import { expect, test, type Page, type Route } from "@playwright/test"; const NAVIGATION_TIMEOUT_MS = 300_000; const UI_STABILITY_TIMEOUT_MS = 120_000; type ApiKeyRecord = { id: string; name: string; key: string; fullKey: string; allowedModels: string[] | null; allowedConnections: string[] | null; createdAt: string; }; async function fulfillJson(route: Route, body: unknown, status = 200) { await route.fulfill({ status, contentType: "application/json", body: JSON.stringify(body), }); } async function installClipboardMock(page: Page) { await page.addInitScript(() => { let clipboardValue = ""; Object.defineProperty(window, "__clipboardValue", { configurable: true, get: () => clipboardValue, set: (value) => { clipboardValue = typeof value === "string" ? value : String(value ?? ""); }, }); Object.defineProperty(navigator, "clipboard", { configurable: true, value: { writeText: async (value: string) => { (window as Window & { __clipboardValue?: string }).__clipboardValue = value; }, readText: async () => clipboardValue, }, }); }); } async function readClipboard(page: Page) { return page.evaluate(() => (window as Window & { __clipboardValue?: string }).__clipboardValue); } async function gotoOrSkip(page: Page, url: string) { let lastError: unknown; for (let attempt = 0; attempt < 2; attempt += 1) { try { await page.goto(url, { waitUntil: "commit", timeout: NAVIGATION_TIMEOUT_MS }); } catch (error) { lastError = error; } try { await page.waitForURL(/\/(login|dashboard)(\/.*)?$/, { timeout: NAVIGATION_TIMEOUT_MS }); await page.locator("body").waitFor({ state: "visible", timeout: NAVIGATION_TIMEOUT_MS }); lastError = null; break; } catch (error) { lastError = error; } await page.waitForTimeout(1000); } if (lastError) throw lastError; const redirectedToLogin = page.url().includes("/login"); test.skip(redirectedToLogin, "Authentication enabled without a login fixture."); } async function waitForPageToSettle(page: Page) { try { await page.waitForLoadState("networkidle", { timeout: 15_000 }); } catch { // Some dashboard pages keep background requests alive; visibility assertions below // are the authoritative readiness check for these E2E flows. } } async function waitForNextDevCompileToFinish(page: Page) { const nextDevToolsButton = page.getByRole("button", { name: /open next\.js dev tools/i }); if ((await nextDevToolsButton.count()) === 0) return; await expect(nextDevToolsButton).not.toContainText(/compiling/i, { timeout: 120_000 }); } test.describe("API keys flow", () => { test.setTimeout(600_000); test("creates, copies, reveals, revokes, and returns to the empty state", async ({ page }) => { const state: { keys: ApiKeyRecord[]; nextId: number; revealCalls: number; deleteCalls: number; } = { keys: [], nextId: 1, revealCalls: 0, deleteCalls: 0, }; await installClipboardMock(page); await page.route("**/v1/models", async (route) => { await fulfillJson(route, { data: [] }); }); await page.route("**/api/settings", async (route) => { await fulfillJson(route, {}); }); await page.route("**/api/providers", async (route) => { await fulfillJson(route, { connections: [ { id: "conn-openai", name: "OpenAI Main", provider: "openai", isActive: true }, ], }); }); await page.route(/\/api\/usage\/call-logs(?:\?.*)?$/, async (route) => { await fulfillJson(route, []); }); await page.route("**/api/sessions", async (route) => { await fulfillJson(route, { byApiKey: {} }); }); await page.route(/\/api\/keys\/[^/]+\/reveal$/, async (route) => { state.revealCalls += 1; const keyId = route.request().url().split("/").slice(-2)[0]; const record = state.keys.find((key) => key.id === keyId); await fulfillJson(route, { key: record?.fullKey ?? "" }); }); await page.route(/\/api\/keys\/[^/]+$/, async (route) => { if (route.request().method() === "DELETE") { state.deleteCalls += 1; const keyId = route.request().url().split("/").pop() || ""; state.keys = state.keys.filter((key) => key.id !== keyId); await fulfillJson(route, { success: true }); return; } await fulfillJson(route, { error: "Method not allowed in api key detail stub" }, 405); }); await page.route("**/api/keys", async (route) => { const method = route.request().method(); if (method === "GET") { await fulfillJson(route, { keys: state.keys.map(({ fullKey, ...record }) => record), allowKeyReveal: true, }); return; } if (method === "POST") { const payload = (route.request().postDataJSON() as { name?: string }) || {}; const id = `key-${state.nextId++}`; const suffix = String(1000 + state.nextId); const fullKey = `sk-live-${suffix}-demo-secret`; const maskedKey = `sk-live-****${suffix}`; state.keys.push({ id, name: payload.name || "New Key", key: maskedKey, fullKey, allowedModels: null, allowedConnections: null, createdAt: new Date("2026-04-05T20:00:00.000Z").toISOString(), }); await fulfillJson(route, { key: fullKey, id }); return; } await fulfillJson(route, { error: "Method not allowed in api keys stub" }, 405); }); await gotoOrSkip(page, "/dashboard/api-manager"); await waitForPageToSettle(page); await waitForNextDevCompileToFinish(page); const createFirstKeyButton = page.getByRole("button", { name: /create (your )?first key/i, }); await expect(createFirstKeyButton).toBeVisible({ timeout: UI_STABILITY_TIMEOUT_MS }); await waitForPageToSettle(page); await waitForNextDevCompileToFinish(page); await createFirstKeyButton.click(); const createDialog = page.getByRole("dialog", { name: /create api key/i }); await expect(createDialog).toBeVisible({ timeout: UI_STABILITY_TIMEOUT_MS }); await createDialog.locator("input").first().fill("Team Key"); const createKeyButton = createDialog.getByRole("button", { name: /create api key/i }); await expect(createKeyButton).toBeEnabled({ timeout: UI_STABILITY_TIMEOUT_MS }); await createKeyButton.click({ force: true }); await expect.poll(() => state.keys.length).toBe(1); const createdDialog = page.getByRole("dialog", { name: /api key created/i }); const createdKeyInput = createdDialog.locator("input[readonly]").first(); await expect(createdKeyInput).toHaveValue(/sk-live-/); await createdDialog.getByRole("button", { name: /copy/i }).click(); await expect.poll(() => readClipboard(page)).toBeTruthy(); const createdClipboardValue = await readClipboard(page); await expect(createdKeyInput).toHaveValue(createdClipboardValue || ""); await createdDialog.getByRole("button", { name: /done/i }).click(); await expect(page.getByText("Team Key")).toBeVisible(); await expect(page.getByText("sk-live-****1002")).toBeVisible(); const keyRow = page .locator("div") .filter({ has: page.getByText("Team Key", { exact: true }) }) .filter({ has: page.getByText("sk-live-****1002", { exact: true }) }) .first(); await keyRow.getByRole("button", { name: /copy/i }).click(); await expect.poll(() => state.revealCalls).toBe(1); await expect.poll(() => readClipboard(page)).toBe("sk-live-1002-demo-secret"); page.once("dialog", async (dialog) => { await dialog.accept(); }); await keyRow.locator("button[title]").last().click({ force: true }); await expect.poll(() => state.deleteCalls).toBe(1); await expect(page.getByText("Team Key")).toHaveCount(0); await expect(createFirstKeyButton).toBeVisible(); }); });