@mohasinac/appkit 4.34.1 → 4.35.0

package/dist/features/tester/seed-data/authored/public-pages__legal-policy-pages.js

@@ -0,0 +1,126 @@
+/*
+ * WHY: Authored six-part procedures for the public-pages/legal-policy-pages page.
+ * WHAT: 7 case(s), keyed by full checklist id.
+ *
+ * Written by hand, case by case, against the label each one states. There is no
+ * generator: the authoring scripts were deleted once it was clear they were
+ * scaffolding around work that is simply writing.
+ *
+ * All six policy pages share one renderer, so most of these cases are really
+ * about the ONE thing that differs per page: which content the renderer is
+ * handed, and which related links it derives.
+ *
+ * @tag domain:tester
+ * @tag layer:seed
+ * @tag pattern:none
+ * @tag access:server-only
+ * @tag consumers:seed-data/authored/index.ts
+ * @tag sideEffects:none
+ */
+export const authored = {
+    "checklist-public-pages-legal-policy-pages-shipping-refund-policy": {
+        roles: ["guest"],
+        startPage: "/shipping-policy",
+        steps: [
+            "Open /shipping-policy in a private window with no session.",
+            "Read the headings and body content.",
+            "Open /refund-policy and read the headings and body content.",
+            "Compare the two — they must not be the same text.",
+        ],
+        expectedBehaviour: "Each policy page renders its own copy through the shared renderer. Two policy pages showing identical text means the page key is not reaching the content lookup and one of them is displaying the other's terms.",
+        expectedUiState: "Both pages show headings and paragraphs specific to their subject. Neither is blank, neither 404s, and the two bodies are visibly different documents.",
+        endResult: "Read-only; nothing persists.",
+    },
+    "checklist-public-pages-legal-policy-pages-refund-policy-not-raw-json": {
+        roles: ["guest"],
+        startPage: "/refund-policy",
+        steps: [
+            "Open /refund-policy in a private window with no session.",
+            "Read the first line of the page body.",
+            "Search the page for the characters {\"type\":\"doc\".",
+            "Search the page for the words 'content', 'attrs' and 'paragraph' appearing as visible text rather than as prose.",
+        ],
+        expectedBehaviour: "The renderer injects its content as HTML, so whatever is stored must BE html. A rich-text editor document stored as JSON in that field is rendered as its own source — the page returns 200, the layout is intact, and the body is a wall of braces.",
+        expectedUiState: "The body reads as English policy prose. It does not begin with {\"type\":\"doc\", and none of 'content', 'attrs' or 'paragraph' appears as visible page text.",
+        endResult: "Read-only. Re-seed before running this: the fix was to set the seeded override to an empty string so the page falls back to its own copy, and a stale database still holds the JSON.",
+    },
+    "checklist-public-pages-legal-policy-pages-privacy-cookies-security": {
+        roles: ["guest"],
+        startPage: "/privacy",
+        steps: [
+            "Open /privacy in a private window with no session and read the body.",
+            "Open /cookies and read the body.",
+            "Open /security and read the body.",
+            "Compare all three — none may repeat another's text.",
+        ],
+        expectedBehaviour: "Three distinct policies render three distinct documents through the shared renderer.",
+        expectedUiState: "Each page shows its own headings and paragraphs. None is blank, none 404s, and no two are the same document.",
+        endResult: "Read-only; nothing persists.",
+    },
+    "checklist-public-pages-legal-policy-pages-ethics-page-loads": {
+        roles: ["guest"],
+        startPage: "/ethics",
+        steps: [
+            "Open /ethics in a private window with no session.",
+            "Find the section covering live animals and plants.",
+            "Read it for vendor verification, a lawful-destination check, CITES paperwork and specialist transport.",
+            "Open / and find the Ethics link in the footer's Support column.",
+            "Open /about and find the 'How we hold ourselves to this →' link in the Values section.",
+        ],
+        expectedBehaviour: "The page exists, states the live-item commitments specifically, and is reachable from both the footer and the About page. A page nobody can navigate to is as unfinished as one that does not render.",
+        expectedUiState: "The live-animal section names all four commitments — vendor verification, lawful destination, CITES paperwork, specialist transport — rather than gesturing at 'responsible sourcing'. Both links reach /ethics.",
+        expectedData: { liveItemCommitmentCount: 4 },
+        endResult: "Read-only; nothing persists.",
+    },
+    "checklist-public-pages-legal-policy-pages-code-of-conduct-loads": {
+        roles: ["guest"],
+        startPage: "/code-of-conduct",
+        steps: [
+            "Open /code-of-conduct in a private window with no session.",
+            "Read the page for sections on listing honestly, bidding in good faith and review integrity.",
+            "Read it for the enforcement and appeal ladder.",
+            "Open / and find the Code of Conduct link in the footer's Legal column.",
+        ],
+        expectedBehaviour: "The page covers all four topics and is reachable from the footer's Legal column. The appeal ladder matters most — a code that states rules without stating how to contest an enforcement is half a document.",
+        expectedUiState: "Sections on listing honestly, bidding in good faith, review integrity and the enforcement/appeal ladder are all present. The footer link reaches the page.",
+        expectedData: { topicCount: 4 },
+        endResult: "Read-only; nothing persists.",
+    },
+    "checklist-public-pages-legal-policy-pages-policy-related-links-exclude-self": {
+        roles: ["guest"],
+        startPage: "/ethics",
+        steps: [
+            "Open /terms in a private window and read the Related Policies list at the foot of the page.",
+            "Count the links and check whether Terms itself is among them.",
+            "Repeat on /privacy, reading and counting the same list.",
+            "Repeat on /cookies.",
+            "Repeat on /refund-policy.",
+            "Repeat on /ethics.",
+            "Repeat on /code-of-conduct.",
+        ],
+        expectedBehaviour: "The related-links list is derived from one registry with the current page filtered out, so every page offers exactly the other five. A self-link is the tell that the filter is missing — it reads as a working link and goes nowhere new.",
+        expectedUiState: "All six pages show exactly five related links, and on none of them is the current page one of them. Four links means the registry is short; six means the self-filter is not running.",
+        expectedData: { relatedLinkCount: 5 },
+        endResult: "Read-only; nothing persists. Checking all six is the case — the filter can be right on one page and wrong on another only if the list is hand-written per page, which is what this rules out.",
+    },
+    "checklist-public-pages-legal-policy-pages-policy-admin-html-override": {
+        roles: ["admin", "guest"],
+        startPage: "/admin/site",
+        steps: [
+            "Open /ethics in a private window and read the first paragraph.",
+            "Sign in as admin@letitrip.in / TempPass123! in a normal window.",
+            "Open /admin/site?tab=legal and find the 'Our Ethics' textarea.",
+            "Type <p>QA Ethics policy-admin-html-override</p> into it.",
+            "Save.",
+            "Return to the private window and reload /ethics immediately.",
+            "Read the first paragraph.",
+            "Go back to the admin textarea, clear it completely, and save again.",
+            "Reload /ethics in the private window once more.",
+        ],
+        inputs: { override: "<p>QA Ethics policy-admin-html-override</p>" },
+        expectedBehaviour: "The whole chain runs on save: admin textarea, stored override, renderer read, and a cache bust. These pages are cached for an hour, so without the revalidation the admin's change would be invisible for up to sixty minutes and would look like a save that failed.",
+        expectedUiState: "/ethics shows the typed sentence immediately after saving — not after a wait. After the textarea is cleared and saved, the page reverts to its default copy on the next reload.",
+        expectedData: { revalidatedImmediately: true },
+        endResult: "The textarea is empty again and /ethics shows its default content. Leaving the override in place would break the ethics-page-loads case above, which reads the real copy.",
+    },
+};

