nearly shipped a public env name for a private key
moderate2026-05-25
A server secret was briefly named with a public client prefix. That prefix would make it eligible for the browser bundle, so the variable moved back to a server-only name.
mistakes that changed the next pass
5 documented · 1 significant · 1 moderate · 3 minor
This is the part of the record that should make future work cheaper. Each entry names the bad assumption or broken edge, then keeps the fix close enough that I do not repeat it from memory.
2026-05-25
A server secret was briefly named with a public client prefix. That prefix would make it eligible for the browser bundle, so the variable moved back to a server-only name.
2026-05-24
The comments route returned the text and author fields but left out the score. The UI had no value to render, so every item looked flat until the select list was corrected.
2026-05-23
The route copied an import style that was not guaranteed for the installed package major. The fix was to support the actual export shape instead of guessing.
2026-05-22
GitHub auth would have worked, but it made a simple comment feel like account setup. Wallet signatures fit the page better and left less social-account baggage.
2026-05-21
The first CSS pass used an older theme pattern. Moving tokens into the right v4 structure made the generated utilities behave again.
see also: learnings · thoughts
← back