@camphoric/camphoric-event-import-tools 2.0.0 → 2.2.0

package/dist/types.d.ts

@@ -19,6 +19,7 @@ export interface LodgingNode {
     visible?: boolean;
     name?: string;
     notes?: string;
+    availability?: 'auto' | 'full' | 'open';
     id?: number;
 }
 /** The lodging tree, flattened: every node by key, starting from `root`. */
@@ -36,6 +37,11 @@ export interface ImportData {
         registration_end?: string;
         confirmation_email_subject?: string;
         confirmation_email_template?: string;
+        confirmation_email_reply_to?: string;
+        invoice_email_subject?: string;
+        invoice_email_template?: string;
+        invoice_email_from?: string;
+        invoice_email_reply_to?: string;
         [field: string]: unknown;
     };
     lodgings?: Lodgings;
@@ -50,6 +56,18 @@ export interface ImportData {
         name: string;
         invitation_email_subject: string;
         invitation_email_template: string;
+        invitation_email_from?: string;
+        invitation_email_reply_to?: string;
+        [field: string]: unknown;
+    }[];
+    email_templates?: {
+        name: string;
+        [field: string]: unknown;
+    }[];
+    promo_codes?: {
+        code: string;
+        expiration_date?: string;
+        excluded_registration_types?: string[];
         [field: string]: unknown;
     }[];
 }
@@ -58,6 +76,9 @@ export interface ImportResults {
     event?: Saved;
     lodging?: Lodgings;
     reports?: Saved[];
+    registration_types?: Saved[];
+    email_templates?: Saved[];
+    promo_codes?: Saved[];
 }
 /** What has been saved by the time an event's overrides and sample registrations run. */
 export type SavedResults = ImportResults & {

