plum-e2e 2.6.8 → 2.7.1

package/backend/lib/serverBootstrap.js

@@ -0,0 +1,189 @@
+/*
+ * This file is part of Plum.
+ * Licensed under the MIT License. See LICENSE file in the project root for details.
+ */
+
+const fs = require('fs');
+const path = require('path');
+const { loadRegistry, saveRegistry } = require('./runnerProcess');
+const { SOCKET_EVENTS } = require('../constants/socketEvents');
+
+const WATCH_OPTS = { usePolling: true, interval: 800, ignoreInitial: true };
+
+function ensureTestsDir(testsDir, isNodeMode) {
+	if (fs.existsSync(testsDir)) {
+		console.log('📂 Loading tests from:', testsDir);
+		return;
+	}
+	if (isNodeMode) {
+		console.warn('⚠️  No tests folder found — will be populated when a job is received');
+		return;
+	}
+	console.error('❌ No tests folder found at /app/tests');
+	process.exit(1);
+}
+
+// A self-restart (POST /api/restart) spawns the replacement before this
+// process has released the port, so the first bind attempt can briefly hit
+// EADDRINUSE — retry instead of dying immediately.
+function attachListenRetry(server, port) {
+	let retriesLeft = 20;
+	server.on('error', (err) => {
+		if (err.code === 'EADDRINUSE' && retriesLeft > 0) {
+			retriesLeft -= 1;
+			setTimeout(() => server.listen(port), 250);
+		} else {
+			console.error(`❌ Failed to bind port ${port}:`, err.message);
+			process.exit(1);
+		}
+	});
+}
+
+function wireRealtimeServices(io, isNodeMode) {
+	if (isNodeMode) return { cronService: null, backupCronService: null };
+
+	const socketHandler = require('../websockets/socketHandler.js');
+	const cronService = require('../services/cronService');
+	const backupCronService = require('../services/backupCronService');
+
+	socketHandler(io);
+	cronService.setSocketIO(io);
+	require('../routes/trigger.routes').setSocketIO(io);
+
+	return { cronService, backupCronService };
+}
+
+async function initCronServices(cronService, backupCronService) {
+	if (cronService) await cronService.init();
+	if (backupCronService) await backupCronService.init();
+}
+
+async function bootstrapMcpKey(isNodeMode) {
+	if (isNodeMode || process.env.PLUM_MCP_KEY) return;
+	try {
+		const settingsService = require('../services/settingsService');
+		const { mcpKey } = await settingsService.getMcpConfig();
+		if (mcpKey) process.env.PLUM_MCP_KEY = mcpKey;
+	} catch {}
+}
+
+function logServerReady(port, isNodeMode) {
+	console.log(`Backend running on port ${port}${isNodeMode ? ' (node/runner mode)' : ''}`);
+}
+
+// Dispatches to the node-runner startup path or the full-server startup path
+// once the HTTP server is actually listening.
+async function onServerListening({ port, io, testsDir, isNodeMode }) {
+	logServerReady(port, isNodeMode);
+	if (isNodeMode) {
+		handleNodeModeStartup(port);
+		return;
+	}
+	await handleFullModeStartup(io, testsDir);
+}
+
+function handleNodeModeStartup(port) {
+	// Self-register PID so manage-runners can track and stop this process.
+	const runnerId = process.env.RUNNER_ID;
+	if (!runnerId) return;
+
+	const registry = loadRegistry();
+	registry[runnerId] = { pid: process.pid, port: String(port), startedAt: Date.now() };
+	saveRegistry(registry);
+
+	const cleanup = () => {
+		try {
+			const reg = loadRegistry();
+			// A self-restart already wrote the replacement's pid under this
+			// id before this process exits — only touch the entry if it's
+			// still ours, so we don't clobber the new process's registration.
+			// Keep the entry (with its port) rather than deleting it — that's
+			// the only place a later manual Start can find the port this
+			// runner was last running on.
+			if (reg[runnerId]?.pid === process.pid) {
+				reg[runnerId] = { ...reg[runnerId], pid: null };
+				saveRegistry(reg);
+			}
+		} catch {}
+	};
+
+	// Adding a SIGTERM/SIGINT listener suppresses Node's default
+	// "terminate immediately" behavior — the handler must exit itself,
+	// or the process (and the port it's bound to) lives on forever
+	// after a plain `kill`/SIGTERM with nothing left to stop it short
+	// of SIGKILL.
+	process.once('SIGTERM', () => {
+		cleanup();
+		process.exit(0);
+	});
+	process.once('SIGINT', () => {
+		cleanup();
+		process.exit(0);
+	});
+	process.once('exit', cleanup);
+}
+
+async function handleFullModeStartup(io, testsDir) {
+	syncAutomatedFlags();
+
+	const chokidar = await loadChokidar();
+	if (!chokidar) return;
+
+	watchTestFiles(chokidar, testsDir);
+	watchReports(chokidar, io);
+}
+
+function syncAutomatedFlags() {
+	// Sync automated flags from feature files on every startup
+	require('../services/reportService')
+		.syncAutomatedFromFeatures()
+		.catch(() => {});
+}
+
+async function loadChokidar() {
+	// chokidar v5+ is ESM-only — use dynamic import to stay compatible with CJS
+	try {
+		return (await import('chokidar')).default;
+	} catch {
+		console.warn('⚠️  chokidar unavailable — file watching disabled');
+		return null;
+	}
+}
+
+function watchTestFiles(chokidar, testsDir) {
+	const featuresDir = path.join(testsDir, 'features');
+	if (!fs.existsSync(featuresDir)) return;
+
+	let debounce = null;
+	chokidar.watch(featuresDir, WATCH_OPTS).on('all', (event, filePath) => {
+		clearTimeout(debounce);
+		debounce = setTimeout(() => {
+			console.log(`📝 Tests changed (${event}: ${path.basename(filePath)})`);
+			syncAutomatedFlags();
+		}, 300);
+	});
+	console.log('👀 Watching for test file changes...');
+}
+
+function watchReports(chokidar, io) {
+	const reportsDir = path.resolve(process.cwd(), 'reports');
+	fs.mkdirSync(reportsDir, { recursive: true });
+
+	chokidar.watch(reportsDir, { ...WATCH_OPTS, interval: 1200 }).on('add', (filePath) => {
+		const name = path.basename(filePath);
+		if ((name.startsWith('PASS_') || name.startsWith('FAIL_')) && name.endsWith('.json')) {
+			console.log(`📊 New report: ${name} — notifying clients`);
+			io.emit(SOCKET_EVENTS.REPORT_READY);
+		}
+	});
+	console.log('👀 Watching for new reports...');
+}
+
+module.exports = {
+	ensureTestsDir,
+	attachListenRetry,
+	wireRealtimeServices,
+	initCronServices,
+	bootstrapMcpKey,
+	onServerListening
+};

