# E2E stage URL temp revert na raw ACA (MC #105824, PR 176) — 2026-07-16

Agent ID: john-main-63007ffa
Verdict: PASS

# MC #105824 — Post-merge verifikacija (2026-07-16 ~15:15)

Builder verdikt: verdict.md (codecraft-105824, PASS). Ovaj fajl = John post-merge L2 verifikacija.

## Live provjere (azdo Builds API, ovaj session)
- PR 176 (`fix/e2e-url-raw-aca-temp-105824` → main) MERGED, merge commit **0119c72a** = azdo/main HEAD.
- Run **575** (PR176 validation): completed **succeeded**
- Run **576** (main batchedCI post-merge): completed **succeeded**
- Run **577** (main manual): completed **succeeded**
- Kontrast: runovi 573/574 (prije reverta) = failed — potvrđuje da je revert otklonio E2E crvenilo.
- Probe output: /tmp/evidence-105824/ci-runs.txt

## Efekat
- E2E gate zelen na raw ACA (dokazano radna, promo-relevantna grana per e2e-573-custom-domain-gap.md).
- Promote→Demo ODBLOKIRAN za #105766 (payment) i #105769 (login) — oba ready_for_review.
- Revert-the-revert gated na #105823 (CIAM redirect_uri cutover, FlowForge/Entra, app reg 20bb17de).

Agent ID: codecraft-105824
Verdict: PASS

# MC #105824 — Temp revert E2E stage URLs to raw ACA

## Change
File: azure-pipelines.yml (root of Bilko repo), lines 75-79.
Surgical swap of 2 pipeline variables back to raw ACA hostnames, plus a TEMP REVERT
comment. Nothing else touched (no CSP, no getApiBaseUrl(), no cookie Domain= logic).

## Diff
```diff
diff --git a/azure-pipelines.yml b/azure-pipelines.yml
index 45398572..a63d5b7d 100644
--- a/azure-pipelines.yml
+++ b/azure-pipelines.yml
@@ -74,8 +74,9 @@ variables:
   # cookie fix effective. Both custom domains are live ACA managed-cert bindings (PR #172).
   # Old values (rollback): STAGE_API_URL='https://bilko-api-stage.purplebeach-f004d490.swedencentral.azurecontainerapps.io'
   #                         STAGE_WEB_URL='https://bilko-web-stage.purplebeach-f004d490.swedencentral.azurecontainerapps.io'
-  STAGE_API_URL: 'https://api-stage.bilko.cloud'
-  STAGE_WEB_URL: 'https://web-stage.bilko.cloud'
+  # TEMP REVERT (MC #105824, CEO B 2026-07-16): E2E natrag na raw ACA dok #105823 ne cutuje CIAM redirect_uri na custom domenu. Revert-the-revert kad #105823 done.
+  STAGE_API_URL: 'https://bilko-api-stage.purplebeach-f004d490.swedencentral.azurecontainerapps.io'
+  STAGE_WEB_URL: 'https://bilko-web-stage.purplebeach-f004d490.swedencentral.azurecontainerapps.io'
 
   # Flyway (Azure PostgreSQL flexible server)
   FLYWAY_DB_HOST: 'bilko-demo-pg'
```
1 file changed, 3 insertions(+), 2 deletions(-)

## Provenance
- Base: fresh worktree from azdo/main (NOT the stale bilko-wt-105768 dirty tree).
  azdo/main HEAD = 2265e4f2 (Merge PR175, includes custom-domain PR172-175) — matches
  CEO-stated HEAD in the dispatch.
- Worktree: /Users/makinja/business/ALAI-Holding-AS/products/bilko-wt-105824
- Branch: fix/e2e-url-raw-aca-temp-105824
- Commit SHA: 378bad695c9b912ca69f192ca2346452409eb289
- Author: CodeCraft Bot <codecraft@alai.no> (specialist identity, not alem@/john@)
- Pushed to azdo via explicit refspec: fix/e2e-url-raw-aca-temp-105824:fix/e2e-url-raw-aca-temp-105824
  (NOT main). Confirmed server response: "* [new branch] fix/e2e-url-raw-aca-temp-105824 -> fix/e2e-url-raw-aca-temp-105824"
- Pre-commit hook: gitleaks 0 leaks, lint-staged/prettier clean, commit created.
- Pre-push hook: turbo type-check across 13 packages, 13/13 successful (cache hits) — no
  breakage introduced.

## Verification performed
1. grep confirmed E2E_BASE_URL: $(STAGE_WEB_URL) at line 712 (also BILKO_E2E_BASE_URL at
   728, and health-check curls at 643/647) — all consumers of the 2 variables identified,
   none hardcode the URL separately.
2. Confirmed next.config.js CSP (apps/web/next.config.js line 69) already whitelists BOTH
   api-stage.bilko.cloud AND the raw ACA hostname
   bilko-api-stage.purplebeach-f004d490.swedencentral.azurecontainerapps.io — PR175 already
   covers the raw-ACA branch, so this revert needs zero CSP change. Confirmed untouched by
   this diff (file not in the 1-file changeset).
3. Confirmed getApiBaseUrl() / refresh cookie Domain= logic untouched — not in this diff,
   not read/modified.
4. CI pre-flight: last 5 azdo/main runs (574, 573, 571, 569, 567) all `failed`. Root cause
   already diagnosed in ~/system/evidence/105766/e2e-573-custom-domain-gap.md — the
   custom-domain E2E gate fails because CIAM redirect_uri isn't cut over (MC #105793 partial),
   NOT because of the payment/login fixes themselves (raw ACA login flow proven end-to-end
   working in that evidence file). This MC #105824 fix directly targets that root cause by
   pointing E2E back at the proven-working raw ACA hostnames.

## Not done (explicitly out of scope, per instruction)
- Did not open the PR (branch pushed only; team lead opens PR + auto-complete + orchestrates
  merge/promote per their instruction).
- Did not touch #105793 custom-domain work, CIAM redirect_uri, or any file besides
  azure-pipelines.yml.
- Did not revert PR174 wholesale — only the 2 variable values were reverted, not any
  comments/explanations added by that PR.

## Next
Team lead (john-main) to open PR from fix/e2e-url-raw-aca-temp-105824 -> main, auto-complete,
and orchestrate merge + Promote->Demo once E2E gate is green on the raw ACA hostnames.