Question: does the 12-Days editor-vs-deployed mismatch affect her OTHER clone-me apps? Answer: NO. The mismatch exists in exactly one app — 12 Days — because it is the ONLY app where new code was deployed OVER an old editor-built app (her first app, Dec 2025). Every other Claude-built Base44 app was born code-first (no old editor version inside to clobber or leak into clones):
69b775a3…) — distributed clone-me app. Clone-readiness check run2026-07-04 with a REAL clone (6a499db4…, ejected + diffed): clone code byte-identical to master. ✅ SAFE — proven.
69f95f9b…) — distributed clone-me app. Clone-readiness check2026-07-04 passed clean (no account-bound secrets, per-user privacy, cloner=admin, starter seeding). ✅ SAFE.
6a49aa9f…) — code-first, NOT distributed yet; clone test planned pre-launch. ✅6a46ad7a…) — code-first, not distributed. ✅CLI never touched them; editor = live = clones. ✅ No mismatch possible. Standing rule going forward: never CLI-deploy code over an editor-born Base44 app without immediately reconciling the editor version (or rebuilding the changes via the editor chat). Code-first apps don't have this problem.
After Sondra's editor Publish restored the old app over the deploy (editor-born apps keep their old pages), the editor-born clones were ABANDONED. The real master is now a FRESH code-first app — same birth pattern as ShortLinks/LinkHub, the two apps that passed real clone tests. No old editor version exists inside it; Publish-clobber is impossible.
6a49d736a5c794f9de3acac7 — "12 Days of Marketing Magic"public_without_login (no toggle needed). Local code folder linked to THIS app.src/pages/Login.jsx) — Google + email/OTP signup.srverva+finaltest@gmail.com): anonymous browse+ CTA → gift click → signup gate → OTP → auto-login persists → welcome popup → Day 1 → all-fields validation → real AI blog post generated → /Day12 direct URL bounced home.
clone gets the same e2e test before ANY distribution. Old apps to delete: CLI copy …8b34a02, clone "(Copy)" …f918e745, clone "(DFY)" …8c799bd (editor-born, poisoned). Original …1ca0d8f stays as archive.
App 6a49c409b1d2d618b8c799bd — "12 Days of Marketing Magic (DFY)" is the finished, verified master. Live: https://12-days-of-marketing-magic-dfy.base44.app · Editor: https://app.base44.com/apps/6a49c409b1d2d618b8c799bd/editor/workspace/overview The local code folder is linked to THIS app.
Lead-magnet flow (Sondra's spec, built + live-verified): the home page is PUBLIC — anyone can browse the full page, greeting banner, and all 12 gifts with no login. A "🎁 Unwrap Day 1 Free — Create Your Free Account" CTA + clicking ANY gift sends guests to signup. Verified end-to-end with a fresh user (srverva+dfytest@gmail.com): browse → click gift → signup → OTP → welcome popup → progress record created → Day 1 opened; user appears in the app user list (= lead captured, exportable via AdminExport); InvokeLLM verified on this app. Days 2-12 locked for guests and new users; direct-URL bypass closed.
App inventory (four apps exist — don't mix them up): | App | ID ends | What it is | Keep? | |-----|---------|-----------|-------| | Original | …1ca0d8f | Her first app, untouched archive (has the latent RLS bug) | Keep as archive | | CLI copy | …8b34a02 | Created by eject; code-only, no editor preview | DELETE | | Clone "(Copy)" | …f918e745 | First UI clone; has cleaned code but OLD login-required home + invite-only | Delete or keep as spare | | Clone "(DFY)" | …8c799bd | THE MASTER — public browse + signup gate, fully verified | KEEP — clone this for every use |
To run it for her own audience or hand to a vibe coder: clone the DFY master, then edit src/config/branding.js (+ days.js for different tools).
Sondra's first Base44 app ("12 Days of Marketing Magic", original id 692dd8080c8de14061ca0d8f) rebuilt as a clean done-for-you lead magnet template for her vibe coders.
