Update project dependencies and E2E coverage

.env.example

@@ -10,10 +10,13 @@ SMTP_PASS=password
 SMTP_FROM=noreply@example.com
 COOKIE_SECRET=supersecretkeymustbeatleast64byteslongforsecurityreasons1234567890
 FRONTEND_URL=http://localhost:3000
-MINIO_ACCESS_KEY=minioadmin
-MINIO_SECRET_KEY=minioadmin
-MINIO_URL=http://localhost:9000/
+S3_ENDPOINT_URL=http://127.0.0.1:9000/
+S3_ACCESS_KEY=memorymapdev
+S3_SECRET_KEY=memorymapdevsecret
 S3_BUCKET_NAME=memory-map
+S3_REGION=us-east-1
+S3_FORCE_PATH_STYLE=true
+S3_PRESIGNED_URL_TTL_SECONDS=604800
 SERVER_HOST=127.0.0.1
 SERVER_PORT=8000
 CORS_ALLOWED_ORIGINS=http://127.0.0.1:3000

.github/workflows/ci.yml

@@ -10,6 +10,10 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
+permissions:
+  contents: read
+  id-token: write
+
 env:
   CARGO_TERM_COLOR: always
   SKIP_DIRENV: "1"
@@ -22,6 +26,9 @@ jobs:
       - uses: actions/checkout@v6
       - uses: DeterminateSystems/nix-installer-action@main
       - uses: DeterminateSystems/magic-nix-cache-action@main
+        with:
+          use-flakehub: false
+          use-gha-cache: true
       - run: cd devenv && nix fmt -- --ci
 
   check:
@@ -31,6 +38,9 @@ jobs:
       - uses: actions/checkout@v6
       - uses: DeterminateSystems/nix-installer-action@main
       - uses: DeterminateSystems/magic-nix-cache-action@main
+        with:
+          use-flakehub: false
+          use-gha-cache: true
       - run: nix develop ./devenv/ --command just check
 
   clippy:
@@ -40,6 +50,9 @@ jobs:
       - uses: actions/checkout@v6
       - uses: DeterminateSystems/nix-installer-action@main
       - uses: DeterminateSystems/magic-nix-cache-action@main
+        with:
+          use-flakehub: false
+          use-gha-cache: true
       - run: nix develop ./devenv/ --command just clippy
 
   test:
@@ -49,6 +62,9 @@ jobs:
       - uses: actions/checkout@v6
       - uses: DeterminateSystems/nix-installer-action@main
       - uses: DeterminateSystems/magic-nix-cache-action@main
+        with:
+          use-flakehub: false
+          use-gha-cache: true
       - run: nix develop ./devenv/ --command just test
 
   doc:
@@ -58,6 +74,9 @@ jobs:
       - uses: actions/checkout@v6
       - uses: DeterminateSystems/nix-installer-action@main
       - uses: DeterminateSystems/magic-nix-cache-action@main
+        with:
+          use-flakehub: false
+          use-gha-cache: true
       - run: nix develop ./devenv/ --command just doc
 
   deny:
@@ -67,6 +86,9 @@ jobs:
       - uses: actions/checkout@v6
       - uses: DeterminateSystems/nix-installer-action@main
       - uses: DeterminateSystems/magic-nix-cache-action@main
+        with:
+          use-flakehub: false
+          use-gha-cache: true
       - run: nix develop ./devenv/ --command just deny
 
   frontend:
@@ -76,4 +98,49 @@ jobs:
       - uses: actions/checkout@v6
       - uses: DeterminateSystems/nix-installer-action@main
       - uses: DeterminateSystems/magic-nix-cache-action@main
+        with:
+          use-flakehub: false
+          use-gha-cache: true
       - run: nix develop ./devenv/ --command just frontend-build
+
+  storage-integration:
+    name: Storage Integration
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+      - uses: DeterminateSystems/nix-installer-action@main
+      - uses: DeterminateSystems/magic-nix-cache-action@main
+        with:
+          use-flakehub: false
+          use-gha-cache: true
+      - run: nix develop ./devenv/ --command just storage-ci
+      - name: Upload process-compose log
+        if: failure()
+        uses: actions/upload-artifact@v7
+        with:
+          name: process-compose-log
+          path: process-compose.log
+          if-no-files-found: ignore
+
+  e2e:
+    name: E2E
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+      - uses: DeterminateSystems/nix-installer-action@main
+      - uses: DeterminateSystems/magic-nix-cache-action@main
+        with:
+          use-flakehub: false
+          use-gha-cache: true
+      - run: nix develop ./devenv/ --command just e2e
+      - name: Upload E2E logs and artifacts
+        if: failure()
+        uses: actions/upload-artifact@v7
+        with:
+          name: e2e-artifacts
+          path: |
+            e2e-logs/
+            frontend/playwright-report/
+            frontend/test-results/
+            frontend/blob-report/
+          if-no-files-found: ignore

