catch {
+  } catch (error) {
+    void logger.error(
+      "auth_callback",
+      error instanceof Error
+        ? error
+        : new Error(String(error)),
+    );
     // eslint-disable-next-line capitalized-comments -- v8 ignore
     /* v8 ignore next -- @preserve */
     const clientUrl = process.env.CORS_ORIGIN ?? "http://localhost:5173";

apps/api/src/routes/boss.ts

@@ -20,6 +20,7 @@ import { defaultEquipmentSets } from "../data/equipmentSets.js";
 import { prisma } from "../db/client.js";
 import { authMiddleware } from "../middleware/auth.js";
 import { updateChallengeProgress } from "../services/dailyChallenges.js";
+import { logger } from "../services/logger.js";
 import type { HonoEnvironment } from "../types/hono.js";
 
 const bossRouter = new Hono<HonoEnvironment>();
@@ -121,6 +122,7 @@ const calculatePartyStats = (
 };
 
 bossRouter.post("/challenge", async(context) => {
+  try {
     const discordId = context.get("discordId");
     const body = await context.req.json<{ bossId: string }>();
 
@@ -348,6 +350,9 @@ bossRouter.post("/challenge", async(context) => {
       where: { discordId },
     });
 
+    const { bossId } = body;
+    void logger.metric("boss_challenge", 1, { bossId, discordId, won });
+
     const bossMaxHp = boss.maxHp;
     const bossNewHp = bossUpdatedHp;
     const response: BossChallengeResponse = {
@@ -369,6 +374,15 @@ bossRouter.post("/challenge", async(context) => {
     }
 
     return context.json(response);
+  } catch (error) {
+    void logger.error(
+      "boss_challenge",
+      error instanceof Error
+        ? error
+        : new Error(String(error)),
+    );
+    return context.json({ error: "Internal server error" }, 500);
+  }
 });
 
 export { bossRouter };

apps/api/src/routes/craft.ts

@@ -11,6 +11,7 @@ import { Hono } from "hono";
 import { defaultRecipes } from "../data/recipes.js";
 import { prisma } from "../db/client.js";
 import { authMiddleware } from "../middleware/auth.js";
+import { logger } from "../services/logger.js";
 import type { HonoEnvironment } from "../types/hono.js";
 import type {
   CraftRecipeRequest,
@@ -63,6 +64,7 @@ const recomputeCraftedMultipliers = (
 };
 
 craftRouter.post("/", async(context) => {
+  try {
     const discordId = context.get("discordId");
     const body = await context.req.json<CraftRecipeRequest>();
 
@@ -142,6 +144,8 @@ craftRouter.post("/", async(context) => {
       where: { discordId },
     });
 
+    void logger.metric("recipe_crafted", 1, { discordId, recipeId });
+
     const bonusType = recipe.bonus.type;
     const bonusValue = recipe.bonus.value;
     const response: CraftRecipeResponse = {
@@ -151,6 +155,15 @@ craftRouter.post("/", async(context) => {
       ...updatedMultipliers,
     };
     return context.json(response);
+  } catch (error) {
+    void logger.error(
+      "craft",
+      error instanceof Error
+        ? error
+        : new Error(String(error)),
+    );
+    return context.json({ error: "Internal server error" }, 500);
+  }
 });
 
 export { craftRouter };

apps/api/src/routes/explore.ts

@@ -12,6 +12,7 @@ import { defaultExplorations } from "../data/explorations.js";
 import { initialExploration } from "../data/initialState.js";
 import { prisma } from "../db/client.js";
 import { authMiddleware } from "../middleware/auth.js";
+import { logger } from "../services/logger.js";
 import type { HonoEnvironment } from "../types/hono.js";
 import type {
   ExploreCollectEventResult,
@@ -49,6 +50,7 @@ const pickNothingMessage = (): string => {
 };
 
 exploreRouter.post("/start", async(context) => {
+  try {
     const discordId = context.get("discordId");
     const body = await context.req.json<ExploreStartRequest>();
 
@@ -108,7 +110,10 @@ exploreRouter.post("/start", async(context) => {
       return a.id === areaId;
     });
     if (!area) {
-    return context.json({ error: "Exploration area not found in state" }, 404);
+      return context.json(
+        { error: "Exploration area not found in state" },
+        404,
+      );
     }
 
     const anyInProgress = state.exploration.areas.some((a) => {
@@ -142,9 +147,19 @@ exploreRouter.post("/start", async(context) => {
       endsAt,
     };
     return context.json(response);
+  } catch (error) {
+    void logger.error(
+      "explore_start",
+      error instanceof Error
+        ? error
+        : new Error(String(error)),
+    );
+    return context.json({ error: "Internal server error" }, 500);
+  }
 });
 
 exploreRouter.post("/collect", async(context) => {
+  try {
     const discordId = context.get("discordId");
     const body = await context.req.json<ExploreCollectRequest>();
 
@@ -218,7 +233,9 @@ exploreRouter.post("/collect", async(context) => {
     }
 
     // Pick a random event
-  const eventIndex = Math.floor(Math.random() * explorationArea.events.length);
+    const eventIndex = Math.floor(
+      Math.random() * explorationArea.events.length,
+    );
     const event = explorationArea.events[eventIndex];
     // eslint-disable-next-line capitalized-comments -- v8 ignore
     /* v8 ignore next 3 -- @preserve */
@@ -350,6 +367,15 @@ exploreRouter.post("/collect", async(context) => {
       materialsFound: materialsFound,
     };
     return context.json(response);
+  } catch (error) {
+    void logger.error(
+      "explore_collect",
+      error instanceof Error
+        ? error
+        : new Error(String(error)),
+    );
+    return context.json({ error: "Internal server error" }, 500);
+  }
 });
 
 export { exploreRouter };

apps/api/src/routes/frontend.ts

@@ -0,0 +1,55 @@
+/**
+ * @file Frontend logging routes that pipe client-side logs to the telemetry service.
+ * @copyright nhcarrigan
+ * @license Naomi's Public License
+ * @author Naomi Carrigan
+ */
+import { Hono } from "hono";
+import { logger } from "../services/logger.js";
+
+const validLevels = new Set([ "debug", "info", "warn" ]);
+
+const frontendRouter = new Hono();
+
+frontendRouter.post("/log", async(context) => {
+  try {
+    const body = await context.req.json<{ level: string; message: string }>();
+    // eslint-disable-next-line @typescript-eslint/strict-boolean-expressions -- Runtime body validation
+    if (!body.level || !body.message || !validLevels.has(body.level)) {
+      return context.json({ error: "level and message are required" }, 400);
+    }
+    /* eslint-disable-next-line @typescript-eslint/consistent-type-assertions -- validated above */
+    void logger.log(body.level as "debug" | "info" | "warn", `[FE] ${body.message}`);
+    return context.json({ ok: true });
+  } catch (error) {
+    void logger.error(
+      "frontend_log",
+      error instanceof Error
+        ? error
+        : new Error(String(error)),
+    );
+    return context.json({ error: "Internal server error" }, 500);
+  }
+});
+
+frontendRouter.post("/error", async(context) => {
+  try {
+    const body = await context.req.json<{ context: string; message: string }>();
+    // eslint-disable-next-line @typescript-eslint/strict-boolean-expressions -- Runtime body validation
+    if (!body.context || !body.message) {
+      return context.json({ error: "context and message are required" }, 400);
+    }
+    void logger.error(`[FE] ${body.context}`, new Error(body.message));
+    return context.json({ ok: true });
+  } catch (error) {
+    void logger.error(
+      "frontend_error",
+      error instanceof Error
+        ? error
+        : new Error(String(error)),
+    );
+    return context.json({ error: "Internal server error" }, 500);
+  }
+});
+
+export { frontendRouter };

apps/api/src/routes/game.ts

@@ -27,6 +27,7 @@ import { currentSchemaVersion } from "../data/schemaVersion.js";
 import { prisma } from "../db/client.js";
 import { authMiddleware } from "../middleware/auth.js";
 import { getOrResetDailyChallenges } from "../services/dailyChallenges.js";
+import { logger } from "../services/logger.js";
 import { calculateOfflineEarnings } from "../services/offlineProgress.js";
 import {
   checkAndUnlockTitles,
@@ -681,6 +682,7 @@ const gameRouter = new Hono<HonoEnvironment>();
 gameRouter.use("*", authMiddleware);
 
