Skip to content

docs(lane1): reverify soft-404 item — source fixed on main (PR #34), live blocked on missing Cloudflare token - #189

Merged
nish3451 merged 2 commits into
mainfrom
docs/lane1-soft-404-reverify-20260817
Aug 17, 2026
Merged

docs(lane1): reverify soft-404 item — source fixed on main (PR #34), live blocked on missing Cloudflare token#189
nish3451 merged 2 commits into
mainfrom
docs/lane1-soft-404-reverify-20260817

Conversation

@nish3451

Copy link
Copy Markdown
Collaborator

Lane 1 reverify: soft-404 item

Item: [unreviewed-by-opus] Every unknown URL on tinystudio.in returns HTTP 200 with the full homepage - soft-404.

Verdict

No source change is possible or needed — the soft-404 fix is already merged on main (PR #34, commit 4499dd4) with a full local/CI/deploy-proof chain; live delivery is still blocked by the missing CLOUDFLARE_API_TOKEN repo secret (NEEDS-NISH). Re-deploying origin/main once a Pages-scoped token is provisioned closes the item; no code change will be required.

Evidence (2026-08-17, from this checkout of fresh origin/main)

  • Source: fixed and pinned. test-public-soft-404.mjs → 19 checks, 0 failures (wired into npm test/npm ci). Deploy-bundle gate (NEUTRAL_PROOFS, top-level real-404 proof from PR fix(public): enforce the top-level real-404 deploy proof in the release lane #104) passes. Release-lane post-deploy acceptance asserts live 404s with auto-rollback.
  • Live: soft-404 is a stale-deployment artifact. Unknown URL → HTTP 200 + homepage body; /404.html → HTTP 200 + homepage body. check-public-live-soft-404.mjs → 5 failures; check-public-live-deploy.mjs → 7 failures (whole production deployment is the stale 2026-06-20 bundle, which has no 404.html, so Pages' SPA fallback serves index.html for everything).
  • Blocker (NEEDS-NISH). gh secret list has only CLOUDFLARE_ACCOUNT_ID; deploy workflow fails fail-closed on every main push (latest 2026-08-17T00:24:49Z); nightly Live Site Check alarms daily (by design). VPS fleet token verified 403 (no Pages permission).

One-time fix (no code change needed)

  1. Create a Cloudflare "Pages: Edit" API token scoped to account f670a698e17bf160c8e4679823e68916
  2. gh secret set CLOUDFLARE_API_TOKEN -R nish3451/tinystudio-in
  3. Trigger the deploy lane → check-public-live-soft-404.mjs must report 0 failures.

Docs-only change: .lane/reports/docs-lane1-soft-404-reverify-20260817.md

@chatgpt-codex-connector

Copy link
Copy Markdown

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

@greptile-apps greptile-apps Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Your trial has ended. Reactivate Greptile to resume code reviews.

@coderabbitai

coderabbitai Bot commented Aug 17, 2026

Copy link
Copy Markdown

Warning

Review limit reached

@nish3451, you've reached your PR review limit, so we couldn't start this review.

Next review available in: 6 minutes

Limit details: You’ve used all 1 included review currently available under your plan.

Enable usage-based reviews in Billing to review now. Otherwise, wait until the next included review is available.
You're only billed for reviews past your plan's rate limits ($0.25/file).

How can I continue?

After more reviews become available, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

To avoid repeated limits, reduce automatic review volume by pausing incremental auto-reviews earlier, using label-based review opt-in, excluding WIP or generated PR titles, or requesting reviews manually when the PR is ready. If your team needs uninterrupted high-volume reviews, an organization admin can enable usage-based reviews.

How do review limits work?

CodeRabbit enforces per-developer PR review limits for each organization. Most developers receive the normal plan review availability.

For paid Pro and Pro+ PR reviews, CodeRabbit uses adaptive limits for sustained high-volume activity. When a developer's recent PR review activity reaches the 95th percentile or higher among CodeRabbit users, additional reviews become available more gradually as earlier reviews age out of the rolling window.

Please refer docs for additional details.

Review details
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Free

Run ID: 94772d52-aca8-4578-ab25-833ff9b1c33e

📥 Commits

Reviewing files that changed from the base of the PR and between 722a8d7 and 8594dfa.

📒 Files selected for processing (1)
  • .lane/reports/docs-lane1-soft-404-reverify-20260817.md

Note

🎁 Summarized by CodeRabbit Free

Your organization is on the Free plan. CodeRabbit will generate a high-level summary and a walkthrough for each pull request. For a comprehensive line-by-line review, please upgrade your subscription to CodeRabbit Pro by visiting https://app.coderabbit.ai/login.

Comment @coderabbitai help to get the list of available commands.

@greptile-apps greptile-apps Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Your trial has ended. Reactivate Greptile to resume code reviews.

@nish3451
nish3451 merged commit a6cd49b into main Aug 17, 2026
2 checks passed
nish3451 added a commit that referenced this pull request Aug 22, 2026
…-08-20) (#210)

The soft-404 defect (unknown URL returns HTTP 200 with the homepage body)
is now fixed on https://tinystudio.in: a random nonce URL returns HTTP 404
with the real 'Page not found' page (title 'Page not found • Tiny Studio',
H1 'This page could not be found.', noindex meta, shared header/footer
chrome, no canonical to '/'). The dedicated live soft-404 checker passes
18/18 and the static unit test passes 21/21.

Previous 2026-08-17 reverify (PR #189) concluded the soft-404 was real and
live, blocked on the missing CLOUDFLARE_API_TOKEN. The deploy lane has
since been repaired end-to-end:
- PR #198: workflow reads secrets.CLOUDFLARE_API_TOKEN || secrets.CLOUDFLARE
- PR #199: PAGES_PROJECT = 'tiny-studio' (was the broken 'tiny-studio-3f5'
  subdomain), wrangler --project-name fixed
- PR #208: CF_API_BASE /api/v4 -> /client/v4 (captureProductionIdentity
  was 403'ing on every call since the lane was created)

With the lane able to capture a real canonical_deployment, the daily
schedule + the next main push published the filtered public/ bundle, and
the live 404 page now appears. Live evidence (curl, live checker, deploy
acceptance section C, deploy-bundle gate) all agree; item is closed on
the live proof, not a code task.

Report only; no source file changed. Files:
  + .lane/reports/docs-lane1-soft-404-reverify-20260820.md

Co-authored-by: minimax-vps <minimax-vps@MiniMax.local>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant