test: comprehensive E2E test suite and CI improvements

E2E tests (6 new test files, 1864 lines):
- test_encryption.py: 17 tests — lifecycle, upload/download, material URLs,
  key rotation, Redis cache inspection (verifies no plaintext leakage)
- test_project_isolation.py: 20 IDOR regression tests across all endpoints
- test_disk_artifact.py: disk CRUD, artifact ls/grep/glob, session configs
- test_agent_skills.py: ZIP upload, pagination, file download, deletion
- test_learning_spaces.py: CRUD, skill associations, meta JSONB filtering
- test_users.py: user listing, resource counts, cascade delete

CI improvements:
- Parallel Docker image builds (4 images with GHA layer cache)
- .dockerignore for API and CORE to reduce build context
- Dockerfile.e2e: thin test runner image with tests as volume mount
- docker-compose.test.yml: 8-service stack with mock LLM, disabled Argon2

Author: GenerQAQ

.github/workflows/e2e-test.yaml

@@ -32,10 +32,43 @@ jobs:
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
 
-      - name: Build Images
+      - name: Build Docker Images (parallel)
         run: |
-          cd src/server
-          docker compose -f docker-compose.test.yml build
+          docker buildx build \
+            --load \
+            --cache-from type=gha,scope=e2e-core \
+            --cache-to type=gha,mode=max,scope=e2e-core \
+            -t acontext-e2e-test-core:latest \
+            ./src/server/core &
+          PID_CORE=$!
+
+          docker buildx build \
+            --load \
+            --cache-from type=gha,scope=e2e-api \
+            --cache-to type=gha,mode=max,scope=e2e-api \
+            -t acontext-e2e-test-api:latest \
+            ./src/server/api/go &
+          PID_API=$!
+
+          docker buildx build \
+            --load \
+            --file ./src/server/api/go/Dockerfile.admin \
+            --cache-from type=gha,scope=e2e-admin \
+            --cache-to type=gha,mode=max,scope=e2e-admin \
+            -t acontext-e2e-test-admin:latest \
+            ./src/server/api/go &
+          PID_ADMIN=$!
+
+          docker buildx build \
+            --load \
+            --cache-from type=gha,scope=e2e-runner \
+            --cache-to type=gha,mode=max,scope=e2e-runner \
+            -t acontext-e2e-test-runner:latest \
+            -f ./src/server/tests/Dockerfile.e2e \
+            ./src/server/tests &
+          PID_RUNNER=$!
+
+          wait $PID_CORE $PID_API $PID_ADMIN $PID_RUNNER
 
       - name: Run E2E Test
         run: |
@@ -47,9 +80,3 @@ jobs:
         run: |
           cd src/server
           docker compose -f docker-compose.test.yml logs
-
-      - name: Teardown
-        if: always()
-        run: |
-          cd src/server
-          docker compose -f docker-compose.test.yml down --timeout 10

src/client/acontext-cli/internal/docker/docker-compose.yaml

@@ -231,6 +231,7 @@ services:
       CORE_BASE_URL: http://acontext-server-core:8000
       OTEL_EXPORTER_OTLP_ENDPOINT: acontext-server-jaeger:4317
       ARTIFACT_MAX_UPLOAD_SIZE_BYTES: ${ARTIFACT_MAX_UPLOAD_SIZE_BYTES:-16777216}
+      APP_EXTERNALURL: ${APP_EXTERNALURL:-}
     ports:
       - "${API_EXPORT_PORT:-8029}:8029"
     healthcheck:

src/server/docker-compose.test.yml

@@ -69,6 +69,7 @@ services:
 
   # --- Python Core ---
   core:
+    image: acontext-e2e-test-core:latest
     build:
       context: ./core
     environment:
@@ -95,6 +96,7 @@ services:
 
   # --- Go API ---
   api:
+    image: acontext-e2e-test-api:latest
     build:
       context: ./api/go
     environment:
@@ -127,6 +129,7 @@ services:
       ARTIFACT_MAX_UPLOAD_SIZE_BYTES: 16777216
       ROOT_API_BEARER_TOKEN: test-token
       APP_ROOT_SECRETPEPPER: test-pepper
+      APP_EXTERNALURL: http://api:8029
     depends_on:
       core: { condition: service_healthy }
     healthcheck:
@@ -135,21 +138,73 @@ services:
       timeout: 5s
       retries: 5
 
