@maestro-js/agent-skills 1.0.0-alpha.2 → 1.0.0-alpha.21

package/skills/maestro-examples/references/setlist/setlist-web/tests/areas-detail-view.test.ts

@@ -0,0 +1,46 @@
+import { test, expect } from '@playwright/test'
+import { H } from '@setlist/services'
+import { TEST_CONSTANTS } from './constants'
+
+const userId = TEST_CONSTANTS.userId
+
+const seedData = H.SeedPipe(
+  H.AreaSeed({ id: 9200, userId, title: 'Health', position: 'a0' }),
+  H.TaskSeed({ id: 9200, userId, areaId: 9200, projectId: null, title: 'Go for a run', listPosition: 'a0' }),
+  H.TaskSeed({ id: 9201, userId, areaId: 9200, projectId: null, title: 'Meal prep', listPosition: 'a1' }),
+  H.ProjectSeed({ id: 9200, userId, areaId: 9200, title: 'Marathon Training', position: 'a0' }),
+  H.TaskSeed({ id: 9202, userId, areaId: 9200, projectId: 9200, title: 'Buy running shoes', listPosition: 'a0' }),
+  H.TaskSeed({ id: 9203, userId, areaId: 9200, projectId: 9200, title: 'Plan route', listPosition: 'a1' })
+)
+
+test.beforeAll(async () => {
+  await seedData.setup()
+})
+
+test.afterAll(async () => {
+  await seedData.teardown()
+})
+
+test('clicking an area in sidebar shows its detail view with tasks and projects', async ({ page }) => {
+  await page.goto('/inbox')
+  const nav = page.getByRole('navigation')
+
+  // Click the area in the sidebar
+  const areaLink = nav.getByRole('link', { name: 'Health' })
+  await expect(areaLink).toBeVisible()
+  await areaLink.click()
+
+  // Should navigate to the area detail URL
+  await page.waitForURL(/\/areas\/\d+/)
+
+  // Area title is visible in the detail form
+  await expect(page.getByRole('heading', { name: 'Health' })).toBeVisible()
+
+  // Standalone tasks (not in a project) are visible
+  await expect(page.getByText('Go for a run')).toBeVisible()
+  await expect(page.getByText('Meal prep')).toBeVisible()
+
+  // Projects section is visible with project name and task count
+  await expect(page.getByText('Marathon Training')).toBeVisible()
+  await expect(page.getByText('2 tasks')).toBeVisible()
+})

package/skills/maestro-examples/references/setlist/setlist-web/tests/areas-edit-title.test.ts

@@ -0,0 +1,48 @@
+import { test, expect } from '@playwright/test'
+import { H } from '@setlist/services'
+import { TEST_CONSTANTS } from './constants'
+
+const userId = TEST_CONSTANTS.userId
+
+const seedData = H.SeedPipe(H.AreaSeed({ id: 9180, userId, title: 'Health', position: 'a0' }))
+
+test.beforeAll(async () => {
+  await seedData.setup()
+})
+
+test.afterAll(async () => {
+  await seedData.teardown()
+})
+
+test('edit area title via context menu', async ({ page }) => {
+  await page.goto('/inbox')
+  const nav = page.getByRole('navigation')
+
+  // Right-click the area to open context menu
+  const areaLink = nav.getByRole('link', { name: 'Health' })
+  await expect(areaLink).toBeVisible()
+  await areaLink.click({ button: 'right' })
+
+  // Click the "Edit" option in the context menu
+  await page.getByRole('menuitem', { name: 'Edit' }).click()
+
+  // The inline edit input should appear with the current title
+  const input = nav.locator('input[name="title"]')
+  await expect(input).toBeVisible()
+  await expect(input).toHaveValue('Health')
+
+  // Clear and type a new title, then submit
+  await input.fill('Wellness')
+  await input.press('Enter')
+
+  // The updated title should appear in the sidebar
+  const updatedLink = nav.getByRole('link', { name: 'Wellness' })
+  await expect(updatedLink).toBeVisible()
+
+  // Navigate to the area detail view
+  await updatedLink.click()
+  await page.waitForURL(/\/areas\/\d+/)
+
+  // The detail view should show the updated title
+  await expect(page.getByRole('heading', { name: 'Wellness' })).toBeVisible()
+})

package/skills/maestro-examples/references/setlist/setlist-web/tests/areas-expand-collapse.test.ts

