test(e2e): cover disabled org enforcement across resource RPCs

[AmanGIT07]

Summary

End-to-end coverage for the disabled-org gate across project, group, resource, billing, and invitation RPCs.

Changes

• Add a regression scenario: member works, org disabled, member gets FailedPrecondition on eight RPCs, non-member still gets PermissionDenied, superuser can list, export, read, and re-enable, member access is restored with no re-grants, and a disabled org can still be deleted
• The non-member probe covers both the project id and the org name, so name references reveal nothing an id reference would not
• Testbench header interceptor applies context headers to streaming client calls too (this suite's first streaming RPC)

Test Plan

• make e2e-test passes locally
• Build and type checking passes

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
frontier	Ready	Preview	Aug 7, 2026 11:08am

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: 24645eb4-54a2-440e-b85d-af28decef6f0

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[coveralls]

Coverage Report for CI Build 31172836601

Coverage decreased (-0.3%) to 47.867%

Details

• Coverage decreased (-0.3%) from the base build.
• Patch coverage: No coverable lines changed in this PR.
• 456 coverage regressions across 13 files.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

456 previously-covered lines in 13 files lost coverage.

Top 10 Files by Coverage Loss	Lines Losing Coverage	Coverage
billing/checkout/service.go	167	2.8%
billing/subscription/service.go	102	42.16%
internal/store/postgres/billing_plan_repository.go	66	0.0%
billing/plan/service.go	53	0.0%
core/event/service.go	20	56.18%
internal/api/v1beta1connect/billing_plan.go	14	93.0%
pkg/server/connect_interceptors/authorization.go	14	0.0%
billing/plan/plan.go	6	62.5%
billing/entitlement/service.go	5	88.14%
cmd/reconcile.go	4	44.32%

---

Coverage Stats

Relevant Lines:	39568
Covered Lines:	18940
Line Coverage:	47.87%
Coverage Strength:	15.43 hits per line

---

💛 - Coveralls

[coderabbitai]

🧹 Nitpick comments (2)

test/e2e/regression/disabled_org_test.go (2)

148-156: 🎯 Functional Correctness | 🔵 Trivial | ⚡ Quick win

Assert that the export contains the disabled org.

exported > 0 passes even if the disabled org is absent, because other orgs exist in the suite. Collect the exported rows and check for orgID.

---

186-194: 🎯 Functional Correctness | 🔵 Trivial | ⚡ Quick win

Verify the deletion with a direct read.

The loop only checks the disabled listing. A GetOrganization call that returns CodeNotFound proves the delete cascade removed the org.

♻️ Proposed additional assertion

 _, err = s.testBench.Client.DeleteOrganization(ctxAdmin, connect.NewRequest(&frontierv1beta1.DeleteOrganizationRequest{Id: deleteOrgID}))
s.Assert().NoError(err)
+	_, err = s.testBench.Client.GetOrganization(ctxAdmin, connect.NewRequest(&frontierv1beta1.GetOrganizationRequest{Id: deleteOrgID}))+	s.Assert().Equal(connect.CodeNotFound, connect.CodeOf(err))+
// after the delete cascade the org must be gone from the admin listing

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: bb8aa701-105f-46a7-af78-bd67f91ef11f

📥 Commits

Reviewing files that changed from the base of the PR and between dd838bd and f8af5e4.

📒 Files selected for processing (2)

• test/e2e/regression/disabled_org_test.go
• test/e2e/testbench/helper.go