Skip to content

docs(agents): handoff — corrected env facts, isAuthenticated bug, next steps - #13

Merged
arcabotai merged 1 commit into
mainfrom
docs/agents-handoff
May 31, 2026
Merged

arcabotai merged 1 commit into
mainfrom
docs/agents-handoff

Conversation

@arcabotai

Copy link
Copy Markdown
Owner

Session handoff for the next agents/humans (chat is closing).

Key corrections & findings captured in AGENTS.md:

  • Environments are NOT isolated — Dev/Preview/Prod share the same Railway DB + same Privy app (cmpke74en…). Local dev runs on live production data. Documented risks, the 'prod on localhost' procedure, and the recommendation to build a real isolated dev env.
  • Cross-site Privy auth iframe (privy.castora.social) + the third-party-cookie gotcha that silently drops clean browser profiles to 'guest'.
  • Top-priority bug: isAuthenticated treats DB/infra errors as 'not authenticated' (→ 401 / guest onboarding) — root cause of the 'timeline not showing' incident. Needs 401-vs-503 distinction.
  • Handoff: shipped PRs fix: localhost/preview origin + CI + small cleanups #7–feat(workers): reconstruct scheduled-cast senders (gated off) #12, prioritized next steps (fix isAuthenticated → isolate envs → finish workers → tech debt), and how to drive Chrome via CDP for live debugging.

Docs-only; also gitignores editor chat-log artifacts (.specstory/, .history/).

…t steps

- CORRECTION: Development/Preview/Production share the SAME Railway DB and the
  SAME Privy app (cmpke74en...). There is no dev/prod data isolation — local
  dev runs against live production data. Documented the risks + how 'prod on
  localhost' works, and that a real isolated dev env is the recommended next step.
- Documented the cross-site Privy auth iframe (privy.castora.social) + the
  third-party-cookie gotcha that drops clean browser profiles to 'guest'.
- Flagged the top-priority bug: isAuthenticated treats DB/infra errors as
  'not authenticated' (→401 / guest onboarding), which was the root cause of the
  'timeline not showing' incident. Needs to distinguish 401 vs 503.
- Added a session handoff: shipped PRs #7-#12, prioritized next steps, and how
  to drive Chrome via CDP for live debugging.
- .gitignore: ignore .specstory/ and .history/ (editor chat-log artifacts).
@vercel

vercel Bot commented May 31, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
castora Ready Ready Preview, Comment May 31, 2026 11:23pm

@arcabotai
arcabotai merged commit a615a6f into main May 31, 2026
6 checks passed

This branch was successfully deployed

1 active deployment
Preview — 47f8a562 Deployed May 31, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant