fix(e2e): register upstream-block listeners before selectOption to avoid race condition

[Copilot]

upstreamBlockPromise and xFrameOptionsPromise were set up after selectOption() and the iframe title visibility wait. Since ExamplesSandbox sends a postMessage and updates the iframe title synchronously on change, a 403 response or X-Frame-Options console error could fire before the listeners were attached — causing the test to miss the "blocked" signal and eventually time out.

Changes

• website/src/components/examples-sandbox.e2e.ts
  • Move upstreamBlockPromise and xFrameOptionsPromise registration to before exampleSelect.selectOption(...) and the iframe title toBeVisible wait.
  • Guard both promises with process.env.AGAINST_PROD === '1' ternaries (resolving to 'blocked-timeout' otherwise) so non-prod runs are unaffected.

// Before: listeners registered after selection — could miss early failures
await exampleSelect.selectOption(SELECTED_EXAMPLE);
await expect(sandboxIframe).toBeVisible(...);
if (process.env.AGAINST_PROD === '1') {
  const upstreamBlockPromise = page.waitForResponse(...);
  const xFrameOptionsPromise = page.waitForEvent('console', ...);
  ...
}

// After: listeners registered first, then selection is triggered
const upstreamBlockPromise = process.env.AGAINST_PROD === '1'
  ? page.waitForResponse(...).then(...).catch(...)
  : Promise.resolve('blocked-timeout' as const);
const xFrameOptionsPromise = process.env.AGAINST_PROD === '1'
  ? page.waitForEvent('console', ...).then(...).catch(...)
  : Promise.resolve('blocked-timeout' as const);

await exampleSelect.selectOption(SELECTED_EXAMPLE);

[Copilot]

Pull request overview

This PR reduces flakiness in the ExamplesSandbox Playwright e2e test by registering the “blocked” detection listeners (403 upstream response and X-Frame-Options console error) before triggering the example selection, preventing missed early failures that could otherwise lead to timeouts.

Changes:

• Moves upstreamBlockPromise and xFrameOptionsPromise setup to occur before exampleSelect.selectOption(...) and the iframe-title visibility wait.
• Gates both listeners behind process.env.AGAINST_PROD === '1', resolving to 'blocked-timeout' otherwise so non-prod runs keep existing behavior.
• Keeps prod-specific verification logic (waiting for CodeSandbox content / outage banners / blocked signals) unchanged aside from the listener timing.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[github-actions]

Apollo Federation Subgraph Compatibility Results

Federation 1 Support	Federation 2 Support
_service 🟢 @key (single) 🟢 @key (multi) 🟢 @key (composite) 🟢 repeatable @key 🟢 @requires 🟢 @provides 🟢 federated tracing 🟢	@link 🟢 @shareable 🟢 @tag 🟢 @override 🟢 @inaccessible 🟢 @composeDirective 🟢 @interfaceObject 🟢

Learn more:

• Apollo Federation Subgraph Specification
• Compatibility Tests

[github-actions]

💻 Website Preview

The latest changes are available as preview in: https://pr-9640.graphql-mesh-ai3.pages.dev