@@ -0,0 +1,50 @@
+import { test, expect } from '@playwright/test'
+import { H } from '@setlist/services'
+import { TEST_CONSTANTS } from './constants'
+
+const userId = TEST_CONSTANTS.userId
+
+const seedData = H.SeedPipe(
+  H.AreaSeed({ id: 9210, userId, title: 'Fitness', position: 'a0' }),
+  H.ProjectSeed({ id: 9210, userId, areaId: 9210, title: 'Marathon Training', position: 'a0' }),
+  H.ProjectSeed({ id: 9211, userId, areaId: 9210, title: 'Meal Planning', position: 'a1' })
+)
+
+test.beforeAll(async () => {
+  await seedData.setup()
+})
+
+test.afterAll(async () => {
+  await seedData.teardown()
+})
+
+test('area expand/collapse shows and hides child projects', async ({ page }) => {
+  await page.goto('/inbox')
+  const nav = page.getByRole('navigation')
+
+  // Area should be visible
+  const areaLink = nav.getByRole('link', { name: 'Fitness' })
+  await expect(areaLink).toBeVisible()
+
+  // By default, areas are collapsed — child projects should not be visible
+  const project1 = nav.getByRole('link', { name: 'Marathon Training' })
+  const project2 = nav.getByRole('link', { name: 'Meal Planning' })
+  await expect(project1).toBeHidden()
+  await expect(project2).toBeHidden()
+
+  // Click the expand button (scoped to the Fitness area row)
+  const expandBtn = areaLink.locator('..').getByRole('button', { name: 'Expand area' })
+  await expandBtn.click()
+
+  // Child projects should now be visible
+  await expect(project1).toBeVisible()
+  await expect(project2).toBeVisible()
+
+  // Click the collapse button (scoped to the Fitness area row)
+  const collapseBtn = areaLink.locator('..').getByRole('button', { name: 'Collapse area' })
+  await collapseBtn.click()
+
+  // Child projects should be hidden again
+  await expect(project1).toBeHidden()
+  await expect(project2).toBeHidden()
+})

package/skills/maestro-examples/references/setlist/setlist-web/tests/areas-list-in-sidebar.test.ts

@@ -0,0 +1,37 @@
+import { test, expect } from '@playwright/test'
+import { H } from '@setlist/services'
+import { TEST_CONSTANTS } from './constants'
+
+const userId = TEST_CONSTANTS.userId
+
+const seedData = H.SeedPipe(
+  H.AreaSeed({ id: 9160, userId, title: 'Health', position: 'a0' }),
+  H.AreaSeed({ id: 9161, userId, title: 'Work', position: 'a1' })
+)
+
+test.beforeAll(async () => {
+  await seedData.setup()
+})
+
+test.afterAll(async () => {
+  await seedData.teardown()
+})
+
+test('areas appear in the sidebar sorted by position', async ({ page }) => {
+  await page.goto('/inbox')
+  const nav = page.getByRole('navigation')
+
+  // Both areas should be visible in the sidebar
+  const healthLink = nav.getByRole('link', { name: 'Health' })
+  const workLink = nav.getByRole('link', { name: 'Work' })
+
+  await expect(healthLink).toBeVisible()
+  await expect(workLink).toBeVisible()
+
+  // Verify order: Health (position "a") appears before Work (position "b")
+  const healthBox = await healthLink.boundingBox()
+  const workBox = await workLink.boundingBox()
+  expect(healthBox).toBeTruthy()
+  expect(workBox).toBeTruthy()
+  expect(healthBox!.y).toBeLessThan(workBox!.y)
+})

package/skills/maestro-examples/references/setlist/setlist-web/tests/areas-reorder-dnd.test.ts

@@ -0,0 +1,82 @@
+import { test, expect } from '@playwright/test'
+import { H } from '@setlist/services'
+import { TEST_CONSTANTS } from './constants'
+
+const userId = TEST_CONSTANTS.userId
+
+const seedData = H.SeedPipe(
+  H.AreaSeed({ id: 9220, userId, title: 'Area A', position: 'a0' }),
+  H.AreaSeed({ id: 9221, userId, title: 'Area B', position: 'a1' }),
+  H.AreaSeed({ id: 9222, userId, title: 'Area C', position: 'a2' })
+)
+
+test.beforeAll(async () => {
+  await seedData.setup()
+})
+
+test.afterAll(async () => {
+  await seedData.teardown()
+})
+
+test('reorder areas via drag-and-drop: drag C above A', async ({ page }) => {
+  await page.goto('/inbox')
+  const nav = page.getByRole('navigation')
+
+  // Verify initial order: A, B, C
+  const areaA = nav.getByRole('link', { name: 'Area A' })
+  const areaB = nav.getByRole('link', { name: 'Area B' })
+  const areaC = nav.getByRole('link', { name: 'Area C' })
+
+  await expect(areaA).toBeVisible()
+  await expect(areaB).toBeVisible()
+  await expect(areaC).toBeVisible()
+
+  let boxA = await areaA.boundingBox()
+  let boxB = await areaB.boundingBox()
+  let boxC = await areaC.boundingBox()
+  expect(boxA!.y).toBeLessThan(boxB!.y)
+  expect(boxB!.y).toBeLessThan(boxC!.y)
+
+  // Drag area C above area A using manual mouse events.
+  // The sidebar useSortable items use closestCenter collision detection
+  // with PointerSensor (activation distance: 5px).
+  const sourceCenterX = boxC!.x + boxC!.width / 2
+  const sourceCenterY = boxC!.y + boxC!.height / 2
+  const targetCenterX = boxA!.x + boxA!.width / 2
+  const targetY = boxA!.y // Target the top edge of Area A
+
+  await page.mouse.move(sourceCenterX, sourceCenterY)
+  await page.mouse.down()
+  await page.waitForTimeout(150) // Allow pointer-down to register
+  // Move upward in small steps to trigger DnD activation (> 5px threshold)
+  await page.mouse.move(sourceCenterX, sourceCenterY - 15, { steps: 10 })
+  await page.waitForTimeout(100) // Let activation settle
+  // Move to target position in many steps so collision detection tracks the pointer
+  await page.mouse.move(targetCenterX, targetY, { steps: 20 })
+  await page.waitForTimeout(200) // Let sort preview settle
+
+  // Release and wait for the reorder API call to complete
+  await Promise.all([
+    page.waitForResponse((res) => res.url().includes('/api/areas/') && res.url().includes('/reorder')),
+    page.mouse.up()
+  ])
+
+  // Verify new order: C, A, B
+  boxC = await areaC.boundingBox()
+  boxA = await areaA.boundingBox()
+  boxB = await areaB.boundingBox()
+  expect(boxC!.y).toBeLessThan(boxA!.y)
+  expect(boxA!.y).toBeLessThan(boxB!.y)
+
+  // Reload the page to verify persistence
+  await page.reload()
+  await expect(areaA).toBeVisible()
+  await expect(areaB).toBeVisible()
+  await expect(areaC).toBeVisible()
+
+  boxC = await areaC.boundingBox()
+  boxA = await areaA.boundingBox()
+  boxB = await areaB.boundingBox()
+  expect(boxC!.y).toBeLessThan(boxA!.y)
+  expect(boxA!.y).toBeLessThan(boxB!.y)
+})

package/skills/maestro-examples/references/setlist/setlist-web/tests/auth-logout.test.ts

