@mohasinac/appkit 4.34.0 → 4.35.0

package/dist/features/tester/seed-data/authored/page-wiring__detail-pages.js

@@ -0,0 +1,50 @@
+/*
+ * WHY: Authored six-part procedures for the page-wiring/detail-pages page.
+ * WHAT: 2 case(s), keyed by full checklist id.
+ *
+ * Written by hand, case by case, against the label each one states. There is no
+ * generator: the authoring scripts were deleted once it was clear they were
+ * scaffolding around work that is simply writing.
+ *
+ * @tag domain:tester
+ * @tag layer:seed
+ * @tag pattern:none
+ * @tag access:server-only
+ * @tag consumers:seed-data/authored/index.ts
+ * @tag sideEffects:none
+ */
+export const authored = {
+    "checklist-page-wiring-detail-pages-detail-page-matches-list-modal": {
+        roles: ["admin"],
+        startPage: "/admin/bids",
+        steps: [
+            "Sign in as admin@letitrip.in / TempPass123!.",
+            "Open /admin/bids and open the first bid row so its modal appears.",
+            "Write down every field label the modal shows, in order.",
+            "Copy the bid's id and close the modal.",
+            "Open /admin/bids/{id}/view directly, substituting the copied id.",
+            "Write down every field label that page shows, in order.",
+            "Compare the two lists.",
+        ],
+        expectedBehaviour: "The modal and the page are two renderings of ONE field builder, so their field sets are identical by construction. Any difference means a second copy of the builder has appeared, and two copies of a field list drift the first time one is edited.",
+        expectedUiState: "Both surfaces show the same labels, in the same order, with the same values. A field present in one and missing from the other is the failure — including a field the page adds that the modal does not have.",
+        endResult: "Read-only; nothing persists. Comparing labels rather than layout is deliberate: the two are allowed to look different, they are not allowed to say different things.",
+    },
+    "checklist-page-wiring-detail-pages-detail-page-hides-identity-per-portal": {
+        roles: ["admin", "buyer"],
+        startPage: "/admin/bids",
+        steps: [
+            "Sign in as admin@letitrip.in / TempPass123!.",
+            "Open /admin/bids and find a bid placed by rehan.sheikh@gmail.com on an auction that other people have also bid on.",
+            "Copy that bid's id and open /admin/bids/{id}/view.",
+            "Write down every bidder name and identifier shown anywhere on the page.",
+            "Sign out and sign in as rehan.sheikh@gmail.com / TempPass123!.",
+            "Open /user/bids/{id}/view with the same id.",
+            "Write down every bidder name and identifier shown anywhere on that page, including in the page source.",
+        ],
+        expectedBehaviour: "One viewer argument decides what each portal reveals, in one place. The admin view may name other bidders because moderating a dispute requires it; the buyer's own view must not, because a competitor's identity is not the buyer's to see.",
+        expectedUiState: "The admin page may show other bidders' identities. The buyer page shows only their own bid, with any other bidder masked or absent — and that holds in the page source too, not merely in what is rendered. A real name anywhere in the buyer view is a leak.",
+        expectedData: { otherBidderNamesInBuyerView: 0 },
+        endResult: "Read-only; nothing persists. A buyer view that shows nothing at all also fails — the buyer must still see their own bid.",
+    },
+};

package/dist/features/tester/seed-data/authored/page-wiring__drawer-pages.d.ts

@@ -0,0 +1,2 @@
+import type { AuthoredCase } from "./_types";
+export declare const authored: Record<string, AuthoredCase>;

