chore(deploy): overnight box UAT on :18181 / API :18182

Document Grok Bot computer UAT in deploy/INVENTORY.md.
Vite preview proxies /api → FastAPI :18182. Ignore .uat-data/ and
.venv-overnight/. Never bind :10880.

.gitignore

@@ -43,3 +43,6 @@ frontend/tests/e2e/test-results/
 frontend/tests/e2e/playwright-report/
 frontend/blob-report/
 frontend/playwright/.cache/
+
+.uat-data/
+.venv-overnight/

deploy/INVENTORY.md

@@ -27,6 +27,18 @@ Do not put a host name in the product spec.
 
 ## Deploy records
 
+
+### 2026-09-25 ~17:50 PT — overnight-whole-app box UAT (Grok Bot computer)
+
+- Branch: `overnight-whole-app` (main @ 0c00d25 + cherry-picked #99 tape-line `b44e231`→`323f29b`→`be2ea6c` + Call 1 OUT).
+- **Frontend**: vite preview `0.0.0.0:18181` (proxy `/api` → FastAPI). Never touch `:10880`.
+- **Backend**: uvicorn `0.0.0.0:18182` (`backend.app:app`), local SQLite under `.uat-data/` (gitignored).
+- Env: `WOO_BASE_URL` from `~/.config/slabuploader/woo.env` (password not logged); `SLAB_AES_KEY` from local file (not in repo).
+- Call 1: `POST .../inference/call1` → **410 call1_disabled**. Call 2 path retained.
+- Health: `/api/health` ok; `woo_reachable` may be false from this box (network) — draft-only smoke.
+- Partner Woo UAT containers: **not touched**.
+
+
 ### 2026-09-21 02:41 PDT — #90 wood primary category + derived thickness band
 
 - Source ref: `0329052` on `issue-89-metadata-lock` (pushed to Gitea; pulled into `~/slab-deploy`).

frontend/vite.config.ts

@@ -5,4 +5,11 @@ import sveltePreprocess from 'svelte-preprocess';
 export default defineConfig({
   plugins: [svelte({ preprocess: sveltePreprocess() })],
   worker: { format: 'es' },
+  // overnight-whole-app box UAT: vite preview on :18181 → FastAPI on :18182
+  server: {
+    proxy: { '/api': { target: 'http://127.0.0.1:18182', changeOrigin: true } },
+  },
+  preview: {
+    proxy: { '/api': { target: 'http://127.0.0.1:18182', changeOrigin: true } },
+  },
 });