@mohasinac/appkit 4.58.0 → 4.60.0

package/dist/features/tester/seed-data/authored/seo__page-metadata.js

@@ -1,120 +0,0 @@
-/*
- * WHY: Authored six-part procedures for the seo/page-metadata checklist page.
- * WHAT: 7 case(s), keyed by full checklist id.
- *
- * Metadata failures are all silent by construction — a missing canonical, a title
- * built from a slug and a 200 on a page that does not exist all render a page that
- * looks entirely normal. The procedures read the source rather than the screen.
- *
- * @tag domain:tester
- * @tag layer:seed
- * @tag pattern:none
- * @tag access:server-only
- * @tag consumers:seed-data/authored/index.ts
- * @tag sideEffects:none
- */
-export const authored = {
-    "checklist-seo-page-metadata-listing-pages-distinct-titles": {
-        roles: ["guest"],
-        startPage: "/products",
-        steps: [
-            "Open /products and read the browser tab's title and the page's meta description.",
-            "Open /auctions and read both.",
-            "Open /pre-orders, /bundles and /categories and read each.",
-            "Compare all five titles against one another.",
-            "Compare all five descriptions.",
-        ],
-        expectedBehaviour: "Each listing page states what it lists. Five pages sharing one site-wide default makes them indistinguishable in a result list, and a shared description is the more common half of the failure because nothing on screen shows it.",
-        expectedUiState: "Five distinct titles and five distinct descriptions, each naming its own section. Any repeat is a finding, named by the pages that share it.",
-        expectedData: { distinctTitles: 5 },
-        endResult: "Read-only.",
-    },
-    "checklist-seo-page-metadata-detail-page-title-from-record": {
-        roles: ["guest"],
-        startPage: "/products/product-beyblade-burst-valkyrie",
-        steps: [
-            "Open /products/product-beyblade-burst-valkyrie.",
-            "Read the product's name as shown on the page.",
-            "Read the browser tab's title.",
-            "Compare the two.",
-            "Read the meta description and check it draws on the product's own description.",
-            "Repeat on a prize-draw detail page and read its title.",
-        ],
-        inputs: { productId: "product-beyblade-burst-valkyrie" },
-        expectedBehaviour: "A detail page's title is the record's name. One listing type interpolated the raw slug instead, so its tab read a hyphenated identifier — which is legible enough to pass a glance and wrong in every search result.",
-        expectedUiState: "The tab title contains the product's readable name, not its hyphenated id. The prize-draw page is checked separately because that is where the slug leak was.",
-        endResult: "Read-only.",
-    },
-    "checklist-seo-page-metadata-detail-pages-have-canonical": {
-        roles: ["guest"],
-        startPage: "/classified/classified-beyblade-stadium-set",
-        steps: [
-            "Open /classified/classified-beyblade-stadium-set in a private window and view the page source.",
-            "Search the source for a canonical link element and read its href, or record that there is none.",
-            "Do the same on /digital-codes/digitalcode-beyblade-x-app-starter-pack.",
-            "Do the same on /live/live-golden-retriever-puppy.",
-            "Do the same on an ordinary product page as a control.",
-        ],
-        expectedBehaviour: "Every listing type declares a canonical. Three types had their metadata builder called without the site URL, so it returned nothing for them and those pages shipped with none at all — while the standard product page, the one anybody would spot-check, was fine.",
-        expectedUiState: "All four pages carry a canonical link element with an absolute URL. A page with none is the finding, named by listing type.",
-        expectedData: { pagesWithoutCanonical: 0 },
-        endResult: "Read-only.",
-    },
-    "checklist-seo-page-metadata-detail-canonical-uses-slug-not-id": {
-        roles: ["guest"],
-        startPage: "/classified/classified-beyblade-stadium-set",
-        steps: [
-            "Open /classified/classified-beyblade-stadium-set in a private window and note the exact path in the address bar.",
-            "View the source and read the canonical's path.",
-            "Compare the two paths character for character.",
-            "Copy the canonical's URL into a fresh tab and read what loads.",
-        ],
-        expectedBehaviour: "The canonical names the URL the route actually serves. A canonical built from the record's internal id while the route is keyed on its slug names an address that does not exist — so the page tells crawlers its real home is a 404.",
-        expectedUiState: "The canonical's path equals the address bar's path, and opening it loads the same page. A canonical that 404s is the failure.",
-        endResult: "Read-only.",
-    },
-    "checklist-seo-page-metadata-single-h1-per-page": {
-        roles: ["guest"],
-        startPage: "/products",
-        steps: [
-            "Open /products and WAIT for the page to settle before counting anything — this app hydrates client-side and the homepage has been measured with NO h1 at 2.5 seconds and exactly one at 3. A count taken early reports zero and reads as a missing heading. Then use the element inspector to count top-level headings.",
-            "Do the same on / — the page where the early-count trap was actually measured, so wait there especially.",
-            "Do the same on /products/product-beyblade-burst-valkyrie.",
-            "Do the same on /stores/store-beyblade-arena and on /blog/selling-tips-letitrip.",
-            "Record the count for each.",
-        ],
-        expectedBehaviour: "One top-level heading per page states what the page is. Several compete to be that statement, and none makes it clear which describes the page.",
-        expectedUiState: "Exactly one on each of the five pages. Any page with zero or with more than one is a finding, named with its count.",
-        expectedData: { headingsPerPage: 1 },
-        endResult: "Read-only.",
-    },
-    "checklist-seo-page-metadata-404-page-not-indexable": {
-        roles: ["guest"],
-        startPage: "/products",
-        steps: [
-            "Open the network panel and navigate to /products/zzzznope — a nonsense slug no listing uses, deliberately NOT shaped like a real id so nobody mistakes it for a fixture.",
-            "Read what the page shows.",
-            "View the source and read every robots meta tag.",
-            "Repeat with /stores/zzzznope and /auctions/zzzznope.",
-            "Open a REAL product page — /products/product-beyblade-burst-valkyrie — and read its robots meta tags too. That contrast is the point: a noindex on the 404 is correct, the SAME noindex on a live listing is the defect, and without both readings you cannot tell which you are looking at.",
-        ],
-        expectedBehaviour: "A missing page renders the site's 404 view and marks itself NOINDEX. Judge the noindex, not the status code: Next streams the response, so the headers are already sent by the time the not-found is raised and the status can no longer be changed. It injects a noindex robots tag into the streamed HTML instead, and that is what actually keeps the URL out of the index. A 200 here is expected and is not the finding.",
-        expectedUiState: "All three missing paths render the 404 view and their source carries a robots tag whose content is noindex. The real product page carries no noindex — check it, because a blanket noindex would satisfy the first half while quietly de-indexing the whole catalogue.",
-        expectedData: { missingPageIsNoindex: true, realPageIsNoindex: false },
-        endResult: "Read-only.",
-    },
-    "checklist-seo-page-metadata-title-length-reasonable": {
-        roles: ["guest"],
-        startPage: "/products",
-        steps: [
-            "Open a product with a long name and read the full tab title including any site-name suffix.",
-            "Count its characters.",
-            "Check the product's own name is not the part being cut off by the suffix.",
-            "Repeat on a blog post with a long headline.",
-            "Repeat on a category page.",
-        ],
-        expectedBehaviour: "A title stays short enough to be shown whole, and where it cannot, the record's own name survives and the brand suffix is what gives way. A title truncated mid-word in the record's name is worse than one with no suffix.",
-        expectedUiState: "Each title reads as a complete phrase with the record's name intact, roughly sixty characters or fewer. A title cut mid-word is the finding, quoted in full.",
-        endResult: "Read-only.",
-    },
-};

