[Testing] Add dashboard app

.github/workflows/e2e.yml

@@ -45,6 +45,26 @@ jobs:
           path: apps/frontend/playwright-report/
           retention-days: 7
 
+      # The dashboard runs its own Playwright config (own Vite server on 5174). Always run it,
+      # even when the frontend journeys failed — one broken app should not hide the other's status.
+      - name: 🌐 Install Playwright browsers (dashboard)
+        if: always()
+        working-directory: apps/dashboard
+        run: bunx playwright install --with-deps chromium
+
+      - name: 🧪 Dashboard E2E journeys
+        if: always()
+        working-directory: apps/dashboard
+        run: bun run test:e2e
+
+      - name: 📤 Upload dashboard report on failure
+        if: failure()
+        uses: actions/upload-artifact@v4
+        with:
+          name: playwright-report-dashboard
+          path: apps/dashboard/playwright-report/
+          retention-days: 7
+
       # Non-blocking runs are only useful if somebody hears about failures.
       # Uses the same webhook token the backend's Slack notifier uses
       # (repo secret SLACK_WEB_HOOK_TOKEN); skips silently when unset.

.gitignore

@@ -67,6 +67,8 @@ contracts/*/.env
 # Playwright E2E artifacts
 apps/frontend/test-results/
 apps/frontend/playwright-report/
+apps/dashboard/test-results/
+apps/dashboard/playwright-report/
 
 # Local credentials and agent-tool artifacts
 .api-key.json

apps/api/.env.example

@@ -42,7 +42,6 @@ PENDULUM_FUNDING_SEED=your-pendulum-funding-seed
 MOONBEAM_EXECUTOR_PRIVATE_KEY=your-moonbeam-executor-private-key
 # Optional. If unset, falls back to MOONBEAM_EXECUTOR_PRIVATE_KEY for EVM funding.
 EVM_FUNDING_PRIVATE_KEY=
-CLIENT_DOMAIN_SECRET=your-client-domain-secret
 
 # Optional EVM payout address used as fallback when a partner has no payout_address_evm set.
 DEFAULT_VORTEX_EVM_PAYOUT_ADDRESS=
@@ -99,6 +98,11 @@ ALFREDPAY_BASE_URL=your-alfredpay-base-url
 ALFREDPAY_API_KEY=your-alfredpay-api-key
 ALFREDPAY_API_SECRET=your-alfredpay-api-secret
 
+# Monerium OAuth (the redirect URI must exactly match the dashboard callback registered with Monerium)
+MONERIUM_CLIENT_ID=your-monerium-auth-code-client-id
+MONERIUM_API_URL=https://api.monerium.dev
+MONERIUM_REDIRECT_URI=http://localhost:5174/dashboard/monerium/callback
+
 # Integration test helpers (only required for phase-processor integration tests)
 # BACKEND_TEST_STARTER_ACCOUNT=
 # TAX_ID=

apps/api/README.md

@@ -116,7 +116,6 @@ yarn seed:phase-metadata
 - `FUNDING_SECRET`: Secret key to sign the funding transactions on Stellar.
 - `PENDULUM_FUNDING_SEED`: Seed phrase to sign the funding transactions on Pendulum.
 - `MOONBEAM_EXECUTOR_PRIVATE_KEY`: Private key to sign the transactions on Moonbeam.
-- `CLIENT_DOMAIN_SECRET`: Secret for client domain verification.
 
 ### Database Configuration
 

apps/api/src/api/controllers/admin/partnerApiKeys.controller.ts

@@ -16,15 +16,15 @@ export async function createApiKey(req: Request<{ partnerName: string }>, res: R
     const partnerName = req.params.partnerName;
     const { name, expiresAt, userId } = req.body;
 
-    // Verify at least one partner with this name exists and is active
-    const partners = await Partner.findAll({
+    // Resolve the (unique-name) partner; keys bind to it by FK
+    const partner = await Partner.findOne({
       where: {
         isActive: true,
         name: partnerName
       }
     });
 
-    if (partners.length === 0) {
+    if (!partner) {
       res.status(httpStatus.NOT_FOUND).json({
         error: {
           code: "PARTNER_NOT_FOUND",
@@ -77,7 +77,7 @@ export async function createApiKey(req: Request<{ partnerName: string }>, res: R
 
     const expirationDate = expiresAt ? new Date(expiresAt) : null;
 
-    // Create public key record
+    // Create public key record (partner_name kept as informational backup; auth resolves partner_id)
     const publicKeyRecord = await ApiKey.create({
       expiresAt: expirationDate,
       isActive: true,
@@ -86,6 +86,7 @@ export async function createApiKey(req: Request<{ partnerName: string }>, res: R
       keyType: "public",
       keyValue: publicKey,
       name: name ? `${name} (Public)` : "Public Key",
+      partnerId: partner.id,
       partnerName,
       userId: resolvedUserId
     });
@@ -99,6 +100,7 @@ export async function createApiKey(req: Request<{ partnerName: string }>, res: R
       keyType: "secret",
       keyValue: null,
       name: name ? `${name} (Secret)` : "Secret Key",
+      partnerId: partner.id,
       partnerName,
       userId: resolvedUserId
     });
@@ -108,7 +110,7 @@ export async function createApiKey(req: Request<{ partnerName: string }>, res: R
       createdAt: publicKeyRecord.createdAt,
       expiresAt: expirationDate,
       isActive: true,
-      partnerCount: partners.length,
+      partnerId: partner.id,
       partnerName,
       publicKey: {
         id: publicKeyRecord.id,
@@ -149,11 +151,11 @@ export async function listApiKeys(req: Request<{ partnerName: string }>, res: Re
     const partnerName = req.params.partnerName;
 
     // Verify partner exists
-    const partners = await Partner.findAll({
+    const partner = await Partner.findOne({
       where: { name: partnerName }
     });
 
-    if (partners.length === 0) {
+    if (!partner) {
       res.status(httpStatus.NOT_FOUND).json({
         error: {
           code: "PARTNER_NOT_FOUND",
@@ -180,7 +182,7 @@ export async function listApiKeys(req: Request<{ partnerName: string }>, res: Re
         "updatedAt"
       ],
       order: [["createdAt", "DESC"]],
-      where: { partnerName }
+      where: { partnerId: partner.id }
     });
 
     res.status(httpStatus.OK).json({
@@ -197,7 +199,7 @@ export async function listApiKeys(req: Request<{ partnerName: string }>, res: Re
         updatedAt: key.updatedAt,
         userId: key.userId
       })),
-      partnerCount: partners.length,
+      partnerId: partner.id,
       partnerName
     });
   } catch (error) {
@@ -220,11 +222,23 @@ export async function revokeApiKey(req: Request<{ partnerName: string; keyId: st
   try {
     const { partnerName, keyId } = req.params;
 
+    const partner = await Partner.findOne({ where: { name: partnerName } });
+    if (!partner) {
+      res.status(httpStatus.NOT_FOUND).json({
+        error: {
+          code: "PARTNER_NOT_FOUND",
+          message: `No partners found with name: ${partnerName}`,
+          status: httpStatus.NOT_FOUND
+        }
+      });
+      return;
+    }
+
     // Find the API key
     const apiKey = await ApiKey.findOne({
       where: {
         id: keyId,
-        partnerName
+        partnerId: partner.id
       }
     });
 
@@ -240,7 +254,7 @@ export async function revokeApiKey(req: Request<{ partnerName: string; keyId: st
     }
 
     // Soft delete by setting isActive to false
-    await apiKey.update({ isActive: false });
+    await apiKey.update({ isActive: false, revokedAt: new Date() });
 
