内部登录
Better Auth 内部邮箱密码登录壳。这里只展示 readiness、session status、sign-in/sign-out 测试结构，不会把当前预览环境伪装成可用的生产登录。
Opened from cockpit next action.
Review the shared staging import shell before returning to the cockpit.
Next Operator Action
Complete Approval Owner Coverage
Name the staging approvers and record reviewed approval evidence before execution. nextRoute=GET /api/readiness; owner=auth-readiness-route; risk=low; stage=proof_point; missingEvidence=2; blocker=Live membership proof is missing_foundation.; milestones=0/5; focus=Human approval.
Operator Release Packet
Complete Approval Owner Coverage; route=GET /api/readiness; freshness=missing; reviewer=none.
Activation Verdict
The internal activation gate is blocked by Human approval while GET /api/readiness remains under review.
Name the staging approvers and record reviewed approval evidence before execution.
reviewState=waiting_for_live_membership; lockState=none; selectionMode=ranked_top_candidate
sessionProof=watch; liveMembershipProof=blocked; reviewedEvidence=blocked. Record reviewed command metadata before preparing a staging migration run. After that, Complete subject lookup readiness before treating Better Auth request-path proof as current. After that, Attach a reviewed Prisma membership delegate before treating live membership proof as in progress. freshnessState=missing.
Complete Approval Owner Coverage
activationAuthority=false; canaryAuthority=false; recertificationAuthority=false.
Name the staging approvers and record reviewed approval evidence before execution. nextRoute=GET /api/readiness; owner=auth-readiness-route; risk=low; stage=proof_point; missingEvidence=2; blocker=Live membership proof is missing_foundation.; milestones=0/5; focus=Human approval.
No reviewed migration command metadata is recorded yet.
Name the staging approvers and record reviewed approval evidence before execution.
reviewState=waiting_for_live_membership; lockState=none; selectionMode=ranked_top_candidate
rollbackBlocking=false; rollbackVisible=false; Disable hosted auth enforcement to return this route to local-compatible preview behavior.
Freeze Gate Summary
ready=1; hold=4; blocked=3
Name the staging approvers and record reviewed approval evidence before execution.
label=Human approval
Blocker Ledger
No reviewed bundle intake evidence is recorded yet.
No reviewed staging evidence timeline is recorded yet.
state=missing_foundation; subjectLookup=false; probe=false; requestPaths=5.
Trusted-header guardrails, Better Auth runtime readiness, or membership-by-subject bridge wiring are present, but no active trusted workspace session was proven for this request.
This summary models reviewed live membership proof readiness only and never enables production login by itself.; Prisma membership delegate is not available.; Direct authSubjectId -> active membership query capability is not yet available.; No reviewed PostgreSQL probe evidence is recorded yet.; This helper models reviewed staging execution only and never runs a real migration.; Production login remains incomplete even when staging verification evidence is present.; Human approval is still missing or not approved.; Named approval owners are incomplete (0/4); missing=execution_owner, rollback_owner, validation_owner, environment_owner.; Reviewed migration command metadata has not been recorded.; Sanitized probe evidence is not yet ready.; Synthetic verification evidence is not yet complete.; CLIENTPILOT_BETTER_AUTH_SCHEMA_READY is only an input gate.; Production login remains incomplete even when staging evidence is present.; Human-reviewed migration approval evidence is still missing.; Named human approval owners are still missing from staging approval evidence.; Sanitized PostgreSQL probe readiness evidence is still missing.; Synthetic acceptance or route-cutover verification evidence is still missing.
Name the staging approvers and record reviewed approval evidence before execution.
The next hosted route is currently following the ranked cutover candidate flow instead of a reviewed lock.
rollbackVisible=false; Disable hosted auth enforcement to return this route to local-compatible preview behavior.
Release Packet Comparison
reviewer=none; blocker=approval_owner_gap; freshness=missing.
reviewer=none; blocker=approval_owner_gap; freshness=missing.
Accepted Release Packet Matches Current Packet
ready=1; hold=4; blocked=3
ready=1; hold=4; blocked=3
Accepted Freeze Gate Matches Current Packet
Freeze Gate Remains Stable
The accepted receipt packet still matches the current operator release packet. accepted=pending; current=pending.
