mirror of
https://github.com/Studio-Saelix/sencho.git
synced 2026-07-27 04:11:01 +00:00
32a7d53b2b
* feat: add RBAC viewer accounts, atomic deployments, and fleet-wide backups (Pro) Introduces three Pro-tier features: - RBAC: Multi-user system with admin/viewer roles, user management UI, automatic migration from single-admin credentials, viewer restrictions across the entire UI (read-only editor, hidden action buttons) - Atomic Deployments: Pre-deploy file backup to .sencho-backup/, automatic rollback on health probe failure, manual rollback button, health probes added to stack updates, webhook-triggered deploys use atomic rollback - Fleet-Wide Backups: Point-in-time snapshots of compose files across all nodes (local + remote), stored centrally in SQLite, per-stack restore with optional redeploy, graceful handling of offline nodes * fix(settings): use correct ProGate prop name in UsersSection * fix(settings): remove unused isPro prop from UsersSection * fix(auth): fetch user info after login and setup so isAdmin is set correctly * feat(pricing): revise pricing strategy and enforce variant-based seat limits Raise Personal Pro from $49/yr to $69/yr with 3 viewer seats (up from 1). Add $15/mo billing option for Team Pro. Mark lifetime pricing as a 90-day early-adopter offer. Store Lemon Squeezy variant_name on activation/validation and enforce seat limits server-side per variant. * feat(licensing): add Lemon Squeezy checkout, webhook, and billing portal integration Server-side checkout URL generation (POST /api/checkout) with admin email pre-fill and instance_id custom data. HMAC-SHA256 verified webhook endpoint (POST /api/webhooks/lemonsqueezy) handling order, subscription, and payment lifecycle events for automatic license activation. Customer billing portal link stored from webhook events and exposed via GET /api/billing/portal. In-app checkout buttons in Settings with manual license key fallback. * fix(licensing): exempt Lemon Squeezy webhook from auth middleware The catch-all auth middleware on /api/* was blocking the public webhook endpoint. Added /webhooks/lemonsqueezy to the exemption list alongside /auth/* and /webhooks/:id/trigger. * feat(pricing): update pricing to final live rates Personal Pro: $7.99/month, $69.99/year, $249 lifetime. Team Pro: $49.99/month, $499.99/year, $1,499 lifetime. Added personal_monthly checkout variant across backend, frontend, and website. * refactor(licensing): remove server-side checkout/webhook for self-hosted model Sencho is self-hosted — each user runs their own instance, so there is no central server to receive webhooks or hold the store API key. Replaced in-app checkout buttons with a "View Pricing" redirect to sencho.io and kept manual license key activation as the primary flow. - Delete LemonSqueezyService (checkout, webhook, HMAC verification) - Remove POST /api/checkout, GET /api/billing/portal, POST /api/webhooks/lemonsqueezy - Remove raw body parser and auth exemption for webhook route - Remove all LEMONSQUEEZY_* env vars from .env.example - Replace checkout buttons in SettingsModal with single "View Pricing" button - Simplify LicenseContext checkout to open sencho.io pricing page - Update licensing docs to reflect website-based purchase flow * chore: normalize em-dashes to hyphens across codebase (linter) * chore: remove accidentally tracked directories from index
74 lines
3.3 KiB
TypeScript
74 lines
3.3 KiB
TypeScript
/**
|
|
* Shared helpers for Sencho E2E tests.
|
|
*
|
|
* CREDENTIALS: Set E2E_USERNAME and E2E_PASSWORD env vars to match
|
|
* your dev instance's admin account. Defaults assume the initial setup
|
|
* was completed with username "admin" and password "password123".
|
|
*
|
|
* E2E_USERNAME=admin E2E_PASSWORD=mypassword npx playwright test
|
|
*/
|
|
import { Page, expect } from '@playwright/test';
|
|
|
|
export const TEST_USERNAME = process.env.E2E_USERNAME ?? 'admin';
|
|
export const TEST_PASSWORD = process.env.E2E_PASSWORD ?? 'password123';
|
|
|
|
/** Selector for the dashboard - only present in EditorLayout, not on login/setup pages */
|
|
const DASHBOARD_INDICATOR = 'img[alt="Sencho Logo"]';
|
|
|
|
/** Returns true if the current page is the first-run setup screen */
|
|
async function isSetupPage(page: Page): Promise<boolean> {
|
|
return page.locator('#confirmPassword, input[placeholder*="Confirm"]').isVisible().catch(() => false);
|
|
}
|
|
|
|
/** Returns true if the current page is the login screen */
|
|
async function isLoginPage(page: Page): Promise<boolean> {
|
|
return page.locator('button:has-text("Login"), button:has-text("Sign in")').isVisible().catch(() => false);
|
|
}
|
|
|
|
/** Returns true if the dashboard (EditorLayout) is loaded */
|
|
export async function isDashboard(page: Page): Promise<boolean> {
|
|
return page.locator(DASHBOARD_INDICATOR).isVisible().catch(() => false);
|
|
}
|
|
|
|
/**
|
|
* Navigate to the app root, complete first-run setup if needed, then log in.
|
|
* After this call the dashboard is guaranteed to be visible.
|
|
*/
|
|
export async function loginAs(page: Page, username = TEST_USERNAME, password = TEST_PASSWORD) {
|
|
await page.goto('/');
|
|
|
|
// Wait for the app to finish its auth check (loading spinner disappears)
|
|
await page.waitForTimeout(500);
|
|
|
|
// ── First-run setup ───────────────────────────────────────────────────────
|
|
if (await isSetupPage(page)) {
|
|
await page.locator('#username').fill(username);
|
|
await page.locator('#password').fill(password);
|
|
const confirmInput = page.locator('#confirmPassword');
|
|
if (await confirmInput.isVisible()) await confirmInput.fill(password);
|
|
await page.locator('button[type="submit"]').click();
|
|
// After setup, the app logs in automatically and shows the dashboard
|
|
await expect(page.locator(DASHBOARD_INDICATOR)).toBeVisible({ timeout: 10_000 });
|
|
return;
|
|
}
|
|
|
|
// ── Login screen ─────────────────────────────────────────────────────────
|
|
if (await isLoginPage(page)) {
|
|
await page.locator('#username').fill(username);
|
|
await page.locator('#password').fill(password);
|
|
await page.locator('button:has-text("Login"), button:has-text("Sign in")').first().click();
|
|
await expect(page.locator(DASHBOARD_INDICATOR)).toBeVisible({ timeout: 10_000 });
|
|
return;
|
|
}
|
|
|
|
// ── Already on the dashboard ──────────────────────────────────────────────
|
|
if (await isDashboard(page)) {
|
|
return;
|
|
}
|
|
|
|
throw new Error(
|
|
'loginAs: could not determine page state - expected setup, login, or dashboard. ' +
|
|
'Check that E2E_USERNAME and E2E_PASSWORD are set correctly.',
|
|
);
|
|
}
|