plum-e2e 2.5.0 → 2.5.2

package/.env

@@ -0,0 +1,19 @@
+#
+# This file is part of Plum.
+#
+# Plum is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# Plum is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with Plum. If not, see https://www.gnu.org/licenses/.
+#
+
+
+IS_HEADLESS=true

package/CLAUDE.md

@@ -145,7 +145,7 @@ The GPL license header at the top of every file is a legal requirement — do no
 - All schema changes require a Prisma migration file in `backend/prisma/migrations/`.
 - Run `npx prisma migrate deploy` (or rebuild Docker) to apply.
 - Report content is stored as JSONB in the `Report.content` column — never reconstruct report metadata from filenames.
-- The `getAllReports()` service function deliberately excludes `content` for list performance — only `getReportDetail(id)` fetches it.
+- The `getReports()` service function is paginated (`page`/`limit`) and deliberately excludes `content` for list performance — only `getReportDetail(id)` fetches it.
 
 ---
 

package/backend/lib/serverConfig.js

@@ -32,7 +32,12 @@ function defaults() {
 	return {
 		headless: false,
 		backendPort: '3001',
-		frontendPort: '5173'
+		frontendPort: '5173',
+		// Public URLs the browser actually uses. Left blank until the user sets
+		// them (e.g. behind a reverse proxy) — resolved to a localhost default
+		// at the call site otherwise.
+		apiUrl: '',
+		uiUrl: ''
 	};
 }
 
@@ -63,10 +68,10 @@ function loadServerConfig(dir) {
 }
 
 function saveServerConfig(dir, cfg) {
-	const { headless, backendPort, frontendPort } = cfg;
+	const { headless, backendPort, frontendPort, apiUrl, uiUrl } = cfg;
 	fs.writeFileSync(
 		configPath(dir),
-		JSON.stringify({ headless, backendPort, frontendPort }, null, 2) + '\n',
+		JSON.stringify({ headless, backendPort, frontendPort, apiUrl, uiUrl }, null, 2) + '\n',
 		'utf8'
 	);
 }
@@ -88,25 +93,26 @@ function writeEnvFile(dir, { headless }) {
 }
 
 /**
- * Builds docker-compose.override.yml. Containers keep their internal ports
- * (3001/5173); only the host side is remapped. The frontend is told where to
- * reach the backend via VITE_API_URL (read by Vite at dev runtime).
+ * Builds docker-compose.override.yml. Host port remapping is handled by
+ * BACKEND_PORT/FRONTEND_PORT env vars read by docker-compose.yml itself
+ * (${BACKEND_PORT:-3001} etc) — NOT here, because Compose merges `ports:`
+ * lists across files by concatenation rather than replacing them. Defining
+ * ports in both the base file and this override would publish both values
+ * simultaneously, and fail to start if the base file's default port happens
+ * to already be taken. This override only adds volumes and tells the
+ * frontend where to reach the backend via VITE_API_URL.
  */
-function buildOverrideYaml({ testsAbs, reportsAbs, backendPort, frontendPort }) {
+function buildOverrideYaml({ testsAbs, reportsAbs, backendPort, apiUrl }) {
 	return (
 		[
 			'services:',
 			'  backend:',
-			'    ports:',
-			`      - "${backendPort}:3001"`,
 			'    volumes:',
 			`      - "${reportsAbs}:/app/reports"`,
 			`      - "${testsAbs}:/app/tests"`,
 			'  frontend:',
-			'    ports:',
-			`      - "${frontendPort}:5173"`,
 			'    environment:',
-			`      VITE_API_URL: "http://localhost:${backendPort}"`
+			`      VITE_API_URL: "${apiUrl || `http://localhost:${backendPort}`}"`
 		].join('\n') + '\n'
 	);
 }