 gameRouter.get("/load", async(context) => {
+  try {
     const discordId = context.get("discordId");
 
     const [ record, playerRecord ] = await Promise.all([
@@ -701,7 +703,9 @@ gameRouter.get("/load", async(context) => {
           discordId:                    playerRecord.discordId,
           discriminator:                playerRecord.discriminator,
           lastSavedAt:                  Date.now(),
+          // eslint-disable-next-line stylistic/max-len -- Long property names exceed limit after try-block indent
           lifetimeAchievementsUnlocked: playerRecord.lifetimeAchievementsUnlocked,
+          // eslint-disable-next-line stylistic/max-len -- Long property names exceed limit after try-block indent
           lifetimeAdventurersRecruited: playerRecord.lifetimeAdventurersRecruited,
           lifetimeBossesDefeated:       playerRecord.lifetimeBossesDefeated,
           lifetimeClicks:               playerRecord.lifetimeClicks,
@@ -880,9 +884,19 @@ gameRouter.get("/load", async(context) => {
       signature,
       state,
     });
+  } catch (error) {
+    void logger.error(
+      "game_load",
+      error instanceof Error
+        ? error
+        : new Error(String(error)),
+    );
+    return context.json({ error: "Internal server error" }, 500);
+  }
 });
 
 gameRouter.post("/save", async(context) => {
+  try {
     const discordId = context.get("discordId");
     const body = await context.req.json<SaveRequest>();
 
@@ -896,6 +910,7 @@ gameRouter.post("/save", async(context) => {
     if ((body.state.schemaVersion ?? 0) < currentSchemaVersion) {
       return context.json(
         {
+          // eslint-disable-next-line stylistic/max-len -- Error message cannot be shortened
           error: "Save rejected: outdated save. Reset your progress to continue.",
         },
         409,
@@ -1026,12 +1041,24 @@ gameRouter.post("/save", async(context) => {
       ? undefined
       : computeHmac(JSON.stringify(stateToSave), secret);
     return context.json({ savedAt: now, signature: signature });
+  } catch (error) {
+    void logger.error(
+      "game_save",
+      error instanceof Error
+        ? error
+        : new Error(String(error)),
+    );
+    return context.json({ error: "Internal server error" }, 500);
+  }
 });
 
 gameRouter.post("/reset", async(context) => {
+  try {
     const discordId = context.get("discordId");
 
-  const playerRecord = await prisma.player.findUnique({ where: { discordId } });
+    const playerRecord = await prisma.player.findUnique({
+      where: { discordId },
+    });
     if (!playerRecord) {
       return context.json({ error: "No player found" }, 404);
     }
@@ -1086,6 +1113,15 @@ gameRouter.post("/reset", async(context) => {
       signature:            signature,
       state:                freshState,
     });
+  } catch (error) {
+    void logger.error(
+      "game_reset",
+      error instanceof Error
+        ? error
+        : new Error(String(error)),
+    );
+    return context.json({ error: "Internal server error" }, 500);
+  }
 });
 
 export { gameRouter };

apps/api/src/routes/leaderboards.ts

@@ -9,6 +9,7 @@
 import { Hono } from "hono";
 import { gameTitles } from "../data/titles.js";
 import { prisma } from "../db/client.js";
+import { logger } from "../services/logger.js";
 import type { HonoEnvironment } from "../types/hono.js";
 import type { GameState } from "@elysium/types";
 
@@ -58,6 +59,7 @@ const resolveTitleName = (titleId: string | null): string => {
 };
 
 leaderboardRouter.get("/", async(context) => {
+  try {
     const category = context.req.query("category") ?? "totalGold";
     const limitRaw = Number(context.req.query("limit") ?? "100");
     const limit = Math.min(Math.max(1, limitRaw), 100);
@@ -122,6 +124,15 @@ leaderboardRouter.get("/", async(context) => {
       });
 
     return context.json({ category, entries });
+  } catch (error) {
+    void logger.error(
+      "leaderboards",
+      error instanceof Error
+        ? error
+        : new Error(String(error)),
+    );
+    return context.json({ error: "Internal server error" }, 500);
+  }
 });
 
 export { leaderboardRouter };

apps/api/src/routes/prestige.ts

@@ -6,11 +6,13 @@
  */
 /* eslint-disable max-lines-per-function -- Route handlers require many steps */
 /* eslint-disable max-statements -- Route handlers require many statements */
+/* eslint-disable complexity -- Route handlers have inherent complexity */
 import { Hono } from "hono";
 import { defaultPrestigeUpgrades } from "../data/prestigeUpgrades.js";
 import { prisma } from "../db/client.js";
 import { authMiddleware } from "../middleware/auth.js";
 import { updateChallengeProgress } from "../services/dailyChallenges.js";
+import { logger } from "../services/logger.js";
 import {
   buildPostPrestigeState,
   computeRunestoneMultipliers,
@@ -25,6 +27,7 @@ const prestigeRouter = new Hono<HonoEnvironment>();
 prestigeRouter.use("*", authMiddleware);
 
 prestigeRouter.post("/", async(context) => {
+  try {
     const discordId = context.get("discordId");
 
     const record = await prisma.gameState.findUnique({ where: { discordId } });
@@ -39,6 +42,7 @@ prestigeRouter.post("/", async(context) => {
     if (!isEligibleForPrestige(state)) {
       return context.json(
         {
+          // eslint-disable-next-line stylistic/max-len -- Error message cannot be shortened
           error: "Not eligible for prestige — collect 1,000,000 total gold first",
         },
         400,
@@ -130,6 +134,8 @@ prestigeRouter.post("/", async(context) => {
       where: { discordId },
     });
 
+    const prestigeCount = prestigeData.count;
+    void logger.metric("prestige", 1, { discordId, prestigeCount });
     void postMilestoneWebhook(discordId, "prestige", {
       // eslint-disable-next-line capitalized-comments -- v8 ignore
       /* v8 ignore next -- @preserve */
@@ -147,9 +153,19 @@ prestigeRouter.post("/", async(context) => {
       newPrestigeCount:    prestigeData.count, // eslint-disable-line unicorn/no-keyword-prefix -- API response field name required by client
       runestones:          runestonesEarned,
     });
+  } catch (error) {
+    void logger.error(
+      "prestige",
+      error instanceof Error
+        ? error
+        : new Error(String(error)),
+    );
+    return context.json({ error: "Internal server error" }, 500);
+  }
 });
 
 prestigeRouter.post("/buy-upgrade", async(context) => {
+  try {
     const discordId = context.get("discordId");
     const body = await context.req.json<BuyPrestigeUpgradeRequest>();
 
@@ -204,11 +220,24 @@ prestigeRouter.post("/buy-upgrade", async(context) => {
 
     const multipliers = computeRunestoneMultipliers(updatedPurchasedUpgradeIds);
 
+    void logger.metric("prestige_upgrade_purchased", 1, {
+      discordId,
+      upgradeId,
+    });
     return context.json({
       purchasedUpgradeIds: updatedPurchasedUpgradeIds,
       runestonesRemaining: updatedRunestones,
       ...multipliers,
     });
+  } catch (error) {
+    void logger.error(
+      "prestige_buy_upgrade",
+      error instanceof Error
+        ? error
+        : new Error(String(error)),
+    );
+    return context.json({ error: "Internal server error" }, 500);
+  }
 });
 
 export { prestigeRouter };

apps/api/src/routes/profile.ts

@@ -20,6 +20,7 @@ import { Hono } from "hono";
 import { gameTitles } from "../data/titles.js";
 import { prisma } from "../db/client.js";
 import { authMiddleware } from "../middleware/auth.js";
+import { logger } from "../services/logger.js";
 import { parseUnlockedTitles } from "../services/titles.js";
 import type { HonoEnvironment } from "../types/hono.js";
 