package/dist/features/tester/seed-data/authored/page-wiring__drawer-pages.js

@@ -0,0 +1,66 @@
+/*
+ * WHY: Authored six-part procedures for the page-wiring/drawer-pages page.
+ * WHAT: 2 case(s), keyed by full checklist id.
+ *
+ * Written by hand, case by case, against the label each one states. There is no
+ * generator: the authoring scripts were deleted once it was clear they were
+ * scaffolding around work that is simply writing.
+ *
+ * @tag domain:tester
+ * @tag layer:seed
+ * @tag pattern:none
+ * @tag access:server-only
+ * @tag consumers:seed-data/authored/index.ts
+ * @tag sideEffects:none
+ */
+export const authored = {
+    "checklist-page-wiring-drawer-pages-page-drawer-opens-already-open": {
+        roles: ["admin"],
+        startPage: "/admin/team/new",
+        steps: [
+            "Sign in as admin@letitrip.in / TempPass123!.",
+            "Open /admin/team/new directly in the address bar.",
+            "Read what is on screen without clicking anything.",
+            "Close the panel and read the address bar.",
+            "Open /admin/navigation/new directly and read what is on screen.",
+            "Close it and read the address bar.",
+            "Open /admin/tester-checklist/new directly and read what is on screen.",
+            "Close it and read the address bar.",
+        ],
+        expectedBehaviour: "An editor that exists as both a drawer and a page opens with its panel ALREADY open when reached by URL. Closing it returns to the list the editor belongs to, so the page is a real destination rather than a dead end.",
+        expectedUiState: "Each of the three URLs renders its form immediately — an invite form, a nav-item form, a checklist-case form — with no blank page and nothing to click first. Closing lands on /admin/team, /admin/navigation and /admin/tester-checklist respectively, not on a 404 and not on the dashboard.",
+        endResult: "Nothing is created — close each panel rather than saving. A blank page behind a closed drawer is the failure this catches.",
+    },
+    "checklist-page-wiring-drawer-pages-page-drawer-deep-link-survives-reload": {
+        roles: ["admin"],
+        startPage: "/admin/team",
+        steps: [
+            "Sign in as admin@letitrip.in / TempPass123!.",
+            "Open /admin/team and open the editor for employee-blog@letitrip.in.",
+            "Copy the URL from the address bar.",
+            "Reload the page.",
+            "Read whether the panel is open and which record it holds.",
+            "Open the copied URL in a new tab and read the same two things.",
+        ],
+        inputs: { record: "employee-blog@letitrip.in" },
+        expectedBehaviour: "The record's identity is in the URL, so a reload and a fresh tab both restore the same open editor. This is the entire reason these pages exist alongside the drawers — a drawer alone cannot be bookmarked, shared with a colleague, or reopened after a crash.",
+        expectedUiState: "After the reload the panel is still open on employee-blog@letitrip.in with its fields populated. The new tab shows the same. A panel that closes on reload, or reopens empty, both fail.",
+        endResult: "Read-only; close without saving. Nothing persists.",
+    },
+    "checklist-page-wiring-drawer-pages-every-new-editor-route-opens": {
+        roles: ["admin", "seller"],
+        startPage: "/admin/categories/new",
+        steps: [
+            "Sign in as admin@letitrip.in / TempPass123!.",
+            "Open each of these by URL in turn: /admin/categories/new, /admin/brands/new, /admin/bundles/new, /admin/faqs/new, /admin/ads/new, /admin/shipments/new, /admin/addresses/new, /admin/grouped-listings/new, /admin/sublisting-categories/new, /admin/carousel/new, /admin/carousels/new.",
+            "On each, note whether the form is already open or the page is blank.",
+            "Close or cancel each and note where the browser lands.",
+            "Sign in as tyson@beybladearena.in / TempPass123! and repeat for /store/addresses/new, /store/sublisting-categories/new, /store/stickers/new, /store/pre-orders/new and /store/listing-templates/new.",
+            "Record every route that arrives blank and every cancel that lands nowhere.",
+        ],
+        expectedBehaviour: "Every editor-as-a-page route opens with its form showing and cancels back to its own list. Three of these were already covered by name; the other thirteen are the same route shape and were never named anywhere, so a blank one is a working URL with nothing on it and no error to report.",
+        expectedUiState: "All sixteen arrive with the form open and cancel back to the matching list. Each blank arrival is a finding, and so is each cancel that lands on a dead route — both named by route.",
+        expectedData: { blankEditorRoutes: 0 },
+        endResult: "Nothing is saved.",
+    },
+};

package/dist/features/tester/seed-data/authored/page-wiring__reachability.d.ts

@@ -0,0 +1,2 @@
+import type { AuthoredCase } from "./_types";
+export declare const authored: Record<string, AuthoredCase>;

