fixes

.claude/settings.local.json

···
 {
   "permissions": {
     "allow": [
-      "Bash(cat:*)",
-      "Bash(git add:*)",
-      "Bash(git commit:*)",
-      "Bash(git push)",
-      "Bash(npm run lint:*)",
-      "Bash(npm run check:*)",
-      "Bash(npm run lint:fix:*)",
-      "Bash(npm run db:generate:*)",
-      "Bash(npm run:*)",
-      "Bash(npm audit:*)",
-      "Bash(npm install)",
-      "Bash(curl:*)",
-      "Bash(npx tsc:*)",
-      "Bash(findstr:*)",
-      "Bash(yarn install)",
-      "Bash(node --version:*)",
-      "Bash(npm:*)",
-      "Bash(docker-compose restart:*)",
-      "Bash(echo \"# Bluesky Branding Removal Checklist\n\n## 1. App Icons & Images\n- assets/app-icons/*.png - App icons (replace with Aurora Prism branding)\n- assets/favicon.png - Browser favicon\n- assets/icon-android-*.png - Android icons\n- assets/default-avatar.png - Default avatar image\n\n## 2. App Metadata\n- app.json - App name, slug, description\n- package.json - App name and description\n\n## 3. Text References (276 occurrences)\n- Onboarding screens (src/screens/Onboarding/)\n- Signup screens (src/screens/Signup/)\n- Settings/About screens\n- Terms of Service / Privacy Policy references\n- Help text and tooltips\n- Error messages mentioning Bluesky\n\n## 4. URLs\n- bsky.app references (feed URLs, profile URLs)\n- bsky.social references\n- Links to Bluesky support/help\n\n## 5. Service Names\n- Bluesky Moderation Service references\n- Default feed generator names\n\nTotal: 276 text references found\")",
-      "Bash(psql \"$DATABASE_URL\" -c \"SELECT \n  (SELECT COUNT(*) FROM users) as users,\n  (SELECT COUNT(*) FROM posts) as posts,\n  (SELECT COUNT(*) FROM likes) as likes,\n  (SELECT COUNT(*) FROM reposts) as reposts,\n  (SELECT COUNT(*) FROM follows) as follows,\n  (SELECT COUNT(*) FROM blocks) as blocks;\")",
-      "Bash(dig +short TXT _atproto.spacelawshitpost.me)",
-      "Bash(python3 -m json.tool)",
-      "Bash(npx --yes @expo/cli export:web)",
-      "Bash(magick favicon.png -define icon:auto-resize=16,32,48 favicon.ico)",
-      "Bash(convert favicon.png -define icon:auto-resize=16,32,48 favicon.ico)",
-      "Bash(npx --yes @fiahfy/ico-cli -i assets/favicon.png -o assets/favicon.ico)"
+      "Bash(node -e \"const {db} = require(''''./dist/server/db''''); db.execute(''''SELECT COUNT(*) as feed_count FROM feed_generators;'''').then(r => console.log(r.rows[0])).catch(e => console.error(e))\")",
+      "Bash(node -e \"const data = require(''''fs'''').readFileSync(0, ''''utf-8''''); const json = JSON.parse(data); console.log(''''Service DID:'''', json.view.did); console.log(''''Service endpoint (from DID doc):'''', json.view.did)\")",
+      "Bash(node -e \"const data = require(''''fs'''').readFileSync(0, ''''utf-8''''); const json = JSON.parse(data); const feedgenService = json.service?.find(s => s.id === ''''#bsky_fg''''); console.log(''''Feed Generator Endpoint:'''', feedgenService?.serviceEndpoint || ''''Not found'''')\")",
+      "Bash(node -e \"const data = require(''''fs'''').readFileSync(0, ''''utf-8''''); console.log(''''Response:'''', data.substring(0, 1000))\")"
     ],
     "deny": [],
     "ask": []