package/backend/prisma/migrations/20260707032554_add_perf_indexes/migration.sql

@@ -0,0 +1,44 @@
+-- AlterTable
+ALTER TABLE "Report" ALTER COLUMN "content" DROP DEFAULT;
+
+-- AlterTable
+ALTER TABLE "TestRun" ALTER COLUMN "status" SET DEFAULT 'backlog';
+
+-- CreateIndex
+CREATE INDEX "Report_createdAt_idx" ON "Report"("createdAt");
+
+-- CreateIndex
+CREATE INDEX "Report_status_idx" ON "Report"("status");
+
+-- CreateIndex
+CREATE INDEX "Report_testRunId_idx" ON "Report"("testRunId");
+
+-- CreateIndex
+CREATE INDEX "Report_runnerId_idx" ON "Report"("runnerId");
+
+-- CreateIndex
+CREATE INDEX "Report_cronJobId_idx" ON "Report"("cronJobId");
+
+-- CreateIndex
+CREATE INDEX "TestCase_suiteId_idx" ON "TestCase"("suiteId");
+
+-- CreateIndex
+CREATE INDEX "TestCaseHistory_caseId_idx" ON "TestCaseHistory"("caseId");
+
+-- CreateIndex
+CREATE INDEX "TestCaseHistory_runId_idx" ON "TestCaseHistory"("runId");
+
+-- CreateIndex
+CREATE INDEX "TestCaseHistory_reportId_idx" ON "TestCaseHistory"("reportId");
+
+-- CreateIndex
+CREATE INDEX "TestRun_createdAt_idx" ON "TestRun"("createdAt");
+
+-- CreateIndex
+CREATE INDEX "TestRunEntry_runId_idx" ON "TestRunEntry"("runId");
+
+-- CreateIndex
+CREATE INDEX "TestRunEntry_caseId_idx" ON "TestRunEntry"("caseId");
+
+-- CreateIndex
+CREATE INDEX "TestSuite_createdAt_idx" ON "TestSuite"("createdAt");

package/backend/prisma/schema.prisma

@@ -70,6 +70,12 @@ model Report {
   logs        String?
   createdAt   DateTime          @default(now())
   testHistory TestCaseHistory[]
+
+  @@index([createdAt])
+  @@index([status])
+  @@index([testRunId])
+  @@index([runnerId])
+  @@index([cronJobId])
 }
 
 model Project {
@@ -124,6 +130,8 @@ model TestSuite {
   createdAt   DateTime   @default(now())
   updatedAt   DateTime   @updatedAt
   cases       TestCase[]
+
+  @@index([createdAt])
 }
 
 model TestCase {
@@ -142,6 +150,8 @@ model TestCase {
   steps        TestStep[]
   runEntries   TestRunEntry[]
   history      TestCaseHistory[]
+
+  @@index([suiteId])
 }
 
 model TestStep {
@@ -166,6 +176,8 @@ model TestRun {
   entries     TestRunEntry[]
   history     TestCaseHistory[]
   reports     Report[]
+
+  @@index([createdAt])
 }
 
 model TestRunEntry {
@@ -182,6 +194,9 @@ model TestRunEntry {
   executedAt   DateTime?
   assignedToId String?
   assignedTo   User?     @relation("entryAssignee", fields: [assignedToId], references: [id])
+
+  @@index([runId])
+  @@index([caseId])
 }
 
 model TestCaseHistory {
@@ -198,4 +213,8 @@ model TestCaseHistory {
   executedById String?
   executedBy   User?     @relation(fields: [executedById], references: [id])
   executedAt   DateTime  @default(now())
+
+  @@index([caseId])
+  @@index([runId])
+  @@index([reportId])
 }

package/backend/routes/reports.routes.js

@@ -21,8 +21,10 @@ const reportService = require('../services/reportService');
 
 router.get('/', async (req, res) => {
 	try {
-		const reports = await reportService.getAllReports();
-		res.json({ reports });
+		const page = Math.max(1, parseInt(req.query.page) || 1);
+		const limit = Math.min(100, Math.max(1, parseInt(req.query.limit) || 15));
+		const result = await reportService.getReports({ page, limit });
+		res.json(result);
 	} catch {
 		res.status(500).json({ error: 'Failed to fetch reports' });
 	}

package/backend/services/reportService.js

@@ -235,21 +235,39 @@ function processCucumberJson(raw) {
 // Read operations
 // ---------------------------------------------------------------------------
 
-const getAllReports = () =>
-	prisma.report.findMany({
-		orderBy: { createdAt: 'desc' },
-		select: {
-			id: true,
-			status: true,
-			tags: true,
-			triggerType: true,
-			runners: true,
-			browser: true,
-			runnerName: true,
-			createdAt: true,
-			testRun: { select: { id: true, title: true } }
-		}
-	});
+const reportListSelect = {
+	id: true,
+	status: true,
+	tags: true,
+	triggerType: true,
+	runners: true,
+	browser: true,
+	runnerName: true,
+	createdAt: true,
+	testRun: { select: { id: true, title: true } }
+};
+
+const TREND_SIZE = 12;
+
+const getReports = async ({ page = 1, limit = 15 } = {}) => {
+	const skip = (page - 1) * limit;
+	const [reports, total, passCount, trend] = await Promise.all([
+		prisma.report.findMany({
+			orderBy: { createdAt: 'desc' },
+			skip,
+			take: limit,
+			select: reportListSelect
+		}),
+		prisma.report.count(),
+		prisma.report.count({ where: { status: 'PASS' } }),
+		prisma.report.findMany({
+			orderBy: { createdAt: 'desc' },
+			take: TREND_SIZE,
+			select: { id: true, status: true, tags: true, createdAt: true }
+		})
+	]);
+	return { reports, total, passCount, failCount: total - passCount, trend };
+};
 