@@ -81,6 +82,7 @@ const resolveTitle = (id: string): { id: string; name: string } => {
 };
 
 profileRouter.get("/:discordId", async(context) => {
+  try {
     const { discordId } = context.req.param();
 
     const [ player, gameStateRecord ] = await Promise.all([
@@ -177,9 +179,19 @@ profileRouter.get("/:discordId", async(context) => {
       unlockedTitles: unlockedTitles,
       username: player.username,
     });
+  } catch (error) {
+    void logger.error(
+      "profile_get",
+      error instanceof Error
+        ? error
+        : new Error(String(error)),
+    );
+    return context.json({ error: "Internal server error" }, 500);
+  }
 });
 
 profileRouter.put("/", authMiddleware, async(context) => {
+  try {
     const discordId = context.get("discordId");
     const body = await context.req.json<UpdateProfileRequest>();
 
@@ -265,6 +277,15 @@ profileRouter.put("/", authMiddleware, async(context) => {
       profileSettings: profileSettings,
       pronouns: updated.pronouns,
     });
+  } catch (error) {
+    void logger.error(
+      "profile_update",
+      error instanceof Error
+        ? error
+        : new Error(String(error)),
+    );
+    return context.json({ error: "Internal server error" }, 500);
+  }
 });
 
 export { profileRouter };

apps/api/src/routes/transcendence.ts

@@ -6,10 +6,12 @@
  */
 /* eslint-disable max-lines-per-function -- Route handlers require many steps */
 /* eslint-disable max-statements -- Route handlers require many statements */
+
 import { Hono } from "hono";
 import { defaultTranscendenceUpgrades } from "../data/transcendenceUpgrades.js";
 import { prisma } from "../db/client.js";
 import { authMiddleware } from "../middleware/auth.js";
+import { logger } from "../services/logger.js";
 import {
   buildPostTranscendenceState,
   computeTranscendenceMultipliers,
@@ -24,6 +26,7 @@ const transcendenceRouter = new Hono<HonoEnvironment>();
 transcendenceRouter.use("*", authMiddleware);
 
 transcendenceRouter.post("/", async(context) => {
+  try {
     const discordId = context.get("discordId");
 
     const record = await prisma.gameState.findUnique({ where: { discordId } });
@@ -37,6 +40,7 @@ transcendenceRouter.post("/", async(context) => {
     if (!isEligibleForTranscendence(state)) {
       return context.json(
         {
+          // eslint-disable-next-line stylistic/max-len -- Error message cannot be shortened
           error: "Not eligible for transcendence — defeat The Absolute One first",
         },
         400,
@@ -102,6 +106,8 @@ transcendenceRouter.post("/", async(context) => {
       where: { discordId },
     });
 
+    const transcendenceCount = transcendenceData.count;
+    void logger.metric("transcendence", 1, { discordId, transcendenceCount });
     void postMilestoneWebhook(discordId, "transcendence", {
       // eslint-disable-next-line capitalized-comments -- v8 ignore
       /* v8 ignore next -- @preserve */
@@ -119,9 +125,19 @@ transcendenceRouter.post("/", async(context) => {
       // eslint-disable-next-line unicorn/no-keyword-prefix -- API response field name required by client
       newTranscendenceCount: transcendenceData.count,
     });
+  } catch (error) {
+    void logger.error(
+      "transcendence",
+      error instanceof Error
+        ? error
+        : new Error(String(error)),
+    );
+    return context.json({ error: "Internal server error" }, 500);
+  }
 });
 
 transcendenceRouter.post("/buy-upgrade", async(context) => {
+  try {
     const discordId = context.get("discordId");
     const body = await context.req.json<BuyEchoUpgradeRequest>();
 
@@ -131,6 +147,7 @@ transcendenceRouter.post("/buy-upgrade", async(context) => {
       return context.json({ error: "upgradeId is required" }, 400);
     }
 
+    // eslint-disable-next-line stylistic/max-len -- Variable name mirrors the data source for clarity
     const upgrade = defaultTranscendenceUpgrades.find((transcendenceUpgrade) => {
       return transcendenceUpgrade.id === upgradeId;
     });
@@ -181,11 +198,24 @@ transcendenceRouter.post("/buy-upgrade", async(context) => {
       where: { discordId },
     });
 
+    void logger.metric("transcendence_upgrade_purchased", 1, {
+      discordId,
+      upgradeId,
+    });
     return context.json({
       echoesRemaining:     updatedEchoes,
       purchasedUpgradeIds: updatedPurchasedIds,
       ...updatedMultipliers,
     });
+  } catch (error) {
+    void logger.error(
+      "transcendence_buy_upgrade",
+      error instanceof Error
+        ? error
+        : new Error(String(error)),
+    );
+    return context.json({ error: "Internal server error" }, 500);
+  }
 });
 
 export { transcendenceRouter };

apps/api/src/services/discord.ts

@@ -5,6 +5,7 @@
  * @author Naomi Carrigan
  */
 /* eslint-disable @typescript-eslint/naming-convention -- Discord API requires snake_case fields and HTTP headers require Pascal-Case */
+import { logger } from "./logger.js";
 
 interface DiscordTokenResponse {
   access_token:  string;
@@ -50,6 +51,7 @@ const exchangeCode = async(
     redirect_uri:  redirectUri,
   });
 
+  try {
     const response = await fetch("https://discord.com/api/v10/oauth2/token", {
       body:    parameters.toString(),
       headers: { "Content-Type": "application/x-www-form-urlencoded" },
@@ -62,6 +64,15 @@ const exchangeCode = async(
 
     /* eslint-disable-next-line @typescript-eslint/consistent-type-assertions -- Response JSON matches DiscordTokenResponse shape */
     return await (response.json() as Promise<DiscordTokenResponse>);
+  } catch (error) {
+    void logger.error(
+      "discord_exchange_code",
+      error instanceof Error
+        ? error
+        : new Error(String(error)),
+    );
+    throw error;
+  }
 };
 
 /**
@@ -73,6 +84,7 @@ const exchangeCode = async(
 const fetchDiscordUser = async(
   accessToken: string,
 ): Promise<DiscordUser> => {
+  try {
     const response = await fetch("https://discord.com/api/v10/users/@me", {
       headers: { Authorization: `Bearer ${accessToken}` },
     });
@@ -83,6 +95,15 @@ const fetchDiscordUser = async(
 
     /* eslint-disable-next-line @typescript-eslint/consistent-type-assertions -- Response JSON matches DiscordUser shape */
     return await (response.json() as Promise<DiscordUser>);
+  } catch (error) {
+    void logger.error(
+      "discord_fetch_user",
+      error instanceof Error
+        ? error
+        : new Error(String(error)),
+    );
+    throw error;
+  }
 };
 
 /**

apps/api/src/services/logger.ts

@@ -0,0 +1,12 @@
+/**
+ * @file Logger service for handling logging.
+ * @copyright nhcarrigan
+ * @license Naomi's Public License
+ * @author Naomi Carrigan
+ */
+
+import { Logger } from "@nhcarrigan/logger";
+
+const logger = new Logger("Elysium", process.env.LOG_TOKEN ?? "");
+
+export { logger };

apps/api/src/services/webhook.ts

@@ -5,6 +5,8 @@
  * @author Naomi Carrigan
  */
 /* eslint-disable @typescript-eslint/naming-convention -- Discord API requires snake_case and Pascal-case header names */
+import { logger } from "./logger.js";
+
 const discordApi = "https://discord.com/api/v10";
 
