Dejar inaccesible el modulo /validadoras - navegacion, rutas y proxy

Sub-tickets

Activity

• coder03-mba-l-cc created · 3w ago
  parent=#4105
• coder04-mba-l-ca statusChanged · 3w ago
  coder04-mba-l-ca | 2026-09-24 ART — Starting reversible module hide. Measured five /validadoras UI route files, homepage module card and proxy protected-route entry; planning redirect direct UI URLs to / and remove the card/proxy entry, with no DDL/data changes.
• coder04-mba-l-ca progress · 3w ago
  coder04-mba-l-ca | 2026-09-24 ART — Removed Validadoras homepage card and protected-route entry; proxy now redirects /validadoras and descendants to / (307), so directly typed UI URLs do not serve module pages. Five route files and APIs/data remain intact; code-only and reversible. Awaiting scoped audit; gates not run by me per instruction.
• audit-mba-l-cc audited · 3w ago
  audit pass: page.tsx home card removed; proxy.ts drops /validadoras from protectedRoutes, adds 307 to / for /validadoras and /validadoras/* before auth; matcher covers it. typecheck, eslint proxy+page, test:source 37/37. Not run: live redirect, /api/validadoras untouched by design.
  payload

  {"scope":"page.tsx home card removed; proxy.ts drops /validadoras from protectedRoutes, adds 307 to / for /validadoras and /validadoras/* before auth; matcher covers it. typecheck, eslint proxy+page, test:source 37/37. Not run: live redirect, /api/validadoras untouched by design.","outcome":"pass","evidence":"audit-mba-l-cc 2026-09-24. Grep src: no nav/link to /validadoras outside the validadoras pages/components themselves. Redirect built like proxy's other redirects (new URL(path, request.url)).","reportRef":null}

• audit-mba-l-cc audited · 3w ago
  audit fail: src/proxy.ts current dirty hunk: /validadoras removed from protectedRoutes plus 307 redirect. Supersedes my earlier PASS on 582.
  payload

  {"scope":"src/proxy.ts current dirty hunk: /validadoras removed from protectedRoutes plus 307 redirect. Supersedes my earlier PASS on 582.","outcome":"fail","evidence":"audit-mba-l-cc 2026-09-24. My PASS missed that the protectedRoutes removal drops the auth gate; hidden today only because the redirect runs first. Removing the redirect later leaves /validadoras public. Fix: restore the entry, keep the redirect. Found by coder03.","reportRef":null}

• audit-mba-l-cc audited · 3w ago
  audit pass: proxy.ts (+5/-0: 307 redirect for /validadoras and /validadoras/* before auth; protectedRoutes entry line 19 untouched) + app/page.tsx card removed. Clean tree HEAD 8ba2fcdb + these files (byte-identical to tree now): typecheck, eslint, test:source 38/38. Not run: HTTP request, unauthenticated path.
  payload

  {"scope":"proxy.ts (+5/-0: 307 redirect for /validadoras and /validadoras/* before auth; protectedRoutes entry line 19 untouched) + app/page.tsx card removed. Clean tree HEAD 8ba2fcdb + these files (byte-identical to tree now): typecheck, eslint, test:source 38/38. Not run: HTTP request, unauthenticated path.","outcome":"pass","evidence":"audit-mba-l-cc 2026-09-24. Supersedes my 13:42Z FAIL. git diff --numstat proxy.ts 5/0; cmp of tree vs gated copy identical. Redirect precedes auth, so unauthenticated users also get 307 to /.","reportRef":null}

• audit-mba-l-cc audited · 3w ago
  audit pass: Bound to sha e2ae9dd9: git archive of the commit, clean tree: typecheck, eslint (proxy.ts, app/page.tsx), test:source 38/38. proxy.ts line 19 protectedRoutes has /validadoras, line 136 307 redirect; page.tsx has 0 validadoras hits. Not run: HTTP request.
  payload

  {"scope":"Bound to sha e2ae9dd9: git archive of the commit, clean tree: typecheck, eslint (proxy.ts, app/page.tsx), test:source 38/38. proxy.ts line 19 protectedRoutes has /validadoras, line 136 307 redirect; page.tsx has 0 validadoras hits. Not run: HTTP request.","outcome":"pass","evidence":"audit-mba-l-cc 2026-09-24. git show e2ae9dd9:src/proxy.ts grep confirms both lines. Supersedes nothing: adds the sha binding to the 14:11Z PASS.","reportRef":null}

• coder04-mba-l-ca completed · 1w ago
  Wave-2 closeout: shipped/audited scope is live; remaining checks or separate decision items are tracked outside this item's shipped scope.