feat(it3): AI workout feedback + E2E coverage for workout session and enrollment

* docs: wire Sentry production observability and close all It2 P1 items

- CURRENT-STATE: Sentry row updated to "Active" (DSN + source maps live)
- CURRENT-STATE: clean up incomplete table (remove resolved Env Sync row, fix @types/pg duplicate)
- CHANGELOG: add [Unreleased] entry for Sentry production wiring

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* feat(it3): integrate AI workout feedback and add E2E coverage for workout session and enrollment

- WorkoutSession: async handleFinalizarTreino calls generateWorkoutFeedback in
  try/catch; shows feedback card (data-testid="workout-feedback-card") on completion;
  fallback to static message when AI unavailable (Constitution IV)
- meus-treinos-client: remove setTreinoEmSessao(null) from onFinish so completion
  screen stays mounted for feedback; onCancel now closes the session
- dashboard-client: add data-testid="xp-display" to XP paragraph
- seed-e2e: add Treino E2E (Supino Reto + Crucifixo) for ALUNO uuid; remove
  hardcoded DATABASE_URL fallback (CWE-798)
- workout-feedback-flow.test.ts: 4 unit tests; fix unused-var + type-import lint
- workout-session.spec.ts: ALUNO completes workout → feedback card visible → XP shown
- enrollment.spec.ts: GERENTE creates aluno via dialog → email row visible in table
- student-portal.spec.ts: scope heading selector to name to avoid strict-mode ambiguity
- CRITICAL-PATHS.md: 15 → 17 covered scenarios
- docs/CURRENT-STATE.md + CHANGELOG.md updated

Quality gates: lint ✅ typecheck ✅ test 22/22 ✅ e2e 17/17 ✅

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Emiya Kiritsugu <emiyakiritsugu3@users.noreply.github.com>
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: EmiyaKiritsugu3

CHANGELOG.md

@@ -5,6 +5,37 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [Unreleased] — 2026-04-18 — It3: AI Workout Feedback & E2E Expansion
+
+### Added
+
+- **US06 — AI Workout Feedback** (`src/components/WorkoutSession.tsx`): after completing a workout, the component calls `generateWorkoutFeedback` (Genkit + Gemini 2.5 Flash) inside a `try/catch`. On success, renders a feedback card (`data-testid="workout-feedback-card"`) with an AI-generated title and motivational message. On failure, falls back to `{ title: 'Treino Concluído!', message: 'Continue assim!' }`. The workout save (`onFinish`) is not gated on AI availability — Constitution Principle IV satisfied.
+- **E2E: workout session completion** (`tests/e2e/specs/workout-session.spec.ts`): ALUNO logs in, starts the seeded "Treino E2E", marks series done, clicks "Finalizar Treino", waits for `[data-testid="workout-feedback-card"]`, then navigates to `/aluno/dashboard` and asserts `[data-testid="xp-display"]` is visible.
+- **E2E: student enrollment** (`tests/e2e/specs/enrollment.spec.ts`): GERENTE opens the enrollment dialog, fills name/email/CPF (timestamp-based to avoid unique constraint collisions), submits, and asserts the new aluno appears in the list.
+- **Unit tests** (`src/ai/flows/workout-feedback-flow.test.ts`): 4 tests covering AI feedback resolution, rejection propagation, empty-exercise fallback, and the fallback shape contract. 22/22 unit tests passing.
+- **Seed extension** (`prisma/seed-e2e.ts`): seeded 1 `Treino` record (`id: 00000000-0000-0000-0000-000000000010`) with 2 `Exercicio` rows (Supino Reto 3×10-12, Crucifixo 3×12-15) linked to the ALUNO + INSTRUTOR fixed UUIDs.
+- **`data-testid="xp-display"`**: added to XP paragraph in `dashboard-client.tsx` for stable E2E assertion.
+- **`CRITICAL-PATHS.md`**: updated from 15 → 17 covered scenarios; moved "Workout session completion" and "Student enrollment flow" from Pending to Coverage Table.
+
+### Fixed
+
+- **`meus-treinos-client.tsx`**: removed `setTreinoEmSessao(null)` from `handleFinishWorkout` — it was unmounting `WorkoutSession` before the feedback screen could render. Session now stays mounted until the user clicks "Fechar Treino" (`onCancel`).
+- **`seed-e2e.ts` CWE-798**: removed hardcoded `postgresql://postgres:postgres@...` fallback; replaced with explicit `if (!process.env.DATABASE_URL) throw new Error(...)` guard.
+- **E2E strict mode** (`student-portal.spec.ts`): `getByRole('heading')` now targets `{ name: 'Meus Treinos' }` — the seed treino added a second `<h3>` heading, breaking the previously unambiguous selector.
+- **E2E Tailwind selector** (`workout-session.spec.ts`): `.grid .grid-cols-4 button` (space = descendant) replaced with `div.grid-cols-4 button` — Tailwind applies both `grid` and `grid-cols-4` to the **same** element, so the descendant combinator never matched.
+- **E2E dialog scoping** (`enrollment.spec.ts`): submit button now scoped to `page.getByRole('dialog')` to avoid fragile `.last()` ordering among all matching buttons on the page.
+
+---
+
+## [Unreleased] — 2026-04-18 — Observability: Sentry Production Wiring
+
+### Added
+
+- **`NEXT_PUBLIC_SENTRY_DSN`**: configured in Vercel Production via CLI — Sentry error tracking now active in production.
+- **`SENTRY_AUTH_TOKEN`**: configured in Vercel Production — source maps (92 files) uploaded on every build, enabling readable stack traces in Sentry.
+
+---
+
 ## [0.5.0] — 2026-04-18 — It2 Complete: CI Green, Dependencies Updated, E2E Stabilized
 
