coulomb/railiance-platform
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Intercept the WSL OpenBao browser launch.
All checks were successful
CCR intake gate / gate (push) Successful in 15s
Details
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details

Browse source 
OpenBao opens the login with cmd.exe /c start, so the xdg-open launcher
never ran. The attended PATH now supplies cmd.exe for that one allowlisted
URL and opens it in the empty Playwright Chromium profile.

Assistant: grok
Assistant-Session: 01a198fa-fd27-7e41-a0a2-57355c3e4efd
This commit is contained in:
codex 2026-11-02 10:08:36 +01:00
parent 2aab7f6f2b
commit 8d4d285643
4 changed files with 69 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

15
docs/backup-credential-recovery.md
View file

@ -139,13 +139,14 @@ python3 scripts/openbao-attended-exec.py -- /absolute/path/to/reviewed-silent-co
```
The wrapper keeps Warden's `openbao-platform-admin-login --exec` envelope and
puts the repository launcher ahead of the default `xdg-open`. The launcher
allows only the Keycloak HTTPS host and exact local OIDC callback. It opens
that page in a new empty profile of the headed Chromium pinned by
coulomb-social's Playwright install. It does not open Firefox or another
Windows default browser, and it does not record the address. The remote
headless rapp-playwright service is a different facility and cannot complete
this localhost callback.
puts `scripts/operator-browser` ahead of the default command path. On this
WSL host, OpenBao opens the page with `cmd.exe /c start`, which is the
Windows default browser. The directory supplies a `cmd.exe` for that one
shape. It allows only the Keycloak HTTPS host and exact local OIDC callback,
then opens that page in a new empty profile of the headed Chromium pinned by
coulomb-social's Playwright install. It does not record the address. The
remote headless rapp-playwright service is a different facility and cannot
complete this localhost callback.
No token helper or captured Warden output may be inspected. A receipt written
by the owner command proves handoff; session cleanup is assessed separately
from the final Warden exit status.