chore: document local WSL setup fixes

docs/local-run-notes/wsl-local-run-2026-06-18.md

@@ -0,0 +1,65 @@
+# WSL Local Run Notes - 2026-06-18
+
+## Environment
+
+- Host path: `/home/ubuntu/workspace/baron-sso`
+- Runtime: WSL Ubuntu
+- Docker Compose: available via `docker compose`
+- Working branch: `dev`
+
+## Local URLs
+
+- UserFront: `http://localhost:5000`
+- AdminFront: `http://localhost:5173`
+- DevFront: `http://localhost:5174`
+- OrgFront: `http://localhost:5175`
+
+## Run Sequence
+
+```bash
+make build-auth-config
+make validate-auth-config
+make up-dev
+make dev
+```
+
+## Verified State
+
+- `baron_backend`: healthy
+- `baron_userfront`: healthy
+- `baron_gateway`: healthy
+- `baron_postgres`: healthy
+- `baron_redis`: running
+- `ory_kratos`, `ory_hydra`, `ory_keto`, `ory_oathkeeper`: running
+
+Backend health check:
+
+```json
+{"checks":{"clickhouse":"ok","oathkeeper":"ok","redis":"ok"},"status":"ok"}
+```
+
+## Local Fixes Applied
+
+- `.env`
+  - Switched `APP_ENV` to `dev`.
+  - Removed inline comments from key env values that were leaking trailing spaces.
+  - Set public local URLs to `localhost`.
+  - Removed staging callback URLs from local callback lists.
+- `backend/internal/service/redis_service.go`
+  - Added nil guards to Redis helper methods to prevent backend panic when Redis is not initialized.
+- `docker-compose.yaml`
+  - Set OrgFront runtime `VITE_OIDC_CLIENT_ID=orgfront` so it does not inherit `devfront` from `.env`.
+
+## Browser Verification
+
+- UserFront opens and reaches the login screen.
+- AdminFront opens.
+- DevFront opens.
+- OrgFront opens and reaches the login screen after fixing the OIDC client id.
+
+## Next Tasks
+
+- Connect Gitea MCP.
+- Connect Playwright MCP.
+- Use local browser checks and repository inspection for architecture and feature analysis.
+- Prepare roadmap proposal after architecture and feature review.