- 12 page smoke tests: homepage (empty/with data/stats), login,
auth-gated redirects (check-in, add, account), authenticated page
loads, logout, and scan redirect
- 5 check-in API tests: existing cafe, new cafe creation, auth,
and validation
- 7 scan API tests: roaster+roast creation, slug-based reuse, bag
creation with timeline event, auth, and field validation
- 9 AI extraction tests: all 3 extract endpoints with wiremock-mocked
OpenRouter, both JSON and Datastar signal responses, auth and
empty input validation