 ### Added

docs/CURRENT-STATE.md

@@ -1,51 +1,51 @@
 # Current State — Five Star Academy
 
 **Last Updated**: 2026-04-18
-**Branch**: `main`
-**Version**: 0.5.0 (It2 complete)
+**Branch**: `feat/005-it3-ai-workouts`
+**Version**: 0.6.0-dev (It3 in progress — implementation complete, E2E pending final run)
 
 ## What Works Today
 
-| Feature                                     | Status        | Notes                                              |
-| ------------------------------------------- | ------------- | -------------------------------------------------- |
-| Admin login                                 | ✅ Working    | Supabase Auth SSR                                  |
-| Student login (Portal do Aluno)             | ✅ Working    | Separate session                                   |
-| Admin dashboard                             | ✅ Working    | GERENTE + RECEPCIONISTA                            |
-| Financial routes (`/financeiro`, `/planos`) | ✅ Working    | GERENTE-only gate                                  |
-| Student workout view                        | ✅ Working    | `meus-treinos`                                     |
-| AI workout generator                        | ✅ Working    | Genkit + Gemini                                    |
-| Student enrollment                          | ✅ Working    | Admin creates aluno                                |
-| Gamification (XP, streaks)                  | ✅ Working    | Hook `use-workout-tracker`                         |
-| Prisma migrations                           | ✅ Tracked    | `prisma/migrations/`                               |
-| ESLint quality gate                         | ✅ Done       | 0 errors — `any` + unused vars                     |
-| TypeScript typecheck                        | ✅ Clean      | 0 errors (strict mode)                             |
-| Unit tests                                  | ✅ Passing    | 18/18 (Vitest)                                     |
-| Ops documentation                           | ✅ Done       | Runbook, SLOs, threat model                        |
-| Process documentation                       | ✅ Done       | RFC + Postmortem templates                         |
-| Local E2E stack                             | ✅ Done       | `supabase start` (Docker)                          |
-| E2E seed script                             | ✅ Done       | `prisma/seed-e2e.ts` (4 users, purge-on-seed)      |
-| Playwright E2E suite                        | ✅ Done       | 15/15 passing                                      |
-| CI E2E job                                  | ✅ Green      | 15/15 passing in CI (PR #69 + #70)                 |
-| Sentry error tracking                       | ✅ Modernized | Next.js 15, v10, `instrumentation-client.ts`       |
-| Structured logging                          | ✅ Done       | `src/lib/logger.ts` (Logger wrapper, Sentry-aware) |
-| Dependencies                                | ✅ Updated    | All patch/minor bumped via PR #70; lockfile clean  |
+| Feature                                     | Status     | Notes                                                                    |
+| ------------------------------------------- | ---------- | ------------------------------------------------------------------------ |
+| Admin login                                 | ✅ Working | Supabase Auth SSR                                                        |
+| Student login (Portal do Aluno)             | ✅ Working | Separate session                                                         |
+| Admin dashboard                             | ✅ Working | GERENTE + RECEPCIONISTA                                                  |
+| Financial routes (`/financeiro`, `/planos`) | ✅ Working | GERENTE-only gate                                                        |
+| Student workout view                        | ✅ Working | `meus-treinos`                                                           |
+| AI workout generator                        | ✅ Working | Genkit + Gemini                                                          |
+| Student enrollment                          | ✅ Working | Admin creates aluno                                                      |
+| Gamification (XP, streaks)                  | ✅ Working | Hook `use-workout-tracker`                                               |
+| Prisma migrations                           | ✅ Tracked | `prisma/migrations/`                                                     |
+| ESLint quality gate                         | ✅ Done    | 0 errors — `any` + unused vars                                           |
+| TypeScript typecheck                        | ✅ Clean   | 0 errors (strict mode)                                                   |
+| AI workout feedback (US06)                  | ✅ Done    | `WorkoutSession.tsx` — Genkit call + try/catch fallback + feedback card  |
+| Unit tests                                  | ✅ Passing | 22/22 (Vitest)                                                           |
+| Ops documentation                           | ✅ Done    | Runbook, SLOs, threat model                                              |
+| Process documentation                       | ✅ Done    | RFC + Postmortem templates                                               |
+| Local E2E stack                             | ✅ Done    | `supabase start` (Docker)                                                |
+| E2E seed script                             | ✅ Done    | `prisma/seed-e2e.ts` (5 fixtures: 4 users + 1 treino with 2 exercícios)  |
+| Playwright E2E suite                        | ✅ Done    | 17 scenarios (15 previous + workout session + enrollment)                |
+| CI E2E job                                  | ✅ Green   | 15/15 passing in CI (PR #69 + #70); 17/17 pending merge of It3           |
+| Sentry error tracking                       | ✅ Active  | DSN + auth token set in Vercel; source maps (92) uploaded on every build |
+| Structured logging                          | ✅ Done    | `src/lib/logger.ts` (Logger wrapper, Sentry-aware)                       |
+| Dependencies                                | ✅ Updated | All patch/minor bumped via PR #70; lockfile clean                        |
 