@@ -0,0 +1,18 @@
+import { test, expect } from '@playwright/test'
+
+test('logout destroys session and redirects to login', async ({ page }) => {
+  // Confirm authenticated state
+  await page.goto('/inbox')
+  await expect(page.getByRole('heading', { name: 'Inbox' })).toBeVisible()
+  await expect(page.getByRole('button', { name: 'Log out' })).toBeVisible()
+
+  // Click the logout button (submits POST to /auth/logout)
+  await page.getByRole('button', { name: 'Log out' }).click()
+
+  // Should redirect to login page
+  await expect(page).toHaveURL(/\/auth\/login/)
+
+  // Authenticated routes should no longer be accessible
+  await page.goto('/inbox')
+  await expect(page).toHaveURL(/\/auth\/login/)
+})

package/skills/maestro-examples/references/setlist/setlist-web/tests/auth-reject-invalid-token.test.ts

@@ -0,0 +1,35 @@
+import { test, expect } from '@playwright/test'
+
+// Run without auth state — this tests unauthenticated invalid token rejection
+test.use({ storageState: { cookies: [], origins: [] } })
+
+test('reject invalid or malformed token via URL', async ({ page }) => {
+  await page.goto('/auth/verify?token=invalid-garbage')
+
+  // User should remain on the verify page (not redirected to /inbox)
+  await expect(page).toHaveURL(/\/auth\/verify/)
+
+  // An error alert should be visible
+  const alert = page.getByRole('alert')
+  await expect(alert).toBeVisible()
+  await expect(alert).toContainText('Invalid or expired token')
+
+  // The token input form should still be present (user is not authenticated)
+  await expect(page.getByLabel('Paste your token')).toBeVisible()
+})
+
+test('reject malformed token via paste form', async ({ page }) => {
+  await page.goto('/auth/verify')
+
+  // Paste a garbage token and submit
+  await page.getByLabel('Paste your token').fill('not-a-real-token')
+  await page.getByRole('button', { name: 'Verify' }).click()
+
+  // User should remain on the verify page
+  await expect(page).toHaveURL(/\/auth\/verify/)
+
+  // An error alert should be visible
+  const alert = page.getByRole('alert')
+  await expect(alert).toBeVisible()
+  await expect(alert).toContainText('Invalid or expired token')
+})

package/skills/maestro-examples/references/setlist/setlist-web/tests/auth-reject-used-token.test.ts