 /**
@@ -34,7 +36,13 @@ const grantApotheosisRole = async(discordId: string): Promise<void> => {
         method:  "PUT",
       },
     );
-  } catch {
+  } catch (error) {
+    void logger.error(
+      "webhook_apotheosis_role",
+      error instanceof Error
+        ? error
+        : new Error(String(error)),
+    );
     // Graceful degradation — role grant failure must not affect the apotheosis
   }
 };
@@ -81,7 +89,13 @@ const postMilestoneWebhook = async(
       headers: { "Content-Type": "application/json" },
       method:  "POST",
     });
-  } catch {
+  } catch (error) {
+    void logger.error(
+      "webhook_milestone",
+      error instanceof Error
+        ? error
+        : new Error(String(error)),
+    );
     // Graceful degradation — webhook failure must not affect the game action
   }
 };

apps/api/test/middleware/auth.spec.ts

@@ -55,4 +55,15 @@ describe("authMiddleware", () => {
     }));
     expect(res.status).toBe(401);
   });
+
+  it("returns 401 when verifyToken throws a non-Error value", async () => {
+    const { app, verifyToken } = await makeApp();
+    vi.mocked(verifyToken).mockImplementationOnce(() => {
+      throw "raw string error";
+    });
+    const res = await app.fetch(new Request("http://localhost/test", {
+      headers: { Authorization: "Bearer bad_token" },
+    }));
+    expect(res.status).toBe(401);
+  });
 });

apps/api/test/routes/apotheosis.spec.ts

@@ -80,6 +80,18 @@ describe("apotheosis route", () => {
     expect(res.status).toBe(400);
   });
 
+  it("returns 500 when the database throws", async () => {
+    vi.mocked(prisma.gameState.findUnique).mockRejectedValueOnce(new Error("DB error"));
+    const res = await post();
+    expect(res.status).toBe(500);
+  });
+
+  it("returns 500 when the database throws a non-Error value", async () => {
+    vi.mocked(prisma.gameState.findUnique).mockRejectedValueOnce("raw string error");
+    const res = await post();
+    expect(res.status).toBe(500);
+  });
+
   it("returns apotheosis count on success", async () => {
     // Need all 15 transcendence upgrades purchased for eligibility
     const allUpgradeIds = [

apps/api/test/routes/auth.spec.ts

@@ -113,5 +113,14 @@ describe("auth route", () => {
       const location = res.headers.get("Location") ?? "";
       expect(location).toContain("error=auth_failed");
     });
+
+    it("redirects with error when callback throws a non-Error value", async () => {
+      const { app, exchangeCode } = await makeApp();
+      exchangeCode.mockRejectedValueOnce("raw string error");
+      const res = await app.fetch(new Request("http://localhost/auth/callback?code=bad_code"));
+      expect(res.status).toBe(302);
+      const location = res.headers.get("Location") ?? "";
+      expect(location).toContain("error=auth_failed");
+    });
   });
 });

apps/api/test/routes/boss.spec.ts

@@ -293,4 +293,16 @@ describe("boss route", () => {
     const body = await res.json() as { won: boolean };
     expect(body.won).toBe(true);
   });
+
+  it("returns 500 when the database throws", async () => {
+    vi.mocked(prisma.gameState.findUnique).mockRejectedValueOnce(new Error("DB error"));
+    const res = await challenge({ bossId: "test_boss" });
+    expect(res.status).toBe(500);
+  });
+
+  it("returns 500 when the database throws a non-Error value", async () => {
+    vi.mocked(prisma.gameState.findUnique).mockRejectedValueOnce("raw string error");
+    const res = await challenge({ bossId: "test_boss" });
+    expect(res.status).toBe(500);
+  });
 });

apps/api/test/routes/craft.spec.ts

@@ -143,4 +143,16 @@ describe("craft route", () => {
     expect(body.recipeId).toBe(TEST_RECIPE_ID);
     expect(body.bonusType).toBe("gold_income");
   });
+
+  it("returns 500 when the database throws", async () => {
+    vi.mocked(prisma.gameState.findUnique).mockRejectedValueOnce(new Error("DB error"));
+    const res = await post({ recipeId: TEST_RECIPE_ID });
+    expect(res.status).toBe(500);
+  });
+
+  it("returns 500 when the database throws a non-Error value", async () => {
+    vi.mocked(prisma.gameState.findUnique).mockRejectedValueOnce("raw string error");
+    const res = await post({ recipeId: TEST_RECIPE_ID });
+    expect(res.status).toBe(500);
+  });
 });

apps/api/test/routes/explore.spec.ts

@@ -406,5 +406,31 @@ describe("explore route", () => {
       expect(body.materialsFound.some((m) => m.materialId === "verdant_sap")).toBe(true);
       mockRandom.mockRestore();
     });
+
+    it("returns 500 when the database throws on collect", async () => {
+      vi.mocked(prisma.gameState.findUnique).mockRejectedValueOnce(new Error("DB error"));
+      const res = await postCollect({ areaId: TEST_AREA_ID });
+      expect(res.status).toBe(500);
+    });
+
+    it("returns 500 when the database throws a non-Error value on collect", async () => {
+      vi.mocked(prisma.gameState.findUnique).mockRejectedValueOnce("raw string error");
+      const res = await postCollect({ areaId: TEST_AREA_ID });
+      expect(res.status).toBe(500);
+    });
+  });
+
+  describe("POST /start error path", () => {
+    it("returns 500 when the database throws on start", async () => {
+      vi.mocked(prisma.gameState.findUnique).mockRejectedValueOnce(new Error("DB error"));
+      const res = await postStart({ areaId: TEST_AREA_ID });
+      expect(res.status).toBe(500);
+    });
+
+    it("returns 500 when the database throws a non-Error value on start", async () => {
+      vi.mocked(prisma.gameState.findUnique).mockRejectedValueOnce("raw string error");
+      const res = await postStart({ areaId: TEST_AREA_ID });
+      expect(res.status).toBe(500);
+    });
   });
 });

apps/api/test/routes/frontend.spec.ts

@@ -0,0 +1,136 @@
+/* eslint-disable max-lines-per-function -- Test suites naturally have many cases */
+import { beforeEach, describe, expect, it, vi } from "vitest";
+import { Hono } from "hono";
+
+vi.mock("../../src/services/logger.js", () => ({
+  logger: {
+    log: vi.fn().mockResolvedValue(undefined),
+    error: vi.fn().mockResolvedValue(undefined),
+  },
+}));
+
+describe("frontend route", () => {
+  let loggerMock: { log: ReturnType<typeof vi.fn>; error: ReturnType<typeof vi.fn> };
+
+  beforeEach(async () => {
+    vi.clearAllMocks();
+    const { logger } = await import("../../src/services/logger.js");
+    loggerMock = logger as typeof loggerMock;
+  });
+
+  const makeApp = async () => {
+    const { frontendRouter } = await import("../../src/routes/frontend.js");
+    const app = new Hono();
+    app.route("/frontend", frontendRouter);
+    return app;
+  };
+
+  const postLog = async (body: unknown, contentType = "application/json") => {
+    const app = await makeApp();
+    return app.fetch(new Request("http://localhost/frontend/log", {
+      method: "POST",
+      headers: { "Content-Type": contentType },
+      body: typeof body === "string" ? body : JSON.stringify(body),
+    }));
+  };
+
+  const postError = async (body: unknown, contentType = "application/json") => {
+    const app = await makeApp();
+    return app.fetch(new Request("http://localhost/frontend/error", {
+      method: "POST",
+      headers: { "Content-Type": contentType },
+      body: typeof body === "string" ? body : JSON.stringify(body),
+    }));
+  };
+
+  describe("POST /log", () => {
+    it("returns 200 when level is debug and message is present", async () => {
+      const res = await postLog({ level: "debug", message: "test debug" });
+      expect(res.status).toBe(200);
+      const body = await res.json() as { ok: boolean };
+      expect(body.ok).toBe(true);
+    });
+
+    it("returns 200 when level is info and message is present", async () => {
+      const res = await postLog({ level: "info", message: "test info" });
+      expect(res.status).toBe(200);
+      const body = await res.json() as { ok: boolean };
+      expect(body.ok).toBe(true);
+    });
+
+    it("returns 200 when level is warn and message is present", async () => {
+      const res = await postLog({ level: "warn", message: "test warn" });
+      expect(res.status).toBe(200);
+      const body = await res.json() as { ok: boolean };
+      expect(body.ok).toBe(true);
+    });
+
+    it("returns 400 when level is invalid", async () => {
+      const res = await postLog({ level: "error", message: "test" });
+      expect(res.status).toBe(400);
+      const body = await res.json() as { error: string };
+      expect(body.error).toBe("level and message are required");
+    });
+
+    it("returns 400 when level is missing", async () => {
+      const res = await postLog({ message: "test" });
+      expect(res.status).toBe(400);
+    });
+
+    it("returns 400 when message is missing", async () => {
+      const res = await postLog({ level: "info" });
+      expect(res.status).toBe(400);
+    });
+
+    it("returns 500 when request body is invalid JSON", async () => {
+      const res = await postLog("not valid json at all", "application/json");
+      expect(res.status).toBe(500);
+      const body = await res.json() as { error: string };
+      expect(body.error).toBe("Internal server error");
+    });
+
+    it("returns 500 and covers non-Error branch when logger throws a raw value", async () => {
+      loggerMock.log.mockImplementationOnce(() => { throw "raw string error"; });
+      const res = await postLog({ level: "info", message: "test" });
+      expect(res.status).toBe(500);
+      const body = await res.json() as { error: string };
+      expect(body.error).toBe("Internal server error");
+    });
+  });
+
+  describe("POST /error", () => {
+    it("returns 200 with valid context and message", async () => {
+      const res = await postError({ context: "SomeComponent", message: "Something went wrong" });
+      expect(res.status).toBe(200);
+      const body = await res.json() as { ok: boolean };
+      expect(body.ok).toBe(true);
+    });
+
+    it("returns 400 when context field is missing", async () => {
+      const res = await postError({ message: "Something went wrong" });
+      expect(res.status).toBe(400);
+      const body = await res.json() as { error: string };
+      expect(body.error).toBe("context and message are required");
+    });
+
+    it("returns 400 when message field is missing", async () => {
+      const res = await postError({ context: "SomeComponent" });
+      expect(res.status).toBe(400);
+    });
+
+    it("returns 500 when request body is invalid JSON", async () => {
+      const res = await postError("not valid json at all", "application/json");
+      expect(res.status).toBe(500);
+      const body = await res.json() as { error: string };
+      expect(body.error).toBe("Internal server error");
+    });
+
+    it("returns 500 and covers non-Error branch when logger throws a raw value", async () => {
+      loggerMock.error.mockImplementationOnce(() => { throw "raw string error"; });
+      const res = await postError({ context: "SomeComponent", message: "Something went wrong" });
+      expect(res.status).toBe(500);
+      const body = await res.json() as { error: string };
+      expect(body.error).toBe("Internal server error");
+    });
+  });
+});