package/dist/features/tester/seed-data/authored/seo__sitemap-and-robots.d.ts

@@ -1,2 +0,0 @@
-import type { AuthoredCase } from "./_types";
-export declare const authored: Record<string, AuthoredCase>;

package/dist/features/tester/seed-data/authored/seo__sitemap-and-robots.js

@@ -1,105 +0,0 @@
-/*
- * WHY: Authored six-part procedures for the seo/sitemap-and-robots checklist page.
- * WHAT: 6 case(s), keyed by full checklist id.
- *
- * Two of these are the ones that would have caught the de-indexing directly: a
- * sitemap whose URLs all redirect, and a robots.txt naming a different host from
- * the pages. Neither errors, neither is visible in a browser, and both are one
- * request away from being provable.
- *
- * @tag domain:tester
- * @tag layer:seed
- * @tag pattern:none
- * @tag access:server-only
- * @tag consumers:seed-data/authored/index.ts
- * @tag sideEffects:none
- */
-export const authored = {
-    "checklist-seo-sitemap-and-robots-sitemap-loads-and-parses": {
-        roles: ["guest"],
-        startPage: "/sitemap.xml",
-        steps: [
-            "Open /sitemap.xml directly in the browser.",
-            "Read the status shown in the network panel.",
-            "Read whether the browser rendered it as XML or as raw text with a parse error.",
-            "Count the URL entries, or read the count the browser reports.",
-            "Scan the entries for the main sections — products, categories, brands, stores, blog, events.",
-        ],
-        expectedBehaviour: "The sitemap is served as valid XML with a real inventory of public URLs. A sitemap that 404s or fails to parse is silently ignored by every crawler, and there is no report anywhere that says so.",
-        expectedUiState: "The document renders as XML with no parse error, returns 200, and holds well over a hundred entries covering each public section. A handful of entries, or only the homepage, is the finding.",
-        endResult: "Read-only.",
-    },
-    "checklist-seo-sitemap-and-robots-sitemap-urls-do-not-redirect": {
-        roles: ["guest"],
-        startPage: "/sitemap.xml",
-        steps: [
-            "Open /sitemap.xml and copy the first entry's URL exactly as written.",
-            "Paste it into a fresh tab with the network panel open.",
-            "Read the first response's status code before any redirect is followed.",
-            "Repeat with one entry from each section — a product, a category, a store, a blog post.",
-            "Note the host each entry uses and compare it against the host they land on.",
-        ],
-        expectedBehaviour: "A sitemap entry resolves directly. Every one of them redirecting means the sitemap names one host while the pages canonicalise to another — the exact shape that removed this site from search results, and it produces no error at any layer.",
-        expectedUiState: "Each sampled URL returns 200 on its first response, with no redirect step in the network panel. Any redirect is the finding, reported with the host it came from and the host it went to.",
-        expectedData: { redirectingSitemapUrls: 0 },
-        endResult: "Read-only.",
-    },
-    "checklist-seo-sitemap-and-robots-robots-loads-and-allows": {
-        roles: ["guest"],
-        startPage: "/robots.txt",
-        steps: [
-            "Open /robots.txt directly and read the whole file.",
-            "Read every Disallow line. There are ELEVEN under the '*' group — /admin/, /api/, /store/, /user/, /auth/, /checkout/, /cart/, /wishlist, /preview/, /track/, /unauthorized/ — and each names a surface a crawler has no business indexing. A public browse route appearing among them is the finding.",
-            "Check no rule disallows the site root for the '*' group. 🛑 THERE IS A SECOND GROUP AND IT DOES DISALLOW EVERYTHING: GPTBot, ChatGPT-User, Google-Extended and CCBot are blocked wholesale with Disallow: /. That is deliberate — AI crawlers, not search engines — so finding a bare 'Disallow: /' in this file is expected and is NOT the failure. Check which user-agent block it sits under before recording anything.",
-            "Read the Host line, if present, and note the hostname.",
-            "Compare that hostname against the address bar and against the sitemap's entries.",
-        ],
-        expectedBehaviour: "robots.txt loads, permits the public site and names the same host as everything else. A sustained failure on this file is worse than a wrong rule inside it — a crawler that cannot fetch robots.txt stops crawling the whole host, and the file was among the routes taken down by a past module-load failure.",
-        expectedUiState: "The file returns 200 with readable content, has no blanket disallow, and its host matches the sitemap's. A different host here is the same two-owners failure seen from another angle.",
-        endResult: "Read-only.",
-    },
-    "checklist-seo-sitemap-and-robots-robots-sitemap-line-correct": {
-        roles: ["guest"],
-        startPage: "/robots.txt",
-        steps: [
-            "Open /robots.txt and find the Sitemap: line.",
-            "Copy the URL it names exactly.",
-            "Open it in a fresh tab with the network panel open.",
-            "Read the status of the first response.",
-            "Check it is the same sitemap /sitemap.xml serves.",
-        ],
-        expectedBehaviour: "The Sitemap: line names a URL that loads on its first request. A line pointing at a redirecting or missing host means the sitemap is never read, while both files individually look fine.",
-        expectedUiState: "The named URL returns 200 directly and serves the sitemap. A redirect or a 404 is the finding.",
-        endResult: "Read-only.",
-    },
-    "checklist-seo-sitemap-and-robots-sitemap-excludes-private-routes": {
-        roles: ["guest"],
-        startPage: "/sitemap.xml",
-        steps: [
-            "Open /sitemap.xml and use the browser's find to search for '/admin'.",
-            "Search for '/store/' and for '/user/'.",
-            "Search for '/checkout' and for '/cart'.",
-            "Search for '/auth/'.",
-            "Record any match, with the full URL.",
-        ],
-        expectedBehaviour: "Only pages a signed-out visitor can actually read belong in the sitemap. A dashboard or checkout route there spends crawl budget on a redirect or an empty shell, and the shell is what gets indexed if anything is.",
-        expectedUiState: "None of those searches matches. Every match is a finding, listed with its URL.",
-        expectedData: { privateRoutesInSitemap: 0 },
-        endResult: "Read-only.",
-    },
-    "checklist-seo-sitemap-and-robots-sitemap-excludes-test-data": {
-        roles: ["guest"],
-        startPage: "/sitemap.xml",
-        steps: [
-            "Open /sitemap.xml and search for 'tester-sandbox' — that substring is the exact marker every tester fixture carries in its id, so it is a precise check rather than a guess at the naming.",
-            "Search for 'qa-'.",
-            "Search for 'test-' as a looser check.",
-            "Record any match with its full URL.",
-            "Open one matched URL, if any, and read what it serves.",
-        ],
-        expectedBehaviour: "A row flagged isTestData is wiped and re-seeded whenever fixtures are refreshed, so a sitemap entry for one is a URL that repeatedly disappears. Test data is filtered out of every public read for the same reason it must be filtered here.",
-        expectedUiState: "No test-flagged id appears in the sitemap. A match is a finding, and if the URL currently loads that makes it worse rather than better — it means test content is publicly indexable.",
-        expectedData: { testUrlsInSitemap: 0 },
-        endResult: "Read-only.",
-    },
-};

package/dist/features/tester/seed-data/authored/tools__sticker-promote-to-listings.d.ts

@@ -1,2 +0,0 @@
-import type { AuthoredCase } from "./_types";
-export declare const authored: Record<string, AuthoredCase>;

package/dist/features/tester/seed-data/authored/tools__sticker-promote-to-listings.js

@@ -1,58 +0,0 @@
-/*
- * WHY: Authored six-part procedures for promoting a traced sticker sheet into
- *      real marketplace listings — distinct from the tracer's own "promote"
- *      (run -> sheet). This is sheet -> marketplace.
- * WHAT: 3 case(s), keyed by full checklist id.
- *
- * 🛑 These depend on the sticker-tracer's own happy path having already
- * produced an accepted, full-resolution-rendered run on a sheet — they are
- * not reachable standing alone. Run the tracer's own cases (checklist-tools-
- * sticker-tracer-*) up through "Accept & render" first.
- *
- * @tag domain:tester
- * @tag layer:seed
- * @tag pattern:none
- * @tag access:server-only
- * @tag consumers:seed-data/authored/index.ts
- * @tag sideEffects:none
- */
-const ADMIN_SIGNIN = "Sign in as admin@letitrip.in / TempPass123!.";
-export const authored = {
-    "checklist-tools-sticker-promote-to-listings-promote-creates-one-group": {
-        roles: ["admin"],
-        startPage: "/tools/sticker-tracer",
-        steps: [
-            ADMIN_SIGNIN,
-            "Open a sheet whose active run has already been accepted and rendered to full resolution, with at least one part marked a duplicate of another.",
-            "Click \"Promote to listings\". Pick \"Beyblade Arena\" as the store, enter 499 for the sheet price and 99 for the flat part price, then confirm.",
-            "Open the newly created parent listing's product page and view its group/\"Pick what you want\" section.",
-        ],
-        expectedBehaviour: "The promoter creates one parent (the whole sheet) plus one child per UNIQUE part only — a part marked `duplicateOf` another must NOT get its own listing. All children are linked into ONE group via `linkChildrenToGroup`, a single batch call rather than N separate `linkChildToGroup` calls in a loop.",
-        expectedUiState: "The group picker on the parent's page shows every UNIQUE child — if the sheet had, say, 8 parts with 3 confirmed duplicates, the picker shows 5 members, not 1 and not 8. This is exactly the `linkChildToGroup` stale-append bug this phase fixed first: looping that call used to leave only the LAST child linked, so the picker showed just one member no matter how many parts existed.",
-        endResult: "BEFORE the fix, promoting an 8-part sheet silently produced a group whose parent claimed only 1 child, even though all 8 children individually had the correct `groupId` set. AFTER: the group's member list and the children's own `groupId`s agree.",
-    },
-    "checklist-tools-sticker-promote-to-listings-promoted-part-image-watermarked": {
-        roles: ["admin"],
-        startPage: "/tools/sticker-tracer",
-        steps: [
-            ADMIN_SIGNIN,
-            "After promoting a sheet, open one of the new CHILD listings' public product page and inspect its main image.",
-            "Separately, from the tracer's own sheet-review UI, download that same part's original full-resolution file (via the signed URL, not the public page).",
-        ],
-        expectedBehaviour: "The marketplace copy is served through `/media/{shortId}`, which the proxy watermarks on read because the `mediaAssets` row for it was written with `watermarkedAt` deliberately absent. The admin's own download goes through a signed GCS URL pointing at the SAME `assetPath` — the clean original — with zero bytes duplicated between the two.",
-        expectedUiState: "The public listing's image carries a visible watermark. The admin's direct download of the same part is clean — no watermark at all. Both are visibly the same artwork at the same crop.",
-        endResult: "BEFORE this phase, there was no public listing for a traced part at all. AFTER: the same pixels serve two audiences two different ways from one stored object — if the public copy is clean, or the admin's download is watermarked, the `watermarkedAt` wiring has inverted.",
-    },
-    "checklist-tools-sticker-promote-to-listings-promote-refuses-before-full-res-render": {
-        roles: ["admin"],
-        startPage: "/tools/sticker-tracer",
-        steps: [
-            "Sign in as admin@letitrip.in / TempPass123!.",
-            "Open a sheet that has been traced but whose run has NOT had \"Accept & render\" run on it (a fresh trace, or one accepted but not yet rendered to full resolution).",
-            "Attempt to promote it to listings.",
-        ],
-        expectedBehaviour: "`promoteStickerSheetToListings` checks every precondition UP FRONT — an active run, at least one unique part, and every unique part actually carrying an `assetPath` — and refuses the WHOLE action if any is missing, rather than creating a handful of listings and silently skipping the rest.",
-        expectedUiState: "The action is refused with a message naming the missing step (e.g. \"accept and render the run before promoting it to listings\"). NO parent or child listing is created — checking the store's product list afterward shows nothing new.",
-        endResult: "BEFORE this check existed, promoting too early would have been the exact 'wrong data, no error' failure this whole phase exists to avoid: some parts listed, others silently missing, with nothing anywhere saying so. AFTER: the refusal happens before any write, so a half-promoted sheet cannot exist.",
-    },
-};

package/dist/features/tester/seed-data/authored/tools__sticker-tracer.d.ts

@@ -1,2 +0,0 @@
-import type { AuthoredCase } from "./_types";
-export declare const authored: Record<string, AuthoredCase>;

