Staging → Main: Profile seeding on sign-in + OTP screen readability fix

[holkexyz]

Summary

• Seed empty profile records on sign-in — On every OAuth callback, check if app.certified.actor.profile and app.bsky.actor.profile "self" records exist; if not, create empty ones with createdAt. Best-effort (wrapped in try/catch, won't break sign-in).
• Fix OTP login screen readability — Swap brand_color to navy (#0F2544) and background_color to white (#FFFFFF). The previous dark navy background made the ePDS's internally-derived body text nearly unreadable.

Changes

• src/app/api/auth/callback-handler/route.ts — Added ensureProfileRecords() helper called after session creation
• src/app/.well-known/oauth-client-metadata/route.ts — Flipped brand_color and background_color values

Summary by CodeRabbit

• New Features

  • Sign-in process now automatically initializes user profile records upon authentication.

• Style

  • Updated OAuth client metadata colors (brand and background).

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
certified-app	Ready	Preview, Comment	Mar 11, 2026 0:42am

[coderabbitai]

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Free

Run ID: 86113d4b-8bfc-401a-b0b0-09ed368db10a

📥 Commits

Reviewing files that changed from the base of the PR and between 21af558 and ec8f99b.

📒 Files selected for processing (2)

• src/app/.well-known/oauth-client-metadata/route.ts
• src/app/api/auth/callback-handler/route.ts

---

📝 Walkthrough

Walkthrough

Two changes were made: OAuth client metadata colors were swapped to update visual branding, and a post-sign-in profile seeding mechanism was introduced to automatically create "self" records in specified collections after authentication.

Changes

Cohort / File(s)	Summary
OAuth Metadata src/app/.well-known/oauth-client-metadata/route.ts	Swapped brand_color and background_color values: brand_color now #0F2544, background_color now #FFFFFF.
Auth Callback Handler src/app/api/auth/callback-handler/route.ts	Added post-sign-in seeding logic: defines PROFILE_COLLECTIONS and ensureProfileRecords function to check and create "self" records via AT Protocol repo API after session creation; errors are silently ignored.

Sequence Diagram(s)

sequenceDiagram
    participant Client
    participant Handler as Callback Handler
    participant Session as Session Management
    participant OAuth as OAuth Restoration
    participant Agent as Agent Instance
    participant ATP as AT Protocol API
    
    Client->>Handler: GET /callback (with auth code)
    Handler->>Session: Create session
    Session-->>Handler: Session created
    Handler->>OAuth: Restore OAuth session
    OAuth-->>Handler: Session restored
    Handler->>Agent: Instantiate Agent
    Agent-->>Handler: Agent ready
    Handler->>ATP: ensureProfileRecords (for each collection)
    Note over ATP: Check for "self" record<br/>Create if missing
    ATP-->>Handler: Records ensured (or silently fail)
    Handler-->>Client: Sign-in complete

Loading

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~12 minutes

Poem

🐰✨ Colors dance in a brand new dress,
While profiles sprout with nary a mess—
Post-sign-in seeds we gently sow,
Self-records bloom where users flow! 🌱

---

Note

🎁 Summarized by CodeRabbit Free

Your organization is on the Free plan. CodeRabbit will generate a high-level summary and a walkthrough for each pull request. For a comprehensive line-by-line review, please upgrade your subscription to CodeRabbit Pro by visiting https://app.coderabbit.ai/login.

_{Comment @coderabbitai help to get the list of available commands and usage tips.}