docs/HANDOFF.md

@@ -1,7 +1,7 @@
 # AtAnyRate — handoff
 
 **Repo:** `gitea@git.levkin.ca:ilia/AtAnyRate.git` · local `~/Documents/code/AtAnyRate`  
-**Deploy:** pve10 LXC **automationlab** @ `10.0.10.59` — `make deploy-atanyrate` (ansible)  
+**Deploy:** pve10 LXC **automationlab** @ `10.0.10.45` — `make deploy-atanyrate` (ansible)  
 **Vikunja:** [todo.levkin.ca → Business → AtAnyRate](https://todo.levkin.ca) (`AAR`)  
 **Epic backlog:** [../BACKLOG.md](../BACKLOG.md)
 
@@ -11,8 +11,8 @@
 
 | P | Task | Owner | Status |
 |---|------|-------|--------|
-| **P0** | Refresh Airbnb `state.json` (Mac `airbnb_login.py` → scp to guest) | @you | blocked — needs Mac browser login |
-| **P1** | Verify calendar price update E2E (`PriceInput-basePrice` selector) | @agent | todo |
+| **P0** | Refresh Airbnb `state.json` (Mac `airbnb_login.py` → scp to `.45`) | @you | blocked — needs Mac browser login; **no `state.json` on server now** |
+| **P1** | Verify calendar price update E2E (`PriceInput-basePrice` selector) | @agent | blocked on P0 |
 | **P3** | Tune `MIN_ALERT_SCORE` after real Telegram alerts | @you | todo |
 
 **Closed 2026-07-11 (Vikunja):** push to Gitea (`dfed038`); Beszel on automationlab.
@@ -22,7 +22,7 @@
 ## Done (reference)
 
 - Ticketmaster + SeatGeek providers, Telegram alerter, Playwright calendar automation
-- Deploy on automationlab; ansible vault `vault_atanyrate_*`
+- Deploy on automationlab (`10.0.10.45`); ansible vault `vault_atanyrate_*`
 - SeatGeek client ID on server (both providers 200 OK)
 
 ---
@@ -34,11 +34,12 @@ cd ~/Documents/code/AtAnyRate
 # alerts only (no Airbnb browser)
 python -m src.main --alerts-only --dry-run
 
-# on Mac: refresh session
+# on Mac: refresh session (display required)
 python scripts/airbnb_login.py
-scp state.json root@10.0.10.59:/opt/atanyrate/state.json
+scp state.json root@10.0.10.45:/opt/atanyrate/state.json
+ssh root@10.0.10.45 'chmod 600 /opt/atanyrate/state.json'
 ```
 
 ---
 
-*Updated 2026-07-11*
+*Updated 2026-07-12*