     res.status(httpStatus.NO_CONTENT).send();
   } catch (error) {

apps/api/src/api/controllers/admin/profilePartnerAssignments.controller.test.ts

@@ -1,5 +1,4 @@
 import {afterEach, describe, expect, it, mock} from "bun:test";
-import {RampDirection} from "@vortexfi/shared";
 import {Request, Response} from "express";
 import httpStatus from "http-status";
 import {Op, Transaction, UniqueConstraintError} from "sequelize";
@@ -37,7 +36,7 @@ function createResponse() {
 describe("createProfilePartnerAssignment", () => {
   const originalTransaction = sequelize.transaction;
   const originalUserFindByPk = User.findByPk;
-  const originalPartnerFindAll = Partner.findAll;
+  const originalPartnerFindOne = Partner.findOne;
   const originalAssignmentUpdate = ProfilePartnerAssignment.update;
   const originalAssignmentCreate = ProfilePartnerAssignment.create;
   const originalAssignmentFindAll = ProfilePartnerAssignment.findAll;
@@ -49,7 +48,7 @@ describe("createProfilePartnerAssignment", () => {
   afterEach(() => {
     sequelize.transaction = originalTransaction;
     User.findByPk = originalUserFindByPk;
-    Partner.findAll = originalPartnerFindAll;
+    Partner.findOne = originalPartnerFindOne;
     ProfilePartnerAssignment.update = originalAssignmentUpdate;
     ProfilePartnerAssignment.create = originalAssignmentCreate;
     ProfilePartnerAssignment.findAll = originalAssignmentFindAll;
@@ -58,33 +57,29 @@ describe("createProfilePartnerAssignment", () => {
   function mockValidAssignmentDependencies() {
     const transactionMock = mock(async (callback: (tx: unknown) => Promise<unknown>) => callback(transaction));
     const userFindByPkMock = mock(async () => ({ id: "user-1" }));
-    const partnerFindAllMock = mock(async () => [
-      { id: "buy-partner-1", name: "Acme", rampType: RampDirection.BUY },
-      { id: "sell-partner-1", name: "Acme", rampType: RampDirection.SELL }
-    ]);
+    const partnerFindOneMock = mock(async () => ({ id: "partner-1", isActive: true, name: "Acme" }));
     const assignmentUpdateMock = mock(async () => [1]);
     const assignmentCreateMock = mock(async () => ({
       createdAt,
       expiresAt: null,
-      buyPartnerId: "buy-partner-1",
       id: "assignment-2",
       isActive: true,
+      partnerId: "partner-1",
       partnerName: "Acme",
-      sellPartnerId: "sell-partner-1",
       updatedAt,
       userId: "user-1"
     }));
 
     sequelize.transaction = transactionMock as unknown as typeof sequelize.transaction;
     User.findByPk = userFindByPkMock as unknown as typeof User.findByPk;
-    Partner.findAll = partnerFindAllMock as unknown as typeof Partner.findAll;
+    Partner.findOne = partnerFindOneMock as unknown as typeof Partner.findOne;
     ProfilePartnerAssignment.update = assignmentUpdateMock as unknown as typeof ProfilePartnerAssignment.update;
     ProfilePartnerAssignment.create = assignmentCreateMock as unknown as typeof ProfilePartnerAssignment.create;
 
     return {
       assignmentCreateMock,
       assignmentUpdateMock,
-      partnerFindAllMock,
+      partnerFindOneMock,
       transactionMock,
       userFindByPkMock
     };
@@ -122,11 +117,10 @@ describe("createProfilePartnerAssignment", () => {
     );
     expect(assignmentCreateMock).toHaveBeenCalledWith(
       {
-        buyPartnerId: "buy-partner-1",
         expiresAt: null,
         isActive: true,
+        partnerId: "partner-1",
         partnerName: "Acme",
-        sellPartnerId: "sell-partner-1",
         userId: "user-1"
       },
       { transaction }
@@ -160,12 +154,9 @@ describe("createProfilePartnerAssignment", () => {
     });
   });
 
-  it("rejects ambiguous active partners for the same ramp type", async () => {
+  it("returns 404 when no active partner has the requested name", async () => {
     mockValidAssignmentDependencies();
-    Partner.findAll = mock(async () => [
-      { id: "buy-partner-1", name: "Acme", rampType: RampDirection.BUY },
-      { id: "buy-partner-2", name: "Acme", rampType: RampDirection.BUY }
-    ]) as unknown as typeof Partner.findAll;
+    Partner.findOne = mock(async () => null) as unknown as typeof Partner.findOne;
     const res = createResponse();
 
     await createProfilePartnerAssignment(
@@ -178,12 +169,12 @@ describe("createProfilePartnerAssignment", () => {
       res as unknown as Response
     );
 