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAEhE,YAAY,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;AAEnC,4EAA4E;AAE5E,MAAM,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;AAExF,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC;AAE/C,wEAAwE;AACxE,MAAM,WAAW,WAAW;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED,4EAA4E;AAC5E,MAAM,MAAM,QAAQ,GAAG;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,GAAG,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AAE3E,gEAAgE;AAChE,MAAM,WAAW,UAAU;IACzB,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC;IAC9B,KAAK,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,0BAA0B,CAAC,EAAE,MAAM,CAAC;QACpC,2BAA2B,CAAC,EAAE,MAAM,CAAC;QACrC,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;KAC1B,CAAC;IACF,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,OAAO,EAAE;QAAE,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,EAAE,CAAC;IACxC,mBAAmB,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,EAAE,CAAC;IACnE,kBAAkB,EAAE;QAClB,IAAI,EAAE,MAAM,CAAC;QACb,wBAAwB,EAAE,MAAM,CAAC;QACjC,yBAAyB,EAAE,MAAM,CAAC;QAClC,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;KAC1B,EAAE,CAAC;CACL;AAED,kFAAkF;AAClF,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,OAAO,CAAC,EAAE,QAAQ,CAAC;IACnB,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC;CACnB;AAED,yFAAyF;AACzF,MAAM,MAAM,YAAY,GAAG,aAAa,GAAG;IAAE,KAAK,EAAE,KAAK,CAAA;CAAE,CAAC;AAE5D,0EAA0E;AAC1E,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,WAAW,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC1C;AAED,MAAM,MAAM,kBAAkB,GAAG,CAC/B,KAAK,EAAE,KAAK,EACZ,OAAO,EAAE,YAAY,EACrB,GAAG,EAAE,GAAG,KACL,kBAAkB,EAAE,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;AAE1D,mFAAmF;AACnF,MAAM,MAAM,QAAQ,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAE3F,gFAAgF;AAChF,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,UAAU,CAAC;IACjB,YAAY,EAAE,kBAAkB,CAAC;IACjC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC;CACxB;AAED,kFAAkF;AAClF,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/B,YAAY,EAAE;QACZ,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;CACH"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAEhE,YAAY,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;AAEnC,4EAA4E;AAE5E,MAAM,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;AAExF,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC;AAE/C,wEAAwE;AACxE,MAAM,WAAW,WAAW;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IACxC,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED,4EAA4E;AAC5E,MAAM,MAAM,QAAQ,GAAG;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,GAAG,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AAE3E,gEAAgE;AAChE,MAAM,WAAW,UAAU;IACzB,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC;IAC9B,KAAK,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,0BAA0B,CAAC,EAAE,MAAM,CAAC;QACpC,2BAA2B,CAAC,EAAE,MAAM,CAAC;QACrC,2BAA2B,CAAC,EAAE,MAAM,CAAC;QACrC,qBAAqB,CAAC,EAAE,MAAM,CAAC;QAC/B,sBAAsB,CAAC,EAAE,MAAM,CAAC;QAChC,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B,sBAAsB,CAAC,EAAE,MAAM,CAAC;QAChC,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;KAC1B,CAAC;IACF,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,OAAO,EAAE;QAAE,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,EAAE,CAAC;IACxC,mBAAmB,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,EAAE,CAAC;IACnE,kBAAkB,EAAE;QAClB,IAAI,EAAE,MAAM,CAAC;QACb,wBAAwB,EAAE,MAAM,CAAC;QACjC,yBAAyB,EAAE,MAAM,CAAC;QAClC,qBAAqB,CAAC,EAAE,MAAM,CAAC;QAC/B,yBAAyB,CAAC,EAAE,MAAM,CAAC;QACnC,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;KAC1B,EAAE,CAAC;IAEJ,eAAe,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,EAAE,CAAC;IAE/D,WAAW,CAAC,EAAE;QACZ,IAAI,EAAE,MAAM,CAAC;QACb,eAAe,CAAC,EAAE,MAAM,CAAC;QAEzB,2BAA2B,CAAC,EAAE,MAAM,EAAE,CAAC;QACvC,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;KAC1B,EAAE,CAAC;CACL;AAED,kFAAkF;AAClF,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,OAAO,CAAC,EAAE,QAAQ,CAAC;IACnB,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC;IAClB,kBAAkB,CAAC,EAAE,KAAK,EAAE,CAAC;IAC7B,eAAe,CAAC,EAAE,KAAK,EAAE,CAAC;IAC1B,WAAW,CAAC,EAAE,KAAK,EAAE,CAAC;CACvB;AAED,yFAAyF;AACzF,MAAM,MAAM,YAAY,GAAG,aAAa,GAAG;IAAE,KAAK,EAAE,KAAK,CAAA;CAAE,CAAC;AAE5D,0EAA0E;AAC1E,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,WAAW,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC1C;AAED,MAAM,MAAM,kBAAkB,GAAG,CAC/B,KAAK,EAAE,KAAK,EACZ,OAAO,EAAE,YAAY,EACrB,GAAG,EAAE,GAAG,KACL,kBAAkB,EAAE,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;AAE1D,mFAAmF;AACnF,MAAM,MAAM,QAAQ,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAE3F,gFAAgF;AAChF,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,UAAU,CAAC;IACjB,YAAY,EAAE,kBAAkB,CAAC;IACjC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC;CACxB;AAED,kFAAkF;AAClF,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/B,YAAY,EAAE;QACZ,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;CACH"}