 const getLatestReportId = async () => {
 	const report = await prisma.report.findFirst({
@@ -444,7 +462,7 @@ async function syncAutomatedFromFeatures() {
 }
 
 module.exports = {
-	getAllReports,
+	getReports,
 	getLatestReportId,
 	getReportDetail,
 	saveReport,

package/bin/plum.js

@@ -188,13 +188,23 @@ async function configureServer({ force }) {
 	const overrides = {
 		headless: getFlag(args, '--headless'),
 		backendPort: getFlag(args, '--backend-port'),
-		frontendPort: getFlag(args, '--frontend-port')
+		frontendPort: getFlag(args, '--frontend-port'),
+		apiUrl: getFlag(args, '--api-url'),
+		uiUrl: getFlag(args, '--ui-url')
 	};
 	if (overrides.headless !== undefined) cfg.headless = overrides.headless === 'true';
 	if (overrides.backendPort !== undefined) cfg.backendPort = overrides.backendPort;
 	if (overrides.frontendPort !== undefined) cfg.frontendPort = overrides.frontendPort;
+	if (overrides.apiUrl !== undefined) cfg.apiUrl = overrides.apiUrl;
+	if (overrides.uiUrl !== undefined) cfg.uiUrl = overrides.uiUrl;
 
-	const hasFlags = anyFlags(args, ['--headless', '--backend-port', '--frontend-port']);
+	const hasFlags = anyFlags(args, [
+		'--headless',
+		'--backend-port',
+		'--frontend-port',
+		'--api-url',
+		'--ui-url'
+	]);
 	const interactive = force || (interactiveAllowed() && !hasFlags);
 
 	if (interactive) {
@@ -220,6 +230,27 @@ async function configureServer({ force }) {
 		});
 		if (clack.isCancel(frontendPort)) cancelAndExit();
 		cfg.frontendPort = frontendPort || cfg.frontendPort;
+
+		const defaultApiUrl = `http://localhost:${cfg.backendPort}`;
+		const apiUrl = await clack.text({
+			message: 'Public URL for the API (only if reverse-proxying behind a domain)',
+			placeholder: cfg.apiUrl || defaultApiUrl,
+			defaultValue: cfg.apiUrl || defaultApiUrl
+		});
+		if (clack.isCancel(apiUrl)) cancelAndExit();
+		cfg.apiUrl = apiUrl || defaultApiUrl;
+
+		const defaultUiUrl = `http://localhost:${cfg.frontendPort}`;
+		const uiUrl = await clack.text({
+			message: 'Public URL for the UI (only if reverse-proxying behind a domain)',
+			placeholder: cfg.uiUrl || defaultUiUrl,
+			defaultValue: cfg.uiUrl || defaultUiUrl
+		});
+		if (clack.isCancel(uiUrl)) cancelAndExit();
+		cfg.uiUrl = uiUrl || defaultUiUrl;
+	} else {
+		if (!cfg.apiUrl) cfg.apiUrl = `http://localhost:${cfg.backendPort}`;
+		if (!cfg.uiUrl) cfg.uiUrl = `http://localhost:${cfg.frontendPort}`;
 	}
 
 	saveServerConfig(cwd, cfg);
@@ -240,27 +271,27 @@ function applyServerConfig(cfg) {
 			testsAbs,
 			reportsAbs,
 			backendPort: cfg.backendPort,
-			frontendPort: cfg.frontendPort
+			apiUrl: cfg.apiUrl
 		}),
 		'utf8'
 	);
 	clack.log.success('docker-compose.override.yml written');
 }
 
-async function serverStart() {
-	clack.intro(pc.bgMagenta(pc.white('  🟣 Plum — Server  ')));
-	const cfg = await configureServer({ force: false });
-	applyServerConfig(cfg);
-	clack.log.info(`UI: ${pc.cyan(`http://localhost:${cfg.frontendPort}`)}`);
-
-	execSync('docker compose up --build -d', { cwd: plumRoot, stdio: 'inherit' });
+// Node's fetch resolves "localhost" to ::1 first on many Linux distros (Debian
+// included). If Docker only published the port on IPv4, that first attempt hangs
+// until it times out on every poll, eating the whole budget even though the port
+// is reachable — and reachable fine from a browser, which races both families.
+// 127.0.0.1 sidesteps the DNS/happy-eyeballs mismatch entirely.
+const READY_POLL_INTERVAL_MS = 2000;
+const READY_POLL_MAX_ATTEMPTS = 90; // ~3 minutes
 
