feat: user service

integration/README.md

@@ -8,13 +8,25 @@ Each suite must raise real service processes, speak only over public HTTP/gRPC/R
 ```text
 integration/
 ├── README.md
-├── go.mod
+├── authsessionuser/
+│   ├── authsession_user_test.go
+│   └── harness_test.go
 ├── gatewayauthsession/
 │   ├── harness_test.go
 │   └── gateway_authsession_test.go
+├── gatewayauthsessionuser/
+│   ├── gateway_authsession_user_test.go
+│   └── harness_test.go
+├── gatewayuser/
+│   ├── gateway_user_test.go
+│   └── harness_test.go
+├── go.mod
+├── go.sum
 └── internal/
     ├── contracts/
-    │   └── gatewayv1/
+    │   ├── gatewayv1/
+    │   │   └── contract.go
+    │   └── userv1/
     │       └── contract.go
     └── harness/
         ├── binary.go
@@ -35,8 +47,12 @@ integration/
 ## Current Boundary Suites
 
 - `gatewayauthsession` verifies the integration boundary between real `Edge Gateway` and real `Auth / Session Service`.
+- `authsessionuser` verifies the integration boundary between real `Auth / Session Service` and real `User Service`.
+- `gatewayuser` verifies the direct authenticated self-service boundary between real `Edge Gateway` and real `User Service`.
+- `gatewayauthsessionuser` verifies the full public-auth plus authenticated-account chain across real `Edge Gateway`, real `Auth / Session Service`, and real `User Service`.
 
-The current fast suite uses one isolated `miniredis` instance plus external stateful HTTP stubs for mail and user services.
+The current fast suites use one isolated `miniredis` instance plus either
+real downstream processes or external stateful HTTP stubs where appropriate.
 
 ## Running
 
@@ -45,14 +61,21 @@ Run from the module directory:
 ```bash
 cd integration
 go test ./gatewayauthsession/...
+go test ./authsessionuser/...
+go test ./gatewayuser/...
+go test ./gatewayauthsessionuser/...
 ```
 
 Useful regression commands after boundary changes:
 
 ```bash
 go test ./gatewayauthsession/...
+go test ./authsessionuser/...
+go test ./gatewayuser/...
+go test ./gatewayauthsessionuser/...
 cd ../gateway && go test ./...
 cd ../authsession && go test ./... -run GatewayCompatibility
+cd ../user && go test ./...
 ```
 
 Do not use `go test ./...` from the repository root. The repository is organized through `go.work`, so verification should stay module-scoped.