mirror of
https://github.com/Studio-Saelix/sencho.git
synced 2026-08-09 10:21:03 +00:00
865d792874
* feat(pricing): collapse to two tiers (Community + Admiral) Collapse Sencho's pricing from three tiers (Community / Skipper / Admiral) to two: a generous free Community tier and a single paid Admiral tier. The Skipper tier is removed. Now free in Community: auto-heal, auto-update, scheduled operations, webhooks, notification routing, Fleet Actions and bulk operations, SSO preset providers (Google / GitHub / Okta), unlimited users with admin and viewer roles, and deploy safety (atomic deploys, auto-rollback, and one-click rollback). Admiral (paid) is focused on running and governing a fleet: blueprints, Fleet Secrets, deploy enforcement, vulnerability report export, audit log, host console, private registries, mesh networking, node cordon, managed cloud backup, LDAP / Active Directory SSO, and the advanced RBAC roles (deployer, node-admin, auditor) with per-resource scoped assignments. Internally the license variant distinction is removed so tier is binary (community / paid). License validation still verifies the Lemon Squeezy store and product before granting paid status. Docs and the contributor guide are updated to the two-tier model. * docs(pricing): correct licensing page to two-tier pricing and tidy stale tier wording The licensing docs page kept the old Admiral pricing plus a Founder Lifetime column and an Enterprise paragraph after the two-tier collapse. Update it to $12/month or $99/year, drop the lifetime and Enterprise content, and link to the pricing page for current pricing. Also fix stale "Skipper" wording in CLA.md, SUPPORT.md, one test title, and three test comments. Historical CHANGELOG entries and the retired-Skipper license-guard test are intentionally left as-is. * docs: align licensing and SSO pages with the two-tier model Correct the SSO overview so the Google, GitHub, and Okta presets read as available on every tier, matching the provider table; only LDAP and Active Directory require Sencho Admiral. Remove the lifetime-plan references from the licensing, settings, and troubleshooting pages so they reflect subscription-only Admiral pricing. * fix(rbac): omit scoped permissions from /me on the Community tier Scoped role assignments only take effect on the paid tier, but GET /api/permissions/me returned them unconditionally, so a downgraded instance with leftover assignments rendered per-resource affordances the API then rejected with 403. The endpoint now mirrors the permission middleware and includes scoped permissions only on the paid tier. Adds a regression test covering the downgrade case. * docs: use custom-pricing wording on the contact page The two-tier model has no Enterprise tier; reword the contact page's enterprise pricing/deals to custom pricing/deals so it does not imply a tier that no longer exists.
336 lines
14 KiB
TypeScript
336 lines
14 KiB
TypeScript
import { describe, it, expect, vi, beforeEach } from 'vitest';
|
|
import { renderHook, act } from '@testing-library/react';
|
|
import * as AuthContext from '@/context/AuthContext';
|
|
import * as LicenseContext from '@/context/LicenseContext';
|
|
import * as NodeContext from '@/context/NodeContext';
|
|
import { SENCHO_NAVIGATE_EVENT } from '@/components/NodeManager';
|
|
import { useViewNavigationState } from '../hooks/useViewNavigationState';
|
|
|
|
vi.mock('@/context/AuthContext');
|
|
vi.mock('@/context/LicenseContext');
|
|
vi.mock('@/context/NodeContext');
|
|
|
|
function mockActiveNode(type: 'local' | 'remote' | null) {
|
|
vi.mocked(NodeContext.useNodes).mockReturnValue({
|
|
activeNode: type === null ? null : { type, id: 1, name: 'n' },
|
|
} as unknown as ReturnType<typeof NodeContext.useNodes>);
|
|
}
|
|
|
|
function mockCommunityUser() {
|
|
vi.mocked(AuthContext.useAuth).mockReturnValue({
|
|
isAdmin: false,
|
|
can: () => false,
|
|
} as unknown as ReturnType<typeof AuthContext.useAuth>);
|
|
vi.mocked(LicenseContext.useLicense).mockReturnValue({
|
|
isPaid: false,
|
|
} as unknown as ReturnType<typeof LicenseContext.useLicense>);
|
|
}
|
|
|
|
function mockPaidAdmin() {
|
|
vi.mocked(AuthContext.useAuth).mockReturnValue({
