test(e2e): bateria abrangente + relatório de auditoria 2026-05-22

[adm01-debug]

Sumário

PROMPT-3 — Bateria abrangente de testes E2E focada em validar as melhorias dos PRs #34–#43.

• Specs novos
  • e2e/spa-rewrite.spec.ts (Fix fix(vercel): SPA rewrite — destrava sidebar/header e refresh em rotas profundas #42, SPA rewrite Vercel) — 11/12 verdes (1 skip esperado em dev).
  • e2e/catalog.spec.ts (Fix fix(catalog): exibe o nome real da categoria em vez de "Sem categoria" #40 categoria real / Fix fix(image): cards de produto ficavam com imagem invisível (opacity-0 eterno) #41 OptimizedImage) — 2 contratos de regressão registrados.
• Correções colaterais detectadas pela bateria
  • supabase/functions/{sync-external-db,simulation-orchestrator}/index.ts migradas para buildPublicCorsHeaders + handleCorsPreflight. check:edge-cors/check:no-inline-cors agora 81/81.
  • scripts/{contract,massive-load}-testing.mjs: fallback URL apontava ao projeto Supabase antigo — realinhado com Fix fix: aponta cliente Supabase para o banco do usuário (destrava UI) #36.
• Relatório: docs/AUDITORIA_E2E_2026-05-22.md consolida veredito por melhoria, matriz de cobertura, métricas de performance e gaps priorizados.

Veredito por melhoria

PR	Resumo	Veredito
#42	SPA rewrite Vercel	✅ Validado por specs novos
#41	OptimizedImage onLoad/onError	⚠️ Spec criado (skip por ausência de creds)
#40	Catálogo: nome real da categoria	⚠️ Spec criado (skip por ausência de creds)
#39	CORS *.vercel.app	✅ check:edge-cors 81/81
#36	Supabase URL → projeto correto	✅ Grep defensivo: 0 refs ao projeto antigo
#34	CI: deploy edges sem rate limit	🔵 Fora do escopo E2E — check:no-inline-cors 81/81

Gaps detectados (priorizados no relatório)

• Crítico — TS baseline drift +118 erros (1380 atuais vs 1262 baseline). Pré-existente; bloqueia CI npm run lint/typecheck.
• Crítico — 73 novos toast leaks com .message cru vazando ao usuário; npm run check:toast-leaks lista cada arquivo.
• Moderado — 50 fails na regression pública todos atrelados a auth/Supabase placeholder; sem E2E_USER_EMAIL/PASSWORD o ambiente não exercita ProtectedRoute corretamente.
• Moderado — 7 fails no smoke gate (OAuth handshake + visual snapshots desatualizados).

Test plan

• npm run check:edge-cors → 81/81 verde
• npm run check:no-inline-cors → 81/81 verde
• npm run check:{route-error-element,aschild-nesting,seller-scope,route-ref-usage} → todos verdes
• npm run smoke → 1 ok / 2 warn / 0 fail
• npx playwright test e2e/spa-rewrite.spec.ts --project=chromium-public → 11 pass / 1 skip
• npm run test:theme-validation → 38/38 pass
• npm run test:e2e:smoke (chromium-smoke) → 5 pass / 7 fail (todos por OAuth/snapshot — fora do escopo)
• npm run test:e2e:critical → 2 pass / 4 fail (todos por auth)
• npm run test:fuzz / test:contract / test:stress → executados em modo simulação

Próximos passos recomendados

1. Re-deploy de simulation-orchestrator e sync-external-db para propagar o helper de CORS.
2. Configurar E2E_USER_EMAIL/E2E_USER_PASSWORD no CI para desbloquear ~32 smoke autenticados + os 2 novos do catalog.
3. Decidir typecheck:baseline:update vs corrigir top-25 ofensores do drift de TS.

https://claude.ai/code/session_011nXFRRG58esCThfczTQuXG

---

Generated by Claude Code

---

Summary by cubic

Adds a comprehensive E2E test battery and an audit report validating fixes #34–#43. Also standardizes CORS handling across remaining edge functions and corrects script fallbacks to the right Supabase project.

• New Features

  • e2e/spa-rewrite.spec.ts (Fix fix(vercel): SPA rewrite — destrava sidebar/header e refresh em rotas profundas #42): 12 tests for deep-route SPA rewrite; 11 pass, 1 skip in dev (assets).
  • e2e/catalog.spec.ts: +2 regression tests for Fix fix(catalog): exibe o nome real da categoria em vez de "Sem categoria" #40 (real category name) and Fix fix(image): cards de produto ficavam com imagem invisível (opacity-0 eterno) #41 (OptimizedImage onLoad/onError); skipped without auth creds.
  • docs/AUDITORIA_E2E_2026-05-22.md: audit with coverage, results, and prioritized gaps.

• Refactors

  • supabase/functions/{simulation-orchestrator,sync-external-db}: migrate to buildPublicCorsHeaders + handleCorsPreflight; check:edge-cors and check:no-inline-cors now pass 81/81.
  • scripts/{contract-testing,massive-load-test}.mjs: fallback SUPABASE_URL updated to the correct project.

^{Written for commit acd4550. Summary will update on new commits. Review in cubic}

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 9540f627-6759-43af-8622-f3db2185dcae

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch claude/e2e-test-battery-9lNtU

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
we-dream-big	Ready	Preview, Comment	May 22, 2026 3:11am

[supabase]

This pull request has been ignored for the connected project doufsxqlfjyuvxuezpln due to reaching the limit of concurrent preview branches.
Go to Project Integrations Settings ↗︎ if you wish to update this limit.

---

Preview Branches by Supabase.
Learn more about Supabase Branching ↗︎.