rdmsm4x-changelog-20260826-0355-amagansett-private-platform-launch

Privately launched the durable semantic HTML5 + HTMX 2 Amagansett platform so the accepted clean-white AK, Guide, Forst, and Preview surfaces now run against D1-backed Cloudflare fragments and fail closed behind Access.

Scope

• Host: rdmsm4x
• Project mode: Prototype
• Canonical project root preserved: /Users/richh/dev/sites/amagansett-app
• Writer worktree: /Users/richh/dev/_handoff/codex-out/amagansett-data-recovery-20260826
• Branch: codex/amagansett-data-recovery-20260826
• Implementation commit deployed: fa6c4697a5b20a18a107b0c957687e57819785fb
• Documentation commit: c4c42682081454273b7868480aa55677e55a5ca6

Files changed

The exact repository manifest is reproducible with:

git -C /Users/richh/dev/_handoff/codex-out/amagansett-data-recovery-20260826 diff --name-only add37c7b..c4c42682081454273b7868480aa55677e55a5ca6

Principal exact paths:

• /Users/richh/dev/_handoff/codex-out/amagansett-data-recovery-20260826/wrangler.jsonc
• /Users/richh/dev/_handoff/codex-out/amagansett-data-recovery-20260826/deploy/ak.wrangler.jsonc
• /Users/richh/dev/_handoff/codex-out/amagansett-data-recovery-20260826/deploy/guide.wrangler.jsonc
• /Users/richh/dev/_handoff/codex-out/amagansett-data-recovery-20260826/deploy/forst.wrangler.jsonc
• /Users/richh/dev/_handoff/codex-out/amagansett-data-recovery-20260826/deploy/preview.wrangler.jsonc
• /Users/richh/dev/_handoff/codex-out/amagansett-data-recovery-20260826/migrations/0001_amg_platform.sql
• /Users/richh/dev/_handoff/codex-out/amagansett-data-recovery-20260826/migrations/0002_seed_platform_inventory.sql
• /Users/richh/dev/_handoff/codex-out/amagansett-data-recovery-20260826/worker/src/index.ts
• /Users/richh/dev/_handoff/codex-out/amagansett-data-recovery-20260826/worker/src/platform-api.ts
• /Users/richh/dev/_handoff/codex-out/amagansett-data-recovery-20260826/worker/src/platform-fragments.ts
• /Users/richh/dev/_handoff/codex-out/amagansett-data-recovery-20260826/worker/src/queue.ts
• /Users/richh/dev/_handoff/codex-out/amagansett-data-recovery-20260826/worker/src/scheduled.ts
• /Users/richh/dev/_handoff/codex-out/amagansett-data-recovery-20260826/workers/amagansett-ak-edge/src/index.ts
• /Users/richh/dev/_handoff/codex-out/amagansett-data-recovery-20260826/workers/amagansett-guide-edge/src/index.ts
• /Users/richh/dev/_handoff/codex-out/amagansett-data-recovery-20260826/workers/amagansett-forst-edge/src/index.ts
• /Users/richh/dev/_handoff/codex-out/amagansett-data-recovery-20260826/sites/ak/index.html
• /Users/richh/dev/_handoff/codex-out/amagansett-data-recovery-20260826/sites/ak/src/main.ts
• /Users/richh/dev/_handoff/codex-out/amagansett-data-recovery-20260826/sites/ak/src/site.css
• /Users/richh/dev/_handoff/codex-out/amagansett-data-recovery-20260826/sites/guide/index.html
• /Users/richh/dev/_handoff/codex-out/amagansett-data-recovery-20260826/sites/guide/src/main.ts
• /Users/richh/dev/_handoff/codex-out/amagansett-data-recovery-20260826/sites/guide/src/site.css
• /Users/richh/dev/_handoff/codex-out/amagansett-data-recovery-20260826/sites/forst/index.html
• /Users/richh/dev/_handoff/codex-out/amagansett-data-recovery-20260826/sites/forst/src/main.tsx
• /Users/richh/dev/_handoff/codex-out/amagansett-data-recovery-20260826/sites/forst/content/source-manifest.json
• /Users/richh/dev/_handoff/codex-out/amagansett-data-recovery-20260826/sites/forst/public/downloads/ (21 authorized PDFs)
• /Users/richh/dev/_handoff/codex-out/amagansett-data-recovery-20260826/sites/forst/public/images/forst/ (authorized first-party image mirror; exact filenames are in the Git manifest and source manifest)
• /Users/richh/dev/_handoff/codex-out/amagansett-data-recovery-20260826/sites/preview/
• /Users/richh/dev/_handoff/codex-out/amagansett-data-recovery-20260826/tests/unit/
• /Users/richh/dev/_handoff/codex-out/amagansett-data-recovery-20260826/tests/e2e/
• /Users/richh/dev/_handoff/codex-out/amagansett-data-recovery-20260826/SESSION-STATE.md
• /Users/richh/dev/_handoff/codex-out/amagansett-data-recovery-20260826/ISSUES.md
• /Users/richh/dev/_handoff/codex-out/amagansett-data-recovery-20260826/docs/LAUNCH-RECEIPT-20260826.md
• /Users/richh/Library/Mobile Documents/com~apple~CloudDocs/Codex/projects/AGENTS.md principles/PROJECTS.md