package/dist/features/tester/seed-data/authored/page-wiring__reachability.js

@@ -0,0 +1,115 @@
+/*
+ * WHY: Authored six-part procedures for the page-wiring/reachability page.
+ * WHAT: 5 case(s), keyed by full checklist id.
+ *
+ * Written by hand, case by case, against the label each one states. There is no
+ * generator: the authoring scripts were deleted once it was clear they were
+ * scaffolding around work that is simply writing.
+ *
+ * Every case here is the same shape: something was fully built and had no way in.
+ * A page with no nav entry and a nav entry with no page are the two halves of one
+ * defect, and both ship as "half done" without anything failing.
+ *
+ * @tag domain:tester
+ * @tag layer:seed
+ * @tag pattern:none
+ * @tag access:server-only
+ * @tag consumers:seed-data/authored/index.ts
+ * @tag sideEffects:none
+ */
+export const authored = {
+    "checklist-page-wiring-reachability-lottery-can-be-created-without-seeding": {
+        roles: ["admin", "buyer"],
+        startPage: "/admin/events/new",
+        steps: [
+            "Sign in as admin@letitrip.in / TempPass123!.",
+            "Open /admin/events/new and read every option in the event type picker.",
+            "Select Lottery as the type.",
+            "Type 'QA Event lottery-created-without-seeding' as the title, set a start date of today and an end date one week out, and save.",
+            "Open /admin/lotteries and open the new event's slot editor.",
+            "Add three slots numbered 1, 2 and 3, give each a name, and save.",
+            "Sign out and sign in as rehan.sheikh@gmail.com / TempPass123!.",
+            "Open the new lottery's public page and pull slot 1.",
+        ],
+        inputs: { eventTitle: "QA Event lottery-created-without-seeding", slotCount: 3, pulledSlot: 1 },
+        expectedBehaviour: "A lottery can be built entirely through the UI. The event and its slots are edited in different places on purpose — the slot editor has no fields for title, dates, status or media, so a lottery created there alone would have no dates, and the draw window is measured from them.",
+        expectedUiState: "Lottery appears in the event type picker, which is where it was missing entirely. The event saves, its slot editor accepts three slots, and the public page renders them as a pullable grid. Slot 1 becomes booked after the pull.",
+        expectedData: { lotteryInTypePicker: true },
+        endResult: "A working lottery exists that no seed script created. Delete the event afterwards. Until this was fixed, lottery events could only come from the seeder.",
+    },
+    "checklist-page-wiring-reachability-carousel-can-be-renamed": {
+        roles: ["admin"],
+        startPage: "/admin/carousels",
+        steps: [
+            "Sign in as admin@letitrip.in / TempPass123!.",
+            "Open /admin/carousels and read the list.",
+            "Open the first carousel and look for an 'Edit carousel' control.",
+            "Change its name to 'QA Carousel can-be-renamed' and change its status.",
+            "Save.",
+            "RELOAD /admin/carousels and read the name and status.",
+            "Set both back to their original values.",
+        ],
+        inputs: { newName: "QA Carousel can-be-renamed" },
+        expectedBehaviour: "A named carousel can be edited after creation. The group editor was create-only, so a carousel's name was fixed for its entire life with no path to change it — and /admin/carousels rendered the flat slide editor rather than a list of named carousels at all.",
+        expectedUiState: "The list page shows named carousels, not a bare slide editor. 'Edit carousel' exists, opens with the current values, and after saving and reloading the new name and status are shown.",
+        expectedData: { editControlPresent: true },
+        endResult: "The name and status are restored by the final step. Other cases read this carousel by its seeded name.",
+    },
+    "checklist-page-wiring-reachability-grouped-listing-members-editable-from-its-own-page": {
+        roles: ["seller"],
+        startPage: "/store/grouped-listings/new",
+        steps: [
+            "Sign in as tyson@beybladearena.in / TempPass123!.",
+            "Open /store/grouped-listings/new.",