The DFY master is SONDRA'S UI CLONE (id 6a49ab4b079c734cf918e745) — she cloned it herself in the Base44 editor (2026-07-04 late) because the CLI-ejected copy (6a49994d…) is a code-only app with no editor preview/dashboard. The cleaned code + fixed entity rules are deployed to her clone. The original app is untouched (rollback). The CLI copy (6a49994d…) is now redundant — she can delete it from her workspace.
PROJECTS/12 Days of Christmas/app/ (linked to HER CLONE; npx base44 deploy -y ships it)⚠️ One required toggle before giving it away: the clone is private_with_login (invite-only) — new users hit "Request access". Sondra must set the app to public / anyone-can-sign-up in the Base44 dashboard settings (no CLI command exists for this). Also consider renaming the app (currently "12 Days of Marketing Magic (Copy)").
Note: on the UI clone, Base44's own hosted login page serves /login (signup + OTP + forgot-password, all platform-handled). The custom src/pages/Login.jsx stays dormant there — it only activates on code-only apps (like the CLI copy) where the platform doesn't serve a login page. Harmless either way.
src/config/branding.js — name, headshot, community link, taglines, welcome/consent text, footer credit, daily generation cap.src/config/days.js — all 12 day-tools (title, questions, AI prompt, output format, bonus tips). Swap any day for any tool they want.Run node check-config.mjs after editing days.js — it catches missing fields and prompt placeholders that don't match the questions.
| Bug | Fix | |-----|-----| | Generate button enabled with blank fields → AI got literal {audience} text (11 of 12 days) | All fields now required before Generate enables | | AI errors were invisible (spinner just stopped) | Friendly error message + retry | | Typing /Day12 in the URL bypassed the daily drip; direct visits never recorded "opened" | Day pages enforce the unlock server-recorded start date and record opens | | Timezone bug — day 2 could unlock hours early (UTC midnight math) | Calendar-day unlock in the user's local timezone | | serverUrl null — ejected scaffold sent every API call to a broken /null/api/... URL | Client falls back to the SDK default (base44.app) | | No login page — ejected scaffold ships without one; login redirect 404'd | Built branded login/signup/verify page (src/pages/Login.jsx) with Google + email/OTP | | Login session died on reload — SDK keeps token in memory only | Token persisted to base44_access_token on login | | RLS never matched for real users (custom field without data. prefix) → 403 on first use. Original app has this same latent bug — it only ever worked for Sondra because she's admin | Rules rewritten on built-in created_by per Base44 docs | | Invisible toast overlay blocked the welcome-popup button | Removed unused Toaster | | White-screen risk on crash | ErrorBoundary with a friendly refresh card | | 12 duplicate 185-line Day pages | One shared DayPage.jsx driven by days.js | | Unlimited regenerations burn owner's LLM credits | Client-side cap, 20/day per user (config) | | Browser tab said "Base44 APP" | Now the app name |
On the CLI copy (identical code): signup (srverva+magictest@gmail.com) → OTP email → verify → login → welcome popup + progress record created → Day 1 unlocked, Days 2–12 locked → blank-field validation holds → real AI blog post generated → /Day12 direct URL bounces to home → /AdminExport as a regular user bounces home AND the underlying User-list API is denied server-side (403, "only collaborators") → no secrets in code → build + lint clean.
On her clone: site + entity rules deployed; platform signup/OTP flow verified (srverva+magictest2@gmail.com registered + verified, then hit the request-access wall — expected while the app is invite-only); InvokeLLM smoke-tested OK via base44 exec. Remaining: after Sondra flips the app to public signup, one click-through as a fresh user confirms the full flow on the clone (test account creds in this handoff's session; or any new signup).
app/ folder → npx base44 link (create new app) → edit the 2 config files → npx base44 deploy. Or Sondra can duplicate the copy app per person from her dashboard.692dd8080c8de14061ca0d8f and deploy — only on her explicit go.Generated for the CEO Dashboard · source: PROJECTS/12 Days of Christmas/handoffs/12-days-dfy-cleanup-2026-07-04.md 🤍