-	const apiBase = `http://localhost:${cfg.backendPort}`;
+async function waitForServerReady(apiBase) {
 	const s = clack.spinner();
 	s.start('Waiting for server to be ready…');
 	let ready = false;
-	for (let i = 0; i < 40; i++) {
-		await new Promise((r) => setTimeout(r, 1500));
+	for (let i = 0; i < READY_POLL_MAX_ATTEMPTS; i++) {
+		await new Promise((r) => setTimeout(r, READY_POLL_INTERVAL_MS));
 		try {
 			const res = await fetch(`${apiBase}/auth/needs-setup`);
 			if (res.ok) {
@@ -268,58 +299,123 @@ async function serverStart() {
 				break;
 			}
 		} catch {}
+		if (i > 0 && i % 15 === 0) {
+			s.message(
+				`Still waiting for server to be ready… (${Math.round((i * READY_POLL_INTERVAL_MS) / 1000)}s — check "docker compose logs -f backend" if this feels stuck)`
+			);
+		}
 	}
-	s.stop(ready ? pc.green('✓ Server is ready') : pc.yellow('Server may still be starting'));
+	s.stop(
+		ready
+			? pc.green('✓ Server is ready')
+			: pc.yellow('Server did not respond in time — it may still be starting')
+	);
+	return ready;
+}
 
-	if (ready) {
-		let needsSetup = false;
-		try {
-			const res = await fetch(`${apiBase}/auth/needs-setup`);
-			const data = await res.json();
-			needsSetup = data.needsSetup;
-		} catch {}
+async function runFirstUserSetup(apiBase, uiUrl) {
+	let needsSetup = false;
+	try {
+		const res = await fetch(`${apiBase}/auth/needs-setup`);
+		const data = await res.json();
+		needsSetup = data.needsSetup;
+	} catch {}
 
-		if (needsSetup) {
-			clack.log.info('No users found — create your first account to get started.');
+	if (!needsSetup) return;
 
