Fix account auth pages unavailable message - PR_26167_174-account-auth-page-unavailable-message

Author: ToolboxAid

account/create-account.html

@@ -35,7 +35,7 @@ <h2>Create Account</h2>
                             <label for="createAccountPassword">Password</label>
                             <input id="createAccountPassword" name="password" type="password" autocomplete="new-password" data-account-auth-password>
                             <button class="btn primary" type="submit" data-account-auth-submit>Create Account</button>
-                            <div class="status" role="status" data-account-auth-status>Checking account availability.</div>
+                            <div class="status" role="status" data-account-auth-status>Create Account is not available in this preview. Please try again later.</div>
                         </form>
                         <div class="action-group">
                             <a class="btn btn--compact" href="sign-in.html">Back to Sign In</a>

account/password-reset.html

@@ -33,7 +33,7 @@ <h2>Password Reset</h2>
                             <label for="passwordResetEmail">Email</label>
                             <input id="passwordResetEmail" name="email" type="email" autocomplete="email" data-account-auth-email>
                             <button class="btn primary" type="submit" data-account-auth-submit>Request Password Reset</button>
-                            <div class="status" role="status" data-account-auth-status>Checking account availability.</div>
+                            <div class="status" role="status" data-account-auth-status>Password Reset is not available in this preview. Please try again later.</div>
                         </form>
                         <div class="action-group">
                             <a class="btn btn--compact" href="sign-in.html">Back to Sign In</a>

account/sign-in.html

@@ -38,7 +38,7 @@ <h2>Welcome Back</h2>
                                 <a class="btn" href="create-account.html" data-login-create-account>Create Account</a>
                                 <a class="btn btn--compact" href="password-reset.html" data-login-lost-password>Password Reset</a>
                             </div>
-                            <div class="status" role="status" data-login-status>Checking account availability.</div>
+                            <div class="status" role="status" data-login-status>Sign In is not available in this preview. You can continue browsing.</div>
                         </form>
                         <div class="action-group">
                             <a class="btn btn--compact" href="toolbox/index.html" data-login-continue>Continue Browsing</a>

assets/theme-v2/js/account-auth-actions.js

@@ -7,6 +7,8 @@ const action = form?.getAttribute("data-account-auth-form") || "";
 const ACCOUNT_IDENTITY_SETUP_MESSAGE = "Account identity setup is incomplete. Please contact support.";
 const AUTH_UNAVAILABLE_MESSAGE = "The site is currently unavailable. Please try again later.";
 const PASSWORD_RESET_RATE_LIMIT_MESSAGE = "Too many reset requests. Please wait and try again later.";
+const CREATE_ACCOUNT_PLACEHOLDER_MESSAGE = "Create Account is not available in this preview. Please try again later.";
+const PASSWORD_RESET_PLACEHOLDER_MESSAGE = "Password Reset is not available in this preview. Please try again later.";
 let authStatus = null;
 
 function setStatus(message) {
@@ -54,15 +56,21 @@ async function requestAccountAuth(path, options = {}) {
   return readJson(response, AUTH_UNAVAILABLE_MESSAGE);
 }
 
-function unavailableMessage(status) {
-  return status?.message || AUTH_UNAVAILABLE_MESSAGE;
+function unavailableStatusMessage() {
+  if (action === "create-account") {
+    return CREATE_ACCOUNT_PLACEHOLDER_MESSAGE;
+  }
+  if (action === "password-reset") {
+    return PASSWORD_RESET_PLACEHOLDER_MESSAGE;
+  }
+  return "Account action is not available in this preview. Please try again later.";
 }
 
