Ambassador UAT checklist

Devices: one iPhone and one Android if possible (the oldest you have). Portrait-only, iPhone-only on iOS.

Accounts (UAT):

• A — seller/creator (verified, DOB set, ideally with some coins + a Creator/Studio subscription)
• B — buyer (verified, DOB set)
• C — fresh registration (for sign-up, OTP and age-gate; register is throttled to 5/hour)
• One account under 16 (age gate) and one with no DOB (complete-profile)

Test data to prepare: a 15 s, a 60 s and a 90 s video; one >500 MB video; an image for avatar; a HitPay sandbox payment method; a voucher code; a referral code.

Stories

• U1. As a visitor I can browse without an account.
• U2. As a visitor I can register with email, username, password, phone, country and T&C, then verify with a 4-digit emailed code.
• U3. As a user I can sign in (with "remember me"), or with Google / Apple.
• U4. As a user who forgot my password I can reset it with an emailed code.
• U5. As an underage or DOB-less user I'm gated correctly.
• U6. As a returning user I stay signed in (90 days) and am told clearly when my session expires.

Tests

Signed out / guest

• Launch signed out → opens /home, no crash. Exp: rails + grid render with thumbnails.
• Open reels tab signed out → reel plays muted; swipe works.
• Tap a feed card signed out → detail opens (no sign-in wall).
• Tap Like / comment / bid / follow / chat / bookmark signed out → sent to Welcome (?from=…), nothing is posted.
• Tap Profile / Create / Inbox tab signed out → Welcome. After signing in you return where you were headed.

Register

• Welcome → Register. Submit empty form → per-field errors.
• Duplicate email → clear error; duplicate username → clear error.
• Password rules / mismatch handled; T&C unchecked blocks submit.
• Country list offers: Singapore, Indonesia, China, Japan, South Korea, Vietnam, Philippines, Thailand.
• Valid submit → OTP screen. Exp: 4 digits, resend countdown, resend disabled until it ends.
• Wrong code → error, can retry. Correct code → signed in → onboarding tour (once only).
• 6th register within an hour → throttle error shown cleanly (not a crash).
• Kill app mid-OTP, reopen → sensible state (no stuck spinner).

Sign in

• Wrong password → error; does not show "session expired".
• Right credentials → Home signed in. "Remember me" on → relaunch keeps email prefilled.
• Unverified account → told to verify.
• Show/hide password eye works.
• 📱 Google sign-in (real Google account) → signed in, profile populated. Cancel mid-way → returns to sign-in, no error toast loop.
• 📱 Apple sign-in (iOS) → signed in; hidden-email relay works.
• Facebook is not offered (deliberately dropped).

Forgot / change password

• Forgot password → email → 4-digit code → new password → success screen → sign in with new password.
• Old password no longer works.
• Wrong code, expired code, reused code → clear errors.
• Account → Change password runs the same flow against your own email.

Age gate

• Brand-new account (register doesn't ask DOB): the first like/comment/chat/notification call hits the server's 403 "complete your date of birth" → app should route to /complete-profile, not show a raw Indonesian error. Note what actually happens.
• Account with no DOB, try like/comment/create → routed to /complete-profile; set DOB → continue.
• DOB under 16 → /age-not-eligible; cannot proceed.
• Exactly 16 today → allowed.

Session

• Referral: install via a share link with a code / enter a code → applied. Own code rejected; second referrer rejected.
• Force expired/invalid token (e.g. sign in on a second device after revoke, or wait/edit) → "Your session has expired", signed out, lands on Welcome.
• Log out → Welcome; relaunch stays signed out; back button doesn't re-enter private screens.

Stories

• D1. As a user I see live streams, new reels and recommendations on Home and can refresh.
• D2. As a user I can browse by category and "view more".
• D3. As a user I can search posts and people.
• D4. As a user I'm never left on a blank screen when offline.

Tests

• Home shows Active Live (only if something is live), New Reels rail, Recommended grid (2 columns), all with real thumbnails.
• Prices show a currency symbol (S$60, Rp500000), never 500000.0 or null. Fun posts show no price.
• Pull to refresh → spinner → repopulates.
• Airplane mode + refresh → each rail shows message + Retry; Wi-Fi back + Retry → content returns.
• Tapping a card in each section opens that feed (title matches). Back keeps scroll position.
• Category chip → category list opens with its feeds (paging loads more on scroll, 20/page).
• Section chevron / "View more" → full list screen; paging works; end of list handled.
• Search bar: type 1 char → no search; ≥2 chars → results after a pause; tabs for reels and users; empty state; error state; clear button.
• Tap a user result → their profile; tap a reel result → plays it.
• Avatar beside the search bar → switches to Profile tab and tab bar follows.
• Onboarding tour appears once for a new sign-in; can skip; does not reappear.