package/dist/features/tester/seed-data/authored/public-pages__stores-sellers-directories.d.ts

@@ -0,0 +1,2 @@
+import type { AuthoredCase } from "./_types";
+export declare const authored: Record<string, AuthoredCase>;

package/dist/features/tester/seed-data/authored/public-pages__stores-sellers-directories.js

@@ -0,0 +1,255 @@
+/*
+ * WHY: Authored six-part procedures for the public-pages/stores-sellers-directories page.
+ * WHAT: 16 case(s), keyed by full checklist id.
+ *
+ * Written by hand, case by case, against the label each one states. There is no
+ * generator: the authoring scripts were deleted once it was clear they were
+ * scaffolding around work that is simply writing.
+ *
+ * 🛑 SEVERAL CASES HERE HINGE ON A DISTINCTION THAT IS EASY TO LOSE: a tab's URL
+ * segment and a listing type are DIFFERENT id spaces. Tab bars key on the URL
+ * segment, filter chips key on the listing type, and conflating them either
+ * breaks live URLs or silently returns zero rows. That is why the store tab cases
+ * name the tab by its visible label and the URL by its path, never interchangeably.
+ *
+ * @tag domain:tester
+ * @tag layer:seed
+ * @tag pattern:none
+ * @tag access:server-only
+ * @tag consumers:seed-data/authored/index.ts
+ * @tag sideEffects:none
+ */
+export const authored = {
+    "checklist-public-pages-stores-sellers-directories-store-directory": {
+        roles: ["guest"],
+        startPage: "/stores",
+        steps: [
+            "Open /stores in a private window with no session.",
+            "Read every store card — name, logo, verified badge and any rating.",
+            "Note whether any card names a tester sandbox store.",
+            "Use the status filter if one is offered, selecting each value in turn and reading the results.",
+            "Click into 'Beyblade Arena'.",
+        ],
+        expectedBehaviour: "The directory lists public stores through a projection that names every field it emits. Sandbox stores are filtered out for signed-out visitors in the application layer — never by a Firestore inequality, which would exclude every document lacking the flag, i.e. all the real ones, and return only test data.",
+        expectedUiState: "Real stores are listed with names, logos and verified badges. No card names a sandbox store. Any status filter offered changes which stores appear — the seed carries a pending and a suspended store precisely so those chips are not permanently empty.",
+        expectedData: { sandboxStoresVisibleToGuest: 0 },
+        endResult: "Read-only; nothing persists.",
+    },
+    "checklist-public-pages-stores-sellers-directories-store-detail-tabs": {
+        roles: ["guest"],
+        startPage: "/stores/store-beyblade-arena",
+        steps: [
+            "Open /stores/store-beyblade-arena in a private window with no session.",
+            "Read the store header and the tab bar.",
+            "Click each tab in turn and read the URL and the content.",
+            "Open the browser's View Source and search for accessToken, wabaId, catalogId, adminNotes and customCommissionRate.",
+        ],
+        inputs: { storeId: "store-beyblade-arena" },
+        expectedBehaviour: "Each tab is a real route whose URL segment is stable and bookmarkable. The page is built from a store projection, not from the raw document — four pages once passed the whole document into a client component behind a cast that has no runtime effect, publishing a decrypted WhatsApp token into the page HTML.",
+        expectedUiState: "Every tab navigates to its own URL and renders content. None of the five secret field names appears anywhere in the page source, including the data payload embedded at the bottom of the HTML.",
+        expectedData: { secretFieldsInHtml: 0 },
+        endResult: "Read-only; nothing persists. A hit on any of those names is a leak regardless of how the page renders.",
+    },
+    "checklist-public-pages-stores-sellers-directories-category-tabs-every-type-renders": {
+        roles: ["guest"],
+        startPage: "/categories/category-beyblade-burst",
+        steps: [
+            "Open /categories/category-beyblade-burst in a private window with no session.",
+            "Read every tab offered and write the list down.",
+            "Click each tab in turn and read what renders beneath it.",
+            "Write down any tab that opens to a blank panel.",
+        ],
+        expectedBehaviour: "Every tab that is OFFERED has a render branch behind it. The tab array and the panel that renders each type are two lists, and when one grows and the other does not, the extra tabs are clickable and open to nothing.",
+        expectedUiState: "Each tab opens to either real content or a named empty state. Not one opens to a blank panel with no message. A tab that is silently dropped from the panel switch is the failure, and it looks exactly like a slow load.",
+        expectedData: { blankPanelCount: 0 },
+        endResult: "Read-only; nothing persists.",
+    },
+    "checklist-public-pages-stores-sellers-directories-brand-tabs-every-type-offered": {
+        roles: ["guest"],