 async function refreshAccountAuthStatus() {
   if (isStaticOnlyLocalEntrypoint()) {
     authStatus = {
       ready: false,
-      message: AUTH_UNAVAILABLE_MESSAGE,
+      message: unavailableStatusMessage(),
     };
     setFormEnabled(false);
     setStatus(authStatus.message);
@@ -71,11 +79,11 @@ async function refreshAccountAuthStatus() {
   try {
     authStatus = await requestAccountAuth("status");
     setFormEnabled(Boolean(authStatus.ready));
-    setStatus(authStatus.ready ? "Account service is available." : unavailableMessage(authStatus));
-  } catch (error) {
+    setStatus(authStatus.ready ? "Account service is available." : unavailableStatusMessage());
+  } catch {
     authStatus = {
       ready: false,
-      message: error instanceof Error ? error.message : AUTH_UNAVAILABLE_MESSAGE,
+      message: unavailableStatusMessage(),
     };
     setFormEnabled(false);
     setStatus(authStatus.message);
@@ -98,7 +106,7 @@ form?.addEventListener("submit", (event) => {
   Promise.resolve(authStatus || refreshAccountAuthStatus())
     .then((status) => {
       if (!status?.ready) {
-        setStatus(unavailableMessage(status));
+        setStatus(unavailableStatusMessage());
         return null;
       }
       const endpoint = actionEndpoint();

assets/theme-v2/js/login-session.js

@@ -6,6 +6,7 @@ const statusField = document.querySelector("[data-login-status]");
 const submitButton = document.querySelector("[data-login-submit]");
 const ACCOUNT_IDENTITY_SETUP_MESSAGE = "Account identity setup is incomplete. Please contact support.";
 const AUTH_UNAVAILABLE_MESSAGE = "The site is currently unavailable. Please try again later.";
+const SIGN_IN_PLACEHOLDER_MESSAGE = "Sign In is not available in this preview. You can continue browsing.";
 let authStatus = null;
 
 function rootPrefix() {
@@ -91,15 +92,15 @@ async function requestCurrentSession() {
   return readJson(response, AUTH_UNAVAILABLE_MESSAGE);
 }
 
-function unavailableMessage(status) {
-  return status?.message || AUTH_UNAVAILABLE_MESSAGE;
+function unavailableStatusMessage() {
+  return SIGN_IN_PLACEHOLDER_MESSAGE;
 }
 
 async function refreshAccountAuthStatus() {
   if (isStaticOnlyLocalEntrypoint()) {
     authStatus = {
       ready: false,
-      message: AUTH_UNAVAILABLE_MESSAGE,
+      message: SIGN_IN_PLACEHOLDER_MESSAGE,
     };
     setFormEnabled(false);
     setStatus(authStatus.message);
@@ -116,11 +117,11 @@ async function refreshAccountAuthStatus() {
       }
     }
     setFormEnabled(Boolean(authStatus.ready));
-    setStatus(authStatus.ready ? "Account service is available." : unavailableMessage(authStatus));
-  } catch (error) {
+    setStatus(authStatus.ready ? "Account service is available." : unavailableStatusMessage());
+  } catch {
     authStatus = {
       ready: false,
-      message: error instanceof Error ? error.message : AUTH_UNAVAILABLE_MESSAGE,
+      message: SIGN_IN_PLACEHOLDER_MESSAGE,
     };
     setFormEnabled(false);
     setStatus(authStatus.message);
@@ -137,7 +138,7 @@ form?.addEventListener("submit", (event) => {
   Promise.resolve(refreshAccountAuthStatus())
     .then((status) => {
       if (!status?.ready) {
-        setStatus(unavailableMessage(status));
+        setStatus(unavailableStatusMessage());
         return null;
       }
       return requestAccountAuth("sign-in", {

