Keep generated applications source-only by default

.github/workflows/ci.yml

@@ -56,16 +56,6 @@ jobs:
           cache-dependency-path: |
             web/package-lock.json
             upstream-dex/web/package-lock.json
-      - name: Install Temporal CLI 1.9.1
-        run: |
-          curl --fail --silent --show-error --location \
-            https://github.com/temporalio/cli/releases/download/v1.9.1/temporal_cli_1.9.1_linux_amd64.tar.gz \
-            --output /tmp/temporal-cli.tar.gz
-          echo "09a0326a51db84d02735e53542b9ebd8c4758daf47482a9ab0abce15844e60d5  /tmp/temporal-cli.tar.gz" | sha256sum --check
-          mkdir -p "$HOME/.local/bin"
-          tar -xzf /tmp/temporal-cli.tar.gz -C "$HOME/.local/bin" temporal
-          echo "$HOME/.local/bin" >> "$GITHUB_PATH"
-          "$HOME/.local/bin/temporal" --version
       - name: Build pinned Dex CLI
         run: |
           npm --prefix upstream-dex/web ci
@@ -74,9 +64,6 @@ jobs:
           mkdir -p "$HOME/.local/bin"
           GOWORK=off go build -C upstream-dex/cli -trimpath -o "$HOME/.local/bin/dexcli" ./cmd/dexcli
           echo "$HOME/.local/bin" >> "$GITHUB_PATH"
-      - name: Install Playwright Chromium
-        working-directory: web
-        run: npx playwright install --with-deps chromium
       - name: Check template
         run: |
           make check-template-repository

.superverse/template.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "buildProfile": "go-react-v1",
-  "templateVersion": "1.9.1",
+  "templateVersion": "1.9.2",
   "minimumSandboxImageContractRevision": 3,
   "openapiSpec": "openapi/openapi.yaml",
   "applicationManifest": "dex-app.yaml",
@@ -12,8 +12,6 @@
     "checkFdgV2": "make check-fdg-v2",
     "releaseArtifacts": "make superverse-release-artifacts",
     "checkContracts": "make check-contracts",
-    "testIntegration": "make test-integration",
-    "testE2E": "make test-e2e",
     "build": "make build",
     "dev": "make dev",
     "check": "make check",

AGENTS.md

@@ -54,19 +54,25 @@ group and explanation. Run `make check-fdg-v2`; never fall back to rendering
 schema v1.
 
 After each edit batch, run the narrowest relevant Make target. Before a source
-handoff, `make check-static` must pass: it regenerates both clients, validates
-strict FDG and repository contracts, checks Go formatting/modules/vet, and builds
-the production Go binary and frontend. A source build is not business acceptance.
-CI and standalone development must also run `make check`, which exercises real
-Dex and production browser paths. A hosted authoring sandbox may not have the
-isolated test services; report that integration evidence as pending rather than
-pretending it passed or preventing a clean source build from reaching Preview.
-A failed source check remains `blocked=true`; fix it autonomously when possible.
+handoff, `make check` must pass. It restores pinned dependencies and runs
+`make check-static`: generate clients, validate strict FDG and contracts, check
+Go formatting/modules/vet, and build the production Go binary and frontend.
+These commands do not start test services or call providers.
+
+Do not add application integration or browser test suites, mocks, fake providers,
+fixtures, or test-framework dependencies unless the user explicitly requests
+them. The template intentionally has no application test scaffold. Existing
+source-only applications follow the same default. A separately requested real
+business acceptance belongs to the host after credentials are configured.
+Missing Connector credentials must not block a complete, source-verified commit:
+report that the application is ready to configure and real execution is pending.
+Never claim that compilation proves a provider call. A failed source check is a
+source blocker and must be fixed when possible. Do not remove unrelated existing
+tests from an imported application without authorization.
 
 Stable commands are `make bootstrap`, `make generate`, `make check-fdg-v2`,
 `make check-contracts`, `make check-static`, `make superverse-release-artifacts`,
-`make test-integration`, `make test-e2e`, `make build`, `make dev`, and
-`make check`.
+`make build`, `make dev`, and `make check`.
 
 `dex-app.yaml` declares every application Flow source and exact connector
 connection. Update it whenever either set changes. Never put endpoint values,
@@ -118,19 +124,10 @@ Dex Skills discovers the release and opens its own baseline pull request. Once
 the matching Dex Skills release exists, Superverse advances both immutable
 release pins in one pull request.
 
-Only integration tests that call real dependency APIs are permitted. Never add
-unit tests, isolated component tests, or mock integration tests in any language.
-Go tests must use the `integration` build tag and a real Dex Server. Playwright
-E2E tests must drive the production application backed by real dependencies.
-Do not use mocks, fakes, stubs, simulated providers, or intercepted/fulfilled
-API responses to replace dependencies, including for failure or edge cases.
-Exercise those cases through real dependency APIs or report the coverage gap.
-An integration label or build tag alone does not qualify a test: review its
-actual API calls. Dependency startup failures must fail verification, never
-skip a test or fall back to a mock. Do not restore unit-test targets, frameworks,
-fixtures, or dependencies. `make check-contracts` statically checks repository
-contracts, naming, test placement, and known mocking APIs; it is not a test suite
-and does not replace real integration or E2E evidence.
+If the user later requests tests, use actual dependency APIs and preserve the
+real-dependency policy: no unit tests, mocks, fake providers or intercepted
+responses. Missing required services fail that explicit test; do not skip it or
+report it as passed. Static contract checks remain separate from test evidence.
 