package/e2e-compose.yml

@@ -1,6 +1,7 @@
 # A throwaway Camphoric for an event's e2e tests (camphoricServer() in
 # e2eServer.ts): the release image and its Postgres, on a free port, with an
-# admin to import as. It holds nothing worth keeping: `down -v` removes it.
+# admin to import as, and a stand-in for PayPal's API. It holds nothing worth
+# keeping: `down -v` removes it.
 services:
   postgres:
     image: postgres:16-alpine
@@ -23,10 +24,20 @@ services:
       SECRET_KEY: e2e-only-not-a-secret
       DATABASE_URL: postgres://camphoric:camphoric@postgres/camphoric
       DEBUG: "off"
-      PAYPAL_BASE_URL: https://api-m.sandbox.paypal.com
+      # PayPal's API is the fake below, which records the orders it's asked
+      # for (started only for online payment: without it, no order is made)
+      PAYPAL_BASE_URL: http://paypal:8000
       PAYPAL_SECRET: unused
-      # Registrations queue confirmation emails; nothing delivers them here
+      # Email is delivered as it's queued (no worker), to the console: the
+      # outbox (/api/emailmessages/) keeps what was sent, for the tests to read
+      CAMPHORIC_EMAIL_QUEUE: immediate
       CAMPHORIC_EMAIL_FORCE_BACKEND: django.core.mail.backends.console.EmailBackend
+      # A suite registers more a minute than a registrant would (from the
+      # throttles' one address): their limits would make tests fail at random
+      CAMPHORIC_REGISTER_RATE: ${CAMPHORIC_E2E_REGISTER_RATE:-1000/minute}
+      CAMPHORIC_REGISTRATION_DRAFT_RATE: ${CAMPHORIC_E2E_REGISTRATION_DRAFT_RATE:-1000/minute}
+      CAMPHORIC_INVITATION_LOOKUP_RATE: ${CAMPHORIC_E2E_INVITATION_LOOKUP_RATE:-1000/minute}
+      CAMPHORIC_PROMO_CODE_CHECK_RATE: ${CAMPHORIC_E2E_PROMO_CODE_CHECK_RATE:-1000/minute}
       ALLOWED_HOSTS: localhost,127.0.0.1
       CSRF_TRUSTED_ORIGINS: http://localhost:${CAMPHORIC_E2E_PORT},http://127.0.0.1:${CAMPHORIC_E2E_PORT}
       SESSION_COOKIE_SECURE: "false"
@@ -38,3 +49,27 @@ services:
     depends_on:
       postgres:
         condition: service_healthy
+      paypal:
+        condition: service_healthy
+        # (in the paypal profile only)
+        required: false
+
+  # PayPal's Orders API, faked (e2eFakePayPal.py): it creates orders, never
+  # captures them, and tells the tests what each order asked for. It runs on
+  # the app image's Python, so there's nothing more to pull, but needs Docker
+  # to see this package's files (the bind mount), so it's started only for an
+  # event imported with online payment (COMPOSE_PROFILES=paypal).
+  paypal:
+    profiles: [paypal]
+    image: ${CAMPHORIC_E2E_IMAGE:-ghcr.io/camphoric/camphoric:latest}
+    pull_policy: missing
+    entrypoint: ["python", "/e2e/fake_paypal.py"]
+    volumes:
+      - ./e2eFakePayPal.py:/e2e/fake_paypal.py:ro
+    healthcheck:
+      test: ["CMD", "python", "-c", "import urllib.request; urllib.request.urlopen('http://127.0.0.1:8000/health', timeout=3)"]
+      interval: 1s
+      timeout: 5s
+      retries: 30
+    ports:
+      - "127.0.0.1:${CAMPHORIC_E2E_PAYPAL_PORT}:8000"

package/e2e.ts

@@ -20,11 +20,18 @@
  * with its registration open, and removes the throwaway server when the tests
  * end. Every test, on every device, shares that one event: a registration
  * one test completes stays, taking up lodging capacity the others see.
+ *
+ * A throwaway server's PayPal is a fake (e2ePayPal.ts): with `onlinePayment`
+ * the payment step shows PayPal's buttons, and a test can read what the
+ * server asked PayPal for, without anything being paid.
  */
 
 import { defineConfig, devices, test as base, type PlaywrightTestConfig } from '@playwright/test';
 
+import { getAuthToken } from './getAuthInfo.ts';
+import { CamphoricAdmin } from './e2eAdmin.ts';
 import { importForE2E, type ImportForE2EOptions } from './e2eImport.ts';
+import { FAKE_PAYPAL_SDK, FakePayPal, PAYPAL_SDK_URL } from './e2ePayPal.ts';
 import { RegistrationForm } from './e2eRegistrationForm.ts';
 import { camphoricServer, type CamphoricServerOptions } from './e2eServer.ts';
 
@@ -33,15 +40,23 @@ export { camphoricServer } from './e2eServer.ts';
 export type { CamphoricServer, CamphoricServerOptions } from './e2eServer.ts';
 export { importForE2E } from './e2eImport.ts';
 export type { ImportForE2EOptions } from './e2eImport.ts';
-export { CamperSection, FormSection, RegistrationForm } from './e2eRegistrationForm.ts';
+export { CamperSection, FormSection, ListQuestion, RegistrationForm } from './e2eRegistrationForm.ts';
+export { CamphoricAdmin } from './e2eAdmin.ts';
+export type { E2EInvitation, EmailsOptions, InviteOptions, SentEmail } from './e2eAdmin.ts';
+export { FakePayPal } from './e2ePayPal.ts';
+export type { PayPalOrder } from './e2ePayPal.ts';
 
 // What the global setup hands the tests (workers inherit its environment)
 const URL_VARIABLE = 'CAMPHORIC_E2E_RUN_URL';
 const EVENT_VARIABLE = 'CAMPHORIC_E2E_RUN_EVENT_ID';
+// The admin's API token (signing in once: Camphoric throttles sign-in)
+const TOKEN_VARIABLE = 'CAMPHORIC_E2E_RUN_TOKEN';
+// A throwaway server's fake PayPal API
+const PAYPAL_VARIABLE = 'CAMPHORIC_E2E_RUN_PAYPAL_URL';
 
 export type SetUpEventOptions = Pick<ImportForE2EOptions,
-  'event' | 'validate' | 'withSampleRegistrations' | 'openRegistration'>
-  & CamphoricServerOptions;
+  'event' | 'validate' | 'withSampleRegistrations' | 'openRegistration' | 'onlinePayment'>
+  & Omit<CamphoricServerOptions, 'fakePayPal'>;
 
 /**
  * A Playwright global setup: starts the server, imports the event, and
@@ -49,11 +64,18 @@ export type SetUpEventOptions = Pick<ImportForE2EOptions,
  */
 export function setUpEvent(options: SetUpEventOptions): () => Promise<() => Promise<void>> {
   return async () => {
-    const server = await camphoricServer(options);
+    const server = await camphoricServer({ ...options, fakePayPal: options.onlinePayment });
     try {
+      if (options.onlinePayment && !server.payPalUrl) {
+        throw new Error('onlinePayment needs the throwaway server, whose PayPal is a fake: '
+          + 'CAMPHORIC_E2E_SERVER_URL\'s PayPal would refuse its client id');
+      }
       const eventId = await importForE2E({ ...options, ...server });
       process.env[URL_VARIABLE] = server.url;
       process.env[EVENT_VARIABLE] = String(eventId);
+      process.env[TOKEN_VARIABLE] = await getAuthToken(server.url);
+      if (server.payPalUrl) process.env[PAYPAL_VARIABLE] = server.payPalUrl;
+      else delete process.env[PAYPAL_VARIABLE];
     } catch (e) {
       await server.stop();
       throw e;
@@ -88,18 +110,40 @@ export function defineEventE2EConfig(
   });
 }
 