package/dist/features/tester/seed-data/authored/tools__sticker-tracer.js

@@ -1,284 +0,0 @@
-/*
- * WHY: Authored six-part procedures for the sticker-sheet kiss-cut tracer.
- * WHAT: 16 case(s), keyed by full checklist id.
- *
- * 🛑 EVERY CASE IS AN EXPLICIT BEFORE → AFTER, because almost every defect this
- * feature can have returns HTTP 200 with plausible content. A case reading
- * "check the tracer works" would pass against the bug. The first three restate
- * the two failures that caused this feature to be built, as assertions.
- *
- * 🛑 THE FIXTURE IS /test-media/sticker-sheet-fixture.jpg AND ITS SIZE IS
- * LOAD-BEARING. It is the real 5024x3024 scan, and shrinking it was measured
- * and rejected: a 145 KB WebP traces into 237 fragments where the original
- * gives 15 (public/test-media/README.md carries the table). A case asserting a
- * part count against a shrunken fixture would fail for a reason that is not a
- * bug. Do not "optimise" it.
- *
- * 🛑 PART COUNTS ARE DELIBERATELY NOT ASSERTED AS EXACT NUMBERS. The probe
- * measured 15 at draft tier on this machine, but the count moves with tier and
- * with any tuning of the ridge thresholds — so the cases assert RELATIONS
- * ("more than one", "the same count twice", "fewer after raising the minimum")
- * which stay true across tuning. An exact number here would be a case that
- * fails every time somebody improves the detector.
- *
- * 🛑 The tracer is ADMIN-ONLY and /tools/sticker-tracer is server-gated, so the
- * buyer and guest cases assert the redirect rather than a hidden control.
- *
- * @tag domain:tester
- * @tag layer:seed
- * @tag pattern:none
- * @tag access:server-only
- * @tag consumers:seed-data/authored/index.ts
- * @tag sideEffects:none
- */
-const ADMIN_SIGNIN = "Sign in as admin@letitrip.in / TempPass123!.";
-const FIXTURE = "/test-media/sticker-sheet-fixture.jpg";
-export const authored = {
-    /* ---- the two reported failures, restated as assertions ---------------- */
-    "checklist-tools-sticker-tracer-enclosed-region-opaque": {
-        roles: ["admin"],
-        startPage: "/tools/sticker-tracer",
-        steps: [
-            ADMIN_SIGNIN,
-            `Download ${FIXTURE} and choose it with "Choose a scan".`,
-            "Wait for the outlines to draw over the preview.",
-            "Find a sticker that contains an enclosed area the same colour as the paper around the sheet — on the Driger G sheet the lighter interior panels.",
-            "Zoom the browser to 200% and look at whether that interior area is covered by the outline or cut out of it.",
-        ],
-        expectedBehaviour: "Opacity is decided by REACHABILITY from the sheet border, not by colour. The flood fills inward from the edge and a sticker is whatever the flood could not reach — so an enclosed region is inside the outline no matter what colour it is.",
-        expectedUiState: "The magenta outline runs around the sticker's silhouette only. It does not loop around interior light-coloured areas, and no interior region is excluded from the shape.",
-        endResult: "BEFORE: the prior Python attempt thresholded colour, so a region matching the background was made transparent even inside a sticker. AFTER: interior regions stay part of the sticker. Nothing is persisted — this is the in-browser tuner.",
-    },
-    "checklist-tools-sticker-tracer-white-on-white-edge": {
-        roles: ["admin"],
-        startPage: "/tools/sticker-tracer",
-        steps: [
-            ADMIN_SIGNIN,
-            `Choose ${FIXTURE}.`,
-            "Find the winder sticker — the one whose top edge is near-white against the near-white paper.",
-            "Zoom to 200% and check whether that top edge carries an outline.",
-            "Read the Result card's part count.",
-        ],
-        expectedBehaviour: "The cut line is found from the EMBOSS RIDGE, which the plan measured at 10-20x above noise precisely where colour carries none. No per-sticker parameter is involved.",
-        expectedUiState: "The white top edge has a magenta outline following it. The Result card shows more than one part.",
-        endResult: "BEFORE: a colour threshold ate that edge, and the old script needed a hand-authored --cap flag naming one sticker's coordinates on one sheet. AFTER: it is found with the default parameters and no per-sticker tuning.",
-    },
-    "checklist-tools-sticker-tracer-background-model-named": {
-        roles: ["admin"],
-        startPage: "/tools/sticker-tracer",
-        steps: [
-            ADMIN_SIGNIN,
-            `Choose ${FIXTURE}.`,
-            "Read the line under the Result heading that begins 'background:'.",
-            "Change 'Paper tolerance' from its default to 60 and watch the part count.",
-            "Set it back to its default.",
-        ],
-        expectedBehaviour: "The tool states which of the two segmentation models ran. Paper floods inward from the sheet edge; art partitions on cut lines because there is no background to flood. Paper tolerance only affects the paper model, which is why knowing which ran is the difference between a parameter that does nothing and one that is simply set wrong.",
-        expectedUiState: "The Result card reads 'background: paper' for this scan. Changing Paper tolerance changes the part count.",
-        endResult: "BEFORE: there was no way to tell which model ran, so an operator adjusting paper tolerance on an art sheet saw no effect and no explanation. AFTER: the model is named on screen.",
-    },
-    /* ---- the mandatory name ---------------------------------------------- */
-    "checklist-tools-sticker-tracer-name-required": {
-        roles: ["admin"],
-        startPage: "/tools/sticker-tracer",
-        steps: [
-            ADMIN_SIGNIN,
-            `Choose ${FIXTURE} and scroll to "Commit this as a run".`,