@@ -0,0 +1,104 @@
+import { test, expect } from '@playwright/test'
+import fs from 'node:fs'
+import path from 'node:path'
+import { TEST_CONSTANTS } from './constants'
+
+const e2eMailPath = path.resolve(process.cwd(), '.', '.e2e-mail', 'latest.json')
+
+test.describe.serial('reject used tokens', () => {
+  // Run without auth state — this tests unauthenticated used-token rejection.
+  // Must be inside the describe block so it overrides the chromium project's storageState.
+  test.use({ storageState: { cookies: [], origins: [] } })
+
+  test('reject already-used token via URL', async ({ page, context }) => {
+    // Clear any previous mail file
+    if (fs.existsSync(e2eMailPath)) fs.unlinkSync(e2eMailPath)
+
+    // Request a magic link
+    await page.goto('/auth/login')
+    await page.waitForLoadState('networkidle')
+    await page.getByLabel('Email address').pressSequentially(TEST_CONSTANTS.email)
+    await page.getByRole('button', { name: 'Send magic link' }).click()
+    await page.waitForURL(/\/auth\/verify/)
+
+    // Wait for the queue processor to write the email to disk
+    const emailJson = await pollForFile(e2eMailPath, 15_000)
+    const envelope = JSON.parse(emailJson)
+    const html = envelope.content.html
+
+    // Extract the login link from the email HTML
+    await page.setContent(html)
+    const loginLink = await page.locator('a[href*="/auth/verify"]').getAttribute('href')
+    expect(loginLink).toBeTruthy()
+
+    // First verification — should succeed
+    await page.goto(loginLink!)
+    await page.waitForURL('/inbox')
+    await expect(page.getByRole('heading', { name: 'Inbox' })).toBeVisible()
+
+    // Clear cookies so we're unauthenticated for the second attempt
+    await context.clearCookies()
+
+    // Second verification with the same token — should fail
+    await page.goto(loginLink!)
+    await expect(page).toHaveURL(/\/auth\/verify/)
+
+    const alert = page.getByRole('alert')
+    await expect(alert).toBeVisible()
+    await expect(alert).toContainText('Invalid or expired token')
+  })
+
+  test('reject already-used token via paste form', async ({ page, context }) => {
+    // Clear any previous mail file
+    if (fs.existsSync(e2eMailPath)) fs.unlinkSync(e2eMailPath)
+
+    // Request a magic link
+    await page.goto('/auth/login')
+    await page.waitForLoadState('networkidle')
+    await page.getByLabel('Email address').pressSequentially(TEST_CONSTANTS.email)
+    await page.getByRole('button', { name: 'Send magic link' }).click()
+    await page.waitForURL(/\/auth\/verify/)
+
+    // Wait for the queue processor to write the email to disk
+    const emailJson = await pollForFile(e2eMailPath, 15_000)
+    const envelope = JSON.parse(emailJson)
+    const html = envelope.content.html
+
+    // Extract the token from the email HTML
+    await page.setContent(html)
+    const loginLink = await page.locator('a[href*="/auth/verify"]').getAttribute('href')
+    expect(loginLink).toBeTruthy()
+    const token = new URL(loginLink!).searchParams.get('token')
+    expect(token).toBeTruthy()
+
+    // First verification via URL — should succeed
+    await page.goto(loginLink!)
+    await page.waitForURL('/inbox')
+    await expect(page.getByRole('heading', { name: 'Inbox' })).toBeVisible()
+
+    // Clear cookies so we're unauthenticated for the second attempt
+    await context.clearCookies()
+
+    // Second verification via paste form — should fail
+    await page.goto('/auth/verify')
+    await page.getByLabel('Paste your token').fill(token!)
+    await page.getByRole('button', { name: 'Verify' }).click()
+
+    await expect(page).toHaveURL(/\/auth\/verify/)
+
+    const alert = page.getByRole('alert')
+    await expect(alert).toBeVisible()
+    await expect(alert).toContainText('Invalid or expired token')
+  })
+})
+
+async function pollForFile(filePath: string, timeoutMs: number): Promise<string> {
+  const start = Date.now()
+  while (Date.now() - start < timeoutMs) {
+    if (fs.existsSync(filePath)) {
+      return fs.readFileSync(filePath, 'utf-8')
+    }
+    await new Promise((resolve) => setTimeout(resolve, 500))
+  }
+  throw new Error(`Timed out waiting for file: ${filePath}`)
+}

package/skills/maestro-examples/references/setlist/setlist-web/tests/auth-request-magic-link.test.ts

@@ -0,0 +1,29 @@
+import { test, expect } from '@playwright/test'
+import fs from 'node:fs'
+import path from 'node:path'
+import { TEST_CONSTANTS } from './constants'
+
+// Run without auth state — this tests the unauthenticated login flow
+test.use({ storageState: { cookies: [], origins: [] } })
+
+const e2eMailPath = path.resolve(process.cwd(), '.', '.e2e-mail', 'latest.json')
+
+test('request magic link with valid email', async ({ page }) => {
+  // Clear any previous mail file
+  if (fs.existsSync(e2eMailPath)) fs.unlinkSync(e2eMailPath)
+
+  // Navigate to login and submit form
+  await page.goto('/auth/login')
+  await page.getByLabel('Email address').fill(TEST_CONSTANTS.email)
+  await page.getByRole('button', { name: 'Send magic link' }).click()
+
+  // Should redirect to verify page with success message
+  await page.waitForURL(/\/auth\/verify/)
+  await expect(page.getByRole('heading', { name: 'Check your email' })).toBeVisible()
+  await expect(page.getByText(TEST_CONSTANTS.email)).toBeVisible()
+
+  // Verify magic link email was queued (written to disk in test mode)
+  await expect(async () => {
+    expect(fs.existsSync(e2eMailPath)).toBe(true)
+  }).toPass({ timeout: 15_000 })
+})

package/skills/maestro-examples/references/setlist/setlist-web/tests/auth-verify-via-pasted-token.test.ts

