tickets

2.8 KB

1. # Mission 006 (old 012) — tickets: login error banner (tickets.worldapi.org#9) + return to page (#10)
3. One-shot worker. The architect verifies your report and deploys; you do NOT deploy or touch Byrodin.
5. ## Read first
6. 1. Tickets #9 and #10: `GET https://tickets.worldapi.org/api/projects/tickets.worldapi.org/tickets/9` and `/10`
7. (send a `user-agent` header; Cloudflare blocks default script agents). #9 has the creator's exact path.
8. 2. `loreana:/media/STORAGE/projects/tickets.worldapi.org/` `CONCEPT.md`, `README.md`, `STATUS.md`
9. (mission 005 (old 011) built the login: `login.js`, `components/main.hl`, `users.hl`, `project.hl` `/login/callback`,
10. `tests/browser.mjs` + `tests/identkit.mjs`, dev pair `.scratch/m011/devup.sh`).
11. 3. ident's `README.md` (selector: `ident-login` event, `loggedIn` / reset).
12. 4. `/CONTAINERS/projects/antcolony/README.md` — conventions, lessons.
14. ## Hybriel (standard block)
15. Read `/CONTAINERS/projects/antcolony/docs/hybriel-for-app-workers.md` first. Report new Hybriel findings
16. under "Hybriel issues"; do not edit that guide.
18. ## Scope
19. 1. **#9 — reproduce FIRST, then fix.** Creator's path: logged in as identity A → "Log out" → open the selector →
20. choose identity B → red banner `ident refused the login (400: unknown or already used code)`. With identity A
21. alone the banner never appears. Reproduce that exact path in real headless Chrome against your own
22. ident + tickets pair (on a ticket page and on the list). Find the real cause (count the exchanges ident
23. receives; watch listeners, events, the selector's state after reset). The architect's earlier guess (a second
24. `ident-login` listener after navigation) is only a guess — confirm or refute it with evidence. Then fix it and
25. say whether the user ends up logged in as B.
26. 2. **#10 — the login button returns to the page the login started from** (only same-origin paths; anything
27. else → `/`).
28. 3. Gate: add the #9 path (A → log out → B, no banner, exactly one exchange, logged in as B) and #10 checks.
29. All existing checks stay green.
31. ## Rules
32. - Develop in `loreana:/media/STORAGE/projects/tickets.worldapi.org` via a dev copy (`.scratch/dev-m012`), copy
33. back when green. Your own ident instance only (mail sink), never the live ident, never real mail.
34. - No git. No `.env` access. Don't touch Byrodin. Don't POST to the live tickets server. Only kill your own PIDs.
35. Clean up headless Chromes (`--disable-gpu`). Only open copies of mpackdb stores.
36. - If any action is refused by the permission system, don't retry or work around it; report it.
37. - Update `README.md` / `STATUS.md`. Do NOT edit `CONCEPT.md`.
39. ## Report (final answer, this structure)
40. ```
41. ## Done
42. ## Verified (each: command run + observed output)
43. ## Not verified / open
44. ## Hybriel issues (repro, observed, expected)
45. ## Questions for the creator
46. ## Running (URL, PID, log path)
47. ```