.github/workflows/update-cargo-deps.yml

@@ -15,17 +15,38 @@ jobs:
       contents: write
       pull-requests: write
     steps:
+      - name: Generate app token
+        id: app-token
+        uses: actions/create-github-app-token@v3
+        with:
+          app-id: ${{ secrets.APP_ID }}
+          private-key: ${{ secrets.APP_PRIVATE_KEY }}
+
       - uses: actions/checkout@v6
       - uses: DeterminateSystems/nix-installer-action@main
       - uses: DeterminateSystems/magic-nix-cache-action@main
 
       - name: Update Cargo dependencies
         run: nix develop ./devenv/ --command cargo update
 
+      - name: Check for changes
+        id: diff
+        run: |
+          if git diff --quiet Cargo.lock; then
+            echo "changed=false" >> "$GITHUB_OUTPUT"
+          else
+            echo "changed=true" >> "$GITHUB_OUTPUT"
+          fi
+
+      - name: Disable git hooks
+        if: steps.diff.outputs.changed == 'true'
+        run: git config --unset core.hooksPath || true
+
       - name: Create pull request
+        if: steps.diff.outputs.changed == 'true'
         uses: peter-evans/create-pull-request@v7
         with:
-          token: ${{ secrets.GITHUB_TOKEN }}
+          token: ${{ steps.app-token.outputs.token }}
           commit-message: "chore: update Cargo dependencies"
           branch: update-cargo-deps
           title: "chore: update Cargo dependencies"

.github/workflows/update-nixpkgs.yml

@@ -1,4 +1,4 @@
-name: Update nixpkgs
+name: Update Nix flake inputs
 
 on:
   schedule:
@@ -12,19 +12,40 @@ jobs:
       contents: write
       pull-requests: write
     steps:
+      - name: Generate app token
+        id: app-token
+        uses: actions/create-github-app-token@v3
+        with:
+          app-id: ${{ secrets.APP_ID }}
+          private-key: ${{ secrets.APP_PRIVATE_KEY }}
+
       - uses: actions/checkout@v6
       - uses: DeterminateSystems/nix-installer-action@main
       - uses: DeterminateSystems/magic-nix-cache-action@main
 
-      - name: Update nixpkgs input
-        run: nix flake update nixpkgs --flake ./devenv/
+      - name: Update Nix flake inputs
+        run: nix flake update --flake ./devenv/
+
+      - name: Check for changes
+        id: diff
+        run: |
+          if git diff --quiet devenv/flake.lock; then
+            echo "changed=false" >> "$GITHUB_OUTPUT"
+          else
+            echo "changed=true" >> "$GITHUB_OUTPUT"
+          fi
+
+      - name: Disable git hooks
+        if: steps.diff.outputs.changed == 'true'
+        run: git config --unset core.hooksPath || true
 
       - name: Create pull request
+        if: steps.diff.outputs.changed == 'true'
         uses: peter-evans/create-pull-request@v7
         with:
-          token: ${{ secrets.GITHUB_TOKEN }}
-          commit-message: "chore: update nixpkgs input"
-          branch: update-nixpkgs
-          title: "chore: update nixpkgs input"
+          token: ${{ steps.app-token.outputs.token }}
+          commit-message: "chore: update Nix flake inputs"
+          branch: update-nix-flake-inputs
+          title: "chore: update Nix flake inputs"
           body: |
-            Automated weekly update of the `nixpkgs` flake input.
+            Automated weekly update of moving Nix flake inputs.

.gitignore

@@ -1,9 +1,20 @@
 target/
-data/
+data/minio1/
+data/pg1/
+data/postgres/
+data/rustfs/
 .env
+frontend/public/config.json
 .direnv/
-.cache/test-output/
+/result
+/result-*
+process-compose.log
+e2e-logs/
+frontend/playwright-report/
+frontend/test-results/
+frontend/blob-report/
 .claude/worktrees/
 .codex/worktrees/
 .pre-commit-config.yaml
 .playwright-mcp/
+*.code-workspace

CONTRIBUTING.md

@@ -28,19 +28,11 @@ just check           # Run cargo check
 just clippy          # Run Clippy with warnings as errors
 just deny            # Check dependency licenses and advisories
 just doc             # Build docs and run ASCII/link checks
-just test            # Run tests with cached output
+just test            # Run tests
 just frontend-build  # Build the Trunk frontend
 just verify          # Run the full verification suite
 ```
 
-## Tests
-
-`just test` caches command output under `.cache/test-output/`. The cache key is
-based on tracked file contents and the test arguments.
-
-After creating a new source or test file, run `git add <file>` once so the cache
-can see it. Use `just clean` to clear build artifacts and cached test output.
-
 ## Documentation And Text
 
 Source and Markdown documentation are kept ASCII-only. Use plain ASCII