@@ -0,0 +1,52 @@
+import { test, expect } from '@playwright/test'
+import fs from 'node:fs'
+import path from 'node:path'
+import { TEST_CONSTANTS } from './constants'
+
+// Run without auth state — this tests the unauthenticated verify-via-pasted-token flow
+test.use({ storageState: { cookies: [], origins: [] } })
+
+const e2eMailPath = path.resolve(process.cwd(), '.', '.e2e-mail', 'latest.json')
+
+test('verify magic link via pasted token', async ({ page }) => {
+  // Clear any previous mail file
+  if (fs.existsSync(e2eMailPath)) fs.unlinkSync(e2eMailPath)
+
+  // Request a magic link
+  await page.goto('/auth/login')
+  await page.getByLabel('Email address').fill(TEST_CONSTANTS.email)
+  await page.getByRole('button', { name: 'Send magic link' }).click()
+  await page.waitForURL(/\/auth\/verify/)
+
+  // Wait for the queue processor to write the email to disk
+  const emailJson = await pollForFile(e2eMailPath, 15_000)
+  const envelope = JSON.parse(emailJson)
+  const html = envelope.content.html
+
+  // Extract the raw token from the email HTML (displayed in monospace for manual pasting)
+  await page.setContent(html)
+  const loginLink = await page.locator('a[href*="/auth/verify"]').getAttribute('href')
+  expect(loginLink).toBeTruthy()
+  const token = new URL(loginLink!).searchParams.get('token')
+  expect(token).toBeTruthy()
+
+  // Navigate to the verify page and paste the token
+  await page.goto('/auth/verify')
+  await page.getByLabel('Paste your token').fill(token!)
+  await page.getByRole('button', { name: 'Verify' }).click()
+
+  // User is logged in and redirected to the authenticated home page
+  await page.waitForURL('/inbox')
+  await expect(page.getByRole('heading', { name: 'Inbox' })).toBeVisible()
+})
+
+async function pollForFile(filePath: string, timeoutMs: number): Promise<string> {
+  const start = Date.now()
+  while (Date.now() - start < timeoutMs) {
+    if (fs.existsSync(filePath)) {
+      return fs.readFileSync(filePath, 'utf-8')
+    }
+    await new Promise((resolve) => setTimeout(resolve, 500))
+  }
+  throw new Error(`Timed out waiting for file: ${filePath}`)
+}

package/skills/maestro-examples/references/setlist/setlist-web/tests/auth-verify-via-url.test.ts

@@ -0,0 +1,48 @@
+import { test, expect } from '@playwright/test'
+import fs from 'node:fs'
+import path from 'node:path'
+import { TEST_CONSTANTS } from './constants'
+
+// Run without auth state — this tests the unauthenticated verify-via-URL flow
+test.use({ storageState: { cookies: [], origins: [] } })
+
+const e2eMailPath = path.resolve(process.cwd(), '.', '.e2e-mail', 'latest.json')
+
+test('verify magic link via URL', async ({ page }) => {
+  // Clear any previous mail file
+  if (fs.existsSync(e2eMailPath)) fs.unlinkSync(e2eMailPath)
+
+  // Request a magic link
+  await page.goto('/auth/login')
+  await page.getByLabel('Email address').fill(TEST_CONSTANTS.email)
+  await page.getByRole('button', { name: 'Send magic link' }).click()
+  await page.waitForURL(/\/auth\/verify/)
+
+  // Wait for the queue processor to write the email to disk
+  const emailJson = await pollForFile(e2eMailPath, 15_000)
+  const envelope = JSON.parse(emailJson)
+  const html = envelope.content.html
+
+  // Extract the login link from the email HTML
+  await page.setContent(html)
+  const loginLink = await page.locator('a[href*="/auth/verify"]').getAttribute('href')
+  expect(loginLink).toBeTruthy()
+
+  // Navigate to the magic link URL to auto-verify
+  await page.goto(loginLink!)
+  await page.waitForURL('/inbox')
+
+  // User is logged in and redirected to the authenticated home page
+  await expect(page.getByRole('heading', { name: 'Inbox' })).toBeVisible()
+})
+
+async function pollForFile(filePath: string, timeoutMs: number): Promise<string> {
+  const start = Date.now()
+  while (Date.now() - start < timeoutMs) {
+    if (fs.existsSync(filePath)) {
+      return fs.readFileSync(filePath, 'utf-8')
+    }
+    await new Promise((resolve) => setTimeout(resolve, 500))
+  }
+  throw new Error(`Timed out waiting for file: ${filePath}`)
+}