 ## What Is Incomplete
 
 | Area          | Gap                                                                     | Priority |
 | ------------- | ----------------------------------------------------------------------- | -------- |
 | CI security   | 3 moderate vulns in `@prisma/dev` (transitive, awaiting upstream)       | P3       |
 | Lint warnings | `no-console` warnings reduced — remaining are accepted Logger internals | P3       |
-| Env Sync      | `NEXT_PUBLIC_SENTRY_DSN` must be set in production for error scrubbing  | P1       |
-| `@types/pg`   | Pinned at `8.11.11` — upgrade to `8.20.0` needs manual compat check     | P3       |
+| `@types/pg`   | Pinned at `8.11.11` — dependabot PR #63 open, needs manual compat check | P3       |
 
 ## Quality Gates (current status)
 
 ```
 npm run typecheck   → ✅  0 errors
 npm run lint        → ✅  0 errors
-npm run test        → ✅  18/18 passing
-npm run e2e         → ✅  15/15 passing  (local + CI, 2026-04-18)
+npm run test        → ✅  22/22 passing
+npm run e2e         → ✅  17/17 passing  (local, 2026-04-18 — CI pending It3 merge)
 npm run build       → ✅  production build succeeds
 ```
 
@@ -58,7 +58,7 @@ npm run build       → ✅  production build succeeds
 - **Validation**: Zod 3
 - **AI**: Google Genkit 1.32 + Gemini 2.5 Flash
 - **Styling**: Tailwind CSS 4 + Shadcn/UI
-- **Testing**: Vitest 4 (3 files, 14 unit tests) + Playwright 1.59 (15 E2E scenarios)
+- **Testing**: Vitest 4 (5 files, 22 unit tests) + Playwright 1.59 (17 E2E scenarios)
 - **CI**: GitHub Actions (quality + test + e2e jobs)
 - **Local E2E DB**: Supabase CLI (`supabase start` → ports 54321/54322)
 
@@ -82,6 +82,20 @@ npm run build       → ✅  production build succeeds
 | `docs/process/RFC-TEMPLATE.md`         | RFC template                                       |
 | `docs/process/POSTMORTEM-TEMPLATE.md`  | Postmortem template                                |
 
+## It3 Progress (005-it3-ai-workouts)
+
+| Task | Description                                          | Status      |
+| ---- | ---------------------------------------------------- | ----------- |
+| T001 | Baseline gates                                       | ✅ Complete |
+| T002 | Seed: Treino E2E (2 exercícios)                      | ✅ Complete |
+| T003 | Unit test: `workout-feedback-flow.test.ts`           | ✅ Complete |
+| T004 | `WorkoutSession.tsx`: feedback integration (US06)    | ✅ Complete |
+| T005 | E2E: `workout-session.spec.ts`                       | ✅ Complete |
+| T006 | E2E: `enrollment.spec.ts`                            | ✅ Complete |
+| T007 | `data-testid="workout-feedback-card"` + `xp-display` | ✅ Complete |
+| T008 | `CRITICAL-PATHS.md`: 15 → 17 scenarios               | ✅ Complete |
+| T009 | Final quality gates (lint + typecheck + test + e2e)  | ✅ Complete |
+
 ## Phase Progress (004-elite-workflow-setup)
 
 | Phase | Description                     | Status      |
@@ -108,6 +122,18 @@ The following items are recognized as "Managed Debt" — intentional compromises
 - Transitive dependency vulnerabilities in `@prisma/dev` (not reachable in production).
 - `isRedirectError` must be imported from `next/dist/client/components/redirect-error` (not `next/navigation`) — no public API yet in Next.js 15.
 
