chore(testing): pause test execution and prep deterministic e2e admin seed

apps/admin/package.json

@@ -8,6 +8,7 @@
     "build": "bun --env-file=../../.env next build",
     "start": "bun --env-file=../../.env next start --port 3001",
     "auth:seed:support": "bun --env-file=../../.env ./scripts/seed-support-user.ts",
+    "auth:seed:e2e-admin": "bun --env-file=../../.env ./scripts/seed-e2e-admin-user.ts",
     "lint": "biome check src",
     "typecheck": "tsc -p tsconfig.json --noEmit"
   },

apps/admin/scripts/seed-e2e-admin-user.ts

@@ -0,0 +1,11 @@
+import { ensureE2EAdminBootstrap } from "../src/lib/auth/server"
+
+async function main() {
+  await ensureE2EAdminBootstrap()
+  console.log("E2E admin bootstrap completed")
+}
+
+main().catch((error) => {
+  console.error(error)
+  process.exit(1)
+})

apps/admin/src/lib/auth/server.ts

@@ -266,11 +266,15 @@ type BootstrapUserConfig = {
   password: string
   role: Role
   isHidden: boolean
+  isSystem?: boolean
+  isProtected?: boolean
 }
 
 async function ensureCredentialUser(config: BootstrapUserConfig): Promise<void> {
   const ctx = await auth.$context
   const normalizedEmail = config.email.toLowerCase()
+  const isSystem = config.isSystem ?? true
+  const isProtected = config.isProtected ?? true
   const existing = await ctx.internalAdapter.findUserByEmail(normalizedEmail, {
     includeAccounts: true,
   })
@@ -282,9 +286,9 @@ async function ensureCredentialUser(config: BootstrapUserConfig): Promise<void>
         name: config.name,
         role: config.role,
         isBanned: false,
-        isSystem: true,
+        isSystem,
         isHidden: config.isHidden,
-        isProtected: true,
+        isProtected,
       },
     })
 
@@ -321,9 +325,9 @@ async function ensureCredentialUser(config: BootstrapUserConfig): Promise<void>
     emailVerified: true,
     role: config.role,
     isBanned: false,
-    isSystem: true,
+    isSystem,
     isHidden: config.isHidden,
-    isProtected: true,
+    isProtected,
   })
 
   await ctx.internalAdapter.linkAccount({
@@ -371,6 +375,29 @@ export async function ensureSupportUserBootstrap(): Promise<void> {
   }
 }
 
+const DEFAULT_E2E_ADMIN_EMAIL = "e2e-admin@cms.local"
+const DEFAULT_E2E_ADMIN_USERNAME = "e2e-admin"
+const DEFAULT_E2E_ADMIN_PASSWORD = "e2e-admin-password"
+const DEFAULT_E2E_ADMIN_NAME = "E2E Admin"
+
+export async function ensureE2EAdminBootstrap(): Promise<void> {
+  const email = resolveBootstrapValue("CMS_E2E_ADMIN_EMAIL", DEFAULT_E2E_ADMIN_EMAIL)
+  const username = resolveBootstrapValue("CMS_E2E_ADMIN_USERNAME", DEFAULT_E2E_ADMIN_USERNAME)
+  const password = resolveBootstrapValue("CMS_E2E_ADMIN_PASSWORD", DEFAULT_E2E_ADMIN_PASSWORD)
+  const name = resolveBootstrapValue("CMS_E2E_ADMIN_NAME", DEFAULT_E2E_ADMIN_NAME)
+
+  await ensureCredentialUser({
+    email,
+    username,
+    password,
+    name,
+    role: "admin",
+    isHidden: false,
+    isSystem: true,
+    isProtected: false,
+  })
+}
+
 type OwnerInvariantState = {
   ownerId: string | null
   ownerCount: number