Stories

• R1. As a viewer I swipe through full-screen videos with sound control and a seek bar.
• R2. I can like, bookmark, comment, share, follow the creator, and see counts.
• R3. I can report or block a post/user.
• R4. As an owner I can edit, delete, download and manage my own reel.

Tests

• Reel plays muted first; swipe up plays next, previous stops. 20 quick swipes → each starts immediately, smooth.
• Tap to pause/play; seek bar scrubs; subtitles show (35% down) when present and toggle works.
• 📱 Background the app mid-reel → no audio; foreground resumes only the on-screen reel.
• Switch to Home tab mid-reel → audio stops at once; return resumes.
• Incoming call / headphones unplug / mute switch behave sanely.
• Like (signed in) fills instantly, count +1; again un-likes. Airplane mode → reverts within ~1 s with error snackbar, count reverts.
• Bookmark toggles; item appears under Profile → Bookmarks; un-bookmark removes it.
• Comments: sheet opens; post comment appears; long text; empty comment blocked; delete own comment; button hidden when creator disabled comments.
• Share: link copy, OS share sheet, "share to a follower" strip → creates conversation, sends link, opens thread.
• View count increments once after ~2 s dwell (not on instant swipe-past).
• Follow/unfollow from the reel; creator avatar → their profile.
• Product URL chip (non-FUN posts) opens: our hosts in-app, other hosts in OS browser.
• Report: ⋮ → Report → nested reasons load from server → submit → "thanks" screen. Report a person likewise.
• Block: blocked user's content disappears; they can't message you; appears in Account → Blocked users; Unblock works from that list.
• Owner ⋮: Edit, Delete (confirm), Download video (snackbar → OS share sheet / Save to Photos), Mark status. Deleted reel is removed from lists.
• Deep link /reel/:id and /feed/:id open the right item, signed in and out.

Stories

• C1. As a creator I record (15/60/90 s) or pick a video, edit it, add details and publish.
• C2. I choose a post type up front (Deals default, Bid, Fun, etc.).
• C3. I can save a draft, resume it, and delete drafts.
• C4. I can generate an AI (HeyGen) video, gated by subscription/coins.
• C5. I see upload progress and can retry/cancel.

Tests

Camera and picking

• Create tab → landing → camera. Permission prompts for camera/mic/photos; denial shows a helpful notice (not a crash); granting afterwards works.
• Duration pills 15 / 60 / 90 only; recording stops at the cap; feed-type tabs; flip camera; gallery picker.
• Back with unsaved recording → discard dialog (keep/discard both behave).
• Pick >500 MB video → refused with a clear message.
• Pick a video over the chosen type's limit → handled.

Editor (ahead of Android; owner request)

• Rotate; drag the 9:16 crop window; trim handles; preview matches result.
• 📱 Export a real camera clip (not tested yet — see FLAGS): output orientation/crop/length are correct, audio in sync. Test on oldest device, both platforms (smoke.md §40).
• Cancel from editor returns without losing the source.

Composer

• Cover/thumbnail chosen from video; change cover.
• Title, description, category (and sub-category), condition (new / second-hand), private/public, comments on/off.
• FUN post: no price field/ price must be empty. Other types: price required; price 0 → confirm dialog.
• BID/auction: duration list from server ("3 hours", "1 day"…) required.
• Currency defaults sensibly (SGD for listings); price symbol shows correctly on card after publish.
• AI-description switch fills a description.
• Missing required field → inline error, no publish.
• Publish → upload progress visible → post appears in Profile → Posts and Home.
• Airplane mode mid-upload → fails gracefully; Retry resumes; Cancel removes it. Kill app mid-upload → queue state sane on relaunch.
• Publish twice quickly → only one post.

Drafts

• Save as draft → in Drafts. Preview a draft; publish it; multi-select delete; a published draft can't be published again.

Edit post

• Owner → Edit: change title/description/price/cover → saved and shown. Non-owner can't see Edit.

AI video (HeyGen)

• Free tier: usage counter shown (rolling 30 days); at limit → prompted to subscribe.
• Choose avatar (long-press → preview dialog → Use/Cancel); duration only 15/30/60/90; prompt guide; assets; refresh.
• Cost confirmation dialog shows coins; insufficient coins → routed to top-up, not an error dump.
• Generation finishes → lands as a draft/post.

Subscriptions

• Subscribe screen shows Free / Creator / Studio; only Creator & Studio purchasable.
• Voucher/discount code applies; invalid code errors cleanly.
• Payment → success screen → allowance shown (Wallet → Allowance tab).