-            "Leave 'Name this sheet' EMPTY and try to press 'Upload and run'.",
-            "Type a single space into the name and try again.",
-            "Type 'QA tracer run 1' and press 'Upload and run'.",
-        ],
-        inputs: { name: "QA tracer run 1" },
-        expectedBehaviour: "A name is mandatory and is enforced in three places — the disabled button, the route's schema, and requireName in the action. No sheet document and no Storage object is created while the name is empty.",
-        expectedUiState: "'Upload and run' is disabled with the name empty and with a single space. It enables once real text is entered, then reads 'Uploading and starting…'.",
-        expectedData: { sheetsCreatedWhileNameEmpty: 0 },
-        endResult: "BEFORE: nothing stopped an unnamed attempt, and the whole point of keeping every run is being able to tell them apart later. AFTER: a run cannot exist without a name. The named run persists and appears under Attempts after a reload.",
-    },
-    /* ---- watermark + originals ------------------------------------------- */
-    "checklist-tools-sticker-tracer-no-watermark-on-original": {
-        roles: ["admin"],
-        startPage: "/tools/sticker-tracer",
-        steps: [
-            ADMIN_SIGNIN,
-            "Open a sheet whose run has finished and been accepted.",
-            "In Attempts, press 'Preview' on the accepted run — it opens a new tab.",
-            "Look at the opened image for a watermark, and copy its URL.",
-            "Check the URL's host: it should be a storage.googleapis.com signed link, NOT a /media/ path on this site.",
-        ],
-        expectedBehaviour: "Tracer artifacts live under private/sticker-sheets/ and are served by 5-minute signed GCS URLs, which bypass /api/media/[...slug] — the proxy that always watermarks. The printable original must stay clean or the cut-out is ruined.",
-        expectedUiState: "The opened image carries NO watermark. Its URL is on storage.googleapis.com with query parameters, not /media/<slug>.",
-        endResult: "BEFORE: every image through the media proxy was watermarked, which would ruin a cut-out and the printed mosaic. AFTER: originals are unwatermarked and reachable only through a short-lived signed link.",
-    },
-    /* ---- live progress ---------------------------------------------------- */
-    "checklist-tools-sticker-tracer-progress-names-stage": {
-        roles: ["admin"],
-        startPage: "/tools/sticker-tracer",
-        steps: [
-            ADMIN_SIGNIN,
-            `Choose ${FIXTURE}, name the run 'QA progress', pick tier Standard and press 'Upload and run'.`,
-            "Watch the card titled 'Running' without reloading.",
-            "Write down two different stage names you see.",
-        ],
-        expectedBehaviour: "Progress is pushed over the run's own RTDB channel, not polled. The label names the STAGE because that is what distinguishes a halftone scan stuck in the detector from one stuck in the upload.",
-        expectedUiState: "A 'Running' card shows text like 'ridge 22%' or 'parts 4/15' and ADVANCES. It is never a bare spinner and never only a percentage.",
-        endResult: "BEFORE: a trace took minutes with nothing to look at. AFTER: the current stage is visible throughout. The card disappears when the run ends; the outcome persists in Attempts.",
-    },
-    "checklist-tools-sticker-tracer-failure-names-stage": {
-        roles: ["admin"],
-        startPage: "/tools/sticker-tracer",
-        steps: [
-            ADMIN_SIGNIN,
-            "Find a sheet with a FAILED run in Attempts. If none exists, create one: commit a run with 'Minimum part area' set to 100000, which leaves nothing above the threshold.",
-            "Read the failed row.",
-            "Reload the page and read it again.",
-        ],
-        inputs: { minPartAreaMm2: 100000 },
-        expectedBehaviour: "A failure records the stage it died in and a user-safe message, and the row survives. The requirement was 'even if we fail we know'.",
-        expectedUiState: "The row shows a red 'failed' badge and a line beginning 'Failed at <stage>' with a readable message — never 'Something went wrong', and never a raw server error or a stack trace.",
-        endResult: "BEFORE: a failed trace was indistinguishable from a hang. AFTER: the stage is named and the failed attempt stays in history after a reload.",
-    },
-    /* ---- history ---------------------------------------------------------- */
-    "checklist-tools-sticker-tracer-runs-never-overwrite": {
-        roles: ["admin"],
-        startPage: "/tools/sticker-tracer",
-        steps: [
-            ADMIN_SIGNIN,
-            `Choose ${FIXTURE}, name the run 'QA attempt A', tier Standard, and commit it.`,
-            "Wait for it to finish.",
-            "Commit a SECOND run on the same sheet named 'QA attempt B' at tier Precise.",
-            "Reload the page and read the Attempts list.",
-        ],
-        inputs: { runA: "QA attempt A", runB: "QA attempt B" },
-        expectedBehaviour: "A retry or a second run creates a NEW run document. Nothing overwrites an earlier attempt, which is what makes comparing tiers on one sheet possible weeks later.",
-        expectedUiState: "Both 'QA attempt A' and 'QA attempt B' appear, newest first, each with its own tier label and its own part count. Both are still openable.",
-        endResult: "BEFORE: there was nothing listing runs at all — the documents existed with no reader. AFTER: every attempt is listed by the name that was typed, and both survive a reload.",
-    },
-    "checklist-tools-sticker-tracer-accepted-differs-from-succeeded": {
-        roles: ["admin"],
-        startPage: "/tools/sticker-tracer",
-        steps: [