-			const name = await clack.text({ message: 'Your name', placeholder: 'Jane Smith' });
-			if (clack.isCancel(name)) {
-				clack.log.warn('Skipped. Create a user at /setup in the UI.');
-			} else {
-				const email = await clack.text({
-					message: 'Email address',
-					placeholder: 'jane@example.com'
-				});
-				if (clack.isCancel(email)) {
-					clack.log.warn('Skipped. Create a user at /setup in the UI.');
-				} else {
-					const password = await clack.password({ message: 'Password (min 8 characters)' });
-					if (clack.isCancel(password)) {
-						clack.log.warn('Skipped. Create a user at /setup in the UI.');
-					} else {
-						try {
-							const res = await fetch(`${apiBase}/auth/setup`, {
-								method: 'POST',
-								headers: { 'Content-Type': 'application/json' },
-								body: JSON.stringify({ name, email, password })
-							});
-							if (res.ok) {
-								clack.log.success(`Account created for ${email}. You can now log in.`);
-							} else {
-								const err = await res.json();
-								clack.log.error(`Failed to create account: ${err.error ?? 'unknown error'}`);
-							}
-						} catch (e) {
-							clack.log.error(`Failed to create account: ${e.message}`);
-						}
-					}
-				}
-			}
+	if (!interactiveAllowed()) {
+		clack.log.info(
+			`No users found. Open ${pc.cyan(`${uiUrl}/setup`)} to create your first account.`
+		);
+		return;
+	}
+
+	clack.log.info('No users found — create your first account to get started.');
+
+	const name = await clack.text({ message: 'Your name', placeholder: 'Jane Smith' });
+	if (clack.isCancel(name)) {
+		clack.log.warn('Skipped. Create a user at /setup in the UI.');
+		return;
+	}
+	const email = await clack.text({ message: 'Email address', placeholder: 'jane@example.com' });
+	if (clack.isCancel(email)) {
+		clack.log.warn('Skipped. Create a user at /setup in the UI.');
+		return;
+	}
+	const password = await clack.password({ message: 'Password (min 8 characters)' });
+	if (clack.isCancel(password)) {
+		clack.log.warn('Skipped. Create a user at /setup in the UI.');
+		return;
+	}
+
+	try {
+		const res = await fetch(`${apiBase}/auth/setup`, {
+			method: 'POST',
+			headers: { 'Content-Type': 'application/json' },
+			body: JSON.stringify({ name, email, password })
+		});
+		if (res.ok) {
+			clack.log.success(`Account created for ${email}. You can now log in.`);
+		} else {
+			const err = await res.json();
+			clack.log.error(`Failed to create account: ${err.error ?? 'unknown error'}`);
 		}
+	} catch (e) {
+		clack.log.error(`Failed to create account: ${e.message}`);
+	}
+}
+
+// docker compose failures (port conflicts, daemon not running, etc.) must not
+// crash the process with a raw stack trace — that would abort serverStart()
+// before it ever reaches the first-user prompt, with no indication why.
+function runDockerComposeUp(cfg) {
+	try {
+		execSync('docker compose up --build -d', {
+			cwd: plumRoot,
+			stdio: 'inherit',
+			env: {
+				...process.env,
+				BACKEND_PORT: String(cfg.backendPort),
+				FRONTEND_PORT: String(cfg.frontendPort)
+			}
+		});
+		return true;
+	} catch {
+		clack.log.error(
+			`Docker failed to start the stack — see the output above for the cause.\n` +
+				`A common cause is another process already using port ${cfg.backendPort} or ${cfg.frontendPort}; ` +
+				`try ${pc.cyan('plum server reconfig')} to pick different ports.`
+		);
+		return false;
+	}
+}
+
+async function serverStart() {
+	clack.intro(pc.bgMagenta(pc.white('  🟣 Plum — Server  ')));
+	const cfg = await configureServer({ force: false });
+	applyServerConfig(cfg);
+	clack.log.info(`UI: ${pc.cyan(cfg.uiUrl)}`);
+
+	if (!runDockerComposeUp(cfg)) {
+		clack.outro(pc.red('Plum did not start.'));
+		process.exitCode = 1;
+		return;
+	}
+
+	const apiBase = `http://127.0.0.1:${cfg.backendPort}`;
+	const ready = await waitForServerReady(apiBase);
+
+	if (ready) {
+		await runFirstUserSetup(apiBase, cfg.uiUrl);
+	} else {
+		clack.log.warn(
+			`Could not confirm the backend is ready. Check ${pc.cyan('docker compose logs -f backend')}.\n` +
+				`Once it responds, open ${pc.cyan(`${cfg.uiUrl}/setup`)} to create your first account (if this is a fresh install).`
+		);
 	}
 
-	clack.log.info(`UI:  ${pc.cyan(`http://localhost:${cfg.frontendPort}`)}`);
-	clack.log.info(`API: ${pc.cyan(`http://localhost:${cfg.backendPort}`)}`);
+	clack.log.info(`UI:  ${pc.cyan(cfg.uiUrl)}`);
+	clack.log.info(`API: ${pc.cyan(cfg.apiUrl)}`);
 	clack.outro(pc.green('Plum is running. Use "plum server stop" to shut down.'));
 }
 
@@ -328,27 +424,23 @@ async function serverRestart() {
 	const { loadServerConfig } = serverConfigLib();
 	const cfg = loadServerConfig(process.cwd());
 	applyServerConfig(cfg);
-	clack.log.info(`UI: ${pc.cyan(`http://localhost:${cfg.frontendPort}`)}`);
+	clack.log.info(`UI: ${pc.cyan(cfg.uiUrl)}`);
 
-	execSync('docker compose up --build -d', { cwd: plumRoot, stdio: 'inherit' });
+	if (!runDockerComposeUp(cfg)) {
+		clack.outro(pc.red('Server did not restart.'));
+		process.exitCode = 1;
+		return;
+	}
 
-	const apiBase = `http://localhost:${cfg.backendPort}`;
-	const s = clack.spinner();
-	s.start('Waiting for server to be ready…');
-	let ready = false;
-	for (let i = 0; i < 40; i++) {
-		await new Promise((r) => setTimeout(r, 1500));
-		try {
-			const res = await fetch(`${apiBase}/auth/needs-setup`);
-			if (res.ok) {
-				ready = true;
-				break;
-			}
-		} catch {}
+	const apiBase = `http://127.0.0.1:${cfg.backendPort}`;
+	const ready = await waitForServerReady(apiBase);
+	if (!ready) {
+		clack.log.warn(
+			`Could not confirm the backend is ready. Check ${pc.cyan('docker compose logs -f backend')}.`
+		);
 	}
-	s.stop(ready ? pc.green('✓ Server is ready') : pc.yellow('Server may still be starting'));
-	clack.log.info(`UI:  ${pc.cyan(`http://localhost:${cfg.frontendPort}`)}`);
-	clack.log.info(`API: ${pc.cyan(`http://localhost:${cfg.backendPort}`)}`);
+	clack.log.info(`UI:  ${pc.cyan(cfg.uiUrl)}`);
+	clack.log.info(`API: ${pc.cyan(cfg.apiUrl)}`);
 	clack.outro(pc.green('Server restarted.'));
 }
 