+  # --- Go Admin API ---
+  admin:
+    image: acontext-e2e-test-admin:latest
+    build:
+      context: ./api/go
+      dockerfile: Dockerfile.admin
+    environment:
+      APP_ENV: debug
+      API_EXPORT_PORT: 8028
+      DATABASE_HOST: pg
+      DATABASE_USER: acontext
+      DATABASE_PASSWORD: helloworld
+      DATABASE_NAME: acontext_test
+      DATABASE_EXPORT_PORT: 5432
+      DATABASE_ENABLE_TLS: "false"
+      REDIS_HOST: redis
+      REDIS_PASSWORD: helloworld
+      REDIS_EXPORT_PORT: 6379
+      REDIS_ENABLE_TLS: "false"
+      RABBITMQ_HOST: rabbitmq
+      RABBITMQ_USER: acontext
+      RABBITMQ_PASSWORD: helloworld
+      RABBITMQ_VHOST: /
+      RABBITMQ_VHOST_ENCODED: "%2F"
+      RABBITMQ_EXPORT_PORT: 5672
+      RABBITMQ_ENABLE_TLS: "false"
+      S3_ENDPOINT: http://seaweedfs:9000
+      S3_INTERNAL_ENDPOINT: http://seaweedfs:9000
+      S3_REGION: us-east-1
+      S3_ACCESS_KEY: acontext
+      S3_SECRET_KEY: helloworld
+      S3_BUCKET: acontext-assets
+      CORE_BASE_URL: http://core:8000
+      APP_TELEMETRY_ENABLED: "false"
+      ENABLE_ARGON2_VERIFICATION: "false"
+      ARTIFACT_MAX_UPLOAD_SIZE_BYTES: 16777216
+      ROOT_API_BEARER_TOKEN: test-token
+      APP_ROOT_SECRETPEPPER: test-pepper
+    depends_on:
+      core: { condition: service_healthy }
+    healthcheck:
+      test: [ "CMD-SHELL", "wget -q -O- http://localhost:8028/health || exit 1" ]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+
   # --- Test Runner ---
   tests:
-    image: python:3.12-slim
+    image: acontext-e2e-test-runner:latest
+    build:
+      context: ./tests
+      dockerfile: Dockerfile.e2e
     environment:
       API_URL: http://api:8029
+      ADMIN_URL: http://admin:8028
       CORE_URL: http://core:8000
       DB_URL: postgresql://acontext:helloworld@pg:5432/acontext_test
+      REDIS_URL: redis://:helloworld@redis:6379
       TEST_TOKEN: test-token
     volumes:
       - ./tests:/app/tests
       - ./pytest.ini:/app/pytest.ini
     working_dir: /app
     depends_on:
       api: { condition: service_healthy }
-    command: [ "sh", "-c", "pip install httpx asyncpg pydantic pytest pytest-asyncio==0.21.* && pytest tests/e2e/test_simple.py -v --asyncio-mode=auto" ]
+      admin: { condition: service_healthy }
+    command: [ "pytest", "tests/e2e/test_simple.py", "tests/e2e/test_encryption.py", "tests/e2e/test_session_events.py", "tests/e2e/test_agent_skills.py", "tests/e2e/test_learning_spaces.py", "tests/e2e/test_users.py", "tests/e2e/test_disk_artifact.py", "tests/e2e/test_project_isolation.py", "-v", "--asyncio-mode=auto" ]
 
 networks:
   default:

src/server/docker-compose.yaml

@@ -249,6 +249,7 @@ services:
       CORE_BASE_URL: http://acontext-server-core:8000
       OTEL_EXPORTER_OTLP_ENDPOINT: acontext-server-jaeger:4317
       ARTIFACT_MAX_UPLOAD_SIZE_BYTES: ${ARTIFACT_MAX_UPLOAD_SIZE_BYTES:-16777216}
+      APP_EXTERNALURL: ${APP_EXTERNALURL:-}
     ports:
       - "${API_EXPORT_PORT:-8029}:8029"
     healthcheck:

src/server/tests/Dockerfile.e2e

@@ -0,0 +1,9 @@
+FROM python:3.12-slim
+
+WORKDIR /app
+
+COPY requirements-e2e.txt .
+RUN pip install --no-cache-dir -r requirements-e2e.txt
+
+# Tests are mounted at runtime via docker-compose volume, not copied in.
+# This lets the image be cached even when test code changes.