VYRA API — PHASE 2 UPLOAD GUIDE
================================

1) In Namecheap cPanel > MySQL Databases:
   - create one database
   - create one database user
   - assign the user to the database with ALL PRIVILEGES

2) Upload the entire `vyra-api` folder into your desired web path, for example:

   public_html/vyra-api/

   Your endpoints will then be:
   https://YOUR-DOMAIN/vyra-api/v1/health.php
   https://YOUR-DOMAIN/vyra-api/v1/bootstrap.php

3) Edit:
   vyra-api/config/app.php

   Replace ALL CHANGE_ME values.

   Recommended secrets: at least 32 random bytes / 64 hex characters.
   On your Mac you can generate each one with:

   openssl rand -hex 32

4) Open in a browser:
   https://YOUR-DOMAIN/vyra-api/install.php

   Paste the installation_key from config/app.php and press Install.

5) After success, verify:
   https://YOUR-DOMAIN/vyra-api/v1/health.php

   Expected shape:
   {
     "ok": true,
     "data": {
       "service": "Vyra API",
       "version": "0.2.0",
       "database": "ok",
       "schema": "2026-09-07-phase-2-foundation",
       "environment": "production"
     },
     "meta": { ... }
   }

6) Also verify:
   https://YOUR-DOMAIN/vyra-api/v1/bootstrap.php

7) The installer automatically creates:
   storage/installed.lock
   and cannot run again while that file exists.

SECURITY NOTES
--------------
- Never send config/app.php to anyone after adding real credentials/secrets.
- Keep app.debug=false in production.
- Native Android/iOS/macOS apps do not require CORS.
- Do NOT put Agora App Certificate, Apple keys, Google service credentials, or
  store verification secrets in Flutter. Those will be server-side only.
- Phase 3 will add Google/Apple token verification and access/refresh sessions.
