amadan
Frozen0704391 pushed. Full make test and focused chooser race pass; meaningful selected-team and fixed-return overlays fail intended tests. Real shared handoff fixture finishes at/apps/docs; actual directory store/session/renderer used. Credential/legacy role constructor refused. Existing runtime router remains unmounted. Luna copy draft plus plain/humane passes completed under user copy-review waiver. Independent Command Code -m claude-fable-5 review running; artifacts /tmp/oficina-docs-chooser-review; actual CI pending. No deploy/merge.
Unmounted Docs team chooser controller and view open
Branchfeat/docs-team-chooser from approved store4c0d848; designfa64e28/discussion24. Scope only controller and existing Home renderer views, no runtime mounting/schema application/provisioning/deploy. Current sessions.Current opaque subject, empty/one/many membership choices, same-origin POST selection with fresh DB recheck, signed-out fixed /apps/docs return through shared handoff, no resource return or last-team session. Luna draft with plain/humane passes; human copy review waived by user. Tests and Fable review before handoff.
Code review APPROVE exact07043915daebae10512a710915263093ed793b5b, Command Code explicit -m claude-fable-5 and matching event.model, exit0. Actual hub CI success same SHA. Full make test/focused race and negative selected-team/fixed-return overlays passed as recorded. Reviewer verified session/CSRF/opaque-subject safety, no-store/no new cookie, fixed returns, selection requery and removed/foreign404, escaped labels/private failures, actual handoff return and unmounted scope. Artifacts /tmp/oficina-docs-chooser-review/design-review.ndjson final result, design-exit.json, ci.json. Integration notes: add missing-Origin POST case and explicit host-guard tests when mounting; role/renderer/origin constructor checks exist, direct constructor tests specifically cover credential role and nil store (review prose overstated broader constructor test coverage). Code-only approval, no browser/canary/deploy/merge claim.
Root integration prerequisite identified after unmounted code approval: Select POST -> team Docs crosses origins through a redirect chain, and browsers may apply form-action CSP through that chain. Existing directory CSP defaults self. Integration must supply a reviewed outgoing exact-origin policy from authoritative registered teams, or use an explicit same-origin continuation GET before leaving for the team, and verify actual Chromium/WebKit form behavior. Do not infer browser readiness from httptest redirects. Root owns this fix together with exact-host and missing-Origin CSRF integration tests. Frozen chooser approval remains code-only; no deployed chooser/browser acceptance was claimed.
Started design-only amendment on feat/chooser-continuation-design from exact07043915daebae10512a710915263093ed793b5b. Eight local browser observations: POST303 is blocked in Chromium/WebKit with JS on/off; POST200 immediate meta-refresh reaches external GET, no CSP errors, Back GETs chooser without replay. Evidence /tmp/oficina-home-meta-refresh-experiment. No implementation/deploy; scoped Fable design review next.
Scoped continuation design approved by configured Claude Fable at95dcd682ac106ab725d9a85f141285709ab3659c; annotation-only tip3192862abe1982b99fa8332936dd0a1a224333ae, feat/chooser-continuation-design, implementation/docs-chooser-continuation-design.md. Review record discussion27. Only successful POST becomes200 immediate meta-refresh plus plain link; CSRF/re-query and one-team GET303 preserved, no added CSP origins. Runtime integration and exact canonical production destination policy remain separately gated. No code or deploy.