package/backend/lib/serverConfig.js

@@ -1,18 +1,6 @@
 /*
  * This file is part of Plum.
- *
- * Plum is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * Plum is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with Plum. If not, see https://www.gnu.org/licenses/.
+ * Licensed under the MIT License. See LICENSE file in the project root for details.
  */
 
 /**

package/backend/lib/testChunker.js

@@ -1,18 +1,6 @@
 /*
  * This file is part of Plum.
- *
- * Plum is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * Plum is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with Plum. If not, see https://www.gnu.org/licenses/.
+ * Licensed under the MIT License. See LICENSE file in the project root for details.
  */
 
 const { getTestSuites } = require('../services/testService');

package/backend/lib/testEnv.js

@@ -1,18 +1,6 @@
 /*
  * This file is part of Plum.
- *
- * Plum is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * Plum is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with Plum. If not, see https://www.gnu.org/licenses/.
+ * Licensed under the MIT License. See LICENSE file in the project root for details.
  */
 
 const fs = require('fs');

package/backend/logs/runner-cmqneqerz0000qq01i5ap2rvl.log

@@ -14,6 +14,10 @@ GNU General Public License for more details.
 You should have received a copy of the GNU General Public License
 along with Plum. If not, see https://www.gnu.org/licenses/.
 */
+/*
+This file is part of Plum.
+Licensed under the MIT License. See LICENSE file in the project root for details.
+*/
 📂 Loading tests from: /Users/silverlunah/Projects/plum/backend/tests
 Backend running on port 3002 (node/runner mode)
 📂 Loading tests from: /Users/silverlunah/Projects/plum/backend/tests