+// The server's URL, from the global setup
+function serverUrl(): string {
+  const url = process.env[URL_VARIABLE];
+  if (!url) throw new Error('no Camphoric server: run these tests with a config from defineEventE2EConfig');
+  return url;
+}
+
 /**
  * Playwright's test, with the server as its baseURL and these fixtures:
- * `eventId`, the imported event's id, and `registration`, its form.
+ * `eventId`, the imported event's id; `registration`, its form; `admin`,
+ * what an organizer does (invitations, the email sent); and `payPal`, the
+ * throwaway server's fake PayPal (the orders the server created).
  */
 // (Playwright reads a fixture's dependencies from its destructured first
 // argument, so one with none takes an empty pattern.)
-export const test = base.extend<{ eventId: number, registration: RegistrationForm }>({
+export const test = base.extend<{
+  eventId: number,
+  registration: RegistrationForm,
+  admin: CamphoricAdmin,
+  payPal: FakePayPal,
+}>({
   // eslint-disable-next-line no-empty-pattern
   baseURL: async ({}, use) => {
-    const url = process.env[URL_VARIABLE];
-    if (!url) throw new Error('no Camphoric server: run these tests with a config from defineEventE2EConfig');
-    await use(url);
+    await use(serverUrl());
+  },
+  // With the fake PayPal API, the browser gets the fake PayPal script, whose
+  // buttons work with it
+  context: async ({ context }, use) => {
+    if (process.env[PAYPAL_VARIABLE]) {
+      await context.route(PAYPAL_SDK_URL, route => route.fulfill({
+        contentType: 'text/javascript', body: FAKE_PAYPAL_SDK,
+      }));
+    }
+    await use(context);
   },
   // eslint-disable-next-line no-empty-pattern
   eventId: async ({}, use) => {
@@ -108,4 +152,18 @@ export const test = base.extend<{ eventId: number, registration: RegistrationFor
   registration: async ({ page, eventId }, use) => {
     await use(new RegistrationForm(page, eventId));
   },
+  admin: async ({ eventId }, use) => {
+    const token = process.env[TOKEN_VARIABLE];
+    if (!token) throw new Error('no admin token: run these tests with a config from defineEventE2EConfig');
+    await use(new CamphoricAdmin(serverUrl(), token, eventId));
+  },
+  // eslint-disable-next-line no-empty-pattern
+  payPal: async ({}, use) => {
+    const url = process.env[PAYPAL_VARIABLE];
+    if (!url) {
+      throw new Error('no fake PayPal: it comes with the throwaway server (not CAMPHORIC_E2E_SERVER_URL) '
+        + 'when setUpEvent is given onlinePayment: true');
+    }
+    await use(new FakePayPal(url));
+  },
 });

