rdmsm4x-changelog-20260823-1850-amagansett-private-prototypes

Created and privately deployed the Amagansett prototype family so Rich can review the local guide, adaptive AK home search, and Forst redesign behind Cloudflare Access while sharing an unlisted capability link with a guest.

Scope

• Host: rdmsm4x only.
• Project: /Users/richh/dev/sites/amagansett.app.
• Branch: codex/amagansett-private-prototype-20260823.
• Commit: afd8e0883fc99dc1f28d69a8c2c81c314c8d44de.

Files changed

• New 66-file project under /Users/richh/dev/sites/amagansett.app, including four sites, shared core/data/UI packages, Worker API, deployment configs, tests, approved concepts, QA screenshots, Forst private-prototype images, README and launch receipts.
• Updated /Users/richh/Library/Mobile Documents/com~apple~CloudDocs/Codex/projects/AGENTS.md principles/PROJECTS.md with the milestone and explicit MVP limits.
• Installed the Playwright Chromium runtime under the current user cache for reproducible browser QA.

External state changed

• Created Cloudflare Pages projects amagansett-guide, amagansett-ak, amagansett-forst, and amagansett-preview.
• Deployed branded Workers Static Assets services amagansett-guide-edge, amagansett-ak-edge, amagansett-forst-edge, and amagansett-preview-edge.
• Deployed amagansett-api on protected api.amagansett.app and public capability-only share.amagansett.app.
• Created owner-only Cloudflare Access applications for all owner, API, Pages root, and Pages wildcard deployment hostnames.
• Created custom-domain Worker DNS records for the six Amagansett hosts. The four branded site routes passed direct edge checks; public DNS propagation remained outstanding at record time.

Commands and verification

• Installed dependencies with npm and installed the project-scoped Playwright Chromium runtime.
• Ran npm run verify: 16/16 unit tests, strict TypeScript, four production Vite builds, Worker dry run, and 5/5 Playwright interaction/accessibility tests passed.
• Captured and visually inspected desktop screenshots in design/qa/.
• Deployed Pages and Workers through Wrangler using credentials loaded at runtime by name from /Users/richh/.secrets/global.env; no credential value was written to the project or this record.
• Verified unauthorized Access redirects on Pages roots/hashed deployments and API, HTTP 200 on the no-index capability guest page, and direct edge Access redirects on all four branded URLs.

Backups and rollback

• Git commit afd8e08 is the source rollback anchor; the pre-commit state was a new empty repository, so no prior project files were overwritten.
• Cloudflare changes are isolated by names beginning with amagansett- and the listed *.amagansett.app hostnames. Roll back only those resources. Preserve the account's pre-existing WARP and App Launcher Access applications and existing mail-hardening DNS records.

Outstanding owner/actions

• Wait for authoritative DNS publication of amagansett.app, ak.amagansett.app, forst.amagansett.app, and preview.amagansett.app; re-probe for DNS answers plus Access redirects before treating branded URLs as externally reachable.
• Review the private prototypes and approve a visual/data tranche.
• Provider agreements/keys are required before licensed listing ingestion, Firecrawl enrichment, transactional email, and durable D1 profile/share/revocation work.
• Do not replace the public Forst website from this prototype without separate approval.