neural-hunt/V4.2.2_HOSTED_CODE_FIX.md

V4.2.2 Hosted-Code Fix

The Hosted-Code pairing path now probes the authenticated game control plane before consuming a one-shot code and returns actionable diagnostics for unreachable/wrong URLs, 401 shared-secret mismatches, and old/public listeners.

For local go run testing use:

CS_GAME_PUBLIC_URL=http://127.0.0.1:8080
CS_GAME_ADMIN_URL=http://127.0.0.1:8081

Inside Docker Compose, docker-compose.yml overrides these values to http://app:8080 and http://app:8081.

Both processes must receive the exact same CUSTOMER_SERVICE_SHARED_SECRET.

A successfully consumed Hosted Code is now persisted as the customer's main reward identity before already-known worker delegations are synchronized. A temporary worker-delegation failure therefore no longer destroys a valid one-shot pairing; the portal reports a warning instead.