Stories

• B1. As a buyer I place a bid (auction) or make an offer (deal) and can update/withdraw while pending.
• B2. As a seller I accept, reject, or end bidding early; accepting is permanent.
• B3. I see countdowns, high bid, SOLD, and bid history.

Tests (👥 A = seller, B = buyer)

• BID feed: countdown ticks and matches server end; high-bid banner; Bid Now opens sheet.
• DEALS feed: Make Offer opens sheet. FUN feed: no bid UI at all.
• Place a bid below/equal to current → error ("Price is Change…" wording is intentional).
• Valid bid → confirmed; auto chat message "Made a bid" appears in the seller's thread.
• Edit pending bid; cancel/withdraw pending bid; amounts are real currency, never coins.
• Seller sees bid list /feed/:id/bids; buyer sees My Bids; both open correct items.
• Seller ⋮: End bidding early → confirm → auction closes.
• Seller Accept → 🔴 confirm → item SOLD, other bids ignored, buyer notified (push + email), chat opens. No undo.
• Seller Reject → buyer notified, offer shows rejected.
• Buyer tries to bid after sold/ended → blocked with message. Let timer expire → server shows closed (sweep ≤5 min); app re-checks server before declaring a winner.
• Seller cannot bid on own post.
• Accept/reject/edit/cancel action row inside the chat thread works the same as on the feed.
• Mark status (available / sold) reflects on card.

Stories

• M1. As a user I see all conversations, filtered Buying / Selling.
• M2. I message in real time (text, offers, images, files).
• M3. I can delete/unsend messages and conversations.

Tests (👥 two phones)

• Inbox tab lists menu rows (bidding history, activities) and Chat; unread badge is live.
• Buying/Selling hub: type filter; delete conversation.
• Open thread: history loads; send text → appears on the other phone instantly (socket).
• Airplane mode send → shows failed/pending; reconnect → sent once (no duplicates); retry works.
• Kill/reopen app → socket reconnects and rejoins; new messages still arrive.
• Image and file messages preview and open.
• Feed card (thumbnail, title, description, price) pinned in a feed conversation; tap opens the feed.
• Long-press: copy, copy link, delete for me, delete for everyone / unsend.
• Start chat from another user's profile (Message); friends (mutual follow) can be chatted.
• Blocked user: cannot send/receive.
• Offer messages: accept / reject / edit / cancel buttons act correctly and update both sides.
• ⚠ No "message requests" screen — expected.

• 📱 Allow push on first prompt; deny path → app still works.
• Push for: chat message, new follower, like, comment, bid/offer, accepted, LIVE — each tap routes to the right screen from foreground, background and cold start.
• A LIVE push opens /live/:id (viewer; or host screen if you're the owner).
• Notifications screen (/notifications, activities): list, pull to refresh, long-press → "Delete activity with X?" → deleted.
• New followers screen lists followers and suggestions.
• 👥 Two accounts on one phone: sign out A, sign in B → pushes go to B only (one device per user; a second device displaces the first).
• Firebase in-app messages show (if campaign active).
• No push for blocked users.

Stories

• S1. I view and edit my profile; others view and follow me.
• S2. I manage followers, friends, QR and referral.

Tests

• Own profile: counts, bio inline edit, tabs Posts / Bookmarks / Likes; likes-received dialog.
• Edit profile: names, username (unique), DOB, gender, phone → saved, shown after relaunch.
• Avatar: Take Photo / Choose From Library / Remove Current Picture (saves empty) — and permission denial handled.
• Other user's profile: posts only, follow/unfollow, Message, counts, report/block.
• Follower / Following / Friends / Explore lists open and page; remove a follower works; cannot follow self.
• Friends = mutual follows.
• My QR: shows QR + referral code; copy works; share works. Scan/open of share link /share/profile.html lands on that profile.
• Share profile via OS sheet.

Stories

• W1. As a user I see my coin balance and history.
• W2. I buy coins through HitPay.
• W3. I redeem vouchers.

Tests

• Wallet tabs: All History / Earning / Spending / Allowance — each loads, empty states fine.
• Coin shop (top-up): packages with promo prices where active.
• Choose package → payment method sheet (loaded for your country; none listed → server picks, not a dead end).
• Pay in HitPay sandbox → success → balance increases and history row appears.
• Cancel/close payment page → balance unchanged, no crash.
• 🔴 Close the payment page early after paying → "unsettled top-up" is recovered on next launch (balance credited, or clear pending state).
• No card details are ever entered in the app UI outside the web view.
• Vouchers: campaigns list, claim, show QR; invalid/expired voucher message.
• Merchant store hand-off opens correctly.
• Spend coins (AI video) → Spending tab records it, balance reduces exactly once.

Stories

• L1. As a creator I go live (≤25 min) with filters and sell an attached item.
• L2. As a viewer I watch, chat, like, follow, bid.

