From 8239c8b1a1015a8ab7867ad262390ac96289d03b Mon Sep 17 00:00:00 2001
From: "localstack-platform[bot]"
 <301951621+localstack-platform[bot]@users.noreply.github.com>
Date: Sun, 25 Oct 2026 04:01:42 +0000
Subject: [PATCH 1/2] Run lambda-sam-authorizer on a LocalStack sandbox

---
 .github/workflows/main.yml | 26 ++++++++++++++++++++++----
 1 file changed, 22 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index b862318..1d79921 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -38,10 +38,17 @@ jobs:
       - name: Install dependencies
         run: make install
 
-      - name: Start LocalStack
+      # >>> localstack-platform: start (project "lambda-sam-authorizer", proj_b1e4056f)
+      - name: Start LocalStack in a platform sandbox
+        id: localstack-platform
         env:
-          LOCALSTACK_AUTH_TOKEN: ${{ secrets.LOCALSTACK_AUTH_TOKEN }}
-        run: lstk start
+          LOCALSTACK_AUTH_TOKEN: ${{ secrets.LOCALSTACK_PLATFORM_AUTH_TOKEN }}
+          LSTK_PROJECT_REVIEW_LEG: ${{ strategy.job-index == 0 }}
+        run: |
+          pipx install --force "https://localstack-artifacts-internal.s3.eu-central-1.amazonaws.com/packages/lstk-project/lstk_project-0.1.1-py3-none-any.whl" > /dev/null
+          npm install -g @localstack/lstk > /dev/null
+          lstk-project start "lambda-sam-authorizer"
+      # <<< localstack-platform: start
 
       - name: Deploy the SAM application
         run: make deploy
@@ -51,4 +58,15 @@ jobs:
 
       - name: Show LocalStack logs
         if: failure()
-        run: lstk logs | tail -200
+        run: lstk-project logs "lambda-sam-authorizer" | tail -200  # localstack-platform (was: lstk logs)
+        env:
+          LOCALSTACK_AUTH_TOKEN: ${{ secrets.LOCALSTACK_PLATFORM_AUTH_TOKEN }}  # localstack-platform
+      # >>> localstack-platform: shutdown (project "lambda-sam-authorizer", proj_b1e4056f)
+      - name: Report to LocalStack and release the sandbox
+        if: always()
+        continue-on-error: true
+        env:
+          LOCALSTACK_AUTH_TOKEN: ${{ secrets.LOCALSTACK_PLATFORM_AUTH_TOKEN }}
+          LSTK_PROJECT_REVIEW_LEG: ${{ strategy.job-index == 0 }}
+        run: lstk-project shutdown "lambda-sam-authorizer" --status ${{ job.status }}
+      # <<< localstack-platform: shutdown

From 1e4f9c8e857a5d049c9efa7db1423df85d8e5e6f Mon Sep 17 00:00:00 2001
From: Harsh Mishra <erbeusgriffincasper@gmail.com>
Date: Sun, 25 Oct 2026 09:36:29 +0530
Subject: [PATCH 2/2] test: fail one check on purpose (adopted job failure
 path; do not merge)

---
 test.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/test.sh b/test.sh
index 68ccf68..e7db5b7 100755
--- a/test.sh
+++ b/test.sh
@@ -25,7 +25,7 @@ expect() {
   fi
 }
 
-expect "token 'allow'" 200 "hello world" -H "Authorization: allow"
+expect "token 'allow'" 201 "hello world" -H "Authorization: allow"
 expect "token 'deny'" 403 "explicit deny" -H "Authorization: deny"
 expect "token 'unauthorized'" 401 "Unauthorized" -H "Authorization: unauthorized"
 expect "any other token" 500 "" -H "Authorization: none"