feat(api): complete unified v2 mobile surface

docs/BACKEND/API_GUIDES/V2/mobile-api-gap-analysis.md

@@ -1,66 +1,45 @@
-# Mobile API Gap Analysis
+# Mobile API Reconciliation
 
 Source compared against implementation:
 
-- `/Users/wiel/Downloads/mobile-backend-api-specification.md`
+- `mobile-backend-api-specification.md`
 
-## Implemented in this slice
+## Result
 
-- unified frontend-facing base URL design
-- client auth wrapper for email/password sign-in and sign-up
-- auth session and sign-out endpoints
-- client read surface for dashboard, billing, coverage, hubs, vendor lookup, and date-range order items
-- staff read surface for dashboard, availability, clock-in reads, payments, shifts, and profile sections
-- schema support for:
-  - cost centers
-  - hub managers
-  - recurring staff availability
-  - staff benefits
-- seed support for:
-  - authenticated demo staff user
-  - cost center and hub manager data
-  - staff benefits and availability
-  - attire and tax-form example documents
+The current mobile v2 surface is implemented behind the unified gateway and validated live in `dev`.
 
-## Still missing
+That includes:
 
-### Auth
+- auth session routes
+- client dashboard, billing, coverage, hubs, vendor lookup, managers, team members, orders, and reports
+- client order, hub, coverage review, and invoice write flows
+- staff dashboard, availability, payments, shifts, profile sections, documents, attire, certificates, bank accounts, benefits, privacy, and frequently asked questions
+- staff availability, tax forms, emergency contacts, bank account, shift decision, clock-in/out, and swap write flows
+- upload and verification flows for profile photo, government document, attire, and certificates
 
-- staff phone OTP start
-- staff OTP verify
-- staff profile setup endpoint
+## What was validated live
 
-### Client writes
+The live smoke executed successfully against:
 
-- hub create
-- hub update
-- hub delete
-- hub NFC assignment
-- assign manager to hub
-- invoice approve
-- invoice dispute
+- `https://krow-api-v2-933560802882.us-central1.run.app`
+- Firebase demo users
+- `krow-sql-v2`
+- `krow-core-api-v2`
+- `krow-command-api-v2`
+- `krow-query-api-v2`
 
-### Staff writes
+The validation script is:
 
-- availability update
-- availability quick set
-- shift apply
-- shift decline
-- request swap
-- personal info update
-- preferred locations update
-- profile photo upload wrapper
+```bash
+node backend/unified-api/scripts/live-smoke-v2-unified.mjs
+```
 
-### Reports
+## Remaining work
 
-- report summary
-- daily ops
-- spend
-- coverage
-- forecast
-- performance
-- no-show
+The remaining items are not blockers for current mobile frontend migration.
 
-### Core persistence
+They are follow-up items:
 
-- `core-api-v2` verification jobs still need durable SQL persistence
+- extend the same unified pattern to new screens added after the current mobile specification
+- add stronger observability and contract automation around the unified route surface
+- keep refining reporting and financial read models as product scope expands