carlos / platform Public

fix/carloku-simulated-signin-20261006

The local billing demo loses its /__keymail mount when StripPrefix rewrites URL.Path, so the rendered Approve form submits to /oauth/authorize and returns404. This repair makes the form submit to its current browser URL, confines fake callbacks to the console signin/stepup routes, and uses a shared mounted harness for the interactive listener and regression tests. Visible copy and production handlers are unchanged.

Exact demo base404e699f; delta is only billingflowdemotest.go and a new rendered-form journey test. Regression parses the actual forms and carries cookies, state and CSRF through sign-in, account creation, stepup, checkout cancel/reopen/pay and portal fail/recover/cancel. Browser and Keymail requests are origin-restricted; Stripe stays a loopback fake. Original action reproduced404. Final focused normal/race/vet PASS. Actual Opus source review ACCEPT; its patch-artifact path correction is fixed and application verified. Exact-tip Amadan CI passed gate, five cross shards and MinIO; local three cross builds and deliverable build passed. The exact delivered binary passed all three journey tests and a private interactive-listener sign-in smoke. Parent swapped41881 to that same hash and verified served sign-in. Local full gate was CANCELLED INCOMPLETE by root after discovering its inherited CARLOS_CONFIG override could bypass an old CLI test fake config and choose the real default console; retained output does not establish execution or response. No provider investigation or unsafe rerun. Build/vet/gofmt/launchctx had completed, but no full local green claim. Redacted incident and final evidence are indexed in notes/demo-signin-repair-checkpoint-20261006.json.

This branch repairs only the existing simulation. It does not advance paid-launch backendb58, change credential-source design, pricing, live billing or real provider state. Parent owns listener41881 and performed the swap; parent removed old recovery timer9f9c736f and replaced it with a repaired-only check. This lead changed neither. No main merge or deployment. Evidence lives under /home/paulca/.local/share/carloku-paid-launch-20260930/notes/demo-signin-review-manifest-corrected-20261006.json and demo-signin-author-evidence-20261006.json.

Commits 100
Files changed 650 +213154 −466
Discussions 1 1 open
Tasks 0/0 done

Activity