From fdf17ecf85241d5ca2463a3d7c77922568bdb068 Mon Sep 17 00:00:00 2001
From: Chris <wtc.justin82@gmail.com>
Date: Fri, 3 Apr 2026 03:55:04 +0800
Subject: [PATCH] Update docs and submodule after backend cleanup

---
 backend                      |  2 +-
 docs/INTERNAL_API_HANDOFF.md |  2 --
 docs/LOCAL_DEV_RUNBOOK.md    | 23 +----------------------
 3 files changed, 2 insertions(+), 25 deletions(-)

diff --git a/backend b/backend
index ade60bd..ed7a034 160000
--- a/backend
+++ b/backend
@@ -1 +1 @@
-Subproject commit ade60bdbaa7adefdb19056bc4224445af6b4964d
+Subproject commit ed7a0344e02aecd35e332eabb03889b64f9ea1fb
diff --git a/docs/INTERNAL_API_HANDOFF.md b/docs/INTERNAL_API_HANDOFF.md
index 81b097b..60543a7 100644
--- a/docs/INTERNAL_API_HANDOFF.md
+++ b/docs/INTERNAL_API_HANDOFF.md
@@ -22,8 +22,6 @@
 6. `POST /internal/users/upsert-by-sub`
 7. `GET /internal/users/{user_sub}/roles`
 8. `POST /internal/provider/users/ensure`
-9. `POST /internal/idp/users/ensure`（舊路徑相容，不建議新串接使用）
-10. `POST /internal/keycloak/users/ensure`（舊路徑相容，不建議新串接使用）
 
 ## 角色聚合回應（`GET /internal/users/{user_sub}/roles`）
 ```json
diff --git a/docs/LOCAL_DEV_RUNBOOK.md b/docs/LOCAL_DEV_RUNBOOK.md
index 7d0fbaf..8545c6f 100644
--- a/docs/LOCAL_DEV_RUNBOOK.md
+++ b/docs/LOCAL_DEV_RUNBOOK.md
@@ -7,27 +7,6 @@ psql "$DATABASE_URL" -f scripts/init_schema.sql
 ```
 - DB schema 檔案：[backend/scripts/init_schema.sql](../backend/scripts/init_schema.sql)
 
-如果你是 macOS 本機沒裝 `psql`，改用：
-```bash
-cd backend
-./.venv/bin/python - <<'PY'
-import psycopg
-from pathlib import Path
-sql = Path('scripts/migrate_provider_columns.sql').read_text()
-with psycopg.connect(
-    host='127.0.0.1',
-    port=54321,
-    dbname='member.ose.tw',
-    user='member_ose',
-    password='你的DB密碼'
-) as conn:
-    with conn.cursor() as cur:
-        cur.execute(sql)
-print('provider column migration done')
-PY
-```
-- 欄位改名 migration：[backend/scripts/migrate_provider_columns.sql](../backend/scripts/migrate_provider_columns.sql)
-
 ## 2) 啟動後端
 ```bash
 cd backend
@@ -71,7 +50,7 @@ npm run dev
 1. `GET http://127.0.0.1:8000/healthz` 應為 200。
 2. 前端按「前往 Keycloak 登入」應可成功導轉與回跳。
 3. `GET /me` 登入後應有資料。
-4. 非 admin 群組帳號打 `/admin/*` 應為 403。
+4. 非 admin realm role 帳號打 `/admin/*` 應為 403。
 5. `POST /admin/sync/from-provider?force=true` 可手動觸發全量補齊同步。
 6. 列表 API 不會自動同步 IdP（避免高負載），需手動按同步按鈕或呼叫同步 API。