package/backend/logs/runner-cmqnfv7kr0000r101aeocm8eu.log

@@ -14,6 +14,10 @@ GNU General Public License for more details.
 You should have received a copy of the GNU General Public License
 along with Plum. If not, see https://www.gnu.org/licenses/.
 */
+/*
+This file is part of Plum.
+Licensed under the MIT License. See LICENSE file in the project root for details.
+*/
 📂 Loading tests from: /Users/silverlunah/Projects/plum/backend/tests
 Backend running on port 3002 (node/runner mode)
 (node:23570) [DEP0190] DeprecationWarning: Passing args to a child process with shell option true can lead to security vulnerabilities, as the arguments are not escaped, only concatenated.

package/backend/logs/runner-cmqnfvb560001r101qoi0phau.log

@@ -14,6 +14,10 @@ GNU General Public License for more details.
 You should have received a copy of the GNU General Public License
 along with Plum. If not, see https://www.gnu.org/licenses/.
 */
+/*
+This file is part of Plum.
+Licensed under the MIT License. See LICENSE file in the project root for details.
+*/
 📂 Loading tests from: /Users/silverlunah/Projects/plum/backend/tests
 node:events:487
       throw er; // Unhandled 'error' event

package/backend/logs/runner-cmqnfvlm20002r101gsyqb837.log

@@ -14,6 +14,10 @@ GNU General Public License for more details.
 You should have received a copy of the GNU General Public License
 along with Plum. If not, see https://www.gnu.org/licenses/.
 */
+/*
+This file is part of Plum.
+Licensed under the MIT License. See LICENSE file in the project root for details.
+*/
 📂 Loading tests from: /Users/silverlunah/Projects/plum/backend/tests
 Backend running on port 3003 (node/runner mode)
 (node:23686) [DEP0190] DeprecationWarning: Passing args to a child process with shell option true can lead to security vulnerabilities, as the arguments are not escaped, only concatenated.

package/backend/logs/runner-cmqnfvqfy0003r101fh41pzx3.log

@@ -14,6 +14,10 @@ GNU General Public License for more details.
 You should have received a copy of the GNU General Public License
 along with Plum. If not, see https://www.gnu.org/licenses/.
 */
+/*
+This file is part of Plum.
+Licensed under the MIT License. See LICENSE file in the project root for details.
+*/
 📂 Loading tests from: /Users/silverlunah/Projects/plum/backend/tests
 Backend running on port 3004 (node/runner mode)
 (node:23733) [DEP0190] DeprecationWarning: Passing args to a child process with shell option true can lead to security vulnerabilities, as the arguments are not escaped, only concatenated.

package/backend/logs/runner-cmqnfvvwo0004r101q4dtqxd2.log

@@ -14,6 +14,10 @@ GNU General Public License for more details.
 You should have received a copy of the GNU General Public License
 along with Plum. If not, see https://www.gnu.org/licenses/.
 */
+/*
+This file is part of Plum.
+Licensed under the MIT License. See LICENSE file in the project root for details.
+*/
 📂 Loading tests from: /Users/silverlunah/Projects/plum/backend/tests
 Backend running on port 3005 (node/runner mode)
 (node:23776) [DEP0190] DeprecationWarning: Passing args to a child process with shell option true can lead to security vulnerabilities, as the arguments are not escaped, only concatenated.

package/backend/logs/runner-cmr8o2x3n0000mg01410tpuck.log

@@ -14,6 +14,10 @@ GNU General Public License for more details.
 You should have received a copy of the GNU General Public License
 along with Plum. If not, see https://www.gnu.org/licenses/.
 */
+/*
+This file is part of Plum.
+Licensed under the MIT License. See LICENSE file in the project root for details.
+*/
 📂 Loading tests from: /Users/silverlunah/Projects/plum/backend/tests
 Backend running on port 3002 (node/runner mode)
 (node:89713) [DEP0190] DeprecationWarning: Passing args to a child process with shell option true can lead to security vulnerabilities, as the arguments are not escaped, only concatenated.