 When structure, commands, or required tooling changes, update this file,
 `.superverse/template.json`, `README.md`, and static contract checks together.

Makefile

@@ -1,6 +1,6 @@
 SHELL := /usr/bin/env bash
 
-.PHONY: bootstrap generate check-fdg-v2 check-contracts check-template-repository superverse-release-artifacts test-integration test-e2e build dev check-static check
+.PHONY: bootstrap generate check-fdg-v2 check-contracts check-template-repository superverse-release-artifacts build dev check-static check
 bootstrap:
 	go mod download
 	go -C tools/openapi mod download
@@ -16,10 +16,6 @@ check-contracts:
 	go run ./tools/checkcontract
 check-template-repository:
 	go run ./tools/checkcontract --repository-automation
-test-integration: generate check-contracts
-	./scripts/with-dex.sh go test -count=1 -tags=integration ./...
-test-e2e: generate check-contracts
-	./scripts/with-dex.sh ./scripts/run-e2e.sh
 build: generate
 	npm --prefix web run build
 	go build -o bin/basic-process ./cmd/server
@@ -33,5 +29,3 @@ check-static: generate check-fdg-v2 check-contracts
 	go build -o bin/basic-process ./cmd/server
 check: bootstrap
 	$(MAKE) check-static
-	$(MAKE) test-integration
-	$(MAKE) test-e2e

README.md

@@ -122,27 +122,16 @@ exported without `.github/`; their `make check-contracts` and `make check-static
 retain all application checks without requiring template publishing automation.
 
 ```bash
-make check-contracts
-make check-static
-make test-integration
-make test-e2e
 make check
+# Or rerun the source gate after dependencies have been restored:
+make check-static
 ```
 
-Integration tests start a real Dex Server with `dexcli dev`; the Go scenarios
-cover approval, reminders, Worker restart and terminal reads. Playwright drives
-the production Hello World page and generated application-info endpoint. Every
-poll has a deadline. Go integration tests disable result caching so each run
-calls the real Dex APIs.
-
-Only integration tests that call real dependency APIs are permitted, including
-the Playwright E2E journey against the production application. Unit tests,
-isolated component tests, mock integration tests, fakes, stubs, and Playwright
-API-response interception are prohibited, including for failure and edge cases.
-Exercise those cases through real dependency APIs or report the coverage gap.
-An integration label alone is insufficient. Missing dependencies fail the
-check; tests must never skip or fall back to mocks. Do not add unit-test
-frameworks, fixtures, or dependencies.
+The template contains no application integration or browser test scaffold.
+Do not generate tests, fixtures, mocks or test-framework dependencies by default.
+This keeps the application small and avoids requiring private Connector keys
+while authoring source. Explicitly requested tests must call real dependencies;
+missing dependencies are an incomplete result, never a mock-backed pass.
 
 `make check-contracts` validates the template manifest, Go naming, test
 placement, and known mocking APIs through static source inspection. It is
@@ -158,11 +147,12 @@ accepted fallback.
 
 `make check-static` is the source handoff gate. It regenerates, validates FDG and
 repository contracts, checks formatting/modules/vet, and builds both production
-artifacts without starting services or calling providers. `make check` remains
-the complete CI/standalone gate and adds real integration and browser scenarios.
-In a hosted authoring sandbox, missing isolated integration services remain an
-explicit acceptance gap; a successful source check permits Preview configuration
-and deployment, not a claim that business execution passed.
+artifacts without starting services or calling providers. `make check` restores
+pinned dependencies and runs that source gate. After source handoff, configure
+credentials through the host and validate actual business execution in Preview
+and Live. Those host-owned acceptance checks are not copied into each app. A
+successful source check permits configuration and deployment; it does not claim
+that a provider call or business journey passed.
 
 The supported sandbox runtime is contract revision 3. It provides Go, Node.js,
 npm, Python 3, an FDG 2.0-capable `dexcli`, Ogen's cached module dependencies,
@@ -239,3 +229,30 @@ checks are independently runnable before hosted Preview acceptance.
 
 This README, AGENTS.md, template manifest and static contracts describe the same
 source gate, configuration loader and host management boundary.
+
+
+## Source-only application baseline
+
+### Dex Flow Changes
+
+None. Existing Flow, Step, primitive, RPC, execution and cleanup contracts remain
+unchanged; this release removes test scaffolding only.
+
+### Database Schema Changes
+
+None. No new state owner or storage is introduced.
+
+### UI/UX
+
+The Hello World shell and native host management surface remain unchanged.
+
+### Tests
+
+Default verification is `make check` and `make check-template-repository` in
+Template CI. Real configured Preview/Live acceptance remains host-owned and must
+be reported independently; no passing integration evidence is implied.
+
+### Documentation
+
+The template manifest, Make commands, CI, agent guidance and this README describe
+the same source-only default. Go, SDK, Server and CLI baselines are unchanged.