|
|
isAdmin: true,
|
|
can: (p: string) => p === 'system:audit',
|
|
} as unknown as ReturnType<typeof AuthContext.useAuth>);
|
|
vi.mocked(LicenseContext.useLicense).mockReturnValue({
|
|
isPaid: true,
|
|
} as unknown as ReturnType<typeof LicenseContext.useLicense>);
|
|
}
|
|
|
|
function mockCommunityAdmin() {
|
|
vi.mocked(AuthContext.useAuth).mockReturnValue({
|
|
isAdmin: true,
|
|
can: () => false,
|
|
} as unknown as ReturnType<typeof AuthContext.useAuth>);
|
|
vi.mocked(LicenseContext.useLicense).mockReturnValue({
|
|
isPaid: false,
|
|
} as unknown as ReturnType<typeof LicenseContext.useLicense>);
|
|
}
|
|
|
|
describe('useViewNavigationState', () => {
|
|
beforeEach(() => {
|
|
mockCommunityUser();
|
|
mockActiveNode('local');
|
|
});
|
|
|
|
// ── initial state ──────────────────────────────────────────────────────────
|
|
|
|
it('returns default state on mount', () => {
|
|
const { result } = renderHook(() => useViewNavigationState());
|
|
expect(result.current.activeView).toBe('dashboard');
|
|
expect(result.current.settingsSection).toBe('appearance');
|
|
expect(result.current.securityHistoryOpen).toBe(false);
|
|
expect(result.current.filterNodeId).toBeNull();
|
|
expect(result.current.schedulePrefill).toBeNull();
|
|
expect(result.current.mobileNavOpen).toBe(false);
|
|
});
|
|
|
|
// ── handleNavigate ─────────────────────────────────────────────────────────
|
|
|
|
it('handleNavigate is a no-op when navigating to the current view', () => {
|
|
const onNavigateToDashboard = vi.fn();
|
|
const { result } = renderHook(() =>
|
|
useViewNavigationState({ onNavigateToDashboard }),
|
|
);
|
|
act(() => result.current.handleNavigate('dashboard'));
|
|
expect(onNavigateToDashboard).not.toHaveBeenCalled();
|
|
expect(result.current.activeView).toBe('dashboard');
|
|
});
|
|
|
|
it('handleNavigate to dashboard calls onNavigateToDashboard and sets activeView', () => {
|
|
const onNavigateToDashboard = vi.fn();
|
|
const { result } = renderHook(() =>
|
|
useViewNavigationState({ onNavigateToDashboard }),
|
|
);
|
|
// Navigate away first so dashboard→dashboard no-op guard does not fire
|
|
act(() => result.current.handleNavigate('fleet'));
|
|
expect(result.current.activeView).toBe('fleet');
|
|
|
|
act(() => result.current.handleNavigate('dashboard'));
|
|
expect(onNavigateToDashboard).toHaveBeenCalledOnce();
|
|
expect(result.current.activeView).toBe('dashboard');
|
|
});
|
|
|
|
it('handleNavigate to a non-dashboard view sets activeView and clears filterNodeId', () => {
|
|
const { result } = renderHook(() => useViewNavigationState());
|
|
act(() => {
|
|
window.dispatchEvent(
|
|
new CustomEvent(SENCHO_NAVIGATE_EVENT, { detail: { view: 'fleet', nodeId: 42 } }),
|
|
);
|
|
});
|
|
expect(result.current.filterNodeId).toBe(42);
|
|
|
|
act(() => result.current.handleNavigate('resources'));
|
|
expect(result.current.activeView).toBe('resources');
|
|
expect(result.current.filterNodeId).toBeNull();
|
|
});
|
|
|
|
// ── handleOpenSettings ─────────────────────────────────────────────────────
|
|
|
|
it('handleOpenSettings navigates to settings and clears filterNodeId', () => {
|
|
const { result } = renderHook(() => useViewNavigationState());
|
|
act(() => {
|
|
window.dispatchEvent(
|
|
new CustomEvent(SENCHO_NAVIGATE_EVENT, { detail: { view: 'fleet', nodeId: 7 } }),
|
|
);
|
|
});
|
|
act(() => result.current.handleOpenSettings());
|
|
expect(result.current.activeView).toBe('settings');
|
|
expect(result.current.filterNodeId).toBeNull();
|
|
});
|
|
|
|
it('handleOpenSettings with a section updates settingsSection', () => {
|
|
const { result } = renderHook(() => useViewNavigationState());
|
|
act(() => result.current.handleOpenSettings('nodes'));
|
|
expect(result.current.settingsSection).toBe('nodes');
|
|
expect(result.current.activeView).toBe('settings');
|
|
});
|
|
|
|
it('handleOpenSettings without a section does not change settingsSection', () => {
|
|
const { result } = renderHook(() => useViewNavigationState());
|
|
act(() => result.current.handleOpenSettings('labels'));
|
|
act(() => result.current.handleOpenSettings());
|
|
expect(result.current.settingsSection).toBe('labels');
|
|
