amadan
Frozen171f49a integration full local make test and actual exact-SHA CI passed. Mounted App.Router browser matrix now8/8 Chromium/WebKit x scripts on/off x320/1280: real local captured-email recovery for expired/unknown chooser POST, fixed /apps/docs return, one-team303, multiple-team200 continuation/fallback, independent tabs and removed-membership refusal. No live email/authentication claim. Evidence /tmp/oficina-directory-runtime-browser/results.json and scope.json. Two separately compiled overlay mutations (duplicate-cookie guard removal, route-origin binding removal) fail the intended mounted tests; /tmp/oficina-directory-runtime-mutations/results.json. Whole-code Fable review remains active; old02f/new171 disposable DB compatibility proof delegated. Built arm64 artifact /tmp/oficina-directory-runtime-release/home-arm64; no deployment yet. Roster module667 approved/published separately and producer32fb49c under review; neither mounted here.
Directory Docs chooser runtime integration open
On branch feat/directory-runtime
Implementation follows approved design69f8897 (Home29, Fable base and expired-session amendment approvals). Isolated overnight-directory-integration. Initial mounting adds directory-only directorydata schema/store, compiled Docs integrated/non-provisionable entry, canonical exact team origin policy, no-store before route/host errors, and duplicate-session-cookie refusal before chooser session resolution. Actual App.Router tests pass for schema/role separation, fixed anonymous return, foreign origin refusal, current membership, method/host/CSRF refusal and duplicates.
The unmounted failure test now expects actual mounted503 for an unapproved stored origin; its privacy assertion remains. A negative destination fixture initially hit the real UNIQUE origin constraint before read; corrected to an unused noncanonical team label to exercise the route-policy refusal itself. No guard weakened.
Success POST continuation670db31 is under independent code review in sibling worktree and will be integrated after approval. Then add separately approved expired-session continuation, complete actual runtime/browser/rollback proof, full CI/Fable code/canary gates before merge. No Home deployment yet; current Home02f9ac0 and Docs1e remain verified previews. No seed, operator transport, roster activation or production bare-host cutover claimed.
Additional compatibility gate passed: /tmp/oficina-directory-compat/scope.json and runs.json. Actual archived02f9ac06 and171f49a compiled test binaries sequentially reopen the same disposable DB, applying each actual Runtime.Schema. Exact sealed directory row digest preserved; new/old sessions survive; old signout remains revoked on new. Pending and inbox handoffs complete in both version directions with original subject/auth_time and fixed /apps/docs; consumed inbox replay refused. New chooser decrypts and routes canonical alpha after reopen. Synthetic locally signed assertions only, no live DB/production/crash/restore claim. Root independently read receipts. Whole-code Fable review still running; no deployment before verdict.
Whole-branch configured claude-fable-5 explicitly APPROVE at171f49a, terminal exit0, /tmp/oficina-directory-runtime-review/code-review.ndjson and code-exit.json. Review confirms role/schema separation, cookie/host/CSRF ordering, fixed continuation destinations, current membership queries and scope. Nonblocking notes: near-miss arbitrary404s outside exact chooser no-store boundary; one-choice redirect relies on validated store output; fixed constructor error text is imprecise. Full gate/exact CI/browser/compatibility prerequisites already passed. Beginning paired Home preview deployment via supported CARLOS CLI with original config/keys/DB paths; no production promotion. Canary evidence review remains required before merge.
DEPLOYED171f49a to paired canary/overnight-home previews. Both credential overnight-home-id and directory overnight-home API bodies AND X-Carlos-Version now exact171; /tmp/oficina-directory-runtime-release/verified.json. Credential deployment completed first; directory initially lagged body despite new header and scoped restart reporting asleep. Supported targeted deploy to directory host then completed; no raw service/DB workaround. Live unsigned browser8/8 passes Chromium/WebKit x scripts on/off x320/1280 from /apps/docs through credential signin, pending/intent cookies, supported freshness request and unsupported age refusal. Browser non-GET requests blocked; no email/authenticated empty-state/team routing claim. User notified exact https://overnight-home.bds.oncarlos.com/apps/docs and empty provisioning scope. Canary review running /tmp/oficina-directory-runtime-review/canary-review.ndjson; no merge yet.
First canary review terminated max_turns12, exit8, with no approval/refusal verdict. Relative artifact references caused reviewer searches in the wrong trees; coordinator prompt error, not a code finding. Recorded terminal evidence /tmp/oficina-directory-runtime-review/canary-exit.json. New canary-r2 review started with full absolute artifact provenance and actual CI/code/browser/compatibility/mutation/gate receipts inline, max30. No source/config change and no merge; waiting on explicit verdict.
Canary R2 explicitly APPROVE by configured claude-fable-5, terminal exit0 (/tmp/oficina-directory-runtime-review/canary-r2-review.ndjson, canary-r2-exit.json). Inline-evidence review verifies exact head CI/local gates, body+header version+artifact hash, matched archived browser/compatibility provenance, mutations and honest unsigned live scope. Approved for preview-only merge. Authenticated deployed team choice remains future canary gate once provisioned; no production cutover/provisioning/roster admission/general readiness claim. Proceeding normal Amadan merge at exact171f49a after clean-head check.