+            "Read the form and look for a product picker, a minimum-active-members field and a cover-image field.",
+            "Type 'QA Group members-editable' as the title.",
+            "Add product-beyblade-burst-valkyrie and product-beyblade-x-wizard-arrow as members.",
+            "Set minimum active members to 2 and attach public/test-media/sample-image.png as the cover image.",
+            "Save.",
+            "RELOAD the group's page and read its members, minimum and cover image.",
+        ],
+        inputs: {
+            title: "QA Group members-editable",
+            member1: "product-beyblade-burst-valkyrie",
+            member2: "product-beyblade-x-wizard-arrow",
+            minActiveMembers: 2,
+            coverImage: "public/test-media/sample-image.png",
+        },
+        expectedBehaviour: "Members are chosen while the group is being created, in the same form. productIds was hardcoded to an empty array, so a group could only ever be created empty and populated from somewhere else — and neither the minimum-active-members nor the cover-image field had an input anywhere in the app.",
+        expectedUiState: "All three controls are present on the create form. After saving and reloading, the group holds both products, a minimum of 2, and the uploaded cover image. A group that saves with zero members is the failure.",
+        expectedData: { memberCount: 2, minActiveMembers: 2 },
+        endResult: "Delete the group afterwards so it does not accumulate across runs.",
+    },
+    "checklist-page-wiring-reachability-public-nav-and-footer-resolve": {
+        roles: ["guest"],
+        startPage: "/",
+        steps: [
+            "Open / in a private window with no session.",
+            "Click every link in the public header navigation in turn, reading each destination and going back.",
+            "Open the sidebar support links and click each one, reading each destination.",
+            "Scroll to the footer and click every link in every column, reading each destination.",
+            "Write down any link that lands on a not-found page, an empty shell, or back on the homepage.",
+        ],
+        expectedBehaviour: "Every public-facing link resolves to a real page with content. The nav audit only ever checked the three portal sidebars, so not one of these 55 hrefs was covered by anything — a rename anywhere in the public surface rotted silently.",
+        expectedUiState: "All 55 destinations render real content. None shows a 404, none renders chrome with an empty body, and none silently redirects back to / — a redirect to the homepage looks like a working link and is not one.",
+        expectedData: { brokenLinkCount: 0 },
+        endResult: "Read-only; nothing persists. Record every broken href in the comment, not just the first — one report naming all of them is worth more than a verdict.",
+    },
+    "checklist-page-wiring-reachability-user-tester-hub-reachable-from-user-sidebar": {
+        roles: ["buyer"],
+        startPage: "/user",
+        steps: [
+            "Sign in as tester@letitrip.in / TempPass123!, which carries the tester flag.",
+            "Open /user and read the sidebar.",
+            "Find the Testing group and click Tester Hub.",
+            "Read where it lands.",
+            "Sign out and sign in as rehan.sheikh@gmail.com / TempPass123!, which does not carry the flag.",
+            "Open /user and read the sidebar for a Testing group.",
+        ],
+        inputs: { testerAccount: "tester@letitrip.in", nonTesterAccount: "rehan.sheikh@gmail.com" },
+        expectedBehaviour: "The Testing group is injected at runtime for accounts carrying the tester flag and is empty for everyone else. An empty group must not render as a heading with nothing under it.",
+        expectedUiState: "The tester sees a Testing group containing Tester Hub, and clicking it opens /user/tester with the checklist. The non-tester sees no Testing group at all — not a heading with no children, and not a link that leads to a 'Testers only' warning.",
+        expectedData: { testingGroupVisibleForNonTester: false },
+        endResult: "Read-only; nothing persists. Checking both accounts is the case — a group that renders for everybody would pass the first half alone.",
+    },
+};

