Align the e2e driver with the current auth and command contracts #719

Open
weichen wants to merge 7 commits from fix/e2e-pins-snapshot into main
Owner

Why: The W12 browser matrix exposed that scripts/e2e.sh predated the current auth model: the RDM serve (auth on) requires startup super-admin credentials (SUPER_ADMIN_OWNER/SUPER_ADMIN_PASSWORD), the base first account must come from the startup super admin (bootstrap-admin is disabled), the auditor account must be created via the admin API (POST /api/admin/users, must-change semantics — the removed CLI local-activation redemption no longer works), and the seed's permission grant belongs to the member-role model (rdm.perm.set is gone; audit/doc visibility derives from project membership).

Change: export synthetic startup super-admin credentials (respect pre-set env), seed the base first account as the startup super admin, create e2e accounts via the admin API with per-account synthetic initial passwords matching the E2E_* contract injected to Playwright, replace rdm.perm.set with member-role setup, and align the requirement-ledger import with the current command surface.

Evidence: iterative runs against the real combo on branch fix/e2e-pins-snapshot — the pipeline advanced from 'rdm build failed' to Playwright executing 14 specs (12 passed + 2 functional failures fixed in FE PR #128 / FE fix/e2e-gate-flow d912001+); final local run of the seed section green through project creation, member setup and ledger import. GATE is CI on this PR HEAD.

Impact: scripts/e2e.sh only.

Refs: two-trees W12 browser matrix; RDM PR #477 (W11), FE PR #125/#128.

Why: The W12 browser matrix exposed that scripts/e2e.sh predated the current auth model: the RDM serve (auth on) requires startup super-admin credentials (SUPER_ADMIN_OWNER/SUPER_ADMIN_PASSWORD), the base first account must come from the startup super admin (bootstrap-admin is disabled), the auditor account must be created via the admin API (POST /api/admin/users, must-change semantics — the removed CLI local-activation redemption no longer works), and the seed's permission grant belongs to the member-role model (rdm.perm.set is gone; audit/doc visibility derives from project membership). Change: export synthetic startup super-admin credentials (respect pre-set env), seed the base first account as the startup super admin, create e2e accounts via the admin API with per-account synthetic initial passwords matching the E2E_* contract injected to Playwright, replace rdm.perm.set with member-role setup, and align the requirement-ledger import with the current command surface. Evidence: iterative runs against the real combo on branch fix/e2e-pins-snapshot — the pipeline advanced from 'rdm build failed' to Playwright executing 14 specs (12 passed + 2 functional failures fixed in FE PR #128 / FE fix/e2e-gate-flow d912001+); final local run of the seed section green through project creation, member setup and ledger import. GATE is CI on this PR HEAD. Impact: scripts/e2e.sh only. Refs: two-trees W12 browser matrix; RDM PR #477 (W11), FE PR #125/#128.
weichen added 6 commits 2026-10-23 10:20:47 +00:00
weichen added 1 commit 2026-10-23 11:02:37 +00:00
Trigger CI for the e2e driver contract alignment
ci / test (pull_request) Failing after 9s
ci / svc-realcombo (pull_request) Failing after 9s
ci / test-pg (pull_request) Failing after 9s
304a2d2530
Some required checks failed
ci / test (pull_request) Failing after 9s
Required
Details
ci / svc-realcombo (pull_request) Failing after 9s
Required
Details
ci / test-pg (pull_request) Failing after 9s
Required
Details
Some required checks were not successful.
This pull request is blocked because it's outdated.
You are not authorized to merge this pull request.
This branch is out-of-date with the base branch
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin fix/e2e-pins-snapshot:fix/e2e-pins-snapshot
git checkout fix/e2e-pins-snapshot
Sign in to join this conversation.
No Reviewers
No labels
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: weichen/Agent-System-Dev#719