server/scripts/fix-future-dated-posts.ts

···
+/**
+ * One-time script to fix future-dated posts in the database
+ *
+ * This fixes posts that were created with timestamps in the future,
+ * which causes them to appear at the top of timelines incorrectly.
+ *
+ * Run with: npx tsx server/scripts/fix-future-dated-posts.ts
+ */
+
+import { db } from '../db';
+import { posts, feedItems } from '../../shared/schema';
+import { sql } from 'drizzle-orm';
+
+async function fixFutureDatedPosts() {
+  console.log('[FIX] Starting fix for future-dated posts...');
+
+  try {
+    // Find all posts with createdAt in the future (with 5 min grace period)
+    const gracePeriod = sql`INTERVAL '5 minutes'`;
+    const futurePosts = await db.execute(sql`
+      SELECT uri, "authorDid", "createdAt", "indexedAt", text
+      FROM ${posts}
+      WHERE "createdAt" > NOW() + ${gracePeriod}
+      ORDER BY "createdAt" DESC
+    `);
+
+    console.log(`[FIX] Found ${futurePosts.rows.length} future-dated posts`);
+
+    if (futurePosts.rows.length === 0) {
+      console.log('[FIX] No future-dated posts found. Nothing to fix.');
+      return;
+    }
+
+    // Log the posts we're about to fix
+    for (const post of futurePosts.rows) {
+      console.log(`[FIX] Post: ${post.uri}`);
+      console.log(`  Author: ${post.authorDid}`);
+      console.log(`  Original createdAt: ${post.createdAt}`);
+      console.log(`  Text: ${(post.text as string).substring(0, 100)}...`);
+    }
+
+    // Update posts: set createdAt to indexedAt (when we first saw it)
+    const updateResult = await db.execute(sql`
+      UPDATE ${posts}
+      SET "createdAt" = "indexedAt"
+      WHERE "createdAt" > NOW() + ${gracePeriod}
+    `);
+
+    console.log(`[FIX] Updated ${updateResult.rowCount} posts`);
+
+    // Also update feedItems that reference these posts
+    const feedItemsResult = await db.execute(sql`
+      UPDATE ${feedItems}
+      SET "sortAt" = "createdAt"
+      WHERE "originatorDid" IN (
+        SELECT "authorDid"
+        FROM ${posts}
+        WHERE "createdAt" > NOW() + ${gracePeriod}
+      )
+    `);
+
+    console.log(`[FIX] Updated ${feedItemsResult.rowCount} feed items`);
+
+    console.log('[FIX] ✓ Future-dated posts have been fixed!');
+    console.log('[FIX] These posts will now appear in the correct chronological order.');
+
+  } catch (error) {
+    console.error('[FIX] Error fixing future-dated posts:', error);
+    throw error;
+  }
+}
+
+// Run the fix
+fixFutureDatedPosts()
+  .then(() => {
+    console.log('[FIX] Script completed successfully');
+    process.exit(0);
+  })
+  .catch((error) => {
+    console.error('[FIX] Script failed:', error);
+    process.exit(1);
+  });

server/services/event-processor.ts

···
   }
 
   // Guard against invalid or missing dates in upstream records
+  // Also prevents future-dated posts from appearing at the top of timelines
   private safeDate(value: string | Date | undefined): Date {
     if (!value) return new Date();
     const d = value instanceof Date ? value : new Date(value);
-    return isNaN(d.getTime()) ? new Date() : d;
+
+    // If date is invalid, return current time
+    if (isNaN(d.getTime())) return new Date();
+
+    const now = new Date();
+
+    // If date is in the future (with 5 minute grace period for clock skew),
+    // clamp it to current time to prevent timeline manipulation
+    const gracePeriod = 5 * 60 * 1000; // 5 minutes in milliseconds
+    if (d.getTime() > now.getTime() + gracePeriod) {
+      console.warn(
+        `[EVENT_PROCESSOR] Future-dated record detected (${d.toISOString()}), clamping to current time`
+      );
+      return now;
+    }
+
+    return d;
   }
 
   private async processDelete(uri: string, collection: string) {

server/services/feed-generator-client.ts

···
       }
 
       const data = await response.json();
-      const skeleton = feedSkeletonResponseSchema.parse(data);
+
+      // Try to parse the response - if it fails, log the actual response for debugging
+      try {
+        const skeleton = feedSkeletonResponseSchema.parse(data);
 
-      console.log(
-        `[FeedGenClient] Received ${skeleton.feed.length} posts from feed generator`
-      );
+        console.log(
+          `[FeedGenClient] Received ${skeleton.feed.length} posts from feed generator`
+        );
 
-      return skeleton;
+        return skeleton;
+      } catch (parseError) {
+        console.error(
+          `[FeedGenClient] Invalid response format from feed generator ${serviceEndpoint}:`
+        );
+        console.error('[FeedGenClient] Response data:', JSON.stringify(data).substring(0, 500));
+        console.error('[FeedGenClient] Parse error:', parseError);
+
+        // Throw a more user-friendly error
+        throw new Error(
+          `Feed generator at ${serviceEndpoint} returned an invalid response format. ` +
+          `This may indicate the feed generator is out of date or misconfigured.`
+        );
+      }
     } catch (error) {
       console.error('[FeedGenClient] Error fetching skeleton:', error);
       throw error;

server/services/xrpc-api.ts

···
       return [];
     }
 
+    // Check which users exist in database
+    const existingUsers = await storage.getUsers(uniqueDids);
+    const existingDids = new Set(existingUsers.map(u => u.did));
+    const missingDids = uniqueDids.filter(did => !existingDids.has(did));
+
+    // Fetch missing users from their PDSes
+    if (missingDids.length > 0) {
+      console.log(`[XRPC] Fetching ${missingDids.length} missing user(s) from their PDSes`);
+
+      await Promise.all(
+        missingDids.map(async (did) => {
+          try {
+            const { pdsDataFetcher } = await import('./pds-data-fetcher');
+            await pdsDataFetcher.fetchUser(did);
+            console.log(`[XRPC] Successfully fetched user ${did} from their PDS`);
+          } catch (error) {
+            console.error(`[XRPC] Failed to fetch user ${did} from PDS:`, error);
+          }
+        })
+      );
+    }
+
     const [
       users,
       followersCounts,