rdmsm4x-changelog-20260825-1641-amagansett-cloudflare-republish

Republished and independently reverified the private Amagansett prototype family on Cloudflare, corrected the canonical macOS-safe project path, and left a project-local handoff for the next Codex task.

Scope

• Host: rdmsm4x
• Canonical project: /Users/richh/dev/sites/amagansett-app
• Domain/product: amagansett.app
• Branch: codex/amagansett-private-prototype-20260823
• Application source deployed: 2eb14897309ce174c5d07db689a1b1c30ec9f5b8
• Handoff documentation commit: add37c7bb8cbd3b87a8b07c3efd2cbbb61ce1834

State changed

• Republished production artifacts to Cloudflare Pages projects amagansett-guide, amagansett-ak, amagansett-forst, and amagansett-preview.
• Redeployed Workers amagansett-api, amagansett-guide-edge, amagansett-ak-edge, amagansett-forst-edge, and amagansett-preview-edge.
• Preserved the owner-only Cloudflare Access gates and intentionally public capability-link guest route.
• Corrected the active project registry and coordination claim from the Finder-problematic .app filesystem suffix to /Users/richh/dev/sites/amagansett-app.
• Added /Users/richh/dev/sites/amagansett-app/SESSION-STATE.md.
• Added /Users/richh/dev/sites/amagansett-app/ISSUES.md.
• Updated /Users/richh/dev/sites/amagansett-app/docs/LAUNCH-RECEIPT.md.
• Updated /Users/richh/Library/Mobile Documents/com~apple~CloudDocs/Codex/projects/AGENTS.md principles/PROJECTS.md.
• Updated /Users/richh/.agent-coordination/checkins/root-amagansett-private-prototype-20260823.json and the paused portfolio check-in path reference.

Commands and verification

• Confirmed rdmsm4x, exact project root, clean Git status, branch, and source HEAD.
• Used project-local Node v24.19.0, npm 11.18.0, and Wrangler 4.125.0.
• Ran npm run verify: 5 Vitest files / 16 tests passed, strict TypeScript passed, four Vite production builds passed, Worker dry run passed, and 5 Playwright interaction/accessibility scenarios passed.
• Deployed four Pages production builds with wrangler pages deploy and the four edge Workers plus API/share Worker with wrangler deploy.
• Queried Cloudflare Pages production history and confirmed each new production deployment is sourced from 2eb1489.
• Queried public DNS through 1.1.1.1; all six branded hostnames returned Cloudflare A and AAAA answers.
• Unauthenticated probes returned 302 for the four branded owner sites, protected API, four Pages roots, and four new hashed Pages deployments.
• Guest demo returned 200 with private, no-store, noindex, nofollow, restrictive CSP, nosniff, and no-referrer headers.
• Live in-app browser showed the Cloudflare Access login for the owner surface and the rendered guest shortlist without relevant browser console warnings or errors.
• Ran a focused handoff secret-pattern scan; no deployment secret value was written to Git or this changelog.
• Final project worktree was clean at add37c7b.

Rollback

• Prefer Cloudflare Pages deployment history and Worker version rollback; exact current IDs are recorded in docs/LAUNCH-RECEIPT.md.
• The earlier source rollback anchor remains afd8e08; the accepted deployed source is 2eb1489.
• Do not delete Pages projects, Workers, domains, DNS, or Access applications without a separate explicit destructive-operation decision.
• Revert the local handoff commit with a normal Git revert if the documentation itself must be undone.

Outstanding owner/product actions

• The application remains Prototype mode and owner surfaces remain private behind Cloudflare Access.
• Curated listings/local-business records are research fixtures, not licensed live feeds.
• D1 persistence/revocation, provider agreements and credentials, Firecrawl enrichment, transactional email, Google sign-in, production Forst replacement, and automatic feed ingestion remain unimplemented.
• Replace global-key operator deployment with a scoped Amagansett Cloudflare API token before Production mode.
• Code-split the roughly 972 KB MapLibre-containing guide/AK bundles before Production mode.