test(e2e): grant catch-all OCAPI permissions to shared test sandbox

The e2e shared-sandbox hook relied on the CLI's DEFAULT_OCAPI_RESOURCES,
which omits /sites and /jobs/*/executions/* search endpoints. Several
suites depend on these and were failing or skipping. Pass an explicit
--ocapi-settings JSON granting the test client all methods on /* and
/** so the suite no longer depends on DEFAULT_OCAPI_RESOURCES drift.

Also removes the "invalid realm id" sandbox-lifecycle test — the
b2c sandbox list --realm flag is a query filter (unknown realm yields
an empty list and exit 0), so the assertion was checking behavior the
command does not implement.

Author: clavery

packages/b2c-cli/test/functional/e2e/hooks.ts

@@ -43,11 +43,47 @@ export const mochaHooks = {
 
     const realm = process.env.TEST_REALM!;
     const shortCode = process.env.SFCC_SHORTCODE!;
+    const clientId = process.env.SFCC_CLIENT_ID!;
+
+    // Catch-all OCAPI permissions for the test sandbox so e2e suites exercising
+    // arbitrary endpoints (sites, job_execution_search, …) don't depend on the
+    // built-in DEFAULT_OCAPI_RESOURCES list staying in sync with new tests.
+    const ocapiSettings = JSON.stringify([
+      {
+        client_id: clientId,
+        resources: [
+          {
+            resource_id: '/**',
+            methods: ['get', 'post', 'put', 'patch', 'delete'],
+            read_attributes: '(**)',
+            write_attributes: '(**)',
+          },
+          {
+            resource_id: '/*',
+            methods: ['get', 'post', 'put', 'patch', 'delete'],
+            read_attributes: '(**)',
+            write_attributes: '(**)',
+          },
+        ],
+      },
+    ]);
 
     try {
       // Create sandbox with long TTL (24 hours to cover all tests) + retry for transient errors
       const result = await runCLIWithRetry(
-        ['ods', 'create', '--realm', realm, '--ttl', '24', '--wait', '--set-permissions', '--json'],
+        [
+          'ods',
+          'create',
+          '--realm',
+          realm,
+          '--ttl',
+          '24',
+          '--wait',
+          '--set-permissions',
+          '--ocapi-settings',
+          ocapiSettings,
+          '--json',
+        ],
         {
           timeout: TIMEOUTS.ODS_OPERATION,
           maxRetries: 3,

packages/b2c-cli/test/functional/e2e/sandbox-lifecycle.test.ts

@@ -417,17 +417,6 @@ describe('Sandbox Lifecycle E2E Tests', function () {
 
   describe('Additional Test Cases', function () {
     describe('Error Handling', function () {
-      it('should fail with a clear error for an invalid realm id', async function () {
-        const result = await runCLI(['sandbox', 'list', '--realm', 'invalid-realm-xyz', '--json']);
-
-        expect(result.exitCode, 'invalid realm should produce a non-zero exit').to.equal(1);
-
-        const errorText = String(result.stderr || result.stdout || '');
-        expect(errorText, 'invalid realm should surface a recognizable error message').to.match(
-          /Failed to fetch sandboxes|invalid|realm/i,
-        );
-      });
-
       it('should handle missing sandbox ID gracefully', async function () {
         const result = await runCLI(['sandbox', 'get', 'non-existent-sandbox-id', '--json']);