The accepted freeze-gate summary still matches the current packet. accepted=blocked; current=blocked.
The accepted freeze gate still matches the current packet at blocked.
- accepted: blocked; ready=1; hold=4; blocked=3
- current: blocked; ready=1; hold=4; blocked=3
- leadBlocker: accepted=Human approval; current=Human approval
- leadBlockerCode: accepted=human_approval; current=human_approval
selected=true; emailPassword=true; internalOnly=true
canMountRoute=true; productionLoginImplemented=false
Operator readiness
No route request context
enabled=true; ready=true
canInject=false; localSimulationOnly=true
orgMembership=mock memory; rbac=preflight dry-run; role header is validated
state=selected_ready_to_mount; emailPassword=true
env=true; evidenceReady=false
Validation Review Gate Blocked
latest=none; conflicts=0; rollbackVisible=false
next=GET /api/readiness; candidate=needs_evidence; owner=auth-readiness-route
latest=server_session_bridge_not_injected; latestFailure=server_session_not_resolved
secretConfigured=false; mode=secret_or_trusted_admin
Record reviewed command metadata before preparing a staging migration run.
Record reviewed command metadata before preparing a staging migration run.
subjectLookup=false; probe=false; requestPaths=5
reviewed=true; isolated=false
orgMembership=false; rbac=false
provider=none; ready=false
dbConfigured=true; canQuery=false; bySubject=false
Current Operator Focus
Schema drift or reviewed SQL isolation issues block staging review.
- Record reviewed command metadata before preparing a staging migration run.
- validationGate=blocked; title=Validation Review Gate Blocked
- schemaDrift=drift_detected
- routeReview=waiting_for_live_membership; nextRoute=GET /api/readiness
Record reviewed command metadata before preparing a staging migration run.
Schema drift or reviewed SQL isolation issues block staging review.
Record reviewed command metadata before preparing a staging migration run.
Record reviewed command metadata before preparing a staging migration run.
Attach a reviewed Prisma membership delegate before treating live membership proof as in progress.
Live membership proof is missing_foundation.
Email / password test flow
这个表单会把请求发送到 Better Auth 路由，但不会把当前环境伪装成已经完成 production workspace login。
Session status shell
Distinguishes route mountability, sign-in request status, server-session bridge evidence, and trusted workspace access evidence.
Internal bootstrap shell
Safe preview for the disabled-by-default internal operator bootstrap API. It never stores passwords or internal secrets and does not imply public signup.
{
"betterAuthUserId": "<betterAuthUserId>",
"email": "<email>",
"targetWorkspaceId": "workspace_demo",
"requestedMembershipRole": "operator"
}Staging review import shell
Safe preview for reviewed staging bundles. It submits sanitized evidence only and never handles the import secret in the browser.
{
"targetWorkspaceId": "workspace_demo",
"reviewBundle": {
"commandMetadata": {
"commandId": "<commandId>",
"commandSummary": "<commandSummary>",
"reviewedByHuman": true,
"targetClassification": "approved_non_production_database"
},
"bundleReview": {
"source": "external_review_bundle",
"reviewLabel": "<reviewLabel>",
"redactionConfirmed": true,
"attachments": {
"commandTranscript": true,
"probeSummary": false,
"checklist": true
}
},
"approval": {
"approved": true,
"owners": {
"executionOwner": "<executionOwner>",
"rollbackOwner": "<rollbackOwner>",
"validationOwner": "<validationOwner>",
"environmentOwner": "<environmentOwner>"
}
},
"syntheticAcceptance": {
"passed": false
},
"routeCutover": {
"passed": false
},
"rollback": {
"blocking": false
}
}
}Missing prerequisites
- No blocker reported in preview mode.
Bootstrap and Review Gates
emailLinking=false; membershipCreation=false; secretConfigured=false
env=true; evidenceReady=false; rollbackRecorded=false
owners=0/4; missing=execution_owner, rollback_owner, validation_owner, environment_owner
Route Review Gate On Hold
Validation Review Gate Blocked
Proof Recertification Blocked Record reviewed command metadata before preparing a staging migration run. After that, Complete subject lookup readiness before treating Better Auth request-path proof as current. After that, Attach a reviewed Prisma membership delegate before treating live membership proof as in progress.