package/backend/logs/runner-cmr90hvcx0000n2016edtmrtv.log

@@ -14,6 +14,10 @@ GNU General Public License for more details.
 You should have received a copy of the GNU General Public License
 along with Plum. If not, see https://www.gnu.org/licenses/.
 */
+/*
+This file is part of Plum.
+Licensed under the MIT License. See LICENSE file in the project root for details.
+*/
 📂 Loading tests from: /Users/silverlunah/Projects/plum/backend/tests
 node:events:487
       throw er; // Unhandled 'error' event

package/backend/logs/runner-cmr90i7h20001n201g2wg6v3n.log

@@ -14,6 +14,10 @@ GNU General Public License for more details.
 You should have received a copy of the GNU General Public License
 along with Plum. If not, see https://www.gnu.org/licenses/.
 */
+/*
+This file is part of Plum.
+Licensed under the MIT License. See LICENSE file in the project root for details.
+*/
 📂 Loading tests from: /Users/silverlunah/Projects/plum/backend/tests
 node:events:487
       throw er; // Unhandled 'error' event

package/backend/logs/runner-cmr90iilm0002n201mmisva95.log

@@ -14,6 +14,10 @@ GNU General Public License for more details.
 You should have received a copy of the GNU General Public License
 along with Plum. If not, see https://www.gnu.org/licenses/.
 */
+/*
+This file is part of Plum.
+Licensed under the MIT License. See LICENSE file in the project root for details.
+*/
 📂 Loading tests from: /Users/silverlunah/Projects/plum/backend/tests
 node:events:487
       throw er; // Unhandled 'error' event

package/backend/logs/runner-cmr90j70r0003n201xz8525dz.log

@@ -14,6 +14,10 @@ GNU General Public License for more details.
 You should have received a copy of the GNU General Public License
 along with Plum. If not, see https://www.gnu.org/licenses/.
 */
+/*
+This file is part of Plum.
+Licensed under the MIT License. See LICENSE file in the project root for details.
+*/
 📂 Loading tests from: /Users/silverlunah/Projects/plum/backend/tests
 Backend running on port 5177 (node/runner mode)
 (node:98310) [DEP0190] DeprecationWarning: Passing args to a child process with shell option true can lead to security vulnerabilities, as the arguments are not escaped, only concatenated.

package/backend/logs/runner-cmr90yup70000qp017ianc2gp.log

@@ -14,6 +14,10 @@ GNU General Public License for more details.
 You should have received a copy of the GNU General Public License
 along with Plum. If not, see https://www.gnu.org/licenses/.
 */
+/*
+This file is part of Plum.
+Licensed under the MIT License. See LICENSE file in the project root for details.
+*/
 📂 Loading tests from: /Users/silverlunah/Projects/plum/backend/tests
 node:events:487
       throw er; // Unhandled 'error' event

package/backend/logs/runner-cmr90zbtm0001qp01u9tfdkh1.log

@@ -14,6 +14,10 @@ GNU General Public License for more details.
 You should have received a copy of the GNU General Public License
 along with Plum. If not, see https://www.gnu.org/licenses/.
 */
+/*
+This file is part of Plum.
+Licensed under the MIT License. See LICENSE file in the project root for details.
+*/
 📂 Loading tests from: /Users/silverlunah/Projects/plum/backend/tests
 Backend running on port 5178 (node/runner mode)
 (node:825) [DEP0190] DeprecationWarning: Passing args to a child process with shell option true can lead to security vulnerabilities, as the arguments are not escaped, only concatenated.

package/backend/logs/runner-cmr91a3mw0000tb01414rd1df.log

@@ -14,6 +14,10 @@ GNU General Public License for more details.
 You should have received a copy of the GNU General Public License
 along with Plum. If not, see https://www.gnu.org/licenses/.
 */
+/*
+This file is part of Plum.
+Licensed under the MIT License. See LICENSE file in the project root for details.
+*/
 📂 Loading tests from: /Users/silverlunah/Projects/plum/backend/tests
 Backend running on port 5178 (node/runner mode)
 (node:2599) [DEP0190] DeprecationWarning: Passing args to a child process with shell option true can lead to security vulnerabilities, as the arguments are not escaped, only concatenated.