package/e2eAdmin.ts

@@ -0,0 +1,174 @@
+/**
+ * What an organizer does in the admin, for an event's e2e tests: invitations
+ * to register as a registration type, and the emails the server sent. It
+ * uses the admin API (as the admin client does), signed in as the admin the
+ * event was imported as, so tests don't drive the admin's own pages.
+ */
+
+import { randomBytes } from 'node:crypto';
+
+/** An invitation to register as one of the event's registration types. */
+export interface E2EInvitation {
+  id: number;
+  // The invitation's code and the address it's for (the registration form's
+  // `code` and `email`)
+  code: string;
+  email: string;
+  // The registration form with the invitation, as a path to open (the
+  // server's register_link, on whichever server the tests use)
+  registerUrl: string;
+}
+
+export interface InviteOptions {
+  // Who it's for (default: a new @example.com address, so it's unused)
+  email?: string;
+  name?: string;
+  // Also email it, as the admin's "Invite" does (default: no). The email is
+  // the registration type's invitation email, read back with emails().
+  send?: boolean;
+}
+
+/** An email the server sent (or queued), from its outbox. */
+export interface SentEmail {
+  id: number;
+  // confirmation, invitation, invoice, bulk, …
+  kind: string;
+  // queued, sending, sent, failed or cancelled; the throwaway server sends
+  // as it queues, so its email is sent (or failed, with lastError) at once
+  status: string;
+  to: string;
+  from: string;
+  replyTo: string;
+  subject: string;
+  text: string;
+  html: string;
+  lastError: string;
+  registration: number | null;
+  invitation: number | null;
+}
+
+export interface EmailsOptions {
+  // Only email to this address (any case)
+  to?: string;
+  // Only email of this kind, e.g. 'confirmation'
+  kind?: string;
+}
+
+interface Page<T> {
+  next: string | null;
+  results: T[];
+}
+
+interface EmailMessage {
+  id: number;
+  kind: string;
+  status: string;
+  to: string;
+  from_email: string;
+  reply_to: string;
+  subject: string;
+  text: string;
+  html: string;
+  last_error: string;
+  registration: number | null;
+  invitation: number | null;
+}
+
+// The address in "Name <address>", or the whole of a bare one
+const address = (recipient: string) => (/<([^>]*)>\s*$/.exec(recipient)?.[1] ?? recipient).trim().toLowerCase();
+
+export class CamphoricAdmin {
+  readonly url: string;
+  readonly eventId: number;
+  private readonly token: string;
+
+  constructor(url: string, token: string, eventId: number) {
+    this.url = url.replace(/\/$/, '');
+    this.token = token;
+    this.eventId = eventId;
+  }
+
+  /**
+   * Creates an invitation to register as the registration type with this
+   * `name` (its name in the event's data, not its label), as the admin's
+   * "Invite a special registration" does. Open its form with
+   * `page.goto(invitation.registerUrl)`.
+   */
+  async invite(registrationType: string, options: InviteOptions = {}): Promise<E2EInvitation> {
+    const types = await this.request<{ id: number, name: string }[]>(
+      'GET', `/api/registrationtypes/?event=${this.eventId}`);
+    const type = types.find(t => t.name === registrationType);
+    if (!type) {
+      const names = types.map(t => t.name).join(', ') || 'none';
+      throw new Error(`the event has no registration type named '${registrationType}' (it has: ${names})`);
+    }
+    const email = options.email ?? `e2e.invitee.${randomBytes(4).toString('hex')}@example.com`;
+    const invitation = await this.request<{ id: number, invitation_code: string, register_link: string }>(
+      'POST', '/api/invitations/', {
+        registration_type: type.id,
+        recipient_name: options.name ?? '',
+        recipient_email: email,
+      });
+    if (options.send) await this.request('POST', `/api/invitations/${invitation.id}/send`);
+    const link = new URL(invitation.register_link, this.url);
+    return {
+      id: invitation.id,
+      code: invitation.invitation_code,
+      email,
+      registerUrl: `${link.pathname}${link.search}`,
+    };
+  }
+
+  /**
+   * The emails the server sent about the event (its outbox), newest first,
+   * with what each said. Email is recorded as the request that sends it ends,
+   * so after a registration it's there when the page has moved on; to wait
+   * for one: `await expect.poll(async () => (await admin.emails({ to })).length).toBe(1)`.
+   */
+  async emails(options: EmailsOptions = {}): Promise<SentEmail[]> {
+    const query = new URLSearchParams({ event: String(this.eventId) });
+    if (options.to) query.set('q', address(options.to));
+    if (options.kind) query.set('kind', options.kind);
+    const listed: { id: number, to: string }[] = [];
+    let next: string | null = `/api/emailmessages/?${query}`;
+    while (next) {
+      const page: Page<{ id: number, to: string }> = await this.request('GET', next);
+      listed.push(...page.results);
+      // (Its path only: behind a proxy the server may name itself by another
+      // scheme or host, where the token wouldn't be sent)
+      next = page.next ? `${new URL(page.next).pathname}${new URL(page.next).search}` : null;
+    }
+    // (q matches part of the recipient or subject)
+    const wanted = options.to ? listed.filter(m => address(m.to) === address(options.to ?? '')) : listed;
+    const messages = await Promise.all(wanted.map(m => this.request<EmailMessage>('GET', `/api/emailmessages/${m.id}/`)));
+    return messages.map(m => ({
+      id: m.id,
+      kind: m.kind,
+      status: m.status,
+      to: m.to,
+      from: m.from_email,
+      replyTo: m.reply_to,
+      subject: m.subject,
+      text: m.text,
+      html: m.html,
+      lastError: m.last_error,
+      registration: m.registration,
+      invitation: m.invitation,
+    }));
+  }
+
+  private async request<T = unknown>(method: string, path: string, body?: unknown): Promise<T> {
+    const url = new URL(path, this.url);
+    const response = await fetch(url, {
+      method,
+      headers: {
+        'Authorization': `Token ${this.token}`,
+        ...(body === undefined ? {} : { 'Content-Type': 'application/json' }),
+      },
+      body: body === undefined ? undefined : JSON.stringify(body),
+    });
+    const text = await response.text();
+    if (!response.ok) throw new Error(`${method} ${url.pathname} answered ${response.status}: ${text}`);
+    return (text ? JSON.parse(text) : undefined) as T;
+  }
+}

