Files
rfc-app/testing/seed-ppe.sh
T
Ben Stull 83eafe72ee feat(e2e): deployed-environment E2E harness + gated test-auth (v0.52.0)
The §9 pipeline's PPE+E2E stage was unreachable: e2e/metadata.spec.js was
bound to Tier-1-only scaffolding (docker-seeded faceted collection,
SQLite-injected owner, Mailpit OTC sink). This makes the same suite run
against a deployed host.

- backend: POST /auth/test/login — fail-closed, secret-gated, single-
  identity owner test-login (404 unless E2E_TEST_AUTH_SECRET +
  E2E_TEST_AUTH_EMAIL both set; constant-time compare; loud startup warn).
  6 vertical tests; backend 665 green. Documented in backend/.env.example.
- e2e/lib/auth.js: branch on E2E_TEST_AUTH_SECRET (deployed test-login vs
  local Mailpit OTC); OWNER_EMAIL from E2E_OWNER_EMAIL. Spec unchanged so
  the localhost Tier-1 path keeps working.
- testing/seed-ppe.sh: seed a dedicated, prod-untouching PPE registry +
  content repo (faceted bdd collection) — real OHM content never touched.
- docs/design/2026-06-07-deployed-env-e2e-harness.md; CHANGELOG; VERSION
  + frontend/package.json -> 0.52.0.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-07 23:35:53 -07:00

