# End-to-end test checklist (arafstore-14938, fresh start)

Prerequisites: [FIREBASE_CONSOLE_CHECKLIST.md](FIREBASE_CONSOLE_CHECKLIST.md) done, server files uploaded, `php api/firebase-smoke-test.php` returns `OK`.

## Auth and store

- [ ] Open login/signup page — sign up with new email/password
- [ ] Complete store setup wizard ([setup.html](setup.html)) — subdomain + store name
- [ ] Dashboard ([index.html](index.html)) loads without RTDB permission errors

## Storefront

- [ ] Visit shop URL for your subdomain ([shop.html](shop.html) or subdomain routing)
- [ ] Place a test order (optional)

## PHP / service account

- [ ] Super-admin panel: list clients (if configured)
- [ ] Steadfast courier send (if keys saved in dashboard)
- [ ] Push notification test (requires VAPID in RTDB `pushConfig`)

## Compat pages

- [ ] [view.html](view.html), [editor.html](editor.html), [indexlanding.html](indexlanding.html) load without Firebase init errors

## If something fails

| Symptom | Likely fix |
|---------|------------|
| Permission denied on RTDB | Publish [database.rules.json](database.rules.json) |
| PHP 503 on API | Upload `firebase-service-account.local.json` + bootstrap |
| Auth domain error | Add domain in Firebase Authorized domains |
| Smoke test ERR OAuth | Wrong or revoked service account JSON |
