amadan
Pushed70beb9e64a7bffb5bec4eacd881cba6d097d24a8. Source limited to new homeexchange.go/homelink_handlers.go plus signed-handoff tests. Full go test ./... passed before optional navigation callback addition; final TestHomeBridge race suite and go vet pass. Optional returnPath callback defaults root and revalidates through shared SafePath; signed-flow tests cover valid resource return and hostile fallback. Three mutations fail correctly for accepted current-account replacement, overwritten original AuthTime, and constant-cookie binding accepting session rotation. Initial account mutation compile failure was corrected; final log demonstrates rejected exchange unexpectedly303. Evidence /tmp/oficina-docs-home-bridge-full.log, -race.log and /tmp/oficina-docs-home-bridge-mutations. Parent owns mounting, configuration and integrated Fable review. Required link-route middleware: CSRF, session, typed identity and admission; issuer callback alone outside CSRF. Actual current cookie unresolved is fail-closed, because framework From merges lookup/storage refusal; stale-cookie/local reauthentication recovery remains parent continuation. No deployment claimed.
Connect shared Home exchange to existing Docs accounts open
On branch feat/home-http-bridge
Bounded HTTP bridge subtask from root integration0c74999 and approved Docs46. Own new homeexchange.go/homelink_handlers.go and focused tests only. Shared ordinary/fresh consumers use the same replay store; explicit local initiation binds the generated nonce; linking preserves current local session; ordinary verified Home sign-in resolves only existing links and refuses current-account replacement. Root owns mounting/config/CSRF/admission and local reauthentication continuation. No UI copy, production deployment or independent review on this subtask; whole integrated branch gets Fable review.