+        startPage: "/brands/brand-beyblade",
+        steps: [
+            "Open /categories/category-beyblade-burst in a private window and write down every tab it offers.",
+            "Open /brands/brand-beyblade and write down every tab it offers.",
+            "Compare the two lists, ignoring the Stores tab which categories have and brands do not.",
+            "Look specifically for Classifieds, Digital Codes, Live Items and Art & Stickers on the brand page.",
+        ],
+        expectedBehaviour: "A brand page offers the same listing-type tabs as a category page minus Stores. The two components are deliberate near-duplicates with different scoping, and four types were silently missing from one of them while present in the other.",
+        expectedUiState: "Apart from Stores, the two tab lists match. Classifieds, Digital Codes, Live Items and Art & Stickers are all present on the brand page rather than quietly absent.",
+        endResult: "Read-only; nothing persists. A missing tab is invisible unless the two pages are compared side by side, which is why both lists are written down.",
+    },
+    "checklist-public-pages-stores-sellers-directories-category-brand-tab-counts-match": {
+        roles: ["guest"],
+        startPage: "/categories/category-beyblade-burst",
+        steps: [
+            "Open /categories/category-beyblade-burst in a private window.",
+            "Write down the count badge on every tab.",
+            "Open each tab in turn and count the items it actually shows, paging to the end.",
+            "Compare each pair.",
+            "Repeat on /brands/brand-beyblade.",
+        ],
+        expectedBehaviour: "Counts come from one derivation over the same tab array, so a badge cannot describe a tab that no longer exists or miss one that does. A count that fails must come back as unknown rather than zero — failing to zero would hide a tab holding real stock on a transient error.",
+        expectedUiState: "Every badge matches the number of items in its tab. A badge of zero on a tab that has items, or a populated badge over an empty tab, are both failures.",
+        expectedData: { mismatchedBadgeCount: 0 },
+        endResult: "Read-only; nothing persists.",
+    },
+    "checklist-public-pages-stores-sellers-directories-empty-tabs-hidden": {
+        roles: ["guest"],
+        startPage: "/stores/store-tester-qa-seller",
+        steps: [
+            "Sign in as tester@letitrip.in / TempPass123! so sandbox content is visible.",
+            "Open /stores/store-tester-qa-seller and write down every tab offered.",
+            "Open each tab and note which are empty.",
+            "Open /stores/store-beyblade-arena and write down its tabs.",
+            "Compare the two stores' tab lists.",
+        ],
+        expectedBehaviour: "A tab is hidden when its count is genuinely zero, and shown when the count could not be computed. That distinction is the whole rule: a count map that does not cover an option returns undefined, which reads as unknown and keeps the tab — so an uncovered option is structurally unhideable while a covered one vanishes correctly.",
+        expectedUiState: "Neither store shows a tab for a listing type it has none of. The two stores offer different tab sets, which is the proof that hiding is happening at all — identical tab bars on stores with different catalogues means nothing is being hidden.",
+        endResult: "Read-only; nothing persists.",
+    },
+    "checklist-public-pages-stores-sellers-directories-store-art-stickers-tab-shows-items": {
+        roles: ["guest"],
+        startPage: "/stores/store-beyblade-arena/art",
+        steps: [
+            "Open /stores/store-beyblade-arena/art in a private window with no session.",
+            "Read the grid and every card title.",
+            "Check whether the items are art prints and sticker sheets rather than ordinary products.",
+            "Read the availability tabs and click the middle one.",
+        ],
+        expectedBehaviour: "Art and stickers are real listing types with their own filter value. Adding a type to the union and to the plugin registry is not enough — it must also be in the repository's filter-alias map, and a type missing there makes the alias return an empty string that is then dropped, so the query runs with NO listing-type filter and returns everything.",
+        expectedUiState: "The grid holds art prints and sticker sheets — 'Dranzer Phoenix Rising — Fan Art Poster' and similar — and not ordinary Beyblade products. It is not an empty grid. The middle availability tab shows the sold-out art fixture.",
+        expectedData: { ordinaryProductsInArtTab: 0 },
+        endResult: "Read-only; nothing persists. A grid full of ordinary products is the dropped-filter failure; an empty grid is a different one.",
+    },
+    "checklist-public-pages-stores-sellers-directories-store-tab-counts-match-contents": {
+        roles: ["guest"],
+        startPage: "/stores/store-beyblade-arena",
+        steps: [
+            "Open /stores/store-beyblade-arena in a private window.",
