fix: configure my-notepad II principal and controllers in validation pipeline

The setup script only configured my-hello-world after deploy, leaving
my-notepad without an II principal or controller setup. This caused login
to silently fail — the manage_ii_principal guard rejected the user's call
since their II principal was never added as a controller.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: Web3NL

scripts/constants.sh

@@ -10,16 +10,22 @@ export CANISTER_INITIAL_CYCLES="1000000000000"
 
 # Canister names
 export HELLO_WORLD_CANISTER="my-hello-world"
+export NOTEPAD_CANISTER="my-notepad"
 export WASM_REGISTRY_CANISTER="wasm-registry"
 export DEMOS_CANISTER="demos"
 
 # Test environment origins (canister origin is set dynamically after canister creation)
 export DAPP_ORIGIN_VITE="http://localhost:5173"
 
-# Resolve DAPP_ORIGIN_CANISTER from test.env if it exists (set during setup)
+# Resolve canister origins from test.env if it exists (set during setup)
 if [ -f "$REPO_ROOT/tests/test.env" ]; then
   HELLO_WORLD_ID=$(grep VITE_MY_HELLO_WORLD_CANISTER_ID "$REPO_ROOT/tests/test.env" | cut -d '=' -f2 || true)
   if [ -n "$HELLO_WORLD_ID" ]; then
     export DAPP_ORIGIN_CANISTER="http://${HELLO_WORLD_ID}.localhost:8080"
   fi
+
+  NOTEPAD_ID=$(grep VITE_MY_NOTEPAD_CANISTER_ID "$REPO_ROOT/tests/test.env" | cut -d '=' -f2 || true)
+  if [ -n "$NOTEPAD_ID" ]; then
+    export DAPP_ORIGIN_NOTEPAD="http://${NOTEPAD_ID}.localhost:8080"
+  fi
 fi

scripts/setup-dashboard-dev-env.sh

@@ -13,19 +13,24 @@ echo "Setting up dashboard development environment..."
 HELLO_WORLD_ID=$(icp canister status my-hello-world -e local --id-only)
 DAPP_ORIGIN_CANISTER="http://${HELLO_WORLD_ID}.localhost:8080"
 
+NOTEPAD_ID=$(icp canister status my-notepad -e local --id-only)
+DAPP_ORIGIN_NOTEPAD="http://${NOTEPAD_ID}.localhost:8080"
+
 APP_ID=$(icp canister status icp-dapp-launcher -e local --id-only)
 DAPP_ORIGIN_APP="http://${APP_ID}.localhost:8080"
 
 echo "Running Internet Identity setup..."
 npx playwright install
 DAPP_ORIGIN_VITE="$DAPP_ORIGIN_VITE" \
   DAPP_ORIGIN_CANISTER="$DAPP_ORIGIN_CANISTER" \
+  DAPP_ORIGIN_NOTEPAD="$DAPP_ORIGIN_NOTEPAD" \
   DAPP_ORIGIN_APP="$DAPP_ORIGIN_APP" \
   npm run test:setup-ii
 
 echo "Reading principals..."
 PRINCIPAL_VITE=$(cat tests/output/derived-ii-principal-vite.txt)
 PRINCIPAL_CANISTER=$(cat tests/output/derived-ii-principal-canister.txt)
+PRINCIPAL_NOTEPAD=$(cat tests/output/derived-ii-principal-notepad.txt)
 PRINCIPAL_APP=$(cat tests/output/derived-ii-principal-app.txt)
 IDENT1=$(icp identity principal --identity ident-1)
 
@@ -37,9 +42,20 @@ icp canister settings update "$HELLO_WORLD_CANISTER" -e local --identity ident-1
   --set-controller "$IDENT1" \
   -f
 
-echo "Setting authorized Internet Identity principal (Vite origin for first E2E batch)..."
+echo "Setting authorized Internet Identity principal for $HELLO_WORLD_CANISTER (Vite origin for first E2E batch)..."
 icp canister call "$HELLO_WORLD_CANISTER" manage_ii_principal "(variant { Set = principal \"$PRINCIPAL_VITE\" })" -e local --identity ident-1
 
+echo "Setting controllers for $NOTEPAD_CANISTER canister..."
+icp canister settings update "$NOTEPAD_CANISTER" -e local --identity ident-1 \
+  --set-controller "$NOTEPAD_ID" \
+  --set-controller "$PRINCIPAL_VITE" \
+  --set-controller "$PRINCIPAL_NOTEPAD" \
+  --set-controller "$IDENT1" \
+  -f
+
+echo "Setting authorized Internet Identity principal for $NOTEPAD_CANISTER (Vite origin for first E2E batch)..."
+icp canister call "$NOTEPAD_CANISTER" manage_ii_principal "(variant { Set = principal \"$PRINCIPAL_VITE\" })" -e local --identity ident-1
+
 echo "Setting demos canister admins..."
 icp canister call demos set_admins "(vec { principal \"$PRINCIPAL_APP\" })" -e local --identity ident-1
 

scripts/write-test-env.sh

@@ -12,6 +12,7 @@ cd "$REPO_ROOT"
 
 II_CANISTER_ID="rdmx6-jaaaa-aaaaa-aaadq-cai"
 HELLO_WORLD_ID=$(icp canister status my-hello-world -e local --id-only 2>/dev/null || echo "")
+NOTEPAD_ID=$(icp canister status my-notepad -e local --id-only 2>/dev/null || echo "")
 APP_CANISTER_ID=$(icp canister status icp-dapp-launcher -e local --id-only 2>/dev/null || echo "")
 
 # Write test.env with discovered canister IDs
@@ -25,6 +26,11 @@ if [ -n "$HELLO_WORLD_ID" ]; then
   echo "VITE_MY_HELLO_WORLD_CANISTER_ID=${HELLO_WORLD_ID}" >> tests/test.env
 fi
 
+# Add notepad canister ID if it exists
+if [ -n "$NOTEPAD_ID" ]; then
+  echo "VITE_MY_NOTEPAD_CANISTER_ID=${NOTEPAD_ID}" >> tests/test.env
+fi
+
 # Add app canister ID if it exists
 if [ -n "$APP_CANISTER_ID" ]; then
   echo "VITE_ICP_DAPP_LAUNCHER_CANISTER_ID=${APP_CANISTER_ID}" >> tests/test.env

tests/ii-setup/setup-ii.spec.ts

@@ -23,6 +23,7 @@ test.describe('setup II identity and derive principals', () => {
       const origins = [
         { origin: process.env.DAPP_ORIGIN_VITE!, envSuffix: 'vite' },
         { origin: process.env.DAPP_ORIGIN_CANISTER!, envSuffix: 'canister' },
+        { origin: process.env.DAPP_ORIGIN_NOTEPAD!, envSuffix: 'notepad' },
         { origin: process.env.DAPP_ORIGIN_APP!, envSuffix: 'app' },
       ];