# V4.2.2 Hosted-Code Fix

The Hosted-Code pairing path now probes the authenticated game control plane before consuming a one-shot code and returns actionable diagnostics for unreachable/wrong URLs, 401 shared-secret mismatches, and old/public listeners.

For local `go run` testing use:

```env
CS_GAME_PUBLIC_URL=http://127.0.0.1:8080
CS_GAME_ADMIN_URL=http://127.0.0.1:8081
```

Inside Docker Compose, `docker-compose.yml` overrides these values to `http://app:8080` and `http://app:8081`.

Both processes must receive the exact same `CUSTOMER_SERVICE_SHARED_SECRET`.

A successfully consumed Hosted Code is now persisted as the customer's main reward identity before already-known worker delegations are synchronized. A temporary worker-delegation failure therefore no longer destroys a valid one-shot pairing; the portal reports a warning instead.