+            "Write down the count badge on each of Products, Auctions, Pre-Orders, Prize Draws, Classifieds, Digital Codes, Live Items and Art & Stickers.",
+            "Open each of those tabs and count the items, paging to the end of each.",
+            "Compare each pair and note any mismatch.",
+        ],
+        expectedBehaviour: "Each badge is computed from the same query its tab runs, under the same availability scope. A badge counted without the availability filter over-reports by every sold or ended row.",
+        expectedUiState: "All eight badges match their tab contents. A badge that counts sold-out items the Available tab then hides is the most likely mismatch and is still a mismatch.",
+        expectedData: { mismatchedBadgeCount: 0 },
+        endResult: "Read-only; nothing persists.",
+    },
+    "checklist-public-pages-stores-sellers-directories-store-tab-sort-survives-reload": {
+        roles: ["guest"],
+        startPage: "/stores/store-beyblade-arena/auctions",
+        steps: [
+            "Open /stores/store-beyblade-arena/auctions in a private window.",
+            "Read the sort dropdown's selection and the order of the cards.",
+            "Change the sort to a different option.",
+            "Read the new card order and the URL.",
+            "Reload the page.",
+            "Read the sort dropdown's selection and the card order again, before touching anything.",
+        ],
+        expectedBehaviour: "Sort lives in the URL, so the server's first paint and the dropdown agree. When the server renders a default the client does not share, the first paint shows one order and the dropdown claims another — and because the client caches the server's data indefinitely, the disagreement never resolves itself.",
+        expectedUiState: "After the reload the dropdown shows the chosen sort AND the cards are in that order on first paint — not the default order that then re-sorts a moment later.",
+        endResult: "Read-only; nothing persists beyond the URL.",
+    },
+    "checklist-public-pages-stores-sellers-directories-store-preorders-tab-default-sort": {
+        roles: ["guest"],
+        startPage: "/stores/store-beyblade-arena/pre-orders",
+        steps: [
+            "Open /pre-orders in a private window and read the sort dropdown's default selection.",
+            "Open /stores/store-beyblade-arena/pre-orders and read its sort dropdown's default selection.",
+            "Compare the two.",
+            "Read the delivery dates on the store tab's cards from the top down.",
+        ],
+        expectedBehaviour: "Both surfaces derive their sort options and default from the listing type's own plugin, so they cannot disagree. Store tabs once carried local shadow copies of the sort array which had drifted in both labels and default, so the same data opened newest-first in one place and earliest-delivery-first in the other.",
+        expectedUiState: "Both dropdowns show earliest-delivery-first. The store tab's dates ascend down the page. Two different defaults for the same listing type is the failure.",
+        endResult: "Read-only; nothing persists.",
+    },
+    "checklist-public-pages-stores-sellers-directories-store-classified-live-facets-filter": {
+        roles: ["guest"],
+        startPage: "/stores/store-beyblade-arena/classified",
+        steps: [
+            "Open /stores/store-beyblade-arena/classified in a private window and read the result count.",
+            "Open the filters and select the city Mumbai, then apply.",
+            "Read the result count and each card's city.",
+            "Clear that, tick 'negotiable', apply, and read the count.",
+            "Clear that, tick 'accepts shipping', apply, and read the count.",
+            "Open the store's Live Items tab and repeat with the species, sex and jurisdiction facets.",
+        ],
+        inputs: { city: "Mumbai" },
+        expectedBehaviour: "Per-type facets reach the query. A facet can render, count toward the filter badge and change nothing at all — that happens when it emits a field the query allowlist does not carry, or carries a field the document does not have, and neither failure raises anything.",
+        expectedUiState: "Every facet visibly changes the result count and the cards shown. Selecting Mumbai leaves only Mumbai listings. A facet that leaves the count identical while the filter badge increments is the exact failure.",
+        expectedData: { inertFacetCount: 0 },
+        endResult: "Read-only; nothing persists beyond the URL.",
+    },
+    "checklist-public-pages-stores-sellers-directories-store-tab-empty-state-not-error": {
+        roles: ["guest"],
+        startPage: "/stores/store-vintage-vault-co",
+        steps: [
+            "Open /stores/store-vintage-vault-co in a private window with no session.",
+            "Open every tab offered and find one that is genuinely empty.",
+            "Read exactly what is shown in that empty tab.",
+            "Wait 10 seconds and read it again.",
+            "Check for any error toast anywhere on the page.",
+        ],
