cleanup phases 3

2026-08-02 17:18:36 +03:30
parent c841bded26
commit b876490246
31 changed files with 3779 additions and 35 deletions
@@ -1,5 +1,12 @@
 # Balinyaar — Manual Testing Plan

+> **SUPERSEDED (2026-08-02) by [`docs/flows/`](../../docs/flows/index.md).** This file was written on
+> 2026-07-26 and parts of it no longer work: it tells you to set crypto keys with `dotnet user-secrets`
+> (removed in `5885280`), calls the API `https://localhost:5002` (it is plain HTTP), and promises the OTP
+> code appears in the server console (it never does). The verified replacements are
+> [`docs/flows/testing-setup.md`](../../docs/flows/testing-setup.md) for bring-up and
+> [`docs/flows/index.md`](../../docs/flows/index.md) for the per-flow walkthroughs. Kept as a record.
+
 The flow-by-flow walkthrough for testing the whole product against the **seeded lifecycle demo world**.
 Written after the UI/backend/refinement phase chains completed (2026-07-26). Companion docs:

@@ -1,5 +1,12 @@
 # Run the whole app locally — Balinyaar bring-up runbook

+> **SUPERSEDED (2026-08-02) by [`docs/flows/testing-setup.md`](../../../docs/flows/testing-setup.md)**,
+> which was executed rather than transcribed. This file is right about `user-secrets` but wrong about six
+> other things — the API scheme (`http`, not `https`), the dev cert step, `.env.development`'s value, the
+> committed `Seams:Sms:Provider` (it is `telegram`, so `request_otp` 500s on a fresh clone), the console
+> OTP line (the code is never printed), and "only `auth` is real" (15 of 22 client domains are real).
+> Kept as a record.
+
 The one copy-pasteable procedure for standing up **both** projects on one machine and watching a real,
 authenticated request cross the wire. Established by **Refinement Phase 0**
 ([refinement-phase-0-bring-up.md](refinement-phase-0-bring-up.md)).
@@ -1,5 +1,13 @@
 # Mock & integration registry

+> **The frontend half of this file is stale (checked 2026-08-02).** Its "Config flag … default `true`"
+> column was never updated after the refinement-phase-4 de-mock, so **8 rows name the wrong default** and
+> three are wrong about behaviour, not just configuration. 17 disagreements with the code are listed, with
+> file:line evidence, in [`docs/flows/index.md`](../../../docs/flows/index.md#corrections-to-mocks-registrymd).
+> **Read the code-derived map there, not the flag column here.** The backend seam rows (the top of this
+> file) were not re-audited; the current server seam picture is in
+> [`docs/flows/index.md`](../../../docs/flows/index.md#mock-vs-real-map--server-seams). Kept as a record.
+
 The master list of every external dependency that is **mocked behind a DI seam** in this build, and the
 exact steps to make each one real. Backend lane owns this file; every phase that introduces or touches a
 seam updates its row. This is the checklist the team works through to go from "MVP with mocks" to