fix(e2e): wire admin bearer token into chat-seed workspace creation

POST /workspaces in seedWorkspace now carries the same admin cred (E2E_ADMIN_TOKEN || ADMIN_TOKEN) that mintWorkspaceToken uses. Aligns chat fixture with PR #2291 fail-closed auth; unauthenticated create no longer silently 401s in E2E runs. Narrow diff — no AdminAuth loosening.
2026-06-06 19:56:25 +00:00
1 changed files with 5 additions and 1 deletions
@@ -27,9 +27,13 @@ export async function seedWorkspace(echoURL: string): Promise<SeededWorkspace> {
  // 1. Create external workspace pointing at the in-process echo runtime.
  const runId = Math.random().toString(36).slice(2, 8);
  const wsName = `Chat E2E Agent ${runId}`;
+  const adminToken = process.env.E2E_ADMIN_TOKEN ?? process.env.ADMIN_TOKEN;
  const createRes = await fetch(`${PLATFORM_URL}/workspaces`, {
    method: "POST",
-    headers: { "Content-Type": "application/json" },
+    headers: {
+      "Content-Type": "application/json",
+      ...(adminToken ? { Authorization: `Bearer ${adminToken}` } : {}),
+    },
    body: JSON.stringify({
      name: wsName,
      tier: 1,