+        expectedBehaviour: "An empty tab shows a named empty state. The two failure modes to separate are a spinner that never resolves — which is what a data fetch that neither succeeds nor reports failure looks like — and a missing-index error surfaced as a toast, which is a real backend fault dressed as a UI hiccup.",
+        expectedUiState: "The empty tab shows a friendly message inside the normal layout. Not a blank white area, not a spinner still turning after 10 seconds, and no toast mentioning an index or a failed precondition.",
+        endResult: "Read-only; nothing persists.",
+    },
+    "checklist-public-pages-stores-sellers-directories-sellers-directory": {
+        roles: ["guest"],
+        startPage: "/sellers",
+        steps: [
+            "Open /sellers in a private window with no session.",
+            "Read every seller card — name, avatar and any stats.",
+            "Search the page source for an email address and for a phone number.",
+            "Click into one seller and read where it lands.",
+        ],
+        expectedBehaviour: "The directory lists sellers with public-facing detail only. Email and phone are PII-encrypted at rest and have no place on a public directory in any form.",
+        expectedUiState: "Cards render with names and avatars. Neither the rendered page nor its source contains an email address or a phone number. Each card links to a real seller page rather than a 404.",
+        expectedData: { piiInSource: 0 },
+        endResult: "Read-only; nothing persists.",
+    },
+    "checklist-public-pages-stores-sellers-directories-seller-detail-page": {
+        roles: ["guest"],
+        startPage: "/stores/store-tester-qa-seller",
+        steps: [
+            "Sign in as tester@letitrip.in / TempPass123! so sandbox content is visible.",
+            "Open /stores/store-tester-qa-seller.",
+            "Read the header, the tabs and the listings.",
+            "Open the store's own listing-type dropdown, if it offers one, and select each option in turn.",
+            "Note any option that returns nothing.",
+        ],
+        inputs: { storeId: "store-tester-qa-seller" },
+        expectedBehaviour: "This store backs the tester programme and carries at least one fixture of every listing type — the art and stickers pair were added specifically so the type dropdown has real data on every option rather than several that silently return nothing.",
+        expectedUiState: "The page renders with its header and tabs. Every option in the listing-type dropdown returns at least one item. An option that returns nothing means either the fixture is missing or that type is being dropped from the query.",
+        expectedData: { emptyTypeOptionCount: 0 },
+        endResult: "Read-only; nothing persists.",
+    },
+    "checklist-public-pages-stores-sellers-directories-scams-registry": {
+        roles: ["guest"],
+        startPage: "/scams",
+        steps: [
+            "Open /scams in a private window with no session.",
+            "Read the list and the filters offered.",
+            "Select each status filter value in turn and read the results.",
+            "Open one scammer profile and read its fields.",
+            "Search that page's source for any unmasked full phone number or email.",
+        ],
+        expectedBehaviour: "The registry lists reported profiles with filters whose values match the real stored status set. A filter chip whose value is not a real stored status returns zero rows forever with no error — the comparison is byte-exact, so a wrong word or wrong case is a permanently empty chip.",
+        expectedUiState: "Every status filter value returns rows or a named empty state, and at least one returns rows. The profile page shows the report detail. Identifiers are masked rather than published in full.",
+        endResult: "Read-only; nothing persists.",
+    },
+    "checklist-public-pages-stores-sellers-directories-scam-related-profiles-sections": {
+        roles: ["guest"],
+        startPage: "/scams",
+        steps: [
+            "Open /scams in a private window and open a scammer profile that has cross-links.",
+            "Find the 'Related Profiles' section and read its entries.",
+            "Find the separately-labelled 'Similar Scam Reports' section and read its entries.",
+            "Check that the two sections are distinct and separately headed.",
+            "Check whether the current profile appears in either.",
+        ],
+        expectedBehaviour: "Same-identity cross-links and same-pattern matches are two different claims and must never be merged. 'Related Profiles' asserts these are the same person; 'Similar Scam Reports' asserts only that the reports share a scam type. Presenting the second as the first accuses someone of being a person they are not.",
+        expectedUiState: "Two sections with distinct headings. Related Profiles holds only explicit cross-links; Similar Scam Reports holds same-type matches. Neither includes the profile currently open.",
+        expectedData: { selfLinkCount: 0 },
+        endResult: "Read-only; nothing persists. One merged section is the failure even if every entry in it is individually correct.",
+    },
+};