expect(result.current.activeView).toBe('settings');
|
|
});
|
|
|
|
// ── handlePrefillConsumed ──────────────────────────────────────────────────
|
|
|
|
it('handlePrefillConsumed clears schedulePrefill', () => {
|
|
const { result } = renderHook(() => useViewNavigationState());
|
|
act(() => result.current.setSchedulePrefill({ stackName: 'web.yml', nodeId: 1 }));
|
|
expect(result.current.schedulePrefill).toEqual({ stackName: 'web.yml', nodeId: 1 });
|
|
act(() => result.current.handlePrefillConsumed());
|
|
expect(result.current.schedulePrefill).toBeNull();
|
|
});
|
|
|
|
// ── SENCHO_NAVIGATE_EVENT ──────────────────────────────────────────────────
|
|
|
|
it('SENCHO_NAVIGATE_EVENT sets activeView and filterNodeId', () => {
|
|
const { result } = renderHook(() => useViewNavigationState());
|
|
act(() => {
|
|
window.dispatchEvent(
|
|
new CustomEvent(SENCHO_NAVIGATE_EVENT, { detail: { view: 'fleet', nodeId: 5 } }),
|
|
);
|
|
});
|
|
expect(result.current.activeView).toBe('fleet');
|
|
expect(result.current.filterNodeId).toBe(5);
|
|
});
|
|
|
|
it('SENCHO_NAVIGATE_EVENT with security-history opens the sheet without changing activeView', () => {
|
|
const { result } = renderHook(() => useViewNavigationState());
|
|
act(() => {
|
|
window.dispatchEvent(
|
|
new CustomEvent(SENCHO_NAVIGATE_EVENT, { detail: { view: 'security-history', nodeId: 3 } }),
|
|
);
|
|
});
|
|
expect(result.current.securityHistoryOpen).toBe(true);
|
|
expect(result.current.filterNodeId).toBe(3);
|
|
expect(result.current.activeView).toBe('dashboard');
|
|
});
|
|
|
|
it('SENCHO_NAVIGATE_EVENT with no nodeId sets filterNodeId to null', () => {
|
|
const { result } = renderHook(() => useViewNavigationState());
|
|
act(() => {
|
|
window.dispatchEvent(
|
|
new CustomEvent(SENCHO_NAVIGATE_EVENT, { detail: { view: 'fleet', nodeId: 9 } }),
|
|
);
|
|
});
|
|
act(() => {
|
|
window.dispatchEvent(
|
|
new CustomEvent(SENCHO_NAVIGATE_EVENT, { detail: { view: 'resources' } }),
|
|
);
|
|
});
|
|
expect(result.current.filterNodeId).toBeNull();
|
|
});
|
|
|
|
it('cleans up SENCHO_NAVIGATE_EVENT listener on unmount', () => {
|
|
const { result, unmount } = renderHook(() => useViewNavigationState());
|
|
unmount();
|
|
act(() => {
|
|
window.dispatchEvent(
|
|
new CustomEvent(SENCHO_NAVIGATE_EVENT, { detail: { view: 'fleet' } }),
|
|
);
|
|
});
|
|
expect(result.current.activeView).toBe('dashboard');
|
|
});
|
|
|
|
// ── navItems: community user ───────────────────────────────────────────────
|
|
|
|
it('navItems for community non-admin user contains base items only and hides admin-only Logs', () => {
|
|
const { result } = renderHook(() => useViewNavigationState());
|
|
const values = result.current.navItems.map(i => i.value);
|
|
expect(values).toContain('dashboard');
|
|
expect(values).toContain('fleet');
|
|
expect(values).toContain('resources');
|
|
expect(values).toContain('templates');
|
|
// Logs is an admin-only operator view; a non-admin must not see the entry.
|
|
expect(values).not.toContain('global-observability');
|
|
expect(values).not.toContain('auto-updates');
|
|
expect(values).not.toContain('host-console');
|
|
expect(values).not.toContain('audit-log');
|
|
expect(values).not.toContain('scheduled-ops');
|
|
});
|
|
|
|
it('shows the admin-only Logs entry for an admin on any tier (role gate, not tier gate)', () => {
|
|
mockCommunityAdmin();
|
|
const { result } = renderHook(() => useViewNavigationState());
|
|
expect(result.current.navItems.map(i => i.value)).toContain('global-observability');
|
|
});
|
|
|
|
it('shows Auto-Update and Schedules for a community admin (now free) but hides paid Console and Audit', () => {
|
|
mockCommunityAdmin();
|
|
const { result } = renderHook(() => useViewNavigationState());
|
|
const values = result.current.navItems.map(i => i.value);
|
|
expect(values).toContain('auto-updates');
|
|
expect(values).toContain('scheduled-ops');
|
|
expect(values).not.toContain('host-console');
|
|
expect(values).not.toContain('audit-log');
|
|
});
|
|
|
|
it('redirects a non-admin off the Logs view when reached via a deep-link event', () => {
|
|
const onNavigateToDashboard = vi.fn();
|
|
// Community (non-admin) is the beforeEach default.
