Marketplace / Nonogram / uCity: capsule browser missing opaque origin after signed launch #130

Summary

On tip Home from feat/0.7.1-models @ b1a22a6ec0c0aed2a8df44cc4cdf98618eadd61b, after virtual-auth Create admin unlock (authority=signed), launching Marketplace Discover, Nonogram, and uCity returns HTTP 200 but the page shows capsule browser request is missing its opaque origin (Marketplace also “Couldn't load apps”).

Related to release Done means on #87 (Browser / capsule surface) and Demo journey #93.

Notion archive id: QA-45.

Steps

1. Start tip Home gateway on localhost:61192 from the models tip home.
2. Unlock with a Playwright virtual authenticator (Create admin) until signed desktop mounts. Do not use a real passkey.
3. POST /api/apps/home/launch with targets marketplace, gba-nonogram, gba-ucity (and open the launched routes).

Expected

Signed launch supplies opaque origin; Marketplace lists apps; Nonogram/uCity load their ROM/session without the opaque-origin error string.

Actual

Launches return 200, but top-level page text includes capsule browser request is missing its opaque origin on Marketplace Discover, Nonogram (?capsule=gba-nonogram), and uCity (?capsule=gba-ucity). GBA viewer shell/canvas can appear OK while the same string still shows via API/console path.

Build / identity

• Branch: feat/0.7.1-models
• Commit: b1a22a6ec0c0aed2a8df44cc4cdf98618eadd61b
• Binary: elastos 0.7.0-dev
• Gateway: localhost:61192
• Retest: 2026-09-29 (America/Panama)

Evidence

/workspace/elastos-qa/github-reset-20260929/retest-models/ (RETEST.md, 05-qa45-summary.json, 05-qa45-marketplace.png, 05-qa45-nonogram.png, 05-qa45-ucity.png).