Skip to content

HANDOFF.md

Latest commit

 

History

History
174 lines (155 loc) · 9.01 KB

HANDOFF.md

File metadata and controls

174 lines (155 loc) · 9.01 KB
Raw
type project-handoff
status active
updated 2026-07-17
project arcade-skill

Arcade Skill Handoff

Current State

  • Active checkout: /Users/zhanbo/Documents/Codex/2026-06-22/x-2
  • GitHub: https://github.com/Jenpo/arcade-skill
  • Verified branch: main; use the production manifest and current Actions runs below as deployment evidence instead of a handoff-embedded commit pointer.
  • Production: https://arcade.fxpeek.com
  • Production manifest: 2026.07.17-1012
  • Game bundle: tower100-1.5.1.html, sha256 prefix 9defc2e001da
  • Verified functional change sets: c0861a4 (exact Cloudflare artifact), 840b50c (independent GitHub manifest fallback), and 2e6a530 (loader v1.2 verified bundle mirrors). Use live endpoints and Actions as release evidence; do not chase a self-referential handoff commit.

Verified

  • Authenticated local LiteLLM and growth_smoke: PASS.
  • Tier A linter, three-post daily fuse, idempotent dry-run, and P3-disabled contract: PASS.
  • Playwright desktop 1440x900 and mobile 390x844 structure and platform-specific pixel baselines: PASS on macOS and GitHub Ubuntu.
  • GitHub Actions for build-and-deploy, visual-regression, and growth-smoke: PASS on e55b7a8.
  • Cloudflare production routes, support status, ads-off flag, manifest schema, kill switch, and bundle hash: PASS.
  • VoltAgent request created: VoltAgent/awesome-design-md#445
  • Mac LaunchAgents loaded:
    • SoM Monday 11:05
    • SEO Wednesday 11:15
    • Weekly telemetry Sunday 11:25
    • Production health every six hours
    • Owned-channel queue every five minutes
  • LaunchAgent health run: exit 0, Telegram receipt message_id=29943.
  • Local LiteLLM route recovered after starting the stopped Worker-Pro Ollama service. A later inherited-proxy 502 was fixed by making the LAN-only helper bypass desktop proxies; authenticated growth_smoke reports PASS without any paid API fallback.
  • The second direct SoM observation now has 20 clean rows across ChatGPT, Perplexity, Gemini, and Copilot. Gemini mentioned Arcade Skill (by Jenpo) once without an owned URL; the valid result is therefore 1/20 mentions (5%) and 0/20 citations. Claude's five rows are explicitly marked contaminated_local_install because the signed-in profile loads the installed Arcade skill even in Claude incognito. The report was delivered to Telegram as message_id=30067, and the clean LaunchAgent retry delivered message_id=30068.
  • Tier A audit ledger and persistent caffeinate -s LaunchAgent are installed. Queue, health, SoM, weekly, and SEO all produced real trigger=launchd receipts. The final SEO chain passed local LLM review, SSH push, Cloudflare deploy, strict production health, and Telegram delivery (message_id=30053).
  • Two first-run defects were caught and fixed: Wrangler ANSI warnings no longer corrupt D1 JSON parsing, and unattended Git pushes now use the verified SSH remote. SEO publishing now fails closed when local LLM review is unavailable.
  • The hardened rollback callback Worker version ae588937-fa83-4f32-858e-574440dc4d3f is deployed at https://arcade-live-check.fxpeek.workers.dev: /health returns 200 and an unauthenticated webhook request returns 401. Its tested site action resolves a unique successful Cloudflare production deployment, rolls back the primary, and queues the GitHub Pages fallback. Chat/user authorization and compact callback tests pass. No Telegram webhook is registered and no rollback secret is installed yet.

Ownership Boundaries

  • GitHub Actions deploys and verifies the jenpo.github.io fallback.
  • Mac Wrangler deploys dist/ to Cloudflare Pages production, then production_health.py --min-manifest-version proves the release.
  • GitHub Pages must not have arcade.fxpeek.com configured as a custom domain; otherwise its fallback URL redirects back to production and ceases to be an independent manifest source. dist/CNAME is deliberately absent. Loader v1.2 adds verified bundle mirrors across GitHub Pages, raw GitHub, and jsDelivr. Older v1.1 installations keep the primary entry compatibility path and still require reinstalling the skill to gain mirror retries.
  • Local LLM, X browser, and Cloudflare deployment credentials stay on the Mac. The dedicated live-check bot token is limited to the Mac mode-0600 env, Worker secrets, and GitHub Actions secrets so one bot owns messages and callbacks. The Pages Write token exists only as a Worker secret.
  • Tier A owned surfaces can run unattended only after deterministic gates.
  • Tier B Reddit/HN replies and external issues/PRs remain one-click approved.