|
|
const { result } = renderHook(() => useViewNavigationState({ onNavigateToDashboard }));
|
|
act(() => {
|
|
window.dispatchEvent(
|
|
new CustomEvent(SENCHO_NAVIGATE_EVENT, { detail: { view: 'global-observability' } }),
|
|
);
|
|
});
|
|
expect(result.current.activeView).toBe('dashboard');
|
|
expect(onNavigateToDashboard).toHaveBeenCalled();
|
|
});
|
|
|
|
// ── navItems: paid admin ───────────────────────────────────────────────────
|
|
|
|
it('navItems for a paid admin contains all items', () => {
|
|
mockPaidAdmin();
|
|
const { result } = renderHook(() => useViewNavigationState());
|
|
const values = result.current.navItems.map(i => i.value);
|
|
expect(values).toContain('auto-updates');
|
|
expect(values).toContain('host-console');
|
|
expect(values).toContain('audit-log');
|
|
expect(values).toContain('scheduled-ops');
|
|
});
|
|
|
|
// ── navItems: hub-only gating on remote node ───────────────────────────────
|
|
|
|
it('hides hub-only views from the nav strip when active node is remote', () => {
|
|
mockPaidAdmin();
|
|
mockActiveNode('remote');
|
|
const { result } = renderHook(() => useViewNavigationState());
|
|
const values = result.current.navItems.map(i => i.value);
|
|
expect(values).not.toContain('fleet');
|
|
expect(values).not.toContain('scheduled-ops');
|
|
expect(values).not.toContain('audit-log');
|
|
expect(values).not.toContain('global-observability');
|
|
expect(values).not.toContain('auto-updates');
|
|
// Node-level views remain visible.
|
|
expect(values).toContain('dashboard');
|
|
expect(values).toContain('resources');
|
|
expect(values).toContain('templates');
|
|
expect(values).toContain('host-console');
|
|
});
|
|
|
|
it('shows hub-only views again when active node switches back to local', () => {
|
|
mockPaidAdmin();
|
|
mockActiveNode('remote');
|
|
const { result, rerender } = renderHook(() => useViewNavigationState());
|
|
expect(result.current.navItems.map(i => i.value)).not.toContain('fleet');
|
|
|
|
mockActiveNode('local');
|
|
rerender();
|
|
const values = result.current.navItems.map(i => i.value);
|
|
expect(values).toContain('fleet');
|
|
expect(values).toContain('scheduled-ops');
|
|
expect(values).toContain('audit-log');
|
|
});
|
|
|
|
// ── auto-redirect when on a hub-only view and node switches to remote ──────
|
|
|
|
it('auto-redirects to dashboard when active view is hub-only and node becomes remote', () => {
|
|
const onNavigateToDashboard = vi.fn();
|
|
mockPaidAdmin();
|
|
mockActiveNode('local');
|
|
const { result, rerender } = renderHook(() =>
|
|
useViewNavigationState({ onNavigateToDashboard }),
|
|
);
|
|
|
|
act(() => {
|
|
window.dispatchEvent(
|
|
new CustomEvent(SENCHO_NAVIGATE_EVENT, { detail: { view: 'fleet', nodeId: 7 } }),
|
|
);
|
|
});
|
|
expect(result.current.activeView).toBe('fleet');
|
|
expect(result.current.filterNodeId).toBe(7);
|
|
|
|
mockActiveNode('remote');
|
|
rerender();
|
|
|
|
expect(result.current.activeView).toBe('dashboard');
|
|
expect(result.current.filterNodeId).toBeNull();
|
|
expect(onNavigateToDashboard).toHaveBeenCalledOnce();
|
|
});
|
|
|
|
it('does not redirect when a non-hub-only view is active and node becomes remote', () => {
|
|
const onNavigateToDashboard = vi.fn();
|
|
mockPaidAdmin();
|
|
mockActiveNode('local');
|
|
const { result, rerender } = renderHook(() =>
|
|
useViewNavigationState({ onNavigateToDashboard }),
|
|
);
|
|
|
|
act(() => {
|
|
window.dispatchEvent(
|
|
new CustomEvent(SENCHO_NAVIGATE_EVENT, { detail: { view: 'resources' } }),
|
|
);
|
|
});
|
|
expect(result.current.activeView).toBe('resources');
|
|
|
|
mockActiveNode('remote');
|
|
rerender();
|
|
|
|
expect(result.current.activeView).toBe('resources');
|
|
expect(onNavigateToDashboard).not.toHaveBeenCalled();
|
|
});
|
|
});
|