apps/api/test/routes/game.spec.ts

@@ -420,6 +420,45 @@ describe("game route", () => {
     });
   });
 
+  describe("GET /load error path", () => {
+    it("returns 500 when the database throws during load", async () => {
+      vi.mocked(prisma.gameState.findUnique).mockRejectedValueOnce(new Error("DB error"));
+      vi.mocked(prisma.player.findUnique).mockRejectedValueOnce(new Error("DB error"));
+      const res = await app.fetch(new Request("http://localhost/game/load"));
+      expect(res.status).toBe(500);
+    });
+
+    it("returns 500 when the database throws a non-Error value during load", async () => {
+      vi.mocked(prisma.gameState.findUnique).mockRejectedValueOnce("raw string error");
+      vi.mocked(prisma.player.findUnique).mockRejectedValueOnce("raw string error");
+      const res = await app.fetch(new Request("http://localhost/game/load"));
+      expect(res.status).toBe(500);
+    });
+  });
+
+  describe("POST /save error path", () => {
+    const save = (body: Record<string, unknown>) =>
+      app.fetch(new Request("http://localhost/game/save", {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify(body),
+      }));
+
+    it("returns 500 when the database throws during save", async () => {
+      const state = makeState();
+      vi.mocked(prisma.gameState.findUnique).mockRejectedValueOnce(new Error("DB error"));
+      const res = await save({ state });
+      expect(res.status).toBe(500);
+    });
+
+    it("returns 500 when the database throws a non-Error value during save", async () => {
+      const state = makeState();
+      vi.mocked(prisma.gameState.findUnique).mockRejectedValueOnce("raw string error");
+      const res = await save({ state });
+      expect(res.status).toBe(500);
+    });
+  });
+
   describe("POST /reset", () => {
     const reset = () =>
       app.fetch(new Request("http://localhost/game/reset", { method: "POST" }));
@@ -450,5 +489,17 @@ describe("game route", () => {
       const body = await res.json() as { signature: string | undefined };
       expect(typeof body.signature).toBe("string");
     });
+
+    it("returns 500 when the database throws during reset", async () => {
+      vi.mocked(prisma.player.findUnique).mockRejectedValueOnce(new Error("DB error"));
+      const res = await reset();
+      expect(res.status).toBe(500);
+    });
+
+    it("returns 500 when the database throws a non-Error value during reset", async () => {
+      vi.mocked(prisma.player.findUnique).mockRejectedValueOnce("raw string error");
+      const res = await reset();
+      expect(res.status).toBe(500);
+    });
   });
 });

apps/api/test/routes/leaderboards.spec.ts

@@ -152,6 +152,18 @@ describe("leaderboards route", () => {
     expect(typeof body.entries[0]?.activeTitle).toBe("string");
   });
 
+  it("returns 500 when the database throws", async () => {
+    vi.mocked(prisma.player.findMany).mockRejectedValueOnce(new Error("DB error"));
+    const res = await get();
+    expect(res.status).toBe(500);
+  });
+
+  it("returns 500 when the database throws a non-Error value", async () => {
+    vi.mocked(prisma.player.findMany).mockRejectedValueOnce("raw string error");
+    const res = await get();
+    expect(res.status).toBe(500);
+  });
+
   it("defaults to 0 for game-state categories when state is missing", async () => {
     vi.mocked(prisma.player.findMany).mockResolvedValueOnce([makePlayer({ discordId: "p1" })] as never);
     vi.mocked(prisma.gameState.findMany).mockResolvedValueOnce([] as never);

apps/api/test/routes/prestige.spec.ts

@@ -93,6 +93,18 @@ describe("prestige route", () => {
       expect(body.runestones).toBeGreaterThanOrEqual(0);
     });
 
+    it("returns 500 when the database throws during prestige", async () => {
+      vi.mocked(prisma.gameState.findUnique).mockRejectedValueOnce(new Error("DB error"));
+      const res = await post("");
+      expect(res.status).toBe(500);
+    });
+
+    it("returns 500 when the database throws a non-Error value during prestige", async () => {
+      vi.mocked(prisma.gameState.findUnique).mockRejectedValueOnce("raw string error");
+      const res = await post("");
+      expect(res.status).toBe(500);
+    });
+
     it("updates daily challenge progress when dailyChallenges are set", async () => {
       const state = makeState({
         dailyChallenges: {
@@ -152,5 +164,17 @@ describe("prestige route", () => {
       expect(body.runestonesRemaining).toBe(90); // 100 - 10
       expect(body.purchasedUpgradeIds).toContain("income_1");
     });
+
+    it("returns 500 when the database throws during buy-upgrade", async () => {
+      vi.mocked(prisma.gameState.findUnique).mockRejectedValueOnce(new Error("DB error"));
+      const res = await post("/buy-upgrade", { upgradeId: "income_1" });
+      expect(res.status).toBe(500);
+    });
+
+    it("returns 500 when the database throws a non-Error value during buy-upgrade", async () => {
+      vi.mocked(prisma.gameState.findUnique).mockRejectedValueOnce("raw string error");
+      const res = await post("/buy-upgrade", { upgradeId: "income_1" });
+      expect(res.status).toBe(500);
+    });
   });
 });

apps/api/test/routes/profile.spec.ts

@@ -182,6 +182,18 @@ describe("profile route", () => {
       expect(unknown?.name).toBe("unknown_title_id");
     });
 