package/dist/features/tester/seed-data/authored/public-pages__auth-error-pages.d.ts

@@ -0,0 +1,2 @@
+import type { AuthoredCase } from "./_types";
+export declare const authored: Record<string, AuthoredCase>;

package/dist/features/tester/seed-data/authored/public-pages__auth-error-pages.js

@@ -0,0 +1,136 @@
+/*
+ * WHY: Authored six-part procedures for the public-pages/auth-error-pages page.
+ * WHAT: 6 case(s), keyed by full checklist id.
+ *
+ * Written by hand, case by case, against the label each one states. There is no
+ * generator: the authoring scripts were deleted once it was clear they were
+ * scaffolding around work that is simply writing.
+ *
+ * @tag domain:tester
+ * @tag layer:seed
+ * @tag pattern:none
+ * @tag access:server-only
+ * @tag consumers:seed-data/authored/index.ts
+ * @tag sideEffects:none
+ */
+export const authored = {
+    "checklist-public-pages-auth-error-pages-register-page": {
+        roles: ["guest"],
+        startPage: "/auth/register",
+        steps: [
+            "Open /auth/register in a private window with no session.",
+            "Click 'Create account' with every field empty and read where the errors appear.",
+            "Type 'QA Register register-page' as the full name and 'not-an-email' as the email, then click 'Create account'.",
+            "Type qa-register-1@mailnull.com as the email — if that address already has an account from a previous run, increment the number.",
+            "Type TestPass123! in the password field and Different123! in the confirm field, then click 'Create account'.",
+            "Correct the confirm field to TestPass123!, tick the terms checkbox, and click 'Create account'.",
+        ],
+        inputs: {
+            fullName: "QA Register register-page",
+            email: "qa-register-1@mailnull.com",
+            password: "TestPass123!",
+            mismatchedConfirm: "Different123!",
+        },
+        expectedBehaviour: "Each rule reports on the field that broke it — required, email format, password match, terms accepted — before any request is sent, and the account is created only once all four pass.",
+        expectedUiState: "The empty submit marks the individual fields rather than showing one banner. 'not-an-email' is rejected on the email field. The mismatched confirm is rejected on the confirm field, not the password field. The final submit signs the browser in and leaves /auth/register.",
+        endResult: "The account exists and persists. This case creates a real row that teardown does not remove, which is why the address is numbered rather than fixed.",
+    },
+    "checklist-public-pages-auth-error-pages-forgot-reset-password-pages": {
+        roles: ["guest"],
+        startPage: "/auth/forgot-password",
+        steps: [
+            "Open /auth/forgot-password in a private window with no session.",
+            "Click 'Send reset link' with the field empty and read where the error appears.",
+            "Type not-an-email and click 'Send reset link'.",
+            "Type divya.funko@gmail.com and click 'Send reset link'.",
+            "Open that inbox, open the reset link, and read the page it lands on.",
+            "Submit the reset form with two different passwords typed into its two fields.",
+            "Set both fields to QaAuthPages654! and submit.",
+            "Request another link for the same address and use it to set the password back to TempPass123!.",
+        ],
+        inputs: {
+            email: "divya.funko@gmail.com",
+            newPassword: "QaAuthPages654!",
+            restoredPassword: "TempPass123!",
+        },
+        expectedBehaviour: "Both pages validate on the field before submitting, and the reset page enforces that the two password entries match. The link's action code is what authorises the change — reaching the inbox is the proof of identity.",
+        expectedUiState: "Empty and malformed emails are marked on the field. A real address produces the generic 'if an account exists' message. The reset page rejects mismatched passwords on the confirm field and accepts matching ones with a confirmation.",
+        endResult: "The password is back at TempPass123! by the final step. This case shares divya.funko@gmail.com with the single-use-link case in signup-login and with nothing else, deliberately — the seeder never resets an existing password, so a changed one outlives every future re-seed.",
+    },
+    "checklist-public-pages-auth-error-pages-verify-email-page": {
+        roles: ["guest"],
+        startPage: "/auth/register",
+        steps: [
+            "Open /auth/register in a private window and create an account with an inbox you can open, using TestPass123! as the password.",
+            "Open the inbox and find the verification email.",
+            "Open the verification link and read the page it lands on.",
+            "Open /user and look for an unverified-email warning.",
+            "Open the same verification link a second time and read the page.",
+        ],
+        inputs: { password: "TestPass123!" },
+        expectedBehaviour: "The verify-email page consumes the action code, reports the outcome, and offers a way onward. A second visit finds the code spent and says so rather than reporting a second success.",
+        expectedUiState: "The first visit shows a clear confirmation and a link into the site. /user then carries no unverified-email warning. The second visit shows a readable already-used or expired message — not a blank page, not a raw Firebase error code, and not another success.",