@@ -391,7 +483,7 @@ async function serverReconfig() {
 	const cfg = await configureServer({ force: true });
 	applyServerConfig(cfg);
 	clack.log.success("Saved. Run 'plum server start' to apply.");
-	clack.outro(`UI: ${pc.cyan(`http://localhost:${cfg.frontendPort}`)}`);
+	clack.outro(`UI: ${pc.cyan(cfg.uiUrl)}`);
 }
 
 /* -----------------------------------------------------
@@ -1082,6 +1174,12 @@ switch (command) {
 		console.log('    --headless <bool>  Run browsers headless (true/false)');
 		console.log('    --backend-port <n> Host port for the backend/API (default: 3001)');
 		console.log('    --frontend-port <n> Host port for the UI (default: 5173)');
+		console.log(
+			'    --api-url <url>    Public URL for the API (only if reverse-proxying; default: http://localhost:<backend-port>)'
+		);
+		console.log(
+			'    --ui-url <url>     Public URL for the UI (only if reverse-proxying; default: http://localhost:<frontend-port>)'
+		);
 		console.log('  server restart       Rebuild Docker images and restart the server (no prompts)');
 		console.log('  server stop          Stop the server (data preserved)');
 		console.log('  server reconfig      Re-enter server settings without starting');

package/docker-compose.yml

@@ -35,7 +35,7 @@ services:
   backend:
     build: ./backend
     ports:
-      - '3001:3001'
+      - '${BACKEND_PORT:-3001}:3001'
     environment:
       DATABASE_URL: 'postgresql://plum:plum@postgres:5432/plum'
     extra_hosts:
@@ -52,7 +52,7 @@ services:
   frontend:
     build: ./frontend
     ports:
-      - '5173:5173'
+      - '${FRONTEND_PORT:-5173}:5173'
     depends_on:
       - backend
     networks:

package/frontend/src/lib/api/reports.js

@@ -15,12 +15,23 @@
  * along with Plum. If not, see https://www.gnu.org/licenses/.
  */
 
-import { API_BASE } from '$lib/constants';
+import { API_BASE, REPORTS_PER_PAGE } from '$lib/constants';
 
-export async function fetchReports() {
-	const res = await fetch(`${API_BASE}/reports`);
-	const { reports } = await res.json();
-	return reports.map((r) => ({ ...r, date: new Date(r.createdAt).toLocaleString() }));
+function withDate(r) {
+	return { ...r, date: new Date(r.createdAt).toLocaleString() };
+}
+
+export async function fetchReports({ page = 1, limit = REPORTS_PER_PAGE } = {}) {
+	const params = new URLSearchParams({ page, limit });
+	const res = await fetch(`${API_BASE}/reports?${params}`);
+	const { reports, total, passCount, failCount, trend } = await res.json();
+	return {
+		reports: reports.map(withDate),
+		total,
+		passCount,
+		failCount,
+		trend: trend.map(withDate)
+	};
 }
 
 export async function fetchLatestReportId() {

package/frontend/src/routes/login/+page.svelte

@@ -16,14 +16,27 @@
  -->
 
 <script>
+	import { onMount } from 'svelte';
+	import { goto } from '$app/navigation';
 	import { auth } from '$lib/stores/auth';
-	import { login } from '$lib/api/auth';
+	import { login, checkNeedsSetup } from '$lib/api/auth';
 	import { theme } from '$lib/stores/theme';
 
 	let email = '';
 	let password = '';
 	let error = '';
 	let loading = false;
+	let checking = true;
+
+	onMount(async () => {
+		try {
+			if (await checkNeedsSetup()) {
+				goto('/setup');
+				return;
+			}
+		} catch {}
+		checking = false;
+	});
 
 	async function handleSubmit() {
 		error = '';
@@ -47,48 +60,50 @@
 <svelte:head><title>Sign in — Plum</title></svelte:head>
 