+    it("returns 500 when the database throws during profile get", async () => {
+      vi.mocked(prisma.player.findUnique).mockRejectedValueOnce(new Error("DB error"));
+      const res = await app.fetch(new Request(`http://localhost/profile/${DISCORD_ID}`));
+      expect(res.status).toBe(500);
+    });
+
+    it("returns 500 when the database throws a non-Error value during profile get", async () => {
+      vi.mocked(prisma.player.findUnique).mockRejectedValueOnce("raw string error");
+      const res = await app.fetch(new Request(`http://localhost/profile/${DISCORD_ID}`));
+      expect(res.status).toBe(500);
+    });
+
     it("includes completed story chapters in profile response", async () => {
       const state = makeState({
         story: {
@@ -256,5 +268,23 @@ describe("profile route", () => {
       const body = await res.json() as { profileSettings: { numberFormat: string } };
       expect(body.profileSettings.numberFormat).toBe("suffix");
     });
+
+    it("returns 500 when the database throws during profile update", async () => {
+      vi.mocked(prisma.player.update).mockRejectedValueOnce(new Error("DB error"));
+      const res = await put({
+        characterName: "NewName",
+        profileSettings: { numberFormat: "suffix" },
+      });
+      expect(res.status).toBe(500);
+    });
+
+    it("returns 500 when the database throws a non-Error value during profile update", async () => {
+      vi.mocked(prisma.player.update).mockRejectedValueOnce("raw string error");
+      const res = await put({
+        characterName: "NewName",
+        profileSettings: { numberFormat: "suffix" },
+      });
+      expect(res.status).toBe(500);
+    });
   });
 });

apps/api/test/routes/transcendence.spec.ts

@@ -92,6 +92,18 @@ describe("transcendence route", () => {
       expect(body.newTranscendenceCount).toBe(1);
       expect(body.echoes).toBeGreaterThanOrEqual(0);
     });
+
+    it("returns 500 when the database throws during transcendence", async () => {
+      vi.mocked(prisma.gameState.findUnique).mockRejectedValueOnce(new Error("DB error"));
+      const res = await post("");
+      expect(res.status).toBe(500);
+    });
+
+    it("returns 500 when the database throws a non-Error value during transcendence", async () => {
+      vi.mocked(prisma.gameState.findUnique).mockRejectedValueOnce("raw string error");
+      const res = await post("");
+      expect(res.status).toBe(500);
+    });
   });
 
   describe("POST /buy-upgrade", () => {
@@ -149,5 +161,17 @@ describe("transcendence route", () => {
       expect(body.echoesRemaining).toBe(95); // 100 - 5
       expect(body.purchasedUpgradeIds).toContain("echo_income_1");
     });
+
+    it("returns 500 when the database throws during buy-upgrade", async () => {
+      vi.mocked(prisma.gameState.findUnique).mockRejectedValueOnce(new Error("DB error"));
+      const res = await post("/buy-upgrade", { upgradeId: "echo_income_1" });
+      expect(res.status).toBe(500);
+    });
+
+    it("returns 500 when the database throws a non-Error value during buy-upgrade", async () => {
+      vi.mocked(prisma.gameState.findUnique).mockRejectedValueOnce("raw string error");
+      const res = await post("/buy-upgrade", { upgradeId: "echo_income_1" });
+      expect(res.status).toBe(500);
+    });
   });
 });

apps/api/test/services/discord.spec.ts

@@ -86,5 +86,22 @@ describe("discord service", () => {
       expect(result.id).toBe("123");
       expect(result.username).toBe("testuser");
     });
+
+    it("re-throws when fetch rejects with a non-Error value", async () => {
+      mockFetch.mockRejectedValueOnce("raw string error");
+      const { fetchDiscordUser } = await import("../../src/services/discord.js");
+      await expect(fetchDiscordUser("some_token")).rejects.toBe("raw string error");
+    });
+  });
+
+  describe("exchangeCode non-Error throw", () => {
+    it("re-throws when fetch rejects with a non-Error value", async () => {
+      process.env["DISCORD_CLIENT_ID"] = "cid";
+      process.env["DISCORD_CLIENT_SECRET"] = "secret";
+      process.env["DISCORD_REDIRECT_URI"] = "http://localhost/cb";
+      mockFetch.mockRejectedValueOnce("raw string error");
+      const { exchangeCode } = await import("../../src/services/discord.js");
+      await expect(exchangeCode("some_code")).rejects.toBe("raw string error");
+    });
   });
 });

apps/api/test/services/webhook.spec.ts

@@ -69,6 +69,15 @@ describe("webhook service", () => {
       const { grantApotheosisRole } = await import("../../src/services/webhook.js");
       await expect(grantApotheosisRole("user")).resolves.toBeUndefined();
     });
+
+    it("swallows non-Error fetch rejections gracefully", async () => {
+      process.env["DISCORD_BOT_TOKEN"] = "tok";
+      process.env["DISCORD_GUILD_ID"] = "g";
+      process.env["DISCORD_APOTHEOSIS_ROLE_ID"] = "r";
+      mockFetch.mockRejectedValueOnce("raw string error");
+      const { grantApotheosisRole } = await import("../../src/services/webhook.js");
+      await expect(grantApotheosisRole("user")).resolves.toBeUndefined();
+    });
   });
 
   describe("postMilestoneWebhook", () => {
@@ -119,5 +128,12 @@ describe("webhook service", () => {
       const { postMilestoneWebhook } = await import("../../src/services/webhook.js");
       await expect(postMilestoneWebhook("user", "prestige", counts)).resolves.toBeUndefined();
     });
+
+    it("swallows non-Error fetch rejections gracefully", async () => {
+      process.env["DISCORD_MILESTONE_WEBHOOK"] = "https://discord.com/webhook/abc";
+      mockFetch.mockRejectedValueOnce("raw string error");
+      const { postMilestoneWebhook } = await import("../../src/services/webhook.js");
+      await expect(postMilestoneWebhook("user", "prestige", counts)).resolves.toBeUndefined();
+    });
   });
 });

apps/web/index.html

@@ -5,6 +5,39 @@
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <title>Elysium — Idle RPG</title>
     <meta name="description" content="An idle fantasy RPG — hire adventurers, defeat bosses, and ascend to glory." />
+
+    <!-- Open Graph -->
+    <meta property="og:title" content="Elysium — Idle RPG" />
+    <meta property="og:description" content="An idle fantasy RPG — hire adventurers, defeat bosses, and ascend to glory." />
+    <meta property="og:type" content="website" />
+    <meta property="og:url" content="https://elysium.nhcarrigan.com" />
+    <meta property="og:image" content="https://cdn.nhcarrigan.com/elysium/background.jpg" />
+    <meta property="og:site_name" content="Elysium" />
+
+    <!-- Twitter Card -->
+    <meta name="twitter:card" content="summary_large_image" />
+    <meta name="twitter:title" content="Elysium — Idle RPG" />
+    <meta name="twitter:description" content="An idle fantasy RPG — hire adventurers, defeat bosses, and ascend to glory." />
+    <meta name="twitter:image" content="https://cdn.nhcarrigan.com/elysium/background.jpg" />
+
+    <!-- Plausible Analytics -->
+    <script defer data-domain="elysium.nhcarrigan.com" src="https://plausible.io/js/script.js"></script>
+
+    <!-- Tree-Nation -->
+    <script defer src="https://widgets.tree-nation.com/js/widgets/v1/widgets.min.js?v=1.0"></script>
+    <script>
+      (function () {
+        var interval = setInterval(function () {
+          if (typeof TreeNation !== "undefined") {
+            clearInterval(interval);
+            TreeNation.renderAll();
+          }
+        }, 100);
+      }());
+    </script>
+
+    <!-- Google Ads -->
+    <script async src="https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-3569924701890974" crossorigin="anonymous"></script>
   </head>
   <body>
     <div id="root"></div>

