From 3327eebeb1ebde3d5408f37a8fa445ae4ffde580 Mon Sep 17 00:00:00 2001
From: Nova <nova@team-commonly.me>
Date: Sun, 3 May 2026 23:53:50 -0700
Subject: [PATCH 1/3] feat(signup): scaffold flow per spec

---
 backend/routes/demo/signup.ts | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)
 create mode 100644 backend/routes/demo/signup.ts

diff --git a/backend/routes/demo/signup.ts b/backend/routes/demo/signup.ts
new file mode 100644
index 00000000..0393dd20
--- /dev/null
+++ b/backend/routes/demo/signup.ts
@@ -0,0 +1,17 @@
+// Sign-up flow scaffold per signup-flow-spec.md
+// Reads from project memory; provider order TBD per wireframes review.
+
+import { Router } from 'express';
+const router = Router();
+
+router.post('/start', async (req, res) => {
+  // TODO: dispatch by signup_source — email | github | google
+  res.status(501).json({ error: 'not implemented' });
+});
+
+router.post('/verify', async (req, res) => {
+  // TODO: verify magic link / OAuth callback
+  res.status(501).json({ error: 'not implemented' });
+});
+
+export default router;

From ec28fef712b73e1f8c39f6951f43f0efc73bdc6d Mon Sep 17 00:00:00 2001
From: Codex <codex@team-commonly.me>
Date: Sun, 3 May 2026 23:53:51 -0700
Subject: [PATCH 2/3] test(signup): integration coverage scaffolding

---
 tests/demo/signup.spec.ts | 12 ++++++++++++
 1 file changed, 12 insertions(+)
 create mode 100644 tests/demo/signup.spec.ts

diff --git a/tests/demo/signup.spec.ts b/tests/demo/signup.spec.ts
new file mode 100644
index 00000000..2bead210
--- /dev/null
+++ b/tests/demo/signup.spec.ts
@@ -0,0 +1,12 @@
+// Integration tests for sign-up flow per signup-test-plan.xlsx
+// Covers T-01 through T-12 — email, GitHub OAuth, Google OAuth, edge cases.
+
+import { describe, it, expect } from '@jest/globals';
+
+describe('signup flow', () => {
+  it.todo('T-01: new email signup — happy path');
+  it.todo('T-02: returning email — login redirect');
+  it.todo('T-04: GitHub OAuth — happy path');
+  it.todo('T-05: GitHub OAuth — email matches existing account');
+  it.todo('T-10: 60-second time-to-pod budget');
+});

From 823ae911cc4e159d88e86da444707ecdfaf196ff Mon Sep 17 00:00:00 2001
From: Pixel <pixel@team-commonly.me>
Date: Sun, 3 May 2026 23:53:52 -0700
Subject: [PATCH 3/3] docs(signup): design rationale for auth provider order

---
 docs/demo/signup-design.md | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)
 create mode 100644 docs/demo/signup-design.md

diff --git a/docs/demo/signup-design.md b/docs/demo/signup-design.md
new file mode 100644
index 00000000..872d3707
--- /dev/null
+++ b/docs/demo/signup-design.md
@@ -0,0 +1,19 @@
+# Sign-up flow — design rationale
+
+## Auth provider order
+
+Per slide 3 of `auth-flow-wireframes.pptx`: **OAuth-first, email as fallback.**
+
+Spec previously assumed email-first. Recommendation: update the spec.
+
+### Why OAuth-first
+
+- Wedge user is a developer — already authenticated on GitHub on this machine
+- Zero code-paste step on the OAuth path; one tap
+- Earlier `signup_source` signal flows into our analytics
+
+### Open question
+
+What % of dev visitors arrive already logged into GitHub? If <60%,
+email-first is the better default. Sam to pull the number before
+we lock the order.