 <div class="page" data-theme={$theme}>
-	<div class="card">
-		<div class="brand">
-			<span class="brand-serif">Pl</span><span class="brand-sans">um</span>
-		</div>
-		<h1 class="title">Sign in</h1>
-		<p class="subtitle">Access your test workspace</p>
-
-		<div class="fields">
-			<div class="field">
-				<label class="label" for="email">Email</label>
-				<input
-					id="email"
-					type="email"
-					class="input"
-					bind:value={email}
-					placeholder="jane@example.com"
-					autocomplete="email"
-					on:keydown={onKeydown}
-				/>
+	{#if !checking}
+		<div class="card">
+			<div class="brand">
+				<span class="brand-serif">Pl</span><span class="brand-sans">um</span>
 			</div>
-			<div class="field">
-				<label class="label" for="password">Password</label>
-				<input
-					id="password"
-					type="password"
-					class="input"
-					bind:value={password}
-					placeholder="••••••••"
-					autocomplete="current-password"
-					on:keydown={onKeydown}
-				/>
+			<h1 class="title">Sign in</h1>
+			<p class="subtitle">Access your test workspace</p>
+
+			<div class="fields">
+				<div class="field">
+					<label class="label" for="email">Email</label>
+					<input
+						id="email"
+						type="email"
+						class="input"
+						bind:value={email}
+						placeholder="jane@example.com"
+						autocomplete="email"
+						on:keydown={onKeydown}
+					/>
+				</div>
+				<div class="field">
+					<label class="label" for="password">Password</label>
+					<input
+						id="password"
+						type="password"
+						class="input"
+						bind:value={password}
+						placeholder="••••••••"
+						autocomplete="current-password"
+						on:keydown={onKeydown}
+					/>
+				</div>
 			</div>
-		</div>
 
-		{#if error}
-			<p class="error">{error}</p>
-		{/if}
+			{#if error}
+				<p class="error">{error}</p>
+			{/if}
 
-		<button class="submit-btn" on:click={handleSubmit} disabled={loading || !email || !password}>
-			{loading ? 'Signing in…' : 'Sign in'}
-		</button>
-	</div>
+			<button class="submit-btn" on:click={handleSubmit} disabled={loading || !email || !password}>
+				{loading ? 'Signing in…' : 'Sign in'}
+			</button>
+		</div>
+	{/if}
 </div>
 
 <style>

package/frontend/src/routes/reports/+page.svelte

@@ -27,6 +27,10 @@
 	import EmptyState from '$lib/components/ui/EmptyState.svelte';
 
 	let reports = [];
+	let total = 0;
+	let passCount = 0;
+	let failCount = 0;
+	let trend = [];
 	let currentPage = 1;
 	let animateBar = false;
 
@@ -34,21 +38,24 @@
 	let deleteModal = { open: false, targets: [] };
 	let deleting = false;
 
-	$: totalPages = Math.ceil(reports.length / REPORTS_PER_PAGE);
-	$: paginated = reports.slice(
-		(currentPage - 1) * REPORTS_PER_PAGE,
-		currentPage * REPORTS_PER_PAGE
-	);
-	$: passCount = reports.filter((r) => r.status === 'PASS').length;
-	$: failCount = reports.length - passCount;
-	$: passRate = reports.length ? Math.round((passCount / reports.length) * 100) : 0;
-	$: trend = reports.slice(0, 12).reverse();
-	$: allOnPageSelected = paginated.length > 0 && paginated.every((r) => selected.has(r.id));
+	$: totalPages = Math.ceil(total / REPORTS_PER_PAGE);
+	$: passRate = total ? Math.round((passCount / total) * 100) : 0;
+	$: trendDots = [...trend].reverse();
+	$: allOnPageSelected = reports.length > 0 && reports.every((r) => selected.has(r.id));
 	$: someSelected = selected.size > 0;
 
 	async function loadReports() {
 		try {
-			reports = await fetchReports();
+			let data = await fetchReports({ page: currentPage, limit: REPORTS_PER_PAGE });
+			if (data.reports.length === 0 && currentPage > 1) {
+				currentPage = Math.max(1, Math.ceil(data.total / REPORTS_PER_PAGE));
+				data = await fetchReports({ page: currentPage, limit: REPORTS_PER_PAGE });
+			}
+			reports = data.reports;
+			total = data.total;
+			passCount = data.passCount;
+			failCount = data.failCount;
+			trend = data.trend;
 			selected = new Set();
 			await tick();
 			animateBar = true;
@@ -57,6 +64,11 @@
 		}
 	}
 
+	function goToPage(page) {
+		currentPage = page;
+		loadReports();
+	}
+
 	onMount(loadReports);
 	$: if ($reportsVersion) loadReports();
 