apps/web/src/components/errorBoundary.tsx

@@ -0,0 +1,70 @@
+/**
+ * @file React Error Boundary for catching unhandled render-time errors.
+ * @copyright nhcarrigan
+ * @license Naomi's Public License
+ * @author Naomi Carrigan
+ */
+import { Component, type ErrorInfo, type ReactNode } from "react";
+import { logError } from "../utils/logError.js";
+
+interface ErrorBoundaryProperties {
+  readonly children: ReactNode;
+}
+
+interface ErrorBoundaryState {
+  hasError: boolean;
+}
+
+/**
+ * Catches unhandled render-time errors in the React tree, logs them to the
+ * backend telemetry service, and renders a fallback UI.
+ */
+class ErrorBoundary extends Component<
+  ErrorBoundaryProperties,
+  ErrorBoundaryState
+> {
+  // eslint-disable-next-line jsdoc/require-jsdoc -- React Error Boundary constructor is standard boilerplate
+  public constructor(properties: ErrorBoundaryProperties) {
+    super(properties);
+    this.state = { hasError: false };
+  }
+
+  /**
+   * Updates state so the next render shows the fallback UI.
+   * @returns The updated error boundary state.
+   */
+  public static getDerivedStateFromError(): ErrorBoundaryState {
+    return { hasError: true };
+  }
+
+  /**
+   * Logs the error to the backend telemetry service.
+   * @param error - The error that was thrown during render.
+   * @param info - React error info containing the component stack trace.
+   */
+  // eslint-disable-next-line @typescript-eslint/class-methods-use-this -- React lifecycle method cannot be static
+  public override componentDidCatch(error: Error, info: ErrorInfo): void {
+    logError("react_error_boundary", error, info.componentStack);
+  }
+
+  /**
+   * Renders the fallback UI when an error is caught, otherwise renders children.
+   * @returns The JSX element.
+   */
+  public override render(): ReactNode {
+    const { hasError } = this.state;
+    const { children } = this.props;
+
+    if (hasError) {
+      return (
+        <div className="error-screen">
+          <p>{"Something went wrong. Please refresh the page."}</p>
+        </div>
+      );
+    }
+
+    return children;
+  }
+}
+
+export { ErrorBoundary };

apps/web/src/components/game/characterPage.tsx

@@ -14,6 +14,7 @@ import {
   type PublicProfileResponse,
 } from "@elysium/types";
 import { type JSX, useEffect, useState } from "react";
+import { logError } from "../../utils/logError.js";
 
 interface CharacterPageProperties {
   readonly discordId: string;
@@ -78,11 +79,15 @@ const CharacterPage = ({ discordId }: CharacterPageProperties): JSX.Element => {
   }, [ discordId ]);
 
   function handleCopy(): void {
-    void navigator.clipboard.writeText(window.location.href).then(() => {
+    void navigator.clipboard.writeText(window.location.href).
+      then(() => {
         setCopied(true);
         setTimeout(() => {
           setCopied(false);
         }, 2000);
+      }).
+      catch((error_: unknown) => {
+        logError("clipboard_copy", error_);
       });
   }
 

apps/web/src/components/game/characterSheetPanel.tsx

@@ -19,6 +19,7 @@ import {
 import { type ChangeEvent, type JSX, useEffect, useRef, useState } from "react";
 import { updateProfile } from "../../api/client.js";
 import { useGame } from "../../context/gameContext.js";
+import { logError } from "../../utils/logError.js";
 
 interface EquippedItem {
   name:   string;
@@ -205,11 +206,15 @@ const CharacterSheetPanel = (): JSX.Element => {
   function handleShareClick(): void {
     const discordId = player?.discordId ?? "";
     const url = `${window.location.origin}/character/${discordId}`;
-    void navigator.clipboard.writeText(url).then(() => {
+    void navigator.clipboard.writeText(url).
+      then(() => {
         setCopied(true);
         setTimeout(() => {
           setCopied(false);
         }, 2000);
+      }).
+      catch((error_: unknown) => {
+        logError("clipboard_copy", error_);
       });
   }
 

apps/web/src/components/game/gameLayout.tsx

@@ -189,6 +189,7 @@ const GameLayout = (): JSX.Element => {
       <div className="game-main">
         <aside className="game-sidebar">
           <ClickArea />
+          <div id="tree-nation-offset-website" />
           <p className="game-copyright">{"© NHCarrigan"}</p>
         </aside>
 

apps/web/src/components/game/profilePage.tsx

@@ -8,6 +8,7 @@
 /* eslint-disable complexity -- Many conditional stat visibility checks */
 import { useEffect, useState, type JSX } from "react";
 import { formatNumber } from "../../utils/format.js";
+import { logError } from "../../utils/logError.js";
 import type { PublicProfileResponse } from "@elysium/types";
 
 interface ProfilePageProperties {
@@ -52,11 +53,15 @@ const ProfilePage = ({ discordId }: ProfilePageProperties): JSX.Element => {
   }, [ discordId ]);
 
   function handleCopy(): void {
-    void navigator.clipboard.writeText(window.location.href).then(() => {
+    void navigator.clipboard.writeText(window.location.href).
+      then(() => {
         setCopied(true);
         setTimeout(() => {
           setCopied(false);
         }, 2000);
+      }).
+      catch((error_: unknown) => {
+        logError("clipboard_copy", error_);
       });
   }
 

apps/web/src/context/gameContext.tsx

@@ -59,6 +59,7 @@ import {
 } from "../engine/tick.js";
 import { updateChallengeProgress } from "../utils/dailyChallenges.js";
 import { formatNumber as formatNumberUtil } from "../utils/format.js";
+import { logError } from "../utils/logError.js";
 import { sendNotification } from "../utils/notification.js";
 import { playSound } from "../utils/sound.js";
 
@@ -1130,6 +1131,8 @@ export const GameProvider = ({
               ) {
                 signatureReference.current = null;
                 localStorage.removeItem("elysium_save_signature");
+              } else {
+                logError("auto_save", error_);
               }
             });
         }
@@ -1158,7 +1161,8 @@ export const GameProvider = ({
             }
             await reloadReference.current();
           }).
-          catch(() => {
+          catch((error_: unknown) => {
+            logError("auto_prestige", error_);
 
             /* Silently ignore — will retry next tick */
           }).
@@ -1200,7 +1204,8 @@ export const GameProvider = ({
               });
               setBattleResult({ bossName, result });
             }).
-            catch(() => {
+            catch((error_: unknown) => {
+              logError("auto_boss", error_);
 
               /* Silently ignore — will retry next tick */
             }).
@@ -1521,12 +1526,14 @@ export const GameProvider = ({
           },
         };
       });
-    } catch {
+    } catch (error_: unknown) {
+      logError("buy_prestige_upgrade", error_);
       // Silently ignore — server errors shouldn't crash the UI
     }
   }, []);
 
   const transcend = useCallback(async() => {
+    try {
       const result = await transcendApi({});
       setShowTranscendenceToast(true);
       if (enableSoundsReference.current) {
@@ -1537,9 +1544,14 @@ export const GameProvider = ({
       }
       await reload();
       return result;
+    } catch (error_: unknown) {
+      logError("transcend", error_);
+      throw error_;
+    }
   }, [ reload ]);
 
   const apotheosis = useCallback(async() => {
+    try {
       const result = await achieveApotheosisApi({});
       setShowApotheosisToast(true);
       if (enableSoundsReference.current) {
@@ -1550,6 +1562,10 @@ export const GameProvider = ({
       }
       await reload();
       return result;
+    } catch (error_: unknown) {
+      logError("apotheosis", error_);
+      throw error_;
+    }
   }, [ reload ]);
 
   const buyEchoUpgrade = useCallback(async(upgradeId: string) => {
@@ -1575,12 +1591,14 @@ export const GameProvider = ({
           },
         };
       });
-    } catch {
-      // Silently ignore server errors
+    } catch (error_: unknown) {
+      logError("buy_echo_upgrade", error_);
+      // Silently ignore — server errors shouldn't crash the UI
     }
   }, []);
 
   const startExploration = useCallback(async(areaId: string) => {
+    try {
       const response = await startExplorationApi({ areaId });
       const areaData = EXPLORATION_AREAS.find((a) => {
         return a.id === areaId;
@@ -1606,10 +1624,15 @@ export const GameProvider = ({
           },
         };
       });
+    } catch (error_: unknown) {
+      logError("start_exploration", error_);
+      throw error_;
+    }
   }, []);
 
   const collectExploration = useCallback(
     async(areaId: string): Promise<ExploreCollectResponse> => {
+      try {
         const result = await collectExplorationApi({ areaId });
         setState((previous) => {
           if (previous?.exploration === undefined) {
@@ -1683,6 +1706,10 @@ export const GameProvider = ({
           };
         });
         return result;
+      } catch (error_: unknown) {
+        logError("collect_exploration", error_);
+        throw error_;
+      }
     },
     [],
   );
@@ -1694,6 +1721,7 @@ export const GameProvider = ({
     if (recipe === undefined) {
       return;
     }
+    try {
       const result = await craftRecipeApi({ recipeId });
       setState((previous) => {
         if (previous?.exploration === undefined) {
@@ -1723,6 +1751,10 @@ export const GameProvider = ({
           },
         };
       });
+    } catch (error_: unknown) {
+      logError("craft_recipe", error_);
+      throw error_;
+    }
   }, []);
 
   const toggleAutoPrestige = useCallback(() => {
@@ -1798,7 +1830,8 @@ export const GameProvider = ({
         return applyBossResult(previous, bossId, result);
       });
       setBattleResult({ bossName: boss.name, result: result });
-    } catch {
+    } catch (error_: unknown) {
+      logError("challenge_boss", error_);
       // Silently ignore — server errors shouldn't crash the UI
     }
   }, []);

apps/web/src/main.tsx

@@ -8,8 +8,12 @@
 import { StrictMode } from "react";
 import { createRoot } from "react-dom/client";
 import { App } from "./app.js";
+import { ErrorBoundary } from "./components/errorBoundary.js";
+import { initialiseFrontendLogger } from "./utils/logger.js";
 import "./styles.css";
 