package/dist/features/tester/seed-data/authored/search-and-nav__employee-permissions.d.ts

@@ -0,0 +1,2 @@
+import type { AuthoredCase } from "./_types";
+export declare const authored: Record<string, AuthoredCase>;

package/dist/features/tester/seed-data/authored/search-and-nav__employee-permissions.js

@@ -0,0 +1,59 @@
+/*
+ * WHY: Authored six-part procedures for the search-and-nav/employee-permissions page.
+ * WHAT: 2 case(s), keyed by full checklist id.
+ *
+ * Written by hand, case by case, against the label each one states. There is no
+ * generator: the authoring scripts were deleted once it was clear they were
+ * scaffolding around work that is simply writing.
+ *
+ * 🛑 THE SEED ALREADY HAS BOTH EMPLOYEE PERSONAS — user-employee-blog carries the
+ * blog_poster permission and user-employee-trust carries trust_and_safety. Neither
+ * case needs to invite anyone; signing in as them is the whole setup. The `users`
+ * collection is PRESERVED by a tester run, so they survive teardown, but a fresh
+ * project needs `npx appkit-seed load --collections users` once before they exist.
+ *
+ * @tag domain:tester
+ * @tag layer:seed
+ * @tag pattern:none
+ * @tag access:server-only
+ * @tag consumers:seed-data/authored/index.ts
+ * @tag sideEffects:none
+ */
+export const authored = {
+    "checklist-search-and-nav-employee-permissions-employee-sees-only-their-permissions": {
+        roles: ["employee", "admin"],
+        startPage: "/admin",
+        steps: [
+            "Sign in as employee-blog@letitrip.in / TempPass123!.",
+            "Open /admin and count every entry in the sidebar.",
+            "Read every group heading that is present.",
+            "Look specifically for Finance, Procurement, Catalog, Testing, Site, Events, Trust & Safety, System and Maintenance.",
+            "Sign out and sign in as employee-trust@letitrip.in / TempPass123!.",
+            "Open /admin and count the sidebar entries again.",
+            "Sign out and sign in as admin@letitrip.in / TempPass123!, then open /admin and count the entries.",
+        ],
+        inputs: { blogEmployee: "employee-blog@letitrip.in", trustEmployee: "employee-trust@letitrip.in" },
+        expectedBehaviour: "Nav filtering keys on each item's own id to look up its required permission. The filter short-circuits when an item has no id, and for a long time no item had one — so all 91 entries passed for everybody and every requiredPermission in the config was decorative. A group left with no visible children is removed entirely rather than rendering an empty heading.",
+        expectedUiState: "The blog employee sees roughly five entries, not 91. Finance, Procurement, Catalog, Testing, Site, Events, Trust & Safety, System and Maintenance are absent as headings, not present-and-empty. The trust employee sees a different set, roughly 24. The admin sees everything. Three genuinely different counts is the pass; three identical counts is the exact bug.",
+        expectedData: { blogEntriesApprox: 5, trustEntriesApprox: 24 },
+        endResult: "Read-only; nothing persists. Comparing two presets against each other AND against admin is what distinguishes real filtering from a filter that happens to hide the same fixed set from everyone.",
+    },
+    "checklist-search-and-nav-employee-permissions-employee-sidebar-never-empty": {
+        roles: ["admin", "employee"],
+        startPage: "/admin/team",
+        steps: [
+            "Sign in as admin@letitrip.in / TempPass123!.",
+            "Open /admin/team and open the editor for employee-blog@letitrip.in.",
+            "Read every permission preset the editor offers and write the list down.",
+            "Set the account to the first preset and save.",
+            "Sign out, sign in as employee-blog@letitrip.in / TempPass123!, open /admin and count the sidebar entries.",
+            "Repeat for every remaining preset: set it as admin, then sign in as the employee and count.",
+            "Set the account back to the blog poster preset as the last step.",
+        ],
+        inputs: { employee: "employee-blog@letitrip.in" },
+        expectedBehaviour: "No preset produces a completely blank sidebar. At minimum every employee reaches the dashboard itself, so the portal is navigable from the moment they sign in.",
+        expectedUiState: "For every preset, at least one entry is visible in the sidebar. A blank sidebar is the failure — an employee cannot tell it from a broken account and will report it as one, which is a support ticket the permission system caused rather than prevented.",
+        expectedData: { minimumVisibleEntries: 1 },
+        endResult: "The account is back on the blog poster preset, which the case above depends on. Leaving it on another preset silently breaks that case's expected count of roughly five.",
+    },
+};

