mirror of
https://github.com/Studio-Saelix/sencho.git
synced 2026-07-27 12:18:59 +00:00
32a7d53b2b
* feat: add RBAC viewer accounts, atomic deployments, and fleet-wide backups (Pro) Introduces three Pro-tier features: - RBAC: Multi-user system with admin/viewer roles, user management UI, automatic migration from single-admin credentials, viewer restrictions across the entire UI (read-only editor, hidden action buttons) - Atomic Deployments: Pre-deploy file backup to .sencho-backup/, automatic rollback on health probe failure, manual rollback button, health probes added to stack updates, webhook-triggered deploys use atomic rollback - Fleet-Wide Backups: Point-in-time snapshots of compose files across all nodes (local + remote), stored centrally in SQLite, per-stack restore with optional redeploy, graceful handling of offline nodes * fix(settings): use correct ProGate prop name in UsersSection * fix(settings): remove unused isPro prop from UsersSection * fix(auth): fetch user info after login and setup so isAdmin is set correctly * feat(pricing): revise pricing strategy and enforce variant-based seat limits Raise Personal Pro from $49/yr to $69/yr with 3 viewer seats (up from 1). Add $15/mo billing option for Team Pro. Mark lifetime pricing as a 90-day early-adopter offer. Store Lemon Squeezy variant_name on activation/validation and enforce seat limits server-side per variant. * feat(licensing): add Lemon Squeezy checkout, webhook, and billing portal integration Server-side checkout URL generation (POST /api/checkout) with admin email pre-fill and instance_id custom data. HMAC-SHA256 verified webhook endpoint (POST /api/webhooks/lemonsqueezy) handling order, subscription, and payment lifecycle events for automatic license activation. Customer billing portal link stored from webhook events and exposed via GET /api/billing/portal. In-app checkout buttons in Settings with manual license key fallback. * fix(licensing): exempt Lemon Squeezy webhook from auth middleware The catch-all auth middleware on /api/* was blocking the public webhook endpoint. Added /webhooks/lemonsqueezy to the exemption list alongside /auth/* and /webhooks/:id/trigger. * feat(pricing): update pricing to final live rates Personal Pro: $7.99/month, $69.99/year, $249 lifetime. Team Pro: $49.99/month, $499.99/year, $1,499 lifetime. Added personal_monthly checkout variant across backend, frontend, and website. * refactor(licensing): remove server-side checkout/webhook for self-hosted model Sencho is self-hosted — each user runs their own instance, so there is no central server to receive webhooks or hold the store API key. Replaced in-app checkout buttons with a "View Pricing" redirect to sencho.io and kept manual license key activation as the primary flow. - Delete LemonSqueezyService (checkout, webhook, HMAC verification) - Remove POST /api/checkout, GET /api/billing/portal, POST /api/webhooks/lemonsqueezy - Remove raw body parser and auth exemption for webhook route - Remove all LEMONSQUEEZY_* env vars from .env.example - Replace checkout buttons in SettingsModal with single "View Pricing" button - Simplify LicenseContext checkout to open sencho.io pricing page - Update licensing docs to reflect website-based purchase flow * chore: normalize em-dashes to hyphens across codebase (linter) * chore: remove accidentally tracked directories from index
83 lines
3.4 KiB
TypeScript
83 lines
3.4 KiB
TypeScript
/**
|
|
* Stack management E2E tests - happy path CRUD.
|
|
*/
|
|
import { test, expect } from '@playwright/test';
|
|
import { loginAs } from './helpers';
|
|
|
|
const TEST_STACK = 'e2e-test-stack';
|
|
|
|
/** Wait for the stacks sidebar to finish loading (skeletons replaced with actual stack list). */
|
|
async function waitForStacksLoaded(page: import('@playwright/test').Page) {
|
|
await expect(page.getByRole('button', { name: 'Create Stack' })).toBeVisible({ timeout: 15_000 });
|
|
// The CommandList has data-stacks-loaded="true" once the async refreshStacks() completes.
|
|
// Without this, tests can race against the loading state and miss newly created stacks.
|
|
await expect(page.locator('[data-stacks-loaded="true"]')).toBeAttached({ timeout: 15_000 });
|
|
}
|
|
|
|
/** Delete the test stack via the browser's authenticated fetch (so cookies are included). */
|
|
async function deleteTestStackViaApi(page: import('@playwright/test').Page) {
|
|
await page.evaluate(async (name) => {
|
|
await fetch(`/api/stacks/${name}`, { method: 'DELETE', credentials: 'include' }).catch(() => { });
|
|
}, TEST_STACK);
|
|
}
|
|
|
|
test.describe('Stack management', () => {
|
|
test.beforeEach(async ({ page }) => {
|
|
await loginAs(page);
|
|
await waitForStacksLoaded(page);
|
|
});
|
|
|
|
test('create a new stack', async ({ page }) => {
|
|
// Remove leftover from prior runs (using browser context auth)
|
|
await deleteTestStackViaApi(page);
|
|
await page.waitForTimeout(500);
|
|
|
|
// Reload to get a fresh sidebar without the deleted stack
|
|
await page.reload();
|
|
await loginAs(page); // may re-login if cookie expired, otherwise skips to dashboard
|
|
await waitForStacksLoaded(page);
|
|
|
|
await page.getByRole('button', { name: 'Create Stack' }).click();
|
|
await expect(page.getByRole('dialog')).toBeVisible({ timeout: 5_000 });
|
|
|
|
await page.locator('#create-stack-name').fill(TEST_STACK);
|
|
await page.locator('[role="dialog"]').getByRole('button', { name: 'Create' }).click();
|
|
|
|
// Wait for dialog to close (success) or error message to appear (failure)
|
|
await Promise.race([
|
|
page.getByRole('dialog').waitFor({ state: 'hidden', timeout: 8_000 }),
|
|
page.getByText(/already exists/i).waitFor({ state: 'visible', timeout: 8_000 }),
|
|
]).catch(() => { });
|
|
|
|
// The stack should now exist - refresh and verify via the sidebar
|
|
await page.reload();
|
|
await loginAs(page);
|
|
await waitForStacksLoaded(page);
|
|
|
|
await expect(page.getByText(TEST_STACK).first()).toBeVisible({ timeout: 5_000 });
|
|
});
|
|
|
|
test('delete the test stack', async ({ page }) => {
|
|
// Confirm the stack exists in the sidebar
|
|
await expect(page.getByText(TEST_STACK).first()).toBeVisible({ timeout: 5_000 });
|
|
|
|
// Click on the stack to open the editor
|
|
await page.getByText(TEST_STACK).first().click();
|
|
|
|
// The toolbar Delete button has the Lucide Trash2 icon
|
|
const deleteBtn = page.locator('button:has(.lucide-trash-2)');
|
|
await expect(deleteBtn).toBeVisible({ timeout: 10_000 });
|
|
await deleteBtn.click();
|
|
|
|
// AlertDialog confirmation
|
|
await expect(page.getByRole('alertdialog')).toBeVisible({ timeout: 5_000 });
|
|
await page.getByRole('alertdialog').getByRole('button', { name: 'Delete' }).click();
|
|
|
|
// Stack should no longer appear in the sidebar (exact match to avoid false positives from
|
|
// similarly-named stacks; scoped to the CommandList)
|
|
await expect(
|
|
page.locator('[role="listbox"]').getByText(TEST_STACK, { exact: true })
|
|
).not.toBeVisible({ timeout: 8_000 });
|
|
});
|
|
});
|