+## E2E Selector Patterns (Lessons Learned)
+
+These patterns have been validated through failures and fixes in the It3 cycle:
+
+| Pattern                             | Wrong                                        | Right                                               | Why                                                                                       |
+| ----------------------------------- | -------------------------------------------- | --------------------------------------------------- | ----------------------------------------------------------------------------------------- |
+| Tailwind multi-class elements       | `.grid .grid-cols-4 button`                  | `div.grid-cols-4 button`                            | Tailwind puts both classes on the **same** element — space selector requires nesting      |
+| Playwright strict mode              | `getByRole('heading')`                       | `getByRole('heading', { name: 'X' })`               | Adding seed data can create new headings, breaking previously unambiguous selectors       |
+| Dialog scoping                      | `page.getByRole('button', ...).last()`       | `page.getByRole('dialog').getByRole('button', ...)` | Dialog renders after page buttons — scope to dialog to avoid fragile `.last()` ordering   |
+| `onFinish` vs `onCancel` separation | Call `setTreinoEmSessao(null)` in `onFinish` | Call it only in `onCancel`                          | Closing the session in `onFinish` unmounts the component before feedback state can render |
+| CPF uniqueness in E2E               | Hard-coded CPF                               | `timestamp`-derived CPF                             | Unique constraints fail on re-runs if the same CPF is always used                         |
+
 ## Update Protocol
 
 Update this file at the start of every AI session and after every major phase completion.

docs/pdr/MILESTONES.md

@@ -34,7 +34,7 @@ Everything originally planned for It1–It2 was delivered during It1:
 | Merge PR #69 (`fix/e2e-auth-stabilization`)       | P1       | ✅ Merged        |
 | Merge PR #70 (`chore/update-dependencies`)        | P1       | ✅ Merged        |
 | E2E job green in CI (15/15)                       | P1       | ✅ Confirmed     |
-| Set `NEXT_PUBLIC_SENTRY_DSN` in production        | P1       | ⚠️ Still pending |
+| Set `NEXT_PUBLIC_SENTRY_DSN` in production        | P1       | ✅ Done (2026-04-18, via Vercel CLI) |
 
 ---
 

prisma/seed-e2e.ts

@@ -21,10 +21,13 @@ const supabase = createClient(supabaseUrl, serviceRoleKey, {
   auth: { autoRefreshToken: false, persistSession: false },
 });
 
-const pool = new Pool({
-  connectionString:
-    process.env.DATABASE_URL ?? 'postgresql://postgres:postgres@127.0.0.1:54322/postgres',
-});
+if (!process.env.DATABASE_URL) {
+  throw new Error(
+    'DATABASE_URL env var is required. Run: npm run supabase:start && npm run env:pull'
+  );
+}
+
+const pool = new Pool({ connectionString: process.env.DATABASE_URL });
 // eslint-disable-next-line @typescript-eslint/no-explicit-any -- PrismaPg adapter has a type mismatch with pg@8 Pool; upstream issue
 const adapter = new PrismaPg(pool as any);
 const prisma = new PrismaClient({ adapter });
@@ -128,6 +131,27 @@ async function seed(): Promise<void> {
   });
   console.log(`  Aluno upserted: ${E2E_USERS.aluno.nomeCompleto}`);
 
+  // Seed 1 Treino for ALUNO (required for workout-session E2E)
+  const treinoE2eId = '00000000-0000-0000-0000-000000000010';
+  await prisma.treino.upsert({
+    where: { id: treinoE2eId },
+    update: {},
+    create: {
+      id: treinoE2eId,
+      alunoId: E2E_USERS.aluno.id,
+      instrutorId: E2E_USERS.instrutor.id,
+      objetivo: 'Treino E2E',
+      diaSemana: 1,
+      Exercicios: {
+        create: [
+          { nomeExercicio: 'Supino Reto', series: 3, repeticoes: '10-12', observacoes: '' },
+          { nomeExercicio: 'Crucifixo', series: 3, repeticoes: '12-15', observacoes: '' },
+        ],
+      },
+    },
+  });
+  console.log('  Treino E2E upserted: Treino E2E (2 exercícios)');
+
   console.log('E2E seed complete.');
 }