Marc-André Bombeck
78789e090e
The journey emptied every `auth:%` bucket before each sign-in, which is wider than it needs and takes the register, passkey and reset buckets with it — a future spec measuring one of those throttles would find its evidence deleted by an unrelated sign-in. The clear now names the two surfaces this file spends. It also left the throttle as the one auth control the journey rides on and never sees: no spec in the suite asserted a 429, and this is the only one that posts a real login at runtime. A closing stage spends the cap from an empty bucket and asserts the answer that goes over — 429, with the bucket's own remaining and reset headers. It costs nothing: the account is dropped immediately after and nothing else signs in from there. The bucket is keyed per IP and every spec on the machine is that IP, the sibling browser project included, so the measurement is taken in one project and a round disturbed by the sibling is retried rather than asserted. Two probes emptying and filling one bucket beside each other were seen to measure their own interference instead of the limiter.
e2e/
End-to-end browser tests. Playwright 1.60 drives a production build of the app against a real PostgreSQL, with @axe-core/playwright for accessibility assertions. This is the heaviest test tier; CI runs it on every PR, and locally it is worth running when a change touches a UI flow.
Running
pnpm e2e
The Playwright config (../playwright.config.ts) builds the app (next build) and brings up Postgres before the specs run; setup/global-setup.ts seeds the auth + fixture state. The suite is not part of the fast local gate (typecheck / lint / test) — it surfaces at PR CI, so expect responsive/wizard/nav reworks to flag here first.
Layout
setup/—test.ts(the suite'stest+expectentry point),global-setup.ts(auth + DB seeding),test-helpers.ts(shared login + navigation helpers).utils/— fixtures such asmock-dashboard-snapshot.ts.*.spec.ts— one spec per flow: auth/login/redirect, dashboard, charts, the medication-wizard cadences (medications-wizard-*), insights generation + scroll restoration, doctor report, settings, mobile-viewport consistency, locale switch, accessibility (a11y.spec.ts), and thev1427-*regression set.
Conventions
Import test and expect from ./setup/test, never from @playwright/test — types (Page, Route, …) still come from the package. The entry point extends Playwright's test with an automatic fixture that drops route handlers and page listeners after every test, so a handler left in flight cannot fail the test it belonged to once the context closes. src/__tests__/e2e-route-cleanup-guard.test.ts enforces the import boundary.
Assert against stable data-* attributes (data-slot, data-display-step, root display attrs), not viewport-dependent visible text. Responsive sm:hidden UI changes break getByText on desktop while the underlying element is still present — anchoring on data attributes keeps the specs stable across breakpoints. See ../CLAUDE.md.