-    expect(res.statusCode).toBe(httpStatus.CONFLICT);
+    expect(res.statusCode).toBe(httpStatus.NOT_FOUND);
     expect(res.body).toEqual({
       error: {
-        code: "AMBIGUOUS_PARTNER_ASSIGNMENT",
-        message: `Multiple active ${RampDirection.BUY} partners found with this name`,
-        status: httpStatus.CONFLICT
+        code: "PARTNER_NOT_FOUND",
+        message: "No active partners found with name: Acme",
+        status: httpStatus.NOT_FOUND
       }
     });
   });

apps/api/src/api/controllers/admin/profilePartnerAssignments.controller.ts

@@ -1,4 +1,3 @@
-import { RampDirection } from "@vortexfi/shared";
 import { Request, Response } from "express";
 import httpStatus from "http-status";
 import { Op, Transaction, UniqueConstraintError, WhereOptions } from "sequelize";
@@ -10,15 +9,6 @@ import User from "../../../models/user.model";
 
 const PROFILE_NOT_FOUND_AFTER_LOCK = "PROFILE_NOT_FOUND_AFTER_LOCK";
 
-function getUniquePartnerIdForRamp(partners: Partner[], rampType: RampDirection): string | null {
-  const rampPartners = partners.filter(partner => partner.rampType === rampType);
-  if (rampPartners.length > 1) {
-    throw new Error(`Multiple active ${rampType} partners found with this name`);
-  }
-
-  return rampPartners[0]?.id ?? null;
-}
-
 function parseExpiration(expiresAt: unknown): Date | null {
   if (!expiresAt) {
     return null;
@@ -38,13 +28,12 @@ function parseExpiration(expiresAt: unknown): Date | null {
 
 function serializeAssignment(assignment: ProfilePartnerAssignment) {
   return {
-    buyPartnerId: assignment.buyPartnerId,
     createdAt: assignment.createdAt,
     expiresAt: assignment.expiresAt,
     id: assignment.id,
     isActive: assignment.isActive,
+    partnerId: assignment.partnerId,
     partnerName: assignment.partnerName,
-    sellPartnerId: assignment.sellPartnerId,
     updatedAt: assignment.updatedAt,
     userId: assignment.userId
   };
@@ -77,14 +66,14 @@ export async function createProfilePartnerAssignment(req: Request, res: Response
       return;
     }
 
-    const partners = await Partner.findAll({
+    const partner = await Partner.findOne({
       where: {
         isActive: true,
         name: partnerName
       }
     });
 
-    if (partners.length === 0) {
+    if (!partner) {
       res.status(httpStatus.NOT_FOUND).json({
         error: {
           code: "PARTNER_NOT_FOUND",
@@ -95,9 +84,6 @@ export async function createProfilePartnerAssignment(req: Request, res: Response
       return;
     }
 
-    const buyPartnerId = getUniquePartnerIdForRamp(partners, RampDirection.BUY);
-    const sellPartnerId = getUniquePartnerIdForRamp(partners, RampDirection.SELL);
-
     const expirationDate = parseExpiration(expiresAt);
 
     const assignment = await sequelize.transaction(async transaction => {
@@ -123,33 +109,20 @@ export async function createProfilePartnerAssignment(req: Request, res: Response
 
       return ProfilePartnerAssignment.create(
         {
-          buyPartnerId,
           expiresAt: expirationDate,
           isActive: true,
+          partnerId: partner.id,
           partnerName,
-          sellPartnerId,
           userId
         },
         { transaction }
       );
     });
 
     res.status(httpStatus.CREATED).json({
-      assignment: serializeAssignment(assignment),
-      partnerCount: partners.length
+      assignment: serializeAssignment(assignment)
     });
   } catch (error) {
-    if (error instanceof Error && error.message.startsWith("Multiple active")) {
-      res.status(httpStatus.CONFLICT).json({
-        error: {
-          code: "AMBIGUOUS_PARTNER_ASSIGNMENT",
-          message: error.message,
-          status: httpStatus.CONFLICT
-        }
-      });
-      return;
-    }
-
     if (error instanceof Error && error.message.startsWith("expiresAt")) {
       res.status(httpStatus.BAD_REQUEST).json({
         error: {