fix: update tests to use new dev URL and signing secret

.env.example

@@ -11,15 +11,12 @@ E2E_ABLY_ABLY_ACCESS_TOKEN=your_control_api_access_token
 # SKIP_E2E_TESTS=true
 
 # Terminal server signing secret
-# MUST match the live server's SIGNING_SECRET configuration at wss://web-cli.ably.com
+# MUST match the live server's SIGNING_SECRET configuration at wss://web-cli-terminal.ably-dev.com
 # Used to:
 #   1. Sign credentials for HMAC authentication (signedConfig + signature)
 #   2. Bypass rate limiting in tests (bypassRateLimit flag in signed config)
 # Contact platform team for the actual secret
 TERMINAL_SERVER_SIGNING_SECRET=your_signing_secret
 
-# Legacy: CI_BYPASS_SECRET (still supported as fallback)
-# CI_BYPASS_SECRET=your_ci_bypass_secret
-
 # Terminal server URL for local testing (defaults to production)
 # TERMINAL_SERVER_URL=ws://localhost:8080

.github/workflows/e2e-tests.yml

@@ -16,8 +16,10 @@ jobs:
     timeout-minutes: 30
 
     env:
+      NO_COLOR: 1
       E2E_ABLY_API_KEY: ${{ secrets.E2E_ABLY_API_KEY }}
       E2E_ABLY_ACCESS_TOKEN: ${{ secrets.E2E_ABLY_ACCESS_TOKEN }}
+      TERMINAL_SERVER_SIGNING_SECRET: ${{ secrets.TERMINAL_SERVER_SIGNING_SECRET }}
       E2E_TESTS: true
 
     steps:
@@ -52,6 +54,7 @@ jobs:
           echo "ABLY_API_KEY=${{ secrets.E2E_ABLY_API_KEY }}" > .env.test
           echo "E2E_ABLY_API_KEY=${{ secrets.E2E_ABLY_API_KEY }}" >> .env.test
           echo "E2E_ABLY_ACCESS_TOKEN=${{ secrets.E2E_ABLY_ACCESS_TOKEN }}" >> .env.test
+          echo "TERMINAL_SERVER_SIGNING_SECRET=${{ secrets.TERMINAL_SERVER_SIGNING_SECRET }}" >> .env.test
 
       - name: Run All E2E CLI Tests
         run: |

.github/workflows/e2e-web-cli-parallel.yml

@@ -67,9 +67,10 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 15
     env:
+      NO_COLOR: 1
       E2E_ABLY_API_KEY: ${{ secrets.E2E_ABLY_API_KEY }}
-      CI_BYPASS_SECRET: ${{ secrets.CI_BYPASS_SECRET }}
       E2E_ABLY_ACCESS_TOKEN: ${{ secrets.E2E_ABLY_ACCESS_TOKEN }}
+      TERMINAL_SERVER_SIGNING_SECRET: ${{ secrets.TERMINAL_SERVER_SIGNING_SECRET }}
       E2E_TESTS: true
       HEADLESS: true
       TEST_GROUP: auth
@@ -115,9 +116,10 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 20
     env:
+      NO_COLOR: 1
       E2E_ABLY_API_KEY: ${{ secrets.E2E_ABLY_API_KEY }}
-      CI_BYPASS_SECRET: ${{ secrets.CI_BYPASS_SECRET }}
       E2E_ABLY_ACCESS_TOKEN: ${{ secrets.E2E_ABLY_ACCESS_TOKEN }}
+      TERMINAL_SERVER_SIGNING_SECRET: ${{ secrets.TERMINAL_SERVER_SIGNING_SECRET }}
       E2E_TESTS: true
       HEADLESS: true
       TEST_GROUP: session
@@ -164,9 +166,10 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 15
     env:
+      NO_COLOR: 1
       E2E_ABLY_API_KEY: ${{ secrets.E2E_ABLY_API_KEY }}
-      CI_BYPASS_SECRET: ${{ secrets.CI_BYPASS_SECRET }}
       E2E_ABLY_ACCESS_TOKEN: ${{ secrets.E2E_ABLY_ACCESS_TOKEN }}
+      TERMINAL_SERVER_SIGNING_SECRET: ${{ secrets.TERMINAL_SERVER_SIGNING_SECRET }}
       E2E_TESTS: true
       HEADLESS: true
       TEST_GROUP: ui
@@ -213,10 +216,11 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     env:
+      NO_COLOR: 1
       E2E_ABLY_API_KEY: ${{ secrets.E2E_ABLY_API_KEY }}
       E2E_ABLY_ACCESS_TOKEN: ${{ secrets.E2E_ABLY_ACCESS_TOKEN }}
-      # Rate limit test should NOT use CI bypass
-      # CI_BYPASS_SECRET is intentionally not set
+      # Terminal Server Signing Secret is intentionally not set
+      # Rate limit test should NOT use terminal server signing secret.
       E2E_TESTS: true
       HEADLESS: true
       TEST_GROUP: rate-limit