package/e2eFakePayPal.py

@@ -0,0 +1,112 @@
+'''
+PayPal's Orders API, faked for an event's e2e tests (e2e-compose.yml runs it
+on the app image's Python, as the server's PAYPAL_BASE_URL). Only the Python
+standard library, so the image needs nothing more.
+
+It creates the orders the server asks for and keeps what each asked, for the
+tests to read (FakePayPal in e2ePayPal.ts):
+
+    GET /e2e/orders         every order created, oldest first
+    GET /e2e/orders/<id>    one, as {id, request_id, body}: body is the
+                            request the server sent, its amounts as sent
+
+No order is ever approved, so a capture is refused as PayPal refuses one the
+payer hasn't approved, and nothing is paid.
+'''
+
+import itertools
+import json
+import re
+import threading
+from http.server import BaseHTTPRequestHandler, ThreadingHTTPServer
+
+orders = {}  # id: {id, request_id, body}, in the order they were created
+by_request_id = {}  # PayPal-Request-Id: order id (a retried create returns the first)
+lock = threading.Lock()
+numbers = itertools.count(1)
+
+ORDER = re.compile(r'^/v2/checkout/orders/([A-Z0-9]+)$')
+CAPTURE = re.compile(r'^/v2/checkout/orders/([A-Z0-9]+)/capture$')
+RECORDED = re.compile(r'^/e2e/orders/([A-Z0-9]+)$')
+
+
+def order_response(order):
+    '''An order as PayPal returns it (Prefer: return=representation).'''
+    body = order['body']
+    return {
+        'id': order['id'],
+        'intent': body.get('intent'),
+        'status': 'CREATED',
+        'purchase_units': body.get('purchase_units', []),
+        'links': [],
+    }
+
+
+class Handler(BaseHTTPRequestHandler):
+    def send_json(self, status, data):
+        payload = json.dumps(data).encode()
+        self.send_response(status)
+        self.send_header('Content-Type', 'application/json')
+        self.send_header('Content-Length', str(len(payload)))
+        self.end_headers()
+        self.wfile.write(payload)
+
+    def not_found(self):
+        self.send_json(404, {'name': 'RESOURCE_NOT_FOUND', 'message': 'No such resource.'})
+
+    def read_json(self):
+        length = int(self.headers.get('Content-Length') or 0)
+        if not length:
+            return {}
+        return json.loads(self.rfile.read(length))
+
+    def do_GET(self):
+        if self.path == '/health':
+            return self.send_json(200, {'ok': True})
+        if self.path == '/e2e/orders':
+            with lock:
+                return self.send_json(200, list(orders.values()))
+        match = RECORDED.match(self.path) or ORDER.match(self.path)
+        if match:
+            with lock:
+                order = orders.get(match.group(1))
+            if order is None:
+                return self.not_found()
+            return self.send_json(200, order if self.path.startswith('/e2e/') else order_response(order))
+        return self.not_found()
+
+    def do_POST(self):
+        if self.path == '/v2/checkout/orders':
+            body = self.read_json()
+            request_id = self.headers.get('PayPal-Request-Id')
+            with lock:
+                if request_id and request_id in by_request_id:
+                    order = orders[by_request_id[request_id]]
+                else:
+                    order = {'id': f'E2EORDER{next(numbers):06d}', 'request_id': request_id, 'body': body}
+                    orders[order['id']] = order
+                    if request_id:
+                        by_request_id[request_id] = order['id']
+            return self.send_json(201, order_response(order))
+        match = CAPTURE.match(self.path)
+        if match:
+            with lock:
+                known = match.group(1) in orders
+            if not known:
+                return self.not_found()
+            return self.send_json(422, {
+                'name': 'UNPROCESSABLE_ENTITY',
+                'message': 'The requested action could not be performed.',
+                'details': [{
+                    'issue': 'ORDER_NOT_APPROVED',
+                    'description': 'The payer has not approved this order (a fake PayPal never does).',
+                }],
+            })
+        return self.not_found()
+
+    def log_message(self, format, *args):
+        print(f'fake PayPal: {format % args}', flush=True)
+
+
+if __name__ == '__main__':
+    ThreadingHTTPServer(('0.0.0.0', 8000), Handler).serve_forever()

