From 507922bf55421cfc07f0d55116789fe442f5a2af Mon Sep 17 00:00:00 2001
From: Yisroel Baum <yisroel.d.baum@gmail.com>
Date: Sat, 2 May 2026 22:40:09 +0300
Subject: [PATCH] add cy request anti pattern

---
 ai/frontend-context.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/ai/frontend-context.md b/ai/frontend-context.md
index 5e279aa..6825c68 100644
--- a/ai/frontend-context.md
+++ b/ai/frontend-context.md
@@ -43,6 +43,7 @@ Constructs LLMs default to that this project forbids on the frontend.
 | Inline `<script>` in templates | `<script>doStuff()</script>` in a `.php` template | put logic in `public/js/<page>.js`, load via `<script src=...>` |
 | Hardcoded admin URLs in user-facing JS | `fetch('/api/admin/...')` from a non-admin page JS | call user-scoped endpoints from user pages, admin endpoints only from admin pages |
 | Cypress test logging in as the wrong role | `cy.loginAsAdmin()` in a non-admin spec | match the role to the page under test (`loginAsUser` for `/home`, `/texts`; `loginAsAdmin` for `/admin/*`) |
+| `cy.request` in E2E tests | `cy.request('/api/...')` to set up state or assert | tests must exercise UI - drive via `cy.visit`/`cy.get`; if seeding is needed, add it to backend seed data |
 
 When generating code, scan the diff for these patterns before writing it
 to disk.