apps/e2e/tests/book.spec.ts

@@ -1,4 +1,4 @@
-import { test, expect } from "@playwright/test";
+import { test, expect } from "./fixtures.js";
 
 /**
  * Booking portal happy-path E2E test.

apps/e2e/tests/clients.spec.ts

@@ -1,4 +1,4 @@
-import { test, expect } from "@playwright/test";
+import { test, expect } from "./fixtures.js";
 
 /**
  * Client management E2E tests.

apps/e2e/tests/fixtures.ts

@@ -0,0 +1,22 @@
+import { test as base } from "@playwright/test";
+
+/**
+ * Custom test fixture that seeds a dev user in localStorage before each test.
+ *
+ * When AUTH_DISABLED=true, the app redirects to /login if no dev-user is set.
+ * This fixture ensures E2E tests bypass that redirect by pre-selecting a
+ * default staff user.
+ */
+export const test = base.extend({
+  page: async ({ page }, use) => {
+    await page.addInitScript(() => {
+      localStorage.setItem(
+        "dev-user",
+        JSON.stringify({ type: "staff", id: "dev-user", name: "Dev User" })
+      );
+    });
+    await use(page);
+  },
+});
+
+export { expect } from "@playwright/test";

apps/e2e/tests/navigation.spec.ts

@@ -1,4 +1,4 @@
-import { test, expect } from "@playwright/test";
+import { test, expect } from "./fixtures.js";
 
 /**
  * Navigation smoke tests — verifies that each page loads without errors.

apps/web/src/lib/devFetch.ts

@@ -5,6 +5,8 @@ const originalFetch = window.fetch;
 /**
  * Patches global fetch to include X-Dev-User-Id header on API requests
  * when a dev user is selected via the login selector.
+ *
+ * Intentionally mutates window.fetch — this is dev-only (AUTH_DISABLED=true).
  */
 export function installDevFetchInterceptor() {
   window.fetch = function (input: RequestInfo | URL, init?: RequestInit) {