package/dist/features/tester/seed-data/authored/search-and-nav__header-search.d.ts

@@ -0,0 +1,2 @@
+import type { AuthoredCase } from "./_types";
+export declare const authored: Record<string, AuthoredCase>;

package/dist/features/tester/seed-data/authored/search-and-nav__header-search.js

@@ -0,0 +1,88 @@
+/*
+ * WHY: Authored six-part procedures for the search-and-nav/header-search page.
+ * WHAT: 4 case(s), keyed by full checklist id.
+ *
+ * Written by hand, case by case, against the label each one states. There is no
+ * generator: the authoring scripts were deleted once it was clear they were
+ * scaffolding around work that is simply writing.
+ *
+ * Every one of these searches for a word that does NOT appear in the label of
+ * what it should find. That is the point of the whole page: matching labels is
+ * the behaviour being replaced, so a query whose answer is in its own label
+ * cannot tell the two apart.
+ *
+ * @tag domain:tester
+ * @tag layer:seed
+ * @tag pattern:none
+ * @tag access:server-only
+ * @tag consumers:seed-data/authored/index.ts
+ * @tag sideEffects:none
+ */
+export const authored = {
+    "checklist-search-and-nav-header-search-search-finds-maintenance-toggle": {
+        roles: ["admin"],
+        startPage: "/",
+        steps: [
+            "Sign in as admin@letitrip.in / TempPass123!.",
+            "Open / and click into the header search.",
+            "Type maintenance.",
+            "Read the results.",
+            "Click the maintenance quick link.",
+            "Read which tab of Site Settings is open and what is on screen.",
+        ],
+        inputs: { query: "maintenance" },
+        expectedBehaviour: "Search reaches individual SETTINGS, not just screens. No nav item is called Maintenance, so a label-matching search returns nothing for this word — and the toggle lives on tab one of nineteen with no way to find it but hunting.",
+        expectedUiState: "A quick link for maintenance appears in the results. Clicking it opens Site Settings on the Branding tab with the Maintenance mode toggle scrolled into view. Landing on Site Settings' first tab with the toggle somewhere off screen is a FAIL, not a partial pass.",
+        expectedData: { resultCount: 1 },
+        endResult: "Read-only; do not flip the toggle. Turning on maintenance mode would take the site down for every other case in the run.",
+    },
+    "checklist-search-and-nav-header-search-search-finds-by-what-it-does": {
+        roles: ["admin"],
+        startPage: "/",
+        steps: [
+            "Sign in as admin@letitrip.in / TempPass123!.",
+            "Open / and click into the header search.",
+            "Type refund and read the results.",
+            "Clear the box, type postcode and read the results.",
+            "Clear the box, type cod and read the results.",
+            "Clear the box, type zzzznope and read the results.",
+        ],
+        inputs: { query1: "refund", query2: "postcode", query3: "cod", nonsenseQuery: "zzzznope" },
+        expectedBehaviour: "Entries carry a description and keywords, so a user who knows what they want to DO finds the screen without knowing what it is called. None of these three words appears in the label of what it finds.",
+        expectedUiState: "'refund' returns Payouts. 'postcode' returns Addresses. 'cod' returns the Cash on delivery toggle. 'zzzznope' returns an empty state — the control that proves the box is matching rather than listing everything.",
+        expectedData: { nonsenseResultCount: 0 },
+        endResult: "Read-only; nothing persists.",
+    },
+    "checklist-search-and-nav-header-search-search-ranks-exact-first": {
+        roles: ["admin"],
+        startPage: "/",
+        steps: [
+            "Sign in as admin@letitrip.in / TempPass123!.",
+            "Open / and click into the header search.",
+            "Type orders.",
+            "Read the results in order from the top.",
+        ],
+        inputs: { query: "orders" },
+        expectedBehaviour: "An exact label match outranks an entry that merely mentions the word in its description. With no ranking at all the results fall into alphabetical order and the thing actually called Orders can land ninth.",
+        expectedUiState: "The entry named Orders is first. Guides and settings whose descriptions mention orders appear below it. Orders appearing anywhere but first is the failure, even though it is present.",
+        expectedData: { exactMatchPosition: 1 },
+        endResult: "Read-only; nothing persists.",
+    },
+    "checklist-search-and-nav-header-search-search-never-shows-what-you-cannot-reach": {
+        roles: ["buyer"],
+        startPage: "/",
+        steps: [
+            "Sign in as rehan.sheikh@gmail.com / TempPass123!, an ordinary buyer.",
+            "Open / and click into the header search.",
+            "Type users and read every result.",
+            "Clear the box, type payouts and read every result.",
+            "Clear the box, type maintenance and read every result.",
+            "Clear the box, type orders and read every result.",
+        ],
+        inputs: { query1: "users", query2: "payouts", query3: "maintenance", query4: "orders" },
+        expectedBehaviour: "Results are filtered by what this viewer may actually reach. The labels alone are a site map of the admin panel, so an entry a buyer cannot open is one they must not be shown — hiding the destination behind a 403 is not enough.",
+        expectedUiState: "'users', 'payouts' and 'maintenance' return no admin entries at all — not greyed out, not present-but-unclickable, absent. 'orders' still returns the buyer's OWN orders page, which proves the filter is scoping rather than simply returning nothing.",
+        expectedData: { adminResultsForBuyer: 0 },
+        endResult: "Read-only; nothing persists. The fourth query is the control — a search that returned nothing for everything would pass the first three for the wrong reason.",
+    },
+};

