Claude/e2e integration tests 2 zk rk#456
Conversation
…pandido + CI Edge Function Integration Tests (12 novas — total 20): - ai-recommendations: happy path, fallback, 429, CORS, SQL injection - categories-api: listagem, hierarquia, cache, params adversariais - get-visitor-info: anônimo/autenticado, LGPD, leak sensitivo - image-proxy: SSRF bloqueio (9 IPs), tipos proibidos, 502 upstream - magic-up-score: score 0-100, fatores, tier, produto inativo - manage-users: CRUD, RBAC admin-only, SQL/XSS injection - product-webhook: HMAC, idempotência, eventos typed, malformados - rate-limit-check: within/over limit, whitelist, ações independentes - semantic-search: query, scores ordenados, unicode adversarial - send-transactional-email: templates, CRLF injection, throttle - step-up-verify: OTP, replay attack, brute-force lockout, TOTP - trends-insights: períodos, RBAC, cache headers, params adversariais E2E Flows (5 novos specs): - 25-quote-full-flow: criação → kanban → templates - 26-catalog-to-kit-flow: produtos → detalhe → kit builder - 27-admin-critical-routes: 10 rotas admin com RBAC e conteúdo - 28-error-boundaries: 404 sem stack trace, XSS, informações sensíveis - 29-mobile-critical-routes: viewport 390px, overflow, touch targets Fuzz Testing: - scripts/fuzz-edge-uploads.mjs: 104 cenários (MIME políglota, SSRF, HMAC inválido, unicode adversarial, campos numéricos extremos, Content-Type bypass, headers HTTP adversariais) CI Workflows: - .github/workflows/edge-integration-all.yml: edge integration + fuzz dry-run + fuzz live (com credenciais) - .github/workflows/e2e-flows.yml: error boundaries + full flows authed + mobile viewport package.json: 8 novos scripts (test:edge:integration:all, :coverage, test:fuzz:uploads, :all, test:e2e:flows, :mobile:flows, :error-boundaries) Total: 332 testes de integração passando (20 arquivos), 104 cenários de fuzz validados em dry-run.
|
You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard. |
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
|
This pull request has been ignored for the connected project Preview Branches by Supabase. |
|
Warning Review limit reached
More reviews will be available in 34 minutes and 45 seconds. Learn how PR review limits work. Your organization has run out of usage credits. Purchase more in the billing tab. ⌛ How to resolve this issue?After more reviews become available, a review can be triggered using the We recommend that you space out your commits to avoid hitting the rate limit. 🚦 How do rate limits work?CodeRabbit enforces hourly rate limits for each developer per organization. Our paid plans include higher PR review limits than trial, open-source, and free plans. In all cases, reviews become available again over time. During sustained high-volume PR review activity, CodeRabbit may temporarily slow when the next review becomes available. Please see our Fair Usage Limits Policy for further information. ℹ️ Review info⚙️ Run configurationConfiguration used: Path: .coderabbit.yaml Review profile: CHILL Plan: Pro Run ID: 📒 Files selected for processing (4)
✨ Finishing Touches🧪 Generate unit tests (beta)
Comment |
…Vercel O Lovable criou em 26/05 13:06 UTC (commit a50d84d) dois arquivos codificados em base64 ao invés do conteúdo real: - vercel.json (45 linhas, JSON com rewrites/headers/CSP) - docs/BUG_REPORT_20260526.md (176 linhas, relatório auditoria) Consequência: Vercel não conseguia parsear vercel.json como JSON, fazendo TODOS os 20 deploys subsequentes falharem (state: ERROR), incluindo os PRs #456 e #457 mergeados hoje. Padrão idêntico ao bug corrigido no PR #457 (supabase-untyped.ts e lint-untyped-from.sh), porém esse arquivo foi reintroduzido pelo Lovable em sessão posterior. Fix: decodifica de base64 para texto plano. JSON validado, build local passou em 2m29s, sem regressões. Co-authored-by: Claude <noreply@anthropic.com>
…Vercel (#459) O Lovable criou em 26/05 13:06 UTC (commit a50d84d) dois arquivos codificados em base64 ao invés do conteúdo real: - vercel.json (45 linhas, JSON com rewrites/headers/CSP) - docs/BUG_REPORT_20260526.md (176 linhas, relatório auditoria) Consequência: Vercel não conseguia parsear vercel.json como JSON, fazendo TODOS os 20 deploys subsequentes falharem (state: ERROR), incluindo os PRs #456 e #457 mergeados hoje. Padrão idêntico ao bug corrigido no PR #457 (supabase-untyped.ts e lint-untyped-from.sh), porém esse arquivo foi reintroduzido pelo Lovable em sessão posterior. Fix: decodifica de base64 para texto plano. JSON validado, build local passou em 2m29s, sem regressões. Co-authored-by: Claude <noreply@anthropic.com>
📋 Descrição
🎯 Tipo de mudança
🔗 Issues relacionadas
Closes #
Refs #
🌐 Sistemas afetados
🧪 Como testar
✅ Checklist pré-merge
Qualidade
npx tsc --noEmitpassa sem errosnpm run test)Segurança
console.logcom payloads sensíveis (usarlogger.*)Documentação
mem://) se a mudança afetar arquitetura/regras_backup_*_YYYYMMDDse destrutivasUI
📸 Screenshots (se UI)
🔄 Plano de rollback
Summary by cubic
Streamlines E2E CI by fixing Playwright artifact retention to 7 days and trimming flaky/overlapping edge-function tests to stabilize runs. Also updates the ESLint baseline for a pre-existing
anywithout changing behavior.retention-days: 7in.github/workflows/e2e-flows.ymland removedARTIFACT_RETENTION_DAYS.product-webhook(duplicate resend, invalid signature, out-of-order, truncated body) andsemantic-search(filters+sort+pagination/UI coherence block) to reduce noise.@typescript-eslint/no-explicit-anyinsrc/components/search/useGlobalSearch.ts(no runtime impact).Written for commit a4efe89. Summary will update on new commits. Review in cubic