Still Open

  1. SoM full second data point: direct browser observations are complete for ChatGPT, Perplexity, Gemini, and signed-in Copilot (20/25). Claude's five answers are excluded because the local Arcade skill contaminated both normal and incognito sessions. Finish them only in a clean Claude profile or after temporarily disabling the skill, then restore the skill. The scheduler correctly remains SoM PENDING until all 25 rows are clean observed_direct answers.
  2. One-click rollback callback: dual-primary/fallback code, target parsing, authorization gates, provisioner, and hardened Worker are deployed. Worker secret inventory is currently 0/7 and GitHub notification secret inventory is 0/2. Create a dedicated Telegram bot, a repository-only GitHub token with Actions write, and a Cloudflare account token with Pages Write, then run python3 scripts/provision_live_check.py configure. Do not reuse a Hermes polling bot, broad gh token, or the previously exposed Cloudflare key.
  3. One-week proof: LaunchAgents are active and kept awake. The authoritative ledger was recreated after the Mac restart at 2026-07-16T08:28:46Z. A later SoM notification timeout at 2026-07-16T21:40:55Z is retained as a real failure. The uninterrupted acceptance window now begins at the successful retry completed at 2026-07-16T21:44:28Z. Only tier_a_audit.py --days 7 --require-pass can close this item after seven real days.
  4. Stripe checkout: still pending; support route is live, but no buy.stripe.com link, Pro, or global ranking may be claimed.

Delivered Change Set

The tested SoM collector and local LLM routing fix were committed, pushed, and deployed in cd875b4 plus the exact-artifact deploy fix in c0861a4:

  • scripts/growth/som_batch_schema.json (new)
  • scripts/growth/som_codex_collector.py (new)
  • scripts/growth/tier_a_runner.py (modified)
  • scripts/growth/tier_a_smoke.py (modified)
  • scripts/growth/som_tracker.py (modified)
  • scripts/install_tier_a_launchd.py (modified)
  • scripts/local_llm.py (modified)
  • docs/growth-engine.md (modified)
  • docs/local-llm-policy.md (modified)

Completed checks: Python compile, schema load, one bounded proxy collection, 25-row validation, atomic-write/concurrency tests, direct SoM scoring with contamination exclusion, Tier A smoke, authenticated local-LLM growth smoke, LaunchAgent retry, Telegram delivery, and desktop/mobile Playwright regression. Scheduled cloud collection is explicitly off (ARCADE_SOM_CODEX_ENABLED=0). Playwright passed locally and in GitHub Actions. Cloudflare production passed strict health verification at manifest 2026.07.17-1012. GitHub Pages custom-domain binding was cleared and the direct manifest endpoint now returns HTTP 200 instead of redirecting to production (840b50c). Loader v1.2 verified all four bundle mirrors at SHA256 9defc2e001da.... Release v1.2.0 is Latest; its arcade.skill SHA256 is f1156ca058f7c04c7f857e4e9cd2ba05bfb7abbee106c3026ec6bf756fae8ad8.

Product Truth

  • The playable character is an original pixel person, not a plain block.
  • Tower100 v1.5.1, multilingual project pages, BGM/SFX, hosted play, sharing, telemetry, Stripe support routing, and local best score are live.
  • Stripe checkout is not live. /support/ is a truthful waiting/support route.
  • Ads are disabled. AdSense must never be claimed for localhost skill sessions.
  • A production global leaderboard does not exist; P3 remains disabled.
  • The Egret original is not copied. Game code and visual assets are original.

Non-Negotiable Rules

  • Low-risk copy, SEO/GEO, critique, and summaries use the local LLM first. Do not silently fall back to a paid API. External model calls are allowed only for explicit external measurement or diagnosis.
  • Tier A owned channels may publish automatically only after deterministic lint, rate-limit, idempotency, live-check, and rollback gates pass.
  • Tier B Reddit/HN/V2EX and third-party issues/PRs stay one-click approved.
  • Never expose or copy credentials into GitHub, logs, chat, or documentation.
  • Do not mark the goal complete until full SoM evidence, safe rollback callback, and seven days of unattended Tier A evidence are verified.

Resume Commands

cd /Users/zhanbo/Documents/Codex/2026-06-22/x-2
git status --short
python3 scripts/growth/tier_a_runner.py health
python3 scripts/growth/growth_smoke.py
npm run test:visual