172 lines
5.9 KiB
Bash
Executable File

#!/usr/bin/env sh
set -eu
# PPE E2E content seed (§9 deployed-environment harness).
#
# The Tier-1 docker seed (seed-gitea.sh) stands up a throwaway Gitea. PPE
# instead runs against the REAL Gitea (git.wiggleverse.org) — which it
# shares with prod. To exercise the §22.4a metadata UI (faceted filter
# SLICE-3, edit panel SLICE-4, bulk bar SLICE-5) on PPE WITHOUT touching
# real OHM content, this script seeds a DEDICATED, PPE-only registry +
# content repo:
#
# wiggleverse/rfc-registry-ppe — PPE's own project registry (prod
# keeps using wiggleverse/rfc-registry,
# so prod is never affected).
# wiggleverse/rfc-app-ppe-content — content for the one project the PPE
# registry describes: a default
# (document) collection + a faceted
# `bdd` named collection with a
# fields: schema + three entries.
#
# Point PPE at the PPE registry with:
# flotilla-core overlay set rfc-app-ppe REGISTRY_REPO=rfc-registry-ppe
# The app's startup reconciler sweep loads this content into cached_rfcs
# on the next deploy/restart (no webhook needed for the initial load).
#
# Auth: pass a Gitea token with org repo-create + content-write scope via
# GITEA_TOKEN (the wiggleverse admin token — see the wgl-gitea-admin
# skill; never echo it). The collection path the E2E suite hits is
# /p/ohm/c/bdd, so the seeded project id is `ohm` (matching the Tier-1
# seed and DEFAULT_PROJECT_ID=ohm) and the collection is `bdd`.
#
# Idempotent: repos/files that already exist are left as-is. Pass
# RESEED=1 to force-overwrite the three entry files back to their seed
# values (so a re-run restores SLICE-4/5's expected preconditions).
GITEA="${GITEA_URL:-https://git.wiggleverse.org}"
ORG="${GITEA_ORG:-wiggleverse}"
REGISTRY_REPO="${REGISTRY_REPO:-rfc-registry-ppe}"
CONTENT_REPO="${CONTENT_REPO:-rfc-app-ppe-content}"
PROJECT_ID="${DEFAULT_PROJECT_ID:-ohm}"
TOKEN="${GITEA_TOKEN:?set GITEA_TOKEN to a wiggleverse-org admin/bot token (do not echo it)}"
RESEED="${RESEED:-0}"
api() { curl -s -H "Authorization: token $TOKEN" "$@"; }
echo "seed-ppe: target $GITEA org=$ORG registry=$REGISTRY_REPO content=$CONTENT_REPO project=$PROJECT_ID"
ensure_repo() {
if api -o /dev/null -w '%{http_code}' "$GITEA/api/v1/repos/$ORG/$1" | grep -q '^200$'; then
echo "seed-ppe: repo $ORG/$1 exists"
return 0
fi
echo "seed-ppe: creating repo $ORG/$1 (private)"
api -X POST "$GITEA/api/v1/orgs/$ORG/repos" -H 'Content-Type: application/json' \
-d "{\"name\":\"$1\",\"auto_init\":true,\"default_branch\":\"main\",\"private\":true}" >/dev/null \
|| { echo "seed-ppe: failed to create $1" ; exit 1; }
}
# file_sha <repo> <path> -> prints the blob sha if the file exists, else empty
file_sha() {
api "$GITEA/api/v1/repos/$ORG/$1/contents/$2?ref=main" \
| sed -n 's/.*"sha":"\([0-9a-f]*\)".*/\1/p' | head -1
}
# put_file <repo> <path> <plaintext> [force]
# Creates the file if absent. If it exists: skipped, unless force=1, in
# which case it is updated in place (PUT with the current sha).
put_file() {
_repo="$1"; _path="$2"; _content="$3"; _force="${4:-0}"
_b64=$(printf '%s' "$_content" | base64 | tr -d '\n')
_sha=$(file_sha "$_repo" "$_path")
if [ -n "$_sha" ]; then
if [ "$_force" = "1" ]; then
echo "seed-ppe: updating $_repo/$_path"
api -X PUT "$GITEA/api/v1/repos/$ORG/$_repo/contents/$_path" \
-H 'Content-Type: application/json' \
-d "{\"message\":\"reseed $_path\",\"content\":\"$_b64\",\"sha\":\"$_sha\",\"branch\":\"main\"}" >/dev/null \
|| echo "seed-ppe: update $_repo/$_path failed, continuing"
else
echo "seed-ppe: $_repo/$_path exists, leaving as-is"
fi
return 0
fi
echo "seed-ppe: creating $_repo/$_path"
api -X POST "$GITEA/api/v1/repos/$ORG/$_repo/contents/$_path" \
-H 'Content-Type: application/json' \
-d "{\"message\":\"seed $_path\",\"content\":\"$_b64\",\"branch\":\"main\"}" >/dev/null \
|| { echo "seed-ppe: create $_repo/$_path failed" ; exit 1; }
}
ensure_repo "$REGISTRY_REPO"
ensure_repo "$CONTENT_REPO"
# The PPE registry describes a single project `ohm` whose content lives in
# the dedicated PPE content repo.
put_file "$REGISTRY_REPO" "projects.yaml" "deployment:
name: RFC PPE
tagline: rfc-app pre-prod (E2E fixtures)
projects:
- id: $PROJECT_ID
name: OHM
type: document
content_repo: $CONTENT_REPO
visibility: public
"
# Default (document) collection — one entry under rfcs/.
put_file "$CONTENT_REPO" "rfcs/intro.md" "---
slug: intro
title: Intro
state: active
id: RFC-0001
owners: [ben.stull]
---
# Intro
Seed entry for the default (document) collection on PPE.
"
# Faceted named collection 'bdd' with a fields: schema (§22.4a).
put_file "$CONTENT_REPO" "bdd/.collection.yaml" "type: bdd
visibility: public
name: BDD Scenarios
fields:
priority:
type: enum
values: [P0, P1, P2]
label: Priority
tags:
type: tags
label: Tags
"
# Three entries with varied priority/tags so facets have counts and the
# bulk bar has multiple selectable rows. Force-overwritten when RESEED=1
# so a re-run restores SLICE-4 (checkout-returning starts P1) and SLICE-5
# (two P0 entries) preconditions.
put_file "$CONTENT_REPO" "bdd/rfcs/checkout-guest.md" "---
slug: checkout-guest
title: Guest checkout
state: active
priority: P0
tags: [checkout, payments]
---
Guest checkout scenario.
" "$RESEED"
put_file "$CONTENT_REPO" "bdd/rfcs/checkout-returning.md" "---
slug: checkout-returning
title: Returning-customer checkout
state: active
priority: P1
tags: [checkout]
---
Returning-customer checkout scenario.
" "$RESEED"
put_file "$CONTENT_REPO" "bdd/rfcs/search-facets.md" "---
slug: search-facets
title: Faceted search
state: active
priority: P0
tags: [search]
---
Faceted search scenario.
" "$RESEED"
echo "seed-ppe: done. Set REGISTRY_REPO=$REGISTRY_REPO on rfc-app-ppe and redeploy."