package/backend/logs/runner-cmr91dhla0001tb01jp7thjnl.log

@@ -14,6 +14,10 @@ GNU General Public License for more details.
 You should have received a copy of the GNU General Public License
 along with Plum. If not, see https://www.gnu.org/licenses/.
 */
+/*
+This file is part of Plum.
+Licensed under the MIT License. See LICENSE file in the project root for details.
+*/
 📂 Loading tests from: /Users/silverlunah/Projects/plum/backend/tests
 Backend running on port 5180 (node/runner mode)
 (node:3077) [DEP0190] DeprecationWarning: Passing args to a child process with shell option true can lead to security vulnerabilities, as the arguments are not escaped, only concatenated.

package/backend/logs/runner-cmrkk6fcl0000qj012kve79f4.log

@@ -14,5 +14,9 @@ GNU General Public License for more details.
 You should have received a copy of the GNU General Public License
 along with Plum. If not, see https://www.gnu.org/licenses/.
 */
+/*
+This file is part of Plum.
+Licensed under the MIT License. See LICENSE file in the project root for details.
+*/
 📂 Loading tests from: /Users/silverlunah/Projects/plum/backend/tests
 Backend running on port 3999 (node/runner mode)

package/backend/logs/runner-cmrkl8sym0000qy01euz4270n.log

@@ -14,5 +14,9 @@ GNU General Public License for more details.
 You should have received a copy of the GNU General Public License
 along with Plum. If not, see https://www.gnu.org/licenses/.
 */
+/*
+This file is part of Plum.
+Licensed under the MIT License. See LICENSE file in the project root for details.
+*/
 📂 Loading tests from: /Users/silverlunah/Projects/plum/backend/tests
 Backend running on port 3996 (node/runner mode)

package/backend/logs/runner-cmrkl9oyx0001qy0137nzr94d.log

@@ -14,5 +14,9 @@ GNU General Public License for more details.
 You should have received a copy of the GNU General Public License
 along with Plum. If not, see https://www.gnu.org/licenses/.
 */
+/*
+This file is part of Plum.
+Licensed under the MIT License. See LICENSE file in the project root for details.
+*/
 📂 Loading tests from: /Users/silverlunah/Projects/plum/backend/tests
 Backend running on port 3996 (node/runner mode)

package/backend/mcp/server.js

@@ -1,18 +1,6 @@
 /*
  * This file is part of Plum.
- *
- * Plum is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * Plum is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with Plum. If not, see https://www.gnu.org/licenses/.
+ * Licensed under the MIT License. See LICENSE file in the project root for details.
  */
 
 /**
@@ -40,6 +28,8 @@ const sdkCjs = path.resolve(
 const { McpServer } = require(path.join(sdkCjs, 'server', 'mcp.js'));
 const { StdioServerTransport } = require(path.join(sdkCjs, 'server', 'stdio.js'));
 const { z } = require('zod');
+const { AUTH_SCHEME } = require('../lib/authHeader');
+const { JOB_STATUS } = require('../constants/jobStatus');
 
 const API_URL = (process.env.PLUM_API_URL || 'http://localhost:3001').replace(/\/$/, '');
 const API_KEY = process.env.PLUM_API_KEY || '';
@@ -53,7 +43,7 @@ async function api(method, path, body) {
 		method,
 		headers: {
 			'Content-Type': 'application/json',
-			Authorization: `ApiKey ${API_KEY}`
+			Authorization: `${AUTH_SCHEME.API_KEY} ${API_KEY}`
 		},
 		body: body !== undefined ? JSON.stringify(body) : undefined
 	});
@@ -78,7 +68,7 @@ async function pollJob(jobId, { maxMs = 600_000, intervalMs = 5_000 } = {}) {
 	while (Date.now() < deadline) {
 		await new Promise((r) => setTimeout(r, intervalMs));
 		const job = await get(`/trigger/${jobId}`);
-		if (job.status !== 'running') return job;
+		if (job.status !== JOB_STATUS.RUNNING) return job;
 	}
 	return { status: 'timeout', jobId };
 }

package/backend/middleware/auth.js

@@ -1,20 +1,10 @@
 /*
  * This file is part of Plum.
- *
- * Plum is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * Plum is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with Plum. If not, see https://www.gnu.org/licenses/.
+ * Licensed under the MIT License. See LICENSE file in the project root for details.
  */
 