-            ADMIN_SIGNIN,
-            "On a sheet with two successful runs, read the badges on both rows.",
-            "Press 'Accept & render' on the one that is not currently accepted.",
-            "Reload and read both rows again.",
-        ],
-        expectedBehaviour: "'succeeded' and 'accepted' are different facts: a run can succeed without being the sheet's current result, which is normal once three tiers have been tried. Accepting one moves the badge and starts the full-resolution render.",
-        expectedUiState: "Both rows show a green 'succeeded' badge; exactly ONE shows 'accepted'. After accepting the other, exactly one still shows 'accepted' and it is the one just pressed.",
-        expectedData: { acceptedRunsPerSheet: 1 },
-        endResult: "BEFORE: isPromoted and activeRunId were read by the UI and written by nothing — promoteRun had zero callers. AFTER: accepting a run is a real action and the badge reflects it after a reload.",
-    },
-    /* ---- promote gates full-res ------------------------------------------- */
-    "checklist-tools-sticker-tracer-fullres-only-after-accept": {
-        roles: ["admin"],
-        startPage: "/tools/sticker-tracer",
-        steps: [
-            ADMIN_SIGNIN,
-            "Commit a fresh run and wait for it to succeed WITHOUT accepting it.",
-            "Look for a 'Print & export' card on the page.",
-            "Press 'Accept & render' on that run.",
-            "Wait for the render, reload, and look again.",
-        ],
-        expectedBehaviour: "Full-resolution parts and the export surface exist only for an ACCEPTED run. An exploratory run costs about 1 MB; rendering full-res parts on every attempt costs roughly 500 MB a sheet — the difference between about 52 sheets inside 5 GB and about 8.",
-        expectedUiState: "No 'Print & export' card before accepting. After accepting it appears, with a machine and page picker.",
-        endResult: "BEFORE: nothing rendered full-resolution parts at all — the mode:\"full\" path had no caller. AFTER: they are rendered once, for the run actually chosen, and the export surface follows.",
-    },
-    /* ---- DPI honesty ------------------------------------------------------ */
-    "checklist-tools-sticker-tracer-no-dpi-no-mm": {
-        roles: ["admin"],
-        startPage: "/tools/sticker-tracer",
-        steps: [
-            ADMIN_SIGNIN,
-            "Open an accepted sheet whose scan declares no usable DPI — upload a screenshot or a web-saved image if none exists, since those declare 72 or 96.",
-            "Open 'Print & export' and read what it says.",
-            "Try to press 'Download cut file'.",
-        ],
-        expectedBehaviour: "Millimetres are WITHHELD when the DPI cannot be trusted. A cut file must be millimetre-true, so the export refuses rather than inventing a scale — a fabricated millimetre on a cut file is a physical production error, not a cosmetic one.",
-        expectedUiState: "A warning reading that the scan has no confirmed DPI and that confirming it makes the export available. The download buttons are DISABLED. No plausible-looking millimetre figure appears anywhere.",
-        endResult: "BEFORE: nothing distinguished a real DPI from the 72 that five of nine reference scans falsely declare. AFTER: the tool says so and refuses, naming the fix.",
-    },
-    /* ---- export refusals before download ---------------------------------- */
-    "checklist-tools-sticker-tracer-oversized-named-not-scaled": {
-        roles: ["admin"],
-        startPage: "/tools/sticker-tracer",
-        steps: [
-            ADMIN_SIGNIN,
-            "Open an accepted sheet with a confirmed DPI and scroll to 'Print & export'.",
-            "Set Machine to 'Cricut Joy 2 — Print Then Cut' and Page to A4.",
-            "Read the warning block listing parts.",
-            "Switch Machine to 'Print shop (Roland / Graphtec)' and read the same area again.",
-        ],
-        expectedBehaviour: "A part wider than the machine's cut area is NAMED before export, never scaled. The Joy 2's A4 Print-Then-Cut area is a column about 78 mm wide, and several stickers on a typical sheet exceed it. Scaling would produce a cut file that looks correct and yields stickers the wrong physical size.",
-        expectedUiState: "Under the Cricut PTC profile, a warning lists parts BY NAME with their measured width and a reason mentioning the cut width. Under the print-shop profile that warning is gone, because it has no width limit.",
-        endResult: "BEFORE: there was no way to learn a part was too wide except by cutting it. AFTER: the refusal is on screen before the download, and the print-shop profile is offered as the alternative.",
-    },
-    "checklist-tools-sticker-tracer-node-budget-reported": {
-        roles: ["admin"],
-        startPage: "/tools/sticker-tracer",
-        steps: [
-            ADMIN_SIGNIN,
-            "In 'Print & export', set Machine to a Cricut profile and read the badges under the pickers.",
-            "Switch to 'Print shop' and read them again.",
-        ],
-        expectedBehaviour: "Export simplification is a SEPARATE budget from the trace's. A Cricut profile re-simplifies to its node ceiling and reports the resulting deviation in millimetres; the print-shop profile has no ceiling and so does not simplify.",
-        expectedUiState: "A node-count badge is shown. Under a Cricut profile, when simplification occurred, a line reads 'Simplified from N nodes…' and states a worst-case deviation in mm. Under the print shop no deviation is claimed.",
-        endResult: "BEFORE: a max-tier trace could silently produce a file Design Space cannot open. AFTER: the node count and the cost of fitting it are both on screen before export.",
-    },