.github/workflows/test.yml

@@ -26,6 +26,8 @@ jobs:
   test:
     runs-on: ubuntu-latest
     timeout-minutes: 30
+    env:
+      NO_COLOR: 1
 
     steps:
       - name: Checkout code

examples/web-cli/server/sign-handler.ts

@@ -56,7 +56,6 @@ export function getSigningSecret(): string | null {
   return (
     process.env.TERMINAL_SERVER_SIGNING_SECRET ||
     process.env.SIGNING_SECRET ||
-    process.env.CI_BYPASS_SECRET ||
     null
   );
 }

examples/web-cli/src/App.tsx

@@ -10,11 +10,13 @@ import { AuthScreen } from "./components/AuthScreen";
 // Extend Window interface for CLI-specific properties
 interface CliWindow extends Window {
   __ABLY_CLI_CI_AUTH_TOKEN__?: string;
+  __ABLY_CLI_CI_MODE__?: string;
   _sessionId?: string;
 }
 
 // Default WebSocket URL - use public endpoint for production, localhost for development
-const DEFAULT_WEBSOCKET_URL = "wss://web-cli.ably.com";
+const DEFAULT_PRODUCTION_WEBSOCKET_URL = "wss://web-cli.ably.com";
+const DEFAULT_DEVELOPMENT_WEBSOCKET_URL = "wss://web-cli-terminal.ably-dev.com";
 
 // Get WebSocket URL from query parameters only
 const getWebSocketUrl = () => {
@@ -24,9 +26,12 @@ const getWebSocketUrl = () => {
     console.log(`[App.tsx] Found serverUrl param: ${serverParam}`);
     return serverParam;
   }
-  return DEFAULT_WEBSOCKET_URL;
+  return isRunningCIMode() ? DEFAULT_DEVELOPMENT_WEBSOCKET_URL : DEFAULT_PRODUCTION_WEBSOCKET_URL;
 };
 
+const isRunningCIMode = (): boolean => {
+  return (window as CliWindow).__ABLY_CLI_CI_MODE__ === "true";
+}
 // Get CI auth token if available
 const getCIAuthToken = (): string | undefined => {
   return (window as CliWindow).__ABLY_CLI_CI_AUTH_TOKEN__;
@@ -139,7 +144,7 @@ function App() {
   const [connectionStatus, setConnectionStatus] = useState<TermStatus>('disconnected');
   const [displayMode, setDisplayMode] = useState<"fullscreen" | "drawer">(initialMode);
   const [showAuthSettings, setShowAuthSettings] = useState(false);
-  
+
   // Initialize signed credentials
   const initialCreds = getInitialCredentials();
   const [signedConfig, setSignedConfig] = useState<string | undefined>(initialCreds.signedConfig);
@@ -277,8 +282,8 @@ function App() {
 
   // Show auth screen if not authenticated
   if (!isAuthenticated) {
-    return <AuthScreen 
-      onAuthenticate={handleAuthenticate} 
+    return <AuthScreen
+      onAuthenticate={handleAuthenticate}
       rememberCredentials={rememberCredentials}
       onRememberChange={setRememberCredentials}
     />;