docs_build/dev/codex_commands.md

@@ -1696,3 +1696,37 @@ Required reports:
 - `docs_build/dev/reports/PR_26166_175-dev-admin-bootstrap-password-reset_report.md`
 - `docs_build/dev/reports/codex_changed_files.txt`
 - `docs_build/dev/reports/codex_review.diff`
+
+
+## PR_26167_174-account-auth-page-unavailable-message
+
+Changes:
+- Read `docs_build/dev/PROJECT_INSTRUCTIONS.md`.
+- Verified the current branch is `main` before edits.
+- Investigated Sign In, Create Account, Password Reset, and legacy Lost Password account page flows.
+- Replaced page-load/static-preview account auth status copy with scoped production-safe placeholders.
+- Preserved the generic unavailable message for real provider/network action failures.
+- Updated focused Playwright coverage for account auth placeholder and provider-failure behavior.
+- Did not add inline script/style/event handlers, fake login, browser-owned auth/provider logic, silent fallbacks, hidden defaults, password tables, secrets, or `.env.local` changes.
+
+Validation:
+- `node --check assets/theme-v2/js/login-session.js`
+- `node --check assets/theme-v2/js/account-auth-actions.js`
+- `node --check tests/playwright/tools/LoginSessionMode.spec.mjs`
+- `node --check tests/playwright/tools/StaticOnlyLoginApiRequired.spec.mjs`
+- HTML restriction scan for changed/inspected account auth HTML files.
+- `npx playwright test --config=playwright.config.cjs --project=playwright tests/playwright/tools/StaticOnlyLoginApiRequired.spec.mjs tests/playwright/tools/LoginSessionMode.spec.mjs -g "static sign-in page renders|Sign-in page uses|Configured account auth actions|Create Account shows generic provider failure|Password Reset maps upstream rate limit"`
+- Manual browser page-load validation for `/account/sign-in.html`, `/account/create-account.html`, and `/account/password-reset.html`.
+- `npm run test:workspace-v2`
+- `git diff --check`
+- Full samples smoke skipped by request and because samples were not in scope.
+
+Required reports:
+- `docs_build/dev/reports/PR_26167_174-account-auth-page-unavailable-message.md`
+- `docs_build/dev/reports/playwright_v8_coverage_report.txt`
+- `docs_build/dev/reports/coverage_changed_js_guardrail.txt`
+- `docs_build/dev/reports/codex_changed_files.txt`
+- `docs_build/dev/reports/codex_review.diff`
+
+Packaging:
+- `tmp/PR_26167_174-account-auth-page-unavailable-message_delta.zip`

docs_build/dev/commit_comment.txt

@@ -1 +1 @@
-Report blocked DEV admin bootstrap - PR_26166_175-dev-admin-bootstrap-password-reset
+Fix account auth page unavailable message - PR_26167_174-account-auth-page-unavailable-message

docs_build/dev/reports/PR_26167_174-account-auth-page-unavailable-message.md

@@ -0,0 +1,54 @@
+# PR_26167_174-account-auth-page-unavailable-message
+
+## Summary
+- Replaced the page-load/static-preview account auth status copy with scoped production-safe placeholders for Sign In, Create Account, and Password Reset.
+- Preserved the generic unavailable message for real account action provider/network failures.
+- Kept account auth owned by the existing server API paths with no fake login, browser-owned provider selection, hidden defaults, or silent fallback.
+- Updated focused Playwright expectations for the account auth pages and preserved provider-failure coverage.
+
+## Branch Validation
+- PASS - Current branch was `main` before edits and before packaging validation.
+
+## Requirement Checklist
+- PASS - Read `docs_build/dev/PROJECT_INSTRUCTIONS.md` before edits.
+- PASS - Hard-stopped branch check passed on `main`.
+- PASS - Investigated Sign In, Create Account, Password Reset, and legacy Lost Password page flow.
+- PASS - Fixed visible page-load copy for `The site is currently unavailable. Please try again later.` on the affected account pages.
+- PASS - Kept production-safe placeholders for Create Account and Password Reset/Lost Password recovery paths.
+- PASS - Did not add inline script, inline style, style blocks, or inline event handlers.
+- PASS - Did not introduce fake login, browser-owned auth/provider logic, silent fallback, or hidden defaults.
+- PASS - No secrets or `.env.local` changes.
+- PASS - No password tables added.
+
+## Validation Lane Report
+- PASS - `node --check assets/theme-v2/js/login-session.js`
+- PASS - `node --check assets/theme-v2/js/account-auth-actions.js`
+- PASS - `node --check tests/playwright/tools/LoginSessionMode.spec.mjs`
+- PASS - `node --check tests/playwright/tools/StaticOnlyLoginApiRequired.spec.mjs`
+- PASS - HTML restriction scan for `account/sign-in.html`, `account/create-account.html`, `account/password-reset.html`, and `account/lost-password.html`.
+- PASS - Targeted Playwright: `npx playwright test --config=playwright.config.cjs --project=playwright tests/playwright/tools/StaticOnlyLoginApiRequired.spec.mjs tests/playwright/tools/LoginSessionMode.spec.mjs -g "static sign-in page renders|Sign-in page uses|Configured account auth actions|Create Account shows generic provider failure|Password Reset maps upstream rate limit"`
+- PASS - Manual browser page-load validation script for `/account/sign-in.html`, `/account/create-account.html`, and `/account/password-reset.html`.
+- PASS - `npm run test:workspace-v2`
+- PASS - `git diff --check`
+- PASS - `npm run codex:review-artifacts`
+- SKIPPED - Full samples smoke per request.
+
+## Manual Validation Notes
+- `/account/sign-in.html` loaded with `Sign In is not available in this preview. You can continue browsing.`
+- `/account/create-account.html` loaded with `Create Account is not available in this preview. Please try again later.`
+- `/account/password-reset.html` loaded with `Password Reset is not available in this preview. Please try again later.`
+- The generic unavailable text did not appear in the `main` content on those page-load checks.
+- `account/lost-password.html` was inspected; it remains a safe legacy navigation page to the current password reset flow and has no auth provider logic.
+
+## Test Data Cleanup
+- N/A - This PR did not create or write validation records.
+
+## Reports
+- `docs_build/dev/reports/codex_review.diff`
+- `docs_build/dev/reports/codex_changed_files.txt`
+- `docs_build/dev/reports/playwright_v8_coverage_report.txt`
+- `docs_build/dev/reports/coverage_changed_js_guardrail.txt`
+
+## Packaging
+- PASS - Created repo-structured delta ZIP at `tmp/PR_26167_174-account-auth-page-unavailable-message_delta.zip`.
+- PASS - Delta ZIP contains no `tmp/` entries and no `.env.local` entries.