-    /* ---- retry clamp ------------------------------------------------------ */
-    "checklist-tools-sticker-tracer-retry-shows-clamp": {
-        roles: ["admin"],
-        startPage: "/tools/sticker-tracer",
-        steps: [
-            ADMIN_SIGNIN,
-            "In Attempts, press 'Retry from this' on any finished run.",
-            "In the retry form, open 'Where it restarts' and set 'Resume from' to 'parts'.",
-            "Change Tier to a different one — this changes ridge parameters, which belong to an earlier stage.",
-            "Read the message that appears in that section before submitting.",
-        ],
-        expectedBehaviour: "The resume point is clamped forward to the earliest stage whose parameters changed, and the clamp is SHOWN. Without it, a run resumed from 'parts' would carry artifacts generated under different parameters than the run records, with nothing anywhere contradicting it.",
-        expectedUiState: "A warning reading that a parameter from an earlier stage changed, so the run restarts from that stage rather than resuming from 'parts'. It names both stages.",
-        endResult: "BEFORE: explainResume() returned that sentence and nothing rendered it. AFTER: the operator sees the clamp before submitting, and the server applies the same decision.",
-    },
-    /* ---- access control ---------------------------------------------------- */
-    "checklist-tools-sticker-tracer-buyer-redirected": {
-        roles: ["buyer"],
-        startPage: "/tools/sticker-tracer",
-        steps: [
-            "Sign in as a normal buyer account (not admin).",
-            "Navigate directly to /tools/sticker-tracer by typing the URL.",
-            "Open the Tools entry in the main navigation and read its children.",
-            "Visit /tools and read the cards.",
-        ],
-        expectedBehaviour: "A non-admin is refused. MEASURED on production 2026-10-19: the response is a 200 carrying an Unauthorized state, NOT a 307 — but no tracer UI is served, which is the property that matters. The nav child is filtered client-side, which is presentation only.",
-        expectedUiState: "An unauthorized / sign-in state, not the tracer. The phrase 'Choose a scan' appears nowhere on the page. The Tools dropdown does not list 'Sticker sheet tracer'. /tools itself renders normally with its other cards.",
-        endResult: "BEFORE/AFTER is unchanged for a buyer — this case exists to prove the gate holds. Nothing is created or persisted.",
-    },
-    "checklist-tools-sticker-tracer-guest-redirected": {
-        roles: ["guest"],
-        startPage: "/tools/sticker-tracer",
-        steps: [
-            "Sign out completely, or use a private window.",
-            "Navigate directly to /tools/sticker-tracer.",
-            "Then visit /tools.",
-            "View source on /tools/sticker-tracer's response and search for 'Choose a scan'.",
-            "In the same source, confirm a <meta name=\"robots\" content=\"noindex, nofollow\"> tag is present.",
-        ],
-        expectedBehaviour: "A signed-out visitor gets no tracer UI. 🛑 MEASURED on production: a 200 with a sign-in state and `<title>Sticker sheet tracer</title>`, NOT a redirect — so the plan's premise that 'a crawler gets a redirect and there is no indexable content at that URL' is FALSE. What actually keeps it out of the index is the `noindex, nofollow` meta plus the robots.txt Disallow, both verified live. That is exactly why all three protections were specified as non-redundant.",
-        expectedUiState: "A sign-in state rather than the tracer. `Choose a scan` appears NOWHERE in the response body — that absence is the real assertion. /tools renders normally and is unaffected.",
-        endResult: "BEFORE/AFTER unchanged for a guest — this proves the gate is server-side rather than a hidden control. Nothing is persisted.",
-    },
-    "checklist-tools-sticker-tracer-storage-meter-honest": {
-        roles: ["admin"],
-        startPage: "/tools/sticker-tracer",
-        steps: [
-            ADMIN_SIGNIN,
-            "Call GET /api/admin/sticker-sheets/usage in the browser address bar.",
-            "Read the per-sheet rows: each carries bytes AND an object count.",
-            "Compare the biggest sheet's byte figure against the number of runs it has.",
-            "Check whether the response carries a 'truncated' field and what it says.",
-        ],
-        expectedBehaviour: "The meter reports object COUNT beside bytes, because GCS meters them separately — which is the entire reason review thumbnails are one sprite atlas rather than sixty files. It measures at most 25 sheets per call and says when it truncated.",
-        expectedUiState: "JSON with rows sorted biggest-first, each having bytes and objects, plus totalBytes, totalObjects, measured and truncated.",
-        expectedData: { truncatedReportedExplicitly: true },
-        endResult: "BEFORE: storage cost was discoverable only in the GCP console, which is how the project was paused once before. AFTER: it is a route an operator can read, and a partial measurement says it is partial rather than understating the total.",
-    },
-};

package/dist/features/tester/seed-data/index.d.ts

@@ -1,2 +0,0 @@
-export { testerChecklistSeedData } from "./tester-checklist-seed-data";
-export { testerResponsesSeedData } from "./tester-responses-seed-data";

package/dist/features/tester/seed-data/index.js

@@ -1,2 +0,0 @@
-export { testerChecklistSeedData } from "./tester-checklist-seed-data.js";
-export { testerResponsesSeedData } from "./tester-responses-seed-data.js";

package/dist/features/tester/seed-data/tester-checklist-seed-data.d.ts

@@ -1,2 +0,0 @@
-import type { TesterChecklistItemDocument } from "../schemas";
-export declare const testerChecklistSeedData: Partial<TesterChecklistItemDocument>[];