package/e2eImport.ts

@@ -4,6 +4,7 @@
 
 import { getAuthToken } from './getAuthInfo.ts';
 import CamphoricEventCreator from './CamphoricEventCreator.ts';
+import { E2E_PAYPAL_CLIENT_ID } from './e2ePayPal.ts';
 import { Organizations, organizationLoader } from './organizations.ts';
 import type { ImportableEvent } from './types.ts';
 
@@ -22,12 +23,19 @@ export interface ImportForE2EOptions {
   // the page says registration is closed and shows no form). Its other dates
   // are unchanged.
   openRegistration?: boolean;
+  // Take payments online (default: no, unless the event's data does): PayPal
+  // is enabled with a client id only the fake PayPal accepts, so the payment
+  // step offers PayPal's buttons and adds the event's e-payment handling.
+  // Only for a throwaway server, whose PayPal is the fake (setUpEvent refuses
+  // it for an existing one).
+  onlinePayment?: boolean;
 }
 
 /** Imports the event (and creates its organization), returning its id. */
 export async function importForE2E(options: ImportForE2EOptions): Promise<number> {
   const {
     event, validate, url, username, password, withSampleRegistrations = false, openRegistration = true,
+    onlinePayment = false,
   } = options;
   // The fetcher logs in with these
   process.env.DJANGO_SUPERUSER_USERNAME = username;
@@ -41,7 +49,10 @@ export async function importForE2E(options: ImportForE2EOptions): Promise<number
     registration_start: new Date(Date.now() - day).toISOString(),
     registration_end: new Date(Date.now() + 365 * day).toISOString(),
   };
-  const data = openRegistration ? { ...event.data, event: { ...event.data.event, ...window } } : event.data;
+  const payPal = { paypal_enabled: true, paypal_client_id: E2E_PAYPAL_CLIENT_ID };
+  // Set again afterwards too, like the window
+  const changes = { ...(openRegistration ? window : {}), ...(onlinePayment ? payPal : {}) };
+  const data = { ...event.data, event: { ...event.data.event, ...changes } };
 
   const token = await getAuthToken(url);
   const organization = await organizationLoader(token, url)(event.organization);
@@ -55,7 +66,7 @@ export async function importForE2E(options: ImportForE2EOptions): Promise<number
   });
   await creator.create();
   const { id } = creator.savedEvent();
-  if (openRegistration) await creator.fetch('PATCH', `/api/events/${id}/`, window);
+  if (Object.keys(changes).length) await creator.fetch('PATCH', `/api/events/${id}/`, changes);
 
   return id;
 }