docs_build/dev/reports/codex_changed_files.txt

@@ -1,12 +1,92 @@
 # git status --short
-M docs_build/dev/codex_commands.md
+M account/create-account.html
+ M account/password-reset.html
+ M account/sign-in.html
+ M assets/theme-v2/js/account-auth-actions.js
+ M assets/theme-v2/js/login-session.js
+ M docs_build/dev/codex_commands.md
  M docs_build/dev/commit_comment.txt
-?? docs_build/dev/reports/PR_26166_175-dev-admin-bootstrap-password-reset_report.md
+ M docs_build/dev/reports/codex_changed_files.txt
+ M docs_build/dev/reports/codex_review.diff
+ M docs_build/dev/reports/coverage_changed_js_guardrail.txt
+ M docs_build/dev/reports/dependency_gating_report.md
+ M docs_build/dev/reports/dependency_hydration_reuse_report.md
+ M docs_build/dev/reports/execution_graph_reuse_report.md
+ M docs_build/dev/reports/failure_fingerprint_report.md
+ M docs_build/dev/reports/filesystem_scan_reduction_report.md
+ M docs_build/dev/reports/incremental_validation_report.md
+ M docs_build/dev/reports/lane_compilation_report.md
+ M docs_build/dev/reports/lane_deduplication_report.md
+ M docs_build/dev/reports/lane_input_validation_report.md
+ M docs_build/dev/reports/lane_manifests/workspace-contract.json
+ M docs_build/dev/reports/lane_runtime_optimization_report.md
+ M docs_build/dev/reports/lane_snapshot_report.md
+ M docs_build/dev/reports/lane_snapshots/workspace-contract.json
+ M docs_build/dev/reports/lane_warm_start_report.md
+ M docs_build/dev/reports/lane_warm_starts/workspace-contract.json
+ M docs_build/dev/reports/monolith_trigger_removal_report.md
+ M docs_build/dev/reports/persistent_lane_manifest_report.md
+ M docs_build/dev/reports/playwright_discovery_ownership_report.md
+ M docs_build/dev/reports/playwright_discovery_scope_report.md
+ M docs_build/dev/reports/playwright_structure_audit.md
+ M docs_build/dev/reports/playwright_v8_coverage_report.txt
+ M docs_build/dev/reports/retry_suppression_report.md
+ M docs_build/dev/reports/slow_path_pruning_report.md
+ M docs_build/dev/reports/static_validation_report.md
+ M docs_build/dev/reports/targeted_file_manifest_report.md
+ M docs_build/dev/reports/test_cleanup_performance_report.md
+ M docs_build/dev/reports/test_cleanup_routing_report.md
+ M docs_build/dev/reports/testing_lane_execution_report.md
+ M docs_build/dev/reports/validation_cache_report.md
+ M docs_build/dev/reports/zero_browser_preflight_report.md
+ M tests/playwright/tools/LoginSessionMode.spec.mjs
+ M tests/playwright/tools/StaticOnlyLoginApiRequired.spec.mjs
+?? docs_build/dev/reports/PR_26167_174-account-auth-page-unavailable-message.md
 