package/skills/maestro-examples/references/setlist/setlist-web/tests/auth.setup.ts

@@ -0,0 +1,55 @@
+import { test as setup, expect } from '@playwright/test'
+import fs from 'node:fs'
+import path from 'node:path'
+import { H } from '@setlist/services'
+import { TEST_CONSTANTS } from './constants'
+
+const authFile = '.auth/user.json'
+const e2eMailPath = path.resolve(process.cwd(), '.', '.e2e-mail', 'latest.json')
+
+const seedData = H.SeedPipe(H.UserSeed({ id: TEST_CONSTANTS.userId, email: TEST_CONSTANTS.email }))
+
+setup.beforeAll(async () => {
+  await seedData.setup()
+})
+
+setup('authenticate', async ({ page }) => {
+  // Clear any previous mail file
+  if (fs.existsSync(e2eMailPath)) fs.unlinkSync(e2eMailPath)
+
+  // Submit login form
+  await page.goto('/auth/login')
+  await page.waitForLoadState('networkidle')
+  await page.getByLabel('Email address').pressSequentially(TEST_CONSTANTS.email)
+  await page.getByRole('button', { name: 'Send magic link' }).click()
+  await page.waitForURL(/\/auth\/verify/)
+
+  // Wait for the queue processor to write the email to disk
+  const emailJson = await pollForFile(e2eMailPath, 15_000)
+  const envelope = JSON.parse(emailJson)
+  const html = envelope.content.html
+
+  // Set page content to the email HTML and extract the login link
+  await page.setContent(html)
+  const loginLink = await page.locator('a[href*="/auth/verify"]').getAttribute('href')
+  expect(loginLink).toBeTruthy()
+
+  // Navigate to the magic link URL to auto-verify
+  await page.goto(loginLink!)
+  await page.waitForURL('/inbox')
+  await expect(page.getByRole('heading', { name: 'Inbox' })).toBeVisible()
+
+  // Save auth state for subsequent tests
+  await page.context().storageState({ path: authFile })
+})
+
+async function pollForFile(filePath: string, timeoutMs: number): Promise<string> {
+  const start = Date.now()
+  while (Date.now() - start < timeoutMs) {
+    if (fs.existsSync(filePath)) {
+      return fs.readFileSync(filePath, 'utf-8')
+    }
+    await new Promise((resolve) => setTimeout(resolve, 500))
+  }
+  throw new Error(`Timed out waiting for file: ${filePath}`)
+}

package/skills/maestro-examples/references/setlist/setlist-web/tests/constants.ts

@@ -0,0 +1,13 @@
+export const TEST_CONSTANTS = {
+  email: `e2etest@example.com`,
+  userId: 1000
+}
+
+/** Returns a local-timezone YYYY-MM-DD string, offset by the given number of days. */
+export function localDate(offsetDays = 0): `${number}-${number}-${number}` {
+  const d = new Date(Date.now() + offsetDays * 86_400_000)
+  const year = d.getFullYear()
+  const month = String(d.getMonth() + 1).padStart(2, '0')
+  const day = String(d.getDate()).padStart(2, '0')
+  return `${year}-${month}-${day}` as `${number}-${number}-${number}`
+}