Tests (👥 host + viewer; never run on real hardware yet — highest risk area)

Host

• Create tab → Live → setup: cover is a still from the camera card; attach an item; title.
• Go Live → 3-2-1 → "You are now live" → live UI: viewer count (K/M), chat, bid count, clock, like, share, live price, bid list with message-the-bidder.
• 28 camera filters switch on preview and on the published stream (iOS are approximations ⚠).
• Clock counts down from the max (25 min); 5-minute warning dialog; "Live Stream End" at 00:00.
• Pause works; end live explicitly → ends, feed leaves "LIVE".
• Drop Wi-Fi mid-stream → re-publish attempts at 2/4/8 s, then ends gracefully.
• Android: background the app → keeps publishing (foreground service notification). iOS ⚠: backgrounding pauses; server ends after 30 s.
• Screen stays awake; lock-screen behaviour sane.
• Owner reopens their own live → goes to host screen (not viewer).
• A feed stuck LIVE with nothing behind it → owner can close it.

Viewer

• Live card on Home → /live/:id → video plays; measure delay (expect ~1–2 s, unmeasured); falls back to HLS after 3 failed RTMP opens.
• Follow / like / share / chat (signed in); signed out can watch but gated actions → Welcome.
• Inline bid stepper ±1 + Bid Now → "Made A Bid" in seller's chat.
• Price/bid count refresh every ~10 s; winner banner; SOLD.
• Coin-gated stream (if any) charges/denies correctly.
• Host ends → viewer sees end state and exits cleanly.
• Deep link /share/live.html opens the live.
• ⚠ Viewer has no countdown (deliberate).

• My Account rows all open (no dead rows).
• Language: switch English ↔ Indonesian (+ others offered) → UI strings change app-wide, persists after relaunch.
• About: opens; links open in the in-app browser (our hosts) or OS browser (others). /web shows content, close returns.
• Contact: WhatsApp and email intents open; government line shown where required.
• Blocked users list + unblock.
• Delete account: reason list → confirm → account removed, signed out, cannot sign in again. (Use account C.)
• Privacy/T&C links reachable from register and About.

Network and resilience

• Airplane mode on every main screen → message + retry, no blank/crash.
• Slow network (Network Link Conditioner / throttling) → spinners, no duplicate submits.
• Switch Wi-Fi ↔ cellular mid-action.
• 401 handling: expired token on any call → single "session expired" and clean sign-out.

Lifecycle and device

• Background/foreground on every major screen restores state.
• Rotate device → stays portrait.
• Low storage, low battery mode, Do Not Disturb.
• Permission matrix (camera, mic, photos, notifications, location): deny → helpful notice; later allow in Settings → works.
• Back button / swipe-back from every screen; double-back exits within 2 s only.
• Deep links from Safari/Chrome/Notes/WhatsApp: /share/reel.html, /share/live.html, /share/profile.html; cold start and warm.

Performance (📱 oldest device)

• Cold start to first frame under ~3 s; Home scroll smooth; reels no jank; memory doesn't climb across 50+ reels (no crash).
• Battery/thermal during 10 min of reels and during live.

UI polish

• Dark/light mode, large text (Dynamic Type / font scale), notch/home-indicator safe areas, small screen (iPhone SE size).
• No untranslated or raw keys; no null/NaN/0.0 in numbers, counts show K/M.
• Accessibility: VoiceOver/TalkBack labels on icon buttons, tap targets ≥44 pt.

Security spot checks

• Signed out cannot reach /wallet, /chat, /create, /account via deep link.
• Cannot edit/delete someone else's post; cannot bid on own post.
• No tokens or card data visible in logs/screens.
• ⚠ Server issues to re-verify (not app bugs): GET /streams/:id leaks RTMP key; reset-password may work without OTP verification; UAT returns OTP in the register response.

Release build (before store submission)

• Test the release/TestFlight build, not debug: sign-in, push, payment, live, deep links, Sign in with Apple.
• iOS: iPhone-only (no iPad), portrait-only, correct bundle id/display name.

• Delivery services (whole chain), Message requests, Coin history/balance screens, Boost, Caption/voice-to-text, Change Email/Username/DOB (account-detail), System notifications, Home blogs list — not launched anywhere in the legacy app.
• Non-live camera "Filters" panel — no-op in Android too.
• Facebook sign-in — deliberately dropped.
• iOS live: Core Image filter approximations; no background capture.
• Download reel: snackbar + share sheet (no progress notification).
• View counts not comparable to Android (2 s dwell vs 5 s repeat).
• docs/smoke.md early sections (search "greyed", category "Coming soon", "View more" no-op) are stale — search, category browse and view-more are now built; test them as in §2 above.