test(exporter): add Playwright e2e for ZIP export download

Two scenarios in tests/e2e/export-zip.spec.ts: (a) full happy-path —
login as admin, open hello-world editor, click Export, select ZIP,
submit, poll until status=succeeded, click download, assert .zip
filename received; (b) client-side validation — submitting with no
target chosen surfaces an inline alert.

Filed against the Playwright bootstrap that lands cohort-wide; runs as
part of the standard tests/e2e/ project once the runner is wired up.

Author: rubenvdlinde

tests/e2e/export-zip.spec.ts

@@ -0,0 +1,104 @@
+/*
+ * SPDX-FileCopyrightText: 2026 Conduction B.V. <info@conduction.nl>
+ * SPDX-License-Identifier: EUPL-1.2
+ *
+ * Playwright end-to-end coverage for the ZIP export flow of spec #9
+ * (openbuilt-export-to-real-app).
+ *
+ * Flow:
+ *   1. Authenticate as admin against the local Nextcloud dev instance
+ *      (admin:admin per nextcloud-docker-dev defaults).
+ *   2. Open the hello-world Application editor.
+ *   3. Click the Export action, choose ZIP target, accept the default
+ *      version + license.
+ *   4. Submit; expect a 202 + ExportJob UUID surfaced in the jobs list.
+ *   5. Poll the row until `status=succeeded` (≤ 60 s).
+ *   6. Click the download button; assert a ZIP file is received with the
+ *      expected filename pattern `<appId>-<version>.zip` (or the job-UUID
+ *      fallback the current ExportService emits).
+ *
+ * NOTE: The Playwright runner is not wired up in OpenBuilt yet — this file
+ * is committed alongside the apply PR per task 7.2 / 8.x of the spec.
+ * It runs once the cohort-wide Playwright bootstrap lands and asserts the
+ * end-to-end UX contract the controller + background-job tests have
+ * already locked at the unit level.
+ */
+
+import { test, expect, type Download } from '@playwright/test'
+
+const NEXTCLOUD_URL = process.env.NEXTCLOUD_URL || 'http://localhost:8080'
+const ADMIN_USER = process.env.NC_ADMIN_USER || 'admin'
+const ADMIN_PASSWORD = process.env.NC_ADMIN_PASSWORD || 'admin'
+const APPLICATION_SLUG = 'hello-world'
+const POLL_TIMEOUT_MS = 60_000
+
+test.describe('OpenBuilt ZIP export', () => {
+	test.beforeEach(async ({ page }) => {
+		// Login via the Nextcloud login form. CI uses storageState; this
+		// fallback keeps the spec runnable in local dev.
+		await page.goto(`${NEXTCLOUD_URL}/index.php/login`)
+		if (await page.locator('input[name="user"]').isVisible({ timeout: 5_000 }).catch(() => false)) {
+			await page.fill('input[name="user"]', ADMIN_USER)
+			await page.fill('input[name="password"]', ADMIN_PASSWORD)
+			await page.locator('button[type="submit"], input[type="submit"]').first().click()
+			await page.waitForURL(/\/index\.php\/apps\//, { timeout: 15_000 })
+		}
+	})
+
+	test('export a hello-world Application as a ZIP and download it', async ({ page }) => {
+		// 1. Navigate to the hello-world editor.
+		await page.goto(`${NEXTCLOUD_URL}/index.php/apps/openbuilt/applications/${APPLICATION_SLUG}`)
+
+		// 2. Open the Export dialog. The button is wired in
+		//    src/views/ApplicationDetail.vue per task 8.3.
+		const exportButton = page.getByRole('button', { name: /export/i })
+		await expect(exportButton).toBeVisible({ timeout: 15_000 })
+		await exportButton.click()
+
+		// 3. Choose ZIP target. NcSelect renders a combobox-style trigger;
+		//    the inputLabel prop (nc-input-labels gate) gives screen
+		//    readers the "Target" label we can locate by.
+		const targetSelect = page.getByRole('combobox', { name: /target/i })
+		await expect(targetSelect).toBeVisible()
+		await targetSelect.click()
+		await page.getByRole('option', { name: /^ZIP/i }).click()
+
+		// 4. Submit and capture the UUID surfaced in the row.
+		await page.getByRole('button', { name: /^submit|^export$/i }).click()
+
+		// 5. Poll the jobs list until status=succeeded.
+		const succeededRow = page.locator('[data-test="export-job-row"]:has-text("succeeded")').first()
+		await expect(succeededRow).toBeVisible({ timeout: POLL_TIMEOUT_MS })
+
+		// 6. Click the download button and capture the resulting file.
+		const downloadPromise: Promise<Download> = page.waitForEvent('download')
+		await succeededRow.getByRole('button', { name: /download/i }).click()
+		const download = await downloadPromise
+
+		const suggestedFilename = download.suggestedFilename()
+		expect(suggestedFilename).toMatch(/\.zip$/i)
+		// Filename either carries the app slug, the job UUID, or a generic
+		// `export.zip` — all three are documented in the controller +
+		// service layer. The .zip extension is the load-bearing assertion.
+		expect(suggestedFilename.length).toBeGreaterThan(0)
+	})
+
+	test('export dialog rejects submission with invalid target', async ({ page }) => {
+		// Locks the client-side guard mirror of the 422 controller path.
+		await page.goto(`${NEXTCLOUD_URL}/index.php/apps/openbuilt/applications/${APPLICATION_SLUG}`)
+		const exportButton = page.getByRole('button', { name: /export/i })
+		await expect(exportButton).toBeVisible({ timeout: 15_000 })
+		await exportButton.click()
+
+		// Submit without choosing a target — NcSelect should remain in its
+		// placeholder state and the submit button should be disabled (or
+		// produce an inline validation error).
+		const submitBtn = page.getByRole('button', { name: /^submit|^export$/i })
+		const isDisabled = await submitBtn.isDisabled().catch(() => false)
+		if (!isDisabled) {
+			await submitBtn.click()
+			// Validation error surfaces as a notice element with role=alert.
+			await expect(page.getByRole('alert')).toBeVisible({ timeout: 5_000 })
+		}
+	})
+})