+        expectedData: { emailVerified: true },
+        endResult: "The account is verified and stays verified across a sign-out and sign-in.",
+    },
+    "checklist-public-pages-auth-error-pages-oauth-loading-redirect": {
+        roles: ["guest"],
+        startPage: "/auth/login",
+        steps: [
+            "Open /auth/login in a private window with no session.",
+            "Click 'Sign in with Google'.",
+            "Complete the Google popup and watch what the site shows while it finishes.",
+            "Wait up to 30 seconds without clicking anything.",
+            "Read where the browser ends up.",
+        ],
+        expectedBehaviour: "The interstitial waits for the sign-in signal and then moves on by itself. It must not be a terminal state: a page that shows a spinner and never navigates is the same to a user as a crash, and it is the state a dropped realtime signal produces.",
+        expectedUiState: "A loading state appears briefly and then the browser navigates to / or /user with the header showing a signed-in avatar. It does not sit on the loading page indefinitely and it does not land back on /auth/login as though nothing happened.",
+        endResult: "The session is established and survives a reload. Needs a Google account — answer null with that reason if none is available.",
+    },
+    "checklist-public-pages-auth-error-pages-checkout-success-page": {
+        roles: ["buyer"],
+        startPage: "/checkout",
+        steps: [
+            "Sign in as rehan.sheikh@gmail.com / TempPass123!.",
+            "Open /products/product-tester-standard-1 and click 'Add to Cart'.",
+            "Open /checkout, select the first saved address, continue through the add-ons step, choose Cash on Delivery and place the order.",
+            "Read the success page for an order number, the item, the address and the total.",
+            "Copy the URL and reload it.",
+            "Open the same URL in a private window with no session.",
+        ],
+        inputs: { productId: "product-tester-standard-1", price: 199, paymentMethod: "Cash on Delivery" },
+        expectedBehaviour: "The success page reads the real order rather than whatever the checkout had in memory, so it survives a reload. It is also order-scoped data, so a signed-out visitor with the URL must not be shown someone's delivery address.",
+        expectedUiState: "The page names an order number, 'Test Gadget — Standard Listing #1' at ₹199.00, the delivery address and a total. After the reload it shows the same. In the private window it does not render the order details — it asks for sign-in or reports not-found.",
+        expectedData: { orderTotal: 199 },
+        endResult: "The order exists in /user/orders. A success page that goes blank on reload was rendering from checkout state and not from the order.",
+    },
+    "checklist-public-pages-auth-error-pages-unauthorized-404-pages": {
+        roles: ["guest", "buyer"],
+        startPage: "/",
+        steps: [
+            "Open /this-page-does-not-exist-qa in a private window and read the page.",
+            "Click whatever the page offers as a way back and read where it lands.",
+            "Sign in as rehan.sheikh@gmail.com / TempPass123!.",
+            "Open /admin/site and read the page.",
+            "Open /unauthorized directly and read the page.",
+        ],
+        expectedBehaviour: "Both error pages render as real pages inside the site chrome and offer a way out. A buyer reaching an admin route gets the unauthorized page rather than a crash or a raw framework error, and neither page leaks anything about what it was protecting.",
+        expectedUiState: "The 404 shows a readable message and at least one working link back into the site. The unauthorized page does the same. Neither shows a stack trace, a file path, or an error digest presented as the whole page, and neither renders as an unstyled white page outside the site's own layout.",
+        endResult: "Read-only; nothing persists. A blank white page for either is the failure — it reads as the site being down rather than as one route being unavailable.",
+    },
+    "checklist-public-pages-auth-error-pages-auth-close-terminates-popup": {
+        roles: ["guest"],
+        startPage: "/auth/login",
+        steps: [
+            "Open /auth/login in a private window with no session.",
+            "Start a Google sign-in so the popup opens.",
+            "Complete it and watch the popup window rather than the page behind it.",
+            "Check the popup closes itself rather than sitting on a page.",
+            "Read the original page and check it is now signed in.",
+            "If the popup stays open, read what it shows and whether the opener ever updates.",
+        ],
+        expectedBehaviour: "The popup terminator closes its own window and hands the result back to the opener. A popup that renders and stays open leaves the opener waiting forever — the sign-in genuinely succeeded, and the site never learns it, which is indistinguishable to the visitor from a failed login.",
+        expectedUiState: "The popup closes on its own and the original page becomes signed in without a manual reload. A popup left open is the finding, with whatever it displays.",
+        endResult: "Signed out.",
+    },
+};