+const { AUTH_SCHEME } = require('../lib/authHeader');
+
 /**
  * Bearer-token auth guard for node-mode API routes.
  * Passes through when NODE_TOKEN is not configured (open/dev environments).
@@ -23,7 +13,7 @@ function authGuard(req, res, next) {
 	const nodeToken = process.env.NODE_TOKEN;
 	if (!nodeToken) return next();
 	const auth = req.headers.authorization;
-	if (!auth || auth !== `Bearer ${nodeToken}`) {
+	if (!auth || auth !== `${AUTH_SCHEME.BEARER} ${nodeToken}`) {
 		return res.status(401).json({ error: 'Unauthorized' });
 	}
 	next();

package/backend/middleware/jwtAuth.js

@@ -1,29 +1,18 @@
 /*
  * This file is part of Plum.
- *
- * Plum is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * Plum is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with Plum. If not, see https://www.gnu.org/licenses/.
+ * Licensed under the MIT License. See LICENSE file in the project root for details.
  */
 
 const { verifyToken } = require('../services/userService');
 const prisma = require('../services/prisma');
+const { AUTH_SCHEME } = require('../lib/authHeader');
 
 function jwtAuth(req, res, next) {
 	const auth = req.headers.authorization;
 
 	// MCP API key — resolves to the first admin user so createdById is always valid
 	const mcpKey = process.env.PLUM_MCP_KEY;
-	if (mcpKey && auth === `ApiKey ${mcpKey}`) {
+	if (mcpKey && auth === `${AUTH_SCHEME.API_KEY} ${mcpKey}`) {
 		prisma.user
 			.findFirst({ where: { role: 'admin' }, select: { id: true } })
 			.then((admin) => {
@@ -37,12 +26,12 @@ function jwtAuth(req, res, next) {
 		return;
 	}
 
-	if (!auth || !auth.startsWith('Bearer ')) {
+	if (!auth || !auth.startsWith(`${AUTH_SCHEME.BEARER} `)) {
 		return res.status(401).json({ error: 'Unauthorized' });
 	}
 	let payload;
 	try {
-		payload = verifyToken(auth.slice(7));
+		payload = verifyToken(auth.slice(AUTH_SCHEME.BEARER.length + 1));
 	} catch {
 		return res.status(401).json({ error: 'Invalid or expired token' });
 	}

package/backend/middleware/requireAdmin.js

@@ -1,18 +1,6 @@
 /*
  * This file is part of Plum.
- *
- * Plum is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * Plum is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with Plum. If not, see https://www.gnu.org/licenses/.
+ * Licensed under the MIT License. See LICENSE file in the project root for details.
  */
 
 function requireAdmin(req, res, next) {

package/backend/package.json

@@ -8,12 +8,12 @@
 		"create-env": "node services/envService.js",
 		"test": "node config/scripts/run-tests.js",
 		"manage-runners": "node scripts/manage-runners.mjs",
-		"create-test": "node scripts/create-test.js",
+		"create-test": "node config/scripts/create-test.mjs",
 		"mcp": "node mcp/server.js"
 	},
 	"keywords": [],
-	"author": "",
-	"license": "ISC",
+	"author": "silverlunah",
+	"license": "MIT",
 	"devDependencies": {
 		"@playwright/test": "^1.50.1",
 		"@types/node": "^22.17.0",

package/backend/playwright.config.js

@@ -1,18 +1,6 @@
 /*
  * This file is part of Plum.
- *
- * Plum is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * Plum is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with Plum. If not, see https://www.gnu.org/licenses/.
+ * Licensed under the MIT License. See LICENSE file in the project root for details.
  */
 
 // @ts-check