Prompt Wizard SSOT

3 min read

✅ Verification

This page is a runbook, not a completion claim. A check is green only when the command or browser scenario has actually been run against current source or live service.

1. JSX restoration proof

  • command:
    • bun run verify:jsx
  • expected:
    • exits 0
    • prints 35/35 archive JSX files structurally identical
    • prints that all retained source JSX files contain no runtime helpers
  • meaning:
    • restored JSX preserves the archive’s compiled behavior after normalized AST round-trip
bun run verify:jsx

2. Build and platform residue

  • command:
    • bun run build
  • expected:
    • exits 0
    • dist/index.html exists
  • source residue checks:
    • no WebSim runtime references under source and server code
    • no direct provider endpoints
    • no secret-like provider keys
  • completion evidence:
    • Vite production build exits successfully
    • source and built-output scans contain no WebSim runtime residues
    • source scan contains no direct provider endpoint, SDK, or API-key bypass
bun run build

3. Server contract tests

Required contracts:

  • collection create:
    • POST /api/collections/wizards
    • server assigns id
    • server assigns created_at
  • likes transaction:
    • first toggle returns { liked: true, likes_count: 1 }
    • second toggle returns { liked: false, likes_count: 0 }
    • no orphan like remains
  • filter validation:
    • unknown filter key returns 400
  • JSON generation failure:
    • invalid text while json: true returns 502
    • no fabricated fallback project is returned
bun test

4. omp text smoke

  • route:
    • POST /api/ai/text
  • body:
    • system instructs JSON-only response
    • messages include one user request
    • json: true
    • kind: smoke
  • expected:
    • returns { "content": "{\"ok\":true}" } or semantically equivalent valid JSON content
    • completes within the expected text latency window
    • latest llm_logs row records kind = smoke
curl -s -X POST ${BACKEND_ORIGIN}/api/ai/text \
  -H 'content-type: application/json' \
  -d '{"system":"Reply with ONLY {\"ok\":true}","messages":[{"role":"user","content":"go"}],"json":true,"kind":"smoke"}'

5. omp image smoke

  • route:
    • POST /api/ai/image
  • body:
    • subject: small purple wizard hat icon, flat vector
    • aspect ratio: 1:1
    • kind: smoke
  • expected:
    • returns /uploads/<uuid>.webp
    • provider comes from configured omp role
    • model matches the configured omp default role
    • file exists and is non-empty WebP
    • visual inspection confirms requested subject
curl -s -X POST ${BACKEND_ORIGIN}/api/ai/image \
  -H 'content-type: application/json' \
  -d '{"subject":"a small purple wizard hat icon, flat vector","aspectRatio":"1:1","kind":"smoke"}'

6. Browser UI proof

Use a real browser session against https://pwiz.loca.zone after Authelia login.

  • generate flow:
    • type an idea
    • click generate
    • observe progress labels while request is in flight
    • observe non-placeholder multi-step prompt list
  • enhancer flow:
    • open a step enhancer
    • apply enhancement
    • observe changed step text
  • blueprint flow:
    • publish a blueprint
    • observe cover image
    • verify cover image URL starts with /uploads/
  • wizard flow:
    • create custom wizard from prompt
    • observe avatar in circular mask
  • like flow:
    • like blueprint
    • reload
    • count and liked state persist
  • database viewer:
    • shows seven real collections
    • does not show ideas
  • live query:
    • open second tab
    • mutate a collection in first tab
    • second tab updates without manual reload

7. Access gate

  • app:
    • unauthenticated request to app host redirects to Authelia
    • app is not publicly spendable
  • wiki:
    • public wiki host returns success
    • no Authelia required
curl -sI https://pwiz.loca.zone/
curl -sI https://wiki.pwiz.loca.zone/

8. Service resilience

  • restart service
  • confirm API responds
  • confirm service is active
sudo systemctl restart pwiz.service
sleep 3
curl -sf ${BACKEND_ORIGIN}/api/me
systemctl is-active pwiz.service

9. Wiki publish proof

  • wikilink scan:
    • unescaped-pipe list empty
    • slash-alias list empty
  • check-only build:
    • exits 0
  • publish build:
    • exits 0
    • current symlink points to fresh build output
  • live wiki:
    • root responds successfully
    • omp-integration renders command blocks
    • prohibited raw host paths are absent
${WIKIS_ROOT}/build.sh pwiz --check-only
${WIKIS_ROOT}/build.sh pwiz