package/dist/features/tester/seed-data/authored/public-pages__bug-hunters.d.ts

@@ -0,0 +1,2 @@
+import type { AuthoredCase } from "./_types";
+export declare const authored: Record<string, AuthoredCase>;

package/dist/features/tester/seed-data/authored/public-pages__bug-hunters.js

@@ -0,0 +1,69 @@
+/*
+ * WHY: Authored six-part procedures for the public-pages/bug-hunters page.
+ * WHAT: 3 case(s), keyed by full checklist id.
+ *
+ * Written by hand, case by case, against the label each one states. There is no
+ * generator: the authoring scripts were deleted once it was clear they were
+ * scaffolding around work that is simply writing.
+ *
+ * The leaderboard exists to credit PEOPLE, which is why the bot account carries
+ * isBot and must not appear on it — a runner that works all 994 cases would top
+ * the board permanently and make it worthless as recognition.
+ *
+ * @tag domain:tester
+ * @tag layer:seed
+ * @tag pattern:none
+ * @tag access:server-only
+ * @tag consumers:seed-data/authored/index.ts
+ * @tag sideEffects:none
+ */
+export const authored = {
+    "checklist-public-pages-bug-hunters-leaderboard-loads": {
+        roles: ["guest"],
+        startPage: "/bug-hunters",
+        steps: [
+            "Open /bug-hunters in a private window with no session.",
+            "Read the rows from the top and note each name and confirmed-bug count.",
+            "Check that the counts descend from the first row to the last.",
+            "Look for 'Mock User 18' and read the count beside it.",
+            "Look for the Claude tester account by name anywhere in the list.",
+        ],
+        inputs: { seededHunter: "Mock User 18", seededBugCount: 1 },
+        expectedBehaviour: "The board ranks testers by confirmed-bug count, highest first, and is fed by the demo fixture under Admin (Testing) → Bug Hunter Rewards. The bot account is excluded because it carries isBot — credit belongs to people, and a runner working the whole checklist would otherwise sit at the top forever.",
+        expectedUiState: "'Mock User 18' appears with 1 confirmed bug. Counts never increase as you read down the list. The Claude tester account does not appear at all.",
+        expectedData: { botAccountOnLeaderboard: 0 },
+        endResult: "Read-only; nothing persists. A bot row on the board is a fail even if the ordering is otherwise correct.",
+    },
+    "checklist-public-pages-bug-hunters-leaderboard-empty-state": {
+        roles: ["admin", "guest"],
+        startPage: "/bug-hunters",
+        steps: [
+            "Sign in as admin@letitrip.in / TempPass123!.",
+            "Open /admin/tester-feedback and find the confirmed bug credited to 'Mock User 18'.",
+            "Un-confirm it, so no confirmed bugs remain.",
+            "Open /bug-hunters in a private window with no session.",
+            "Read the page.",
+            "Return to /admin/tester-feedback and confirm the bug again.",
+            "Reload /bug-hunters in the private window.",
+        ],
+        expectedBehaviour: "With nothing to rank the page shows a named empty state rather than a blank container or an error. Zero rows is a normal condition for this page on a new install, not a failure.",
+        expectedUiState: "With no confirmed bugs the page reads 'No confirmed bugs yet' or equivalent, inside the normal site chrome. It is not a blank white page, not an error boundary, and not a heading with nothing under it. After re-confirming, 'Mock User 18' is back.",
+        expectedData: { emptyStateShown: true },
+        endResult: "The confirmation is restored by the final step, so the leaderboard-loads case above still has its fixture. Leaving it un-confirmed silently breaks that case.",
+    },
+    "checklist-public-pages-bug-hunters-leaderboard-footer-link": {
+        roles: ["guest"],
+        startPage: "/",
+        steps: [
+            "Open / in a private window with no session.",
+            "Scroll to the footer and find the Support column.",
+            "Read the links in that column.",
+            "Click 'Bug Hunters'.",
+            "Read the address bar and the page.",
+        ],
+        expectedBehaviour: "The leaderboard is reachable from the footer. A page with no nav entry is exactly as unfinished as a nav entry with no page — this is the first half of that pair.",
+        expectedUiState: "A 'Bug Hunters' link is present in the footer's Support column and clicking it lands on /bug-hunters with the leaderboard rendered. Not a 404 and not a redirect to /.",
+        expectedData: { footerLinkHref: "/bug-hunters" },
+        endResult: "Read-only; nothing persists.",
+    },
+};

package/dist/features/tester/seed-data/authored/public-pages__core-listing-pages.d.ts

@@ -0,0 +1,2 @@
+import type { AuthoredCase } from "./_types";
+export declare const authored: Record<string, AuthoredCase>;