+initialiseFrontendLogger();
+
 const rootElement = document.getElementById("root");
 
 if (!rootElement) {
@@ -18,6 +22,8 @@ if (!rootElement) {
 
 createRoot(rootElement).render(
   <StrictMode>
+    <ErrorBoundary>
       <App />
+    </ErrorBoundary>
   </StrictMode>,
 );

apps/web/src/styles.css

@@ -26,6 +26,7 @@
   --radius: 8px;
   --radius-lg: 12px;
   --font: "Segoe UI", system-ui, sans-serif;
+  --resource-bar-height: 3.5rem;
 }
 
 body {
@@ -136,6 +137,10 @@ body::before {
   flex-direction: column;
   align-items: center;
   gap: 1rem;
+  position: sticky;
+  top: var(--resource-bar-height);
+  height: calc(100vh - var(--resource-bar-height));
+  overflow-y: auto;
 }
 
 .game-content {
@@ -3181,8 +3186,11 @@ body::before {
     border-right: none;
     flex-direction: row;
     gap: 0.75rem;
+    height: auto;
     justify-content: center;
     padding: 0.5rem 0.75rem;
+    position: static;
+    top: auto;
     width: 100%;
   }
 

apps/web/src/utils/logError.ts

@@ -0,0 +1,19 @@
+/**
+ * @file Frontend error logging utility that forwards errors to the backend telemetry service.
+ * @copyright nhcarrigan
+ * @license Naomi's Public License
+ * @author Naomi Carrigan
+ */
+/* eslint-disable no-console -- Errors are forwarded to backend via the overridden console.error */
+
+/**
+ * Logs an error to the backend telemetry service.
+ * Accepts the same arguments as console.error — conventionally a context string
+ * followed by the error value.
+ * @param logArguments - The values to log, forwarded directly to console.error.
+ */
+const logError = (...logArguments: Array<unknown>): void => {
+  console.error(...logArguments);
+};
+
+export { logError };

apps/web/src/utils/logger.ts

@@ -0,0 +1,68 @@
+/**
+ * @file Frontend logger that forwards console output to the backend telemetry service.
+ * @copyright nhcarrigan
+ * @license Naomi's Public License
+ * @author Naomi Carrigan
+ */
+/* eslint-disable no-console -- This file intentionally overrides console methods */
+
+type Level = "debug" | "info" | "warn";
+
+const post = (path: string, body: object): void => {
+  void fetch(path, {
+    body:    JSON.stringify(body),
+    // eslint-disable-next-line @typescript-eslint/naming-convention -- HTTP header names use kebab-case
+    headers: { "Content-Type": "application/json" },
+    method:  "POST",
+  }).catch(() => {
+    // Intentionally swallowed — we cannot log logger failures without infinite recursion.
+  });
+};
+
+/**
+ * Overrides the global console.log and console.error methods so that all
+ * frontend log output is forwarded to the backend telemetry endpoints.
+ * Must be called once at application startup before any other code runs.
+ */
+const initialiseFrontendLogger = (): void => {
+  const originalLog = console.log.bind(console);
+  const originalError = console.error.bind(console);
+
+  console.log = (...consoleArguments: Array<unknown>): void => {
+    originalLog(...consoleArguments);
+    const level: Level = "info";
+    const message = consoleArguments.map((argument) => {
+      return typeof argument === "string"
+        ? argument
+        : JSON.stringify(argument);
+    }).join(" ");
+    post("/api/fe/log", { level, message });
+  };
+
+  console.error = (...consoleArguments: Array<unknown>): void => {
+    originalError(...consoleArguments);
+    const message = consoleArguments.map((argument) => {
+      if (argument instanceof Error) {
+        return `${argument.message}\n${argument.stack ?? ""}`;
+      }
+      return typeof argument === "string"
+        ? argument
+        : JSON.stringify(argument);
+    }).join(" ");
+    const context = "console.error";
+    post("/api/fe/error", { context, message });
+  };
+
+  console.warn = (...consoleArguments: Array<unknown>): void => {
+    originalLog(...consoleArguments);
+    const level: Level = "warn";
+    const message = consoleArguments.map((argument) => {
+      return typeof argument === "string"
+        ? argument
+        : JSON.stringify(argument);
+    }).join(" ");
+    post("/api/fe/log", { level, message });
+  };
+};
+
+export { initialiseFrontendLogger };

apps/web/src/utils/notification.ts

@@ -4,6 +4,7 @@
  * @license Naomi's Public License
  * @author Naomi Carrigan
  */
+import { logError } from "./logError.js";
 
 /**
  * Requests browser notification permission from the user.
@@ -38,7 +39,8 @@ const sendNotification = (title: string, body: string): void => {
   try {
     // eslint-disable-next-line no-new -- Notification constructor has side effects
     new Notification(title, { body: body, icon: "/favicon.ico" });
-  } catch {
+  } catch (error_: unknown) {
+    logError("send_notification", error_);
     // Silently ignore — notifications may fail silently
   }
 };

apps/web/src/utils/sound.ts

@@ -4,6 +4,7 @@
  * @license Naomi's Public License
  * @author Naomi Carrigan
  */
+import { logError } from "./logError.js";
 
 type SoundEvent =
   | "achievement"
@@ -101,7 +102,8 @@ const playSound = (event: SoundEvent): void => {
       oscillator.start(startTime);
       oscillator.stop(endTime);
     }
-  } catch {
+  } catch (error_: unknown) {
+    logError("play_sound", error_);
     // Silently ignore — audio may not be available in all environments
   }
 };

pnpm-lock.yaml

@@ -23,6 +23,9 @@ importers:
       '@hono/node-server':
         specifier: 1.13.7
         version: 1.13.7(hono@4.7.4)
+      '@nhcarrigan/logger':
+        specifier: 1.1.1
+        version: 1.1.1
       '@prisma/client':
         specifier: 6.5.0
         version: 6.5.0(prisma@6.5.0(typescript@5.8.2))(typescript@5.8.2)
@@ -689,6 +692,9 @@ packages:
       typescript: '>=5'
       vitest: '>=2'
 
+  '@nhcarrigan/logger@1.1.1':
+    resolution: {integrity: sha512-P6OEQFHDtf6psybYGljuCxkSW6DLQCsx1aZZ3w4YKBXHBFjDbhuvpM9K1kPhVN48hakitx2WPLEoIFr6YZELYw==}
+
   '@nhcarrigan/typescript-config@4.0.0':
     resolution: {integrity: sha512-969HVha7A/Sg77fuMwOm6p14a+7C5iE6g55OD71srqwKIgksQl+Ex/hAI/pyzTQFDQ/FBJbpnHlR4Ov25QV/rw==}
     engines: {node: '20', pnpm: '9'}
@@ -3490,6 +3496,8 @@ snapshots:
       - eslint-import-resolver-webpack
       - supports-color
 
+  '@nhcarrigan/logger@1.1.1': {}
+
   '@nhcarrigan/typescript-config@4.0.0(typescript@5.8.2)':
     dependencies:
       typescript: 5.8.2