 # git ls-files --others --exclude-standard
-docs_build/dev/reports/PR_26166_175-dev-admin-bootstrap-password-reset_report.md
+docs_build/dev/reports/PR_26167_174-account-auth-page-unavailable-message.md
 
 # git diff --stat
-docs_build/dev/codex_commands.md  | 24 ++++++++++++++++++++++++
- docs_build/dev/commit_comment.txt |  2 +-
- 2 files changed, 25 insertions(+), 1 deletion(-)
+account/create-account.html                        |    2 +-
+ account/password-reset.html                        |    2 +-
+ account/sign-in.html                               |    2 +-
+ assets/theme-v2/js/account-auth-actions.js         |   22 +-
+ assets/theme-v2/js/login-session.js                |   15 +-
+ docs_build/dev/codex_commands.md                   |   34 +
+ docs_build/dev/commit_comment.txt                  |    2 +-
+ docs_build/dev/reports/codex_changed_files.txt     |   92 +-
+ docs_build/dev/reports/codex_review.diff           | 2800 +++++++++++++++++++-
+ .../dev/reports/coverage_changed_js_guardrail.txt  |   19 +-
+ docs_build/dev/reports/dependency_gating_report.md |    2 +-
+ .../reports/dependency_hydration_reuse_report.md   |   12 +-
+ .../dev/reports/execution_graph_reuse_report.md    |   16 +-
+ .../dev/reports/failure_fingerprint_report.md      |    2 +-
+ .../reports/filesystem_scan_reduction_report.md    |    2 +-
+ .../dev/reports/incremental_validation_report.md   |   14 +-
+ docs_build/dev/reports/lane_compilation_report.md  |    2 +-
+ .../dev/reports/lane_deduplication_report.md       |    2 +-
+ .../dev/reports/lane_input_validation_report.md    |    2 +-
+ .../reports/lane_manifests/workspace-contract.json |   10 +-
+ .../reports/lane_runtime_optimization_report.md    |   14 +-
+ docs_build/dev/reports/lane_snapshot_report.md     |   12 +-
+ .../reports/lane_snapshots/workspace-contract.json |   22 +-
+ docs_build/dev/reports/lane_warm_start_report.md   |   12 +-
+ .../lane_warm_starts/workspace-contract.json       |   16 +-
+ .../dev/reports/monolith_trigger_removal_report.md |    2 +-
+ .../dev/reports/persistent_lane_manifest_report.md |   12 +-
+ .../playwright_discovery_ownership_report.md       |    2 +-
+ .../reports/playwright_discovery_scope_report.md   |    2 +-
+ .../dev/reports/playwright_structure_audit.md      |    2 +-
+ .../dev/reports/playwright_v8_coverage_report.txt  |   65 +-
+ docs_build/dev/reports/retry_suppression_report.md |    2 +-
+ docs_build/dev/reports/slow_path_pruning_report.md |   18 +-
+ docs_build/dev/reports/static_validation_report.md |   12 +-
+ .../dev/reports/targeted_file_manifest_report.md   |    8 +-
+ .../dev/reports/test_cleanup_performance_report.md |   24 +-
+ .../dev/reports/test_cleanup_routing_report.md     |    2 +-
+ .../dev/reports/testing_lane_execution_report.md   |   54 +-
+ docs_build/dev/reports/validation_cache_report.md  |   30 +-
+ .../dev/reports/zero_browser_preflight_report.md   |   10 +-
+ tests/playwright/tools/LoginSessionMode.spec.mjs   |    9 +-
+ .../tools/StaticOnlyLoginApiRequired.spec.mjs      |    3 +-
+ 42 files changed, 3074 insertions(+), 313 deletions(-)