Reviewed Evidence Acceptance Blocked; canaryDecision=retired; blocker=reviewed_external_proof_missing. Resolve the reviewed evidence, live membership, or Chatwoot freeze blocker before advancing.
proof=missing; acceptance=blocked; membership=missing_foundation; chatwootFreeze=frozen_preview_only. Resolve the reviewed evidence, live membership, or Chatwoot freeze blocker before advancing. Internal handoff only; no live-send or Chatwoot writeback authority.
AG42 Real Staging Prep Missing Evidence; blocker=reviewed_external_proof_missing; canary=POST /api/customers/[id]/notes; decision=retired. Import sanitized reviewed Better Auth/PostgreSQL staging evidence before advancing. Internal-only: no live send, no Chatwoot writeback, no production rollout.
Hosted Write Canary Held Keep the shared canary on hold until reviewed route and proof blockers are cleared.
rollbackVisible=false; rollbackBlocking=false; Disable hosted auth enforcement to return this route to local-compatible preview behavior.
Current Gate Details
Record reviewed command metadata before preparing a staging migration run.
Record reviewed command metadata before preparing a staging migration run.
state=missing_foundation; subjectLookup=false; prismaDelegate=false; probe=false; requestPaths=5
reviewed=true; isolated=false
events=0; conflicts=0; rollbackVisible=false
No reviewed bundle audit is recorded yet.
No accepted synthetic or reviewed external execution evidence is recorded yet.
No reviewed bundle attachment contract is recorded yet.
secretConfigured=false; mode=secret_or_trusted_admin
state=waiting_for_live_membership; candidate=needs_evidence; owner=auth-readiness-route; selection=ranked_top_candidate; missing=2.
Attach a reviewed Prisma membership delegate before treating live membership proof as in progress.
Production auth posture
ready=false; missing=7.
missing=7; next=login
Attach a reviewed Prisma membership delegate before treating live membership proof as in progress.
nextRoute=GET /api/readiness; missing=2
Server-session bridge
Trusted-header guardrails, Better Auth runtime readiness, or membership-by-subject bridge wiring are present, but no active trusted workspace session was proven for this request.
requestPaths=5; authSource=none
boundaryVerified=false; trustedHeaders=true
localInjection=false; subjectLookup=false
AG-34 Runtime Proof
Better Auth request path=bridge_ready_no_session; live membership=missing_foundation; hosted write canary=held; reviewed external runtime evidence is still pending.
proof=code_path_present -> reviewed_external_proof_pending; route=GET /api/assets; next=Resolve the missing Better Auth runtime session, then capture sanitized reviewed non-production Better Auth runtime evidence.
proof=code_path_present -> reviewed_external_proof_pending; route=GET /api/assets; next=Attach a reviewed Prisma membership delegate before treating live membership proof as in progress.
state=held; proof=code_path_present -> reviewed_external_proof_pending; route=none; next=Keep the single hosted write canary operator-controlled until reviewed external runtime evidence is accepted.
Next Hosted Route
routeId=readiness_overview; owner=auth-readiness-route; risk=low; stage=proof_point; target=trusted_session_required; selection=ranked_top_candidate.
candidate=needs_evidence; membershipAction=view_workspace
reviewReady=false; missing=2
Shared readiness overview blocker for the next hosted route.
No reviewed route lock is active. The next hosted route is currently following the ranked cutover candidate flow instead of a reviewed lock.
Attach a reviewed Prisma membership delegate before treating live membership proof as in progress.
Next Route Review Packet
routeId=readiness_overview; owner=auth-readiness-route; risk=low; stage=proof_point; target=trusted_session_required; selection=ranked_top_candidate.
Required evidence
Missing evidence
Readiness overview is the first read-only route migrated to hosted fail-closed mode behind an explicit env flag.
Disable hosted auth enforcement to return this route to local-compatible preview behavior.
Live Membership Proof Routes
probeRecorded=false; probeReady=false; reviewedStagingPathReady=false; migrationExecution=not_requested.
Attach a reviewed Prisma membership delegate before treating live membership proof as in progress.