Bootstrap follow-up: deferred verification tasks (4.3, 4.4, 5.2)

[rubenvdlinde]

Tracks the items deferred from PR #2 (feature/apply-bootstrap-openbuilt-core) so they don't get lost after merge.

The PR ships the core register + runtime; what remains is verification work that requires either a live Nextcloud container or live OR data.

Deferred from openspec/changes/bootstrap-openbuilt/tasks.md

Section 4 — Verification

• 4.3 Run npm run check:manifest (ADR-024) on the seeded hello-world manifest blob in tests — passes against the canonical schema pinned in package.json.
• 4.4 Visually verify on a fresh docker compose up that /index.php/apps/openbuilt/builder/hello-world renders the seeded virtual app.

Section 5 — Tests

• 5.2 PHPUnit Integration — tests/Integration/ApplicationLifecycleTest.php walks the Application through draft → published → archived → draft, asserts audit entries on each transition, asserts a disallowed transition is rejected, asserts BuiltAppRoute upkeep. Requires container-bound NC bootstrap.

Note

Sections 5.1 (PHPUnit unit), 5.3 (Newman), 5.4 (Playwright), 6.x (docs), 7.x (i18n) were completed before merge — see PR #2 task list for the green ticks.

Referenced from PR #2 — MWest review finding #5.

[rubenvdlinde]

Status update:

• 4.4 (visually verify /index.php/apps/openbuilt/builder/hello-world renders the seeded virtual app) — done: verified in the dev container after the Tier-4 shell + the chain landed; the outer OpenBuilt shell + nav render correctly and the BuilderHost route resolves. (The inner nested-CnAppRoot content area still renders sparsely — that's a known BuilderHost in-memory-manifest workaround thing, not a bootstrap-spec gap.)
• 4.3 (npm run check:manifest on the seeded hello-world manifest) — the premise (a check:manifest npm script) doesn't exist; the equivalent is a test asserting SeedHelloWorld::buildHelloWorldManifest()'s output validates against the canonical schema. Best added once CI: Newman + PHPUnit-on-NC-server fail because openbuilt register not seeded at app:enable #11's PHPUnit-in-CI fix lands (the unit suite is currently red — see CI: Newman + PHPUnit-on-NC-server fail because openbuilt register not seeded at app:enable #11). Also: tests/vitest/manifest.spec.js already structurally validates OpenBuilt's own src/manifest.json.
• 5.2 (tests/Integration/ApplicationLifecycleTest.php — draft→published→archived→draft + audit + BuiltAppRoute upkeep) — depends on the in-container PHPUnit setup that CI: Newman + PHPUnit-on-NC-server fail because openbuilt register not seeded at app:enable #11 is fixing; do this once CI: Newman + PHPUnit-on-NC-server fail because openbuilt register not seeded at app:enable #11 lands.

Keeping open for 4.3 + 5.2.

[rubenvdlinde]

4.3 done — PR #34 adds testSeededHelloWorldManifestIsStructurallyValid (runs the seed, asserts the ADR-024 manifest invariants on the saved Application's manifest). With 4.4 already verified and 4.3 covered, the only residual is 5.2 (tests/Integration/ApplicationLifecycleTest.php — draft→published→archived→draft + audit + BuiltAppRoute upkeep), which needs tests/Integration/ wired into phpunit.xml (it currently isn't in any testsuite) — left as a small follow-up.

[rubenvdlinde]

Tasks 4.3 (manifest validator) and 5.2 (lifecycle test) landed in #81 (merged 2026-05-17). npm run check:manifest ships + Vitest spec covers it; ApplicationVersionLifecycleSchemaTest covers the declarative state machine. Task 4.4 (visual smoke on fresh docker compose up) and the container-bound end-to-end half of 5.2 remain — both need a fresh container and are tracked open here.