package/dist/features/tester/seed-data/authored/search-and-nav__settings-deep-links.d.ts

@@ -0,0 +1,2 @@
+import type { AuthoredCase } from "./_types";
+export declare const authored: Record<string, AuthoredCase>;

package/dist/features/tester/seed-data/authored/search-and-nav__settings-deep-links.js

@@ -0,0 +1,51 @@
+/*
+ * WHY: Authored six-part procedures for the search-and-nav/settings-deep-links page.
+ * WHAT: 2 case(s), keyed by full checklist id.
+ *
+ * Written by hand, case by case, against the label each one states. There is no
+ * generator: the authoring scripts were deleted once it was clear they were
+ * scaffolding around work that is simply writing.
+ *
+ * @tag domain:tester
+ * @tag layer:seed
+ * @tag pattern:none
+ * @tag access:server-only
+ * @tag consumers:seed-data/authored/index.ts
+ * @tag sideEffects:none
+ */
+export const authored = {
+    "checklist-search-and-nav-settings-deep-links-tab-query-param-opens-that-tab": {
+        roles: ["admin"],
+        startPage: "/admin/site",
+        steps: [
+            "Sign in as admin@letitrip.in / TempPass123!.",
+            "Open /admin/site?tab=fees directly in the address bar.",
+            "Read which tab is selected.",
+            "Open /admin/site?tab=themes directly.",
+            "Read which tab is selected.",
+            "Open /admin/site with no query parameter.",
+            "Read which tab is selected.",
+        ],
+        inputs: { tab1: "fees", tab2: "themes" },
+        expectedBehaviour: "The open tab is read from the URL, so a deep link — from search, from a guide, from a colleague's message — lands where it says it will. A page that hard-codes its default ignores the URL entirely and every such link arrives on tab one.",
+        expectedUiState: "?tab=fees opens the Fees tab with its fields on screen. ?tab=themes opens Themes. With no parameter the page opens on Branding. Two different parameters producing the same tab means the URL is not being read.",
+        expectedData: { defaultTab: "branding" },
+        endResult: "Read-only; do not save anything. Nothing persists from opening a tab.",
+    },
+    "checklist-search-and-nav-settings-deep-links-unknown-tab-falls-back-quietly": {
+        roles: ["admin"],
+        startPage: "/admin/site",
+        steps: [
+            "Sign in as admin@letitrip.in / TempPass123!.",
+            "Open /admin/site?tab=nonsense directly in the address bar.",
+            "Read which tab is selected and look for any error.",
+            "Open /admin/site?tab= with an empty value.",
+            "Read which tab is selected.",
+        ],
+        inputs: { unknownTab: "nonsense" },
+        expectedBehaviour: "An unrecognised tab value falls back to the default without complaint. The realistic cause is a stale bookmark from a tab that has since been renamed, and that is not an error condition — it is a page whose shape changed.",
+        expectedUiState: "Both URLs open Branding. No error banner, no toast, no empty tab strip and no blank panel. A rejected value must not look like a broken page.",
+        expectedData: { fallbackTab: "branding" },
+        endResult: "Read-only; nothing persists.",
+    },
+};

package/dist/features/tester/seed-data/authored/search-and-nav__sidebar-search.d.ts

@@ -0,0 +1,2 @@
+import type { AuthoredCase } from "./_types";
+export declare const authored: Record<string, AuthoredCase>;