First

2026-04-29 00:06:36 +01:00
commit 6f64e1a530
97 changed files with 3179 additions and 0 deletions
@@ -0,0 +1,69 @@
+# Forecourt Puzzle Guide
+
+This file is for the puzzle owner only and should not be linked from the UI.
+
+## Final password
+
+`GEAR-AXLE-TURBO-PARK`
+
+## Route
+
+- Hidden route: `/admin`
+- Discovery points on the advert page:
+  - HTML comment near the top of the page source
+  - Browser console message from the Stimulus controller
+  - Optional hidden hint drawer after clicking the Forecourt logo 5 times
+
+## Stage 1
+
+- Location: main image caption on the advert page
+- Visible clue: `Photo set 03 // ingest note JHDU // something seems shifted.`
+- Solve method: Caesar shift back by 3
+- Answer: `GEAR`
+
+## Stage 2
+
+- Location: "Document packet" table
+- Visible hint: `The seller uploaded the original paperwork bundle and a few newer scans. Check the details carefully.`
+- Solve method:
+  - use only the rows marked `Scan`
+  - then take the first letter of each entry in the `Detail` column
+  - Alignment printout tucked behind service invoices
+  - XPEL warranty card added to the folder
+  - Leather sleeve re-dyed to match the cabin
+  - Emergency cartridge dated and photographed
+- Answer: `AXLE`
+
+## Stage 3
+
+- Location: hidden JSON blob in the advert page source
+- Element ID: `forecourt-media-manifest`
+- Encoded value: `VFVSQk8=`
+- Solve method: Base64 decode
+- Answer: `TURBO`
+
+## Stage 4
+
+- Location: "Pre-sale prep tickets" card
+- Visible hint: `The prep desk export is still sorted by latest activity. Closed tickets all share the same base code, and only one part changes.`
+- Ticket codes:
+  - `PDI-24-09` (`Open`, ignore this row)
+  - `PDI-24-11`
+  - `PDI-24-18`
+  - `PDI-24-01`
+  - `PDI-24-16`
+- Solve method:
+  - use only the `Closed` tickets
+  - the card is shown newest first, so read the closed tickets from oldest to newest
+  - map the changing numeric suffixes with A=1
+  - 16 = P
+  - 01 = A
+  - 18 = R
+  - 11 = K
+- Answer: `PARK`
+
+## Admin behavior
+
+- `GET /admin` shows the login prompt
+- Entering `GEAR-AXLE-TURBO-PARK` unlocks the fake admin panel
+- The panel is session-backed only and can be cleared with the "Clear admin session" button