@@ -73,11 +85,11 @@
 		e.stopPropagation();
 		if (allOnPageSelected) {
 			const next = new Set(selected);
-			paginated.forEach((r) => next.delete(r.id));
+			reports.forEach((r) => next.delete(r.id));
 			selected = next;
 		} else {
 			const next = new Set(selected);
-			paginated.forEach((r) => next.add(r.id));
+			reports.forEach((r) => next.add(r.id));
 			selected = next;
 		}
 	}
@@ -133,11 +145,11 @@
 		<div>
 			<h1>Reports</h1>
 			<p class="subtitle">
-				{reports.length} run{reports.length !== 1 ? 's' : ''} recorded
+				{total} run{total !== 1 ? 's' : ''} recorded
 			</p>
 		</div>
 
-		{#if reports.length > 0}
+		{#if total > 0}
 			<div class="rate-display">
 				<span
 					class="rate-number"
@@ -152,7 +164,7 @@
 		{/if}
 	</div>
 
-	{#if reports.length > 0}
+	{#if total > 0}
 		<div class="stats-bar">
 			<div class="pass-bar-track">
 				<div class="pass-bar-fill" style="width: {animateBar ? passRate + '%' : '0'}"></div>
@@ -166,7 +178,7 @@
 		<div class="trend-row">
 			<span class="trend-label">Recent</span>
 			<div class="trend-dots">
-				{#each trend as r, i}
+				{#each trendDots as r, i}
 					<span
 						class="trend-dot"
 						class:pass={r.status === 'PASS'}
@@ -181,7 +193,7 @@
 	{/if}
 </div>
 
-{#if reports.length === 0}
+{#if total === 0}
 	<EmptyState message="No reports yet. Run a test to generate one." />
 {:else}
 	<div class="list-header">
@@ -202,7 +214,7 @@
 	</div>
 
 	<div class="report-list">
-		{#each paginated as report, i}
+		{#each reports as report, i}
 			<div class="report-row" class:is-selected={selected.has(report.id)} style={stagger(i)}>
 				<label class="row-check-wrap" title="Select">
 					<input
@@ -287,11 +299,7 @@
 
 	{#if totalPages > 1}
 		<div class="pagination-wrap">
-			<Pagination
-				current={currentPage}
-				total={totalPages}
-				on:change={(e) => (currentPage = e.detail)}
-			/>
+			<Pagination current={currentPage} total={totalPages} on:change={(e) => goToPage(e.detail)} />
 		</div>
 	{/if}
 {/if}

package/frontend/src/routes/setup/+page.svelte

@@ -17,6 +17,7 @@
 
 <script>
 	import { onMount } from 'svelte';
+	import { goto } from '$app/navigation';
 	import { setup, checkNeedsSetup } from '$lib/api/auth';
 	import { auth } from '$lib/stores/auth';
 	import { login as apiLogin } from '$lib/api/auth';

package/frontend/src/routes/test-repository/runs/[id]/+page.svelte

@@ -174,13 +174,18 @@
 				(tc) =>
 					!runCaseIds.has(tc.id) &&
 					(!search ||
+						suite.displayId.toLowerCase().includes(search.toLowerCase()) ||
+						suite.name.toLowerCase().includes(search.toLowerCase()) ||
 						tc.title.toLowerCase().includes(search.toLowerCase()) ||
 						tc.displayId.toLowerCase().includes(search.toLowerCase()))
 			)
 		}))
 		.filter(
 			(suite) =>
-				!search || suite.cases.length > 0 || suite.name.toLowerCase().includes(search.toLowerCase())
+				!search ||
+				suite.cases.length > 0 ||
+				suite.displayId.toLowerCase().includes(search.toLowerCase()) ||
+				suite.name.toLowerCase().includes(search.toLowerCase())
 		);
 
 	function addCase(tc) {

package/frontend/vite.config.js

@@ -19,5 +19,11 @@ import { sveltekit } from '@sveltejs/kit/vite';
 import { defineConfig } from 'vite';
 
 export default defineConfig({
-	plugins: [sveltekit()]
+	plugins: [sveltekit()],
+	server: {
+		// Plum is reverse-proxied behind whatever domain each self-hoster picks
+		// (see "Setting Up the Server" docs), so the Host header can't be known
+		// ahead of time. Disable Vite's dev-server host allowlist check entirely.
+		allowedHosts: true
+	}
 });

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "plum-e2e",
-	"version": "2.5.0",
+	"version": "2.5.2",
 	"repository": {
 		"type": "git",
 		"url": "https://github.com/silverlunah/plum.git"