# ChatGPT Headed Browser Registration — Working Techniques (2026-07-30)

Technical findings from live debugging of Camoufox + Playwright registration flow against OpenAI's signup.

## Flow Summary

OpenAI email registration flow: `email submit → OTP → age confirmation → about_you → redirect to chatgpt.com`

## Working Techniques

### 1. OTP Input: JS Injection Bypasses React Controlled Inputs

Playwright `fill()`/`type()` does NOT work on React-controlled input fields — React overwrites the value. Use native value setter + synthetic events:

```javascript
const nativeSetter = Object.getOwnPropertyDescriptor(HTMLInputElement.prototype, 'value').set;
nativeSetter.call(input, otpCode);
input.dispatchEvent(new Event('input', { bubbles: true }));
input.dispatchEvent(new Event('change', { bubbles: true }));
```

**Detection**: Try split-box pattern first (6 separate numeric inputs), then fall back to single input.

### 2. OTP Submission Detection: `code=` in Page Title

**CRITICAL BUG FIXED (2026-07-30):** After OTP is accepted, OpenAI redirects via meta-refresh/JS — the URL stays at `auth.openai.com/email-verification` but the page **title** changes to:

```
Loading https://chatgpt.com/api/auth/callback/openai?code=ac...
```

Old detection only checked URL changes and "How old are you?" / "confirm your age" in title — missed the intermediate redirect state. **Fix**: add `"code=" in page_title and "chatgpt.com" in page_title` to the success condition list.

Fallback after detection: the browser naturally follows the meta-refresh/JS redirect within seconds.

### 3. Age / about_you Page Detection

After OTP redirect completes, OpenAI shows age confirmation with these title variants:
- `"How old are you? - OpenAI"` 
- `"Let's confirm your age - OpenAI"`

Both must be in the detection list. The URL becomes `auth.openai.com/about-you`.

### 4. about_you Form Fill

Form has `input[name="name"]` and `input[name="age"]` plus a hidden `input[name="birthday"]`. Fill all three:

```python
await page.fill('input[name="name"]', full_name)
await page.fill('input[name="age"]', age_str)
await page.evaluate(f"document.querySelector('input[name=\"birthday\"]').value = '{birthdate}'")
```

### 5. about_you Submit: JS Click + Form Submit Fallback

Playwright `click()` times out on React buttons. Use JS click:

```javascript
const buttons = document.querySelectorAll('button');
for (const btn of buttons) {
    const text = (btn.textContent || '').toLowerCase();
    if (text.includes('finish creating account') || btn.type === 'submit') {
        if (btn.offsetParent !== null) { btn.click(); return 'clicked:' + text; }
    }
}
```

After click, poll URL for 9 seconds (6×1.5s). If no redirect, try `form.submit()`:
```javascript
const f = document.querySelector('form'); if(f) f.submit();
```

**Known issue**: OpenAI anti-bot detection may block the redirect after successful form fill + submit. The form fills correctly and the button click fires, but OpenAI's server-side checks reject the submission.

### 6. Page Wait Strategy

Use `networkidle` + explicit `wait_for_selector` (NOT `domcontentloaded`):

```python
await page.wait_for_load_state('networkidle', timeout=15000)
await page.wait_for_selector('input[inputmode="numeric"], input[autocomplete="one-time-code"]', timeout=10000)
```

## Pitfalls

### t-online.de Domain Block
OpenAI no longer sends verification codes to t-online.de addresses (~80% failure rate as of 2026-07-30). Codes that DO arrive still work for OTP. Use non-German email providers (Gmail, Outlook, Proton).

### Python .pyc Caching on Live Servers
When iterating on code with a running server, Python loads cached `.pyc` files. After any code change:
```bash
find /path/to/project -name "*.pyc" -delete
find /path/to/project -name "__pycache__" -type d -exec rm -rf {} +
# Then restart server
```
Without this, the server continues running old code despite file changes.

### Camoufox Crash
`TypeError: Cannot read properties of undefined (reading '_getChildFrames')` — known Camoufox bug. Retry the task.

### State Machine OTP Loop
If age page ("How old are you?") appears but URL is still `email-verification`, the state machine may loop back to OTP step. The fix is detecting `code=` in title (see technique #2) — this tells the state machine OTP was accepted and redirect is in progress.

### about_you Button Not Found
Even with successful JS click (`clicked:finish creating account`), OpenAI may not redirect — the page stays on about_you. This is server-side anti-bot, not a code bug. Possible mitigations: human-like delays between field fills, cursor movements, or different IP/proxy.

## Environment

- **Project**: `C:/Users/User/Desktop/GPT-AUTOREG/aBaiAutoplus/`
- **File**: `platforms/chatgpt/browser_register.py`
- **DB**: `account_manager.db` (SQLite)
- **Email pool**: `C:/Users/User/Desktop/GPT-AUTOREG/emails.txt` (`email:password` format)
- **Server**: `cd aBaiAutoplus && python -u main.py` → `http://localhost:8000`
- **Registration API**: `POST /api/tasks/register` with `{"executor_type":"headed","captcha_solver":"auto","extra":{"mail_provider":"imap_pool","identity_provider":"mailbox"}}`
- **Browser**: Camoufox (Playwright fork) via `[Solver]` subsystem