Commands and verification

• npm run verify
  • 24 Vitest files / 148 tests passed
  • strict TypeScript passed
  • four production builds passed
  • platform Worker dry run passed
  • Preview real-Wrangler local contract passed
  • 28 Playwright desktop/mobile/interactivity/accessibility tests passed
• All five production configs passed wrangler deploy --dry-run.
• Local seed migration executed 1,686 commands successfully.
• Remote D1 migrations 0001 and 0002 applied successfully.
• Remote D1 counts: 786 properties, 786 property sources, 3 permitted remote media references, 48 Guide businesses.
• wrangler d1 migrations list --remote: no pending migrations.
• wrangler queues list: property and Guide queues each have one producer and one consumer; both DLQs exist.
• wrangler deployments status: all five new versions receive 100% traffic.
• Cookie-free probes: Guide, AK, Forst, Preview, and API return 302 to Access; share root returns uniform 404.
• Authenticated live-browser visual QA remains pending because the Codex in-app browser backend reported unavailable after deployment. Local browser coverage is green.

Production versions and rollback

• API/share current 3ec2a130-acd1-4ee0-bef8-2ce37c3a89e0; previous fdda2a92-23f4-4e09-9aed-b01472c489ee
• AK current 99192d26-3b9f-43b8-85e6-da3c25a8b0a9; previous ec25f8e2-6fd8-425f-ae6b-915530593cc6
• Guide current 06eaa274-eb8d-48cc-85c6-b778f6e8e6db; previous 33b213d0-1c21-4b80-8b65-605f39ed1365
• Forst current ca93086e-effe-4a52-9cb5-dfefa09b92e6; previous f5c4fccc-2e60-4ea5-a91f-15aa6c6e5e82
• Preview current 046ea2b6-c6e2-4f1d-b453-aff9a1d4e1d1; previous 4043d280-7478-4935-b6b0-d7c39894fccc

Undo one Worker with npx wrangler rollback <previous-version-id> --config <matching-config>. D1 migrations are additive and must not be destructively reversed without a separate reviewed data rollback.

Provider and security boundaries

• OWNER_HMAC_SECRET was generated and uploaded directly as a Cloudflare Worker secret. Its value was not written to disk, chat, Git, Notes, or the command line.
• The Firecrawl credential pasted into chat is exposed and was not stored or deployed. Owner action: revoke it and create a scoped replacement.
• No Google Maps/Routes or transactional email credential is configured.
• Provider-dependent scheduled jobs record truthful partial/not-configured states.
• Third-party listing media remains remote and source-attributed; no unauthorized binary caching was added.
• The canonical checkout was preserved and not merged or overwritten.

Backups and preservation

• Source and deployment evidence are preserved in the named worktree and Git branch above.
• Prior Cloudflare Worker versions remain available for rollback.
• Previous source/recovery copies were not deleted.
• The D1 seed migration is additive and idempotent through INSERT OR IGNORE.

Outstanding owner actions

1. Review the five deployed URLs in an authenticated browser.
2. Revoke the exposed Firecrawl key and create a project-scoped replacement if automated source enrichment should run.
3. Supply/approve scoped Google Routes and local-business provider credentials if live route, menu, hours, and ordering states should be activated.
4. Decide whether to integrate the preserved branch into the canonical checkout after visual acceptance.