@maestro-js/agent-skills 1.0.0-alpha.2 → 1.0.0-alpha.21

package/skills/maestro-examples/references/cadence/cadence-web/tests/auth/register.spec.ts

@@ -0,0 +1,39 @@
+import { test, expect } from '@playwright/test'
+import { H } from '@cadence/services'
+
+test.use({ storageState: { cookies: [], origins: [] } })
+
+const uniqueSlug = `reg-test-${Date.now()}`
+const uniqueOrgName = `Register Test ${Date.now()}`
+
+// Clean up the seeded org after the test
+const orgSeed = H.OrganizationSeed({ id: 0, slug: uniqueSlug })
+
+test.afterAll(async () => {
+  // Best-effort teardown; the org may have a different id than 0 since it was created via the UI
+  try {
+    await orgSeed.teardown()
+  } catch {
+    // Ignore cleanup errors
+  }
+})
+
+test('can register a new organization and auto-login', async ({ page }) => {
+  await page.goto('/auth/register')
+  await page.waitForLoadState('networkidle')
+
+  await page.getByLabel('Organization name').fill(uniqueOrgName)
+  await page.getByLabel('Organization slug').clear()
+  await page.getByLabel('Organization slug').fill(uniqueSlug)
+  await page.getByLabel('Your name').fill('Register Admin')
+  await page.getByLabel('Email address').fill(`reg-admin-${Date.now()}@cadence.example.com`)
+  await page.getByLabel('Password', { exact: true }).fill('password123')
+  await page.getByLabel('Confirm password').fill('password123')
+  await page.getByRole('button', { name: 'Create organization' }).click()
+
+  // Should auto-login and redirect to /contacts
+  await page.waitForURL('/contacts')
+
+  // Sidebar shows new org name
+  await expect(page.getByText(uniqueOrgName)).toBeVisible()
+})

package/skills/maestro-examples/references/cadence/cadence-web/tests/auth.setup.ts

@@ -0,0 +1,48 @@
+import { test as setup, expect } from '@playwright/test'
+import { H } from '@cadence/services'
+import { TEST_CONSTANTS } from './constants'
+
+const authFile = '.auth/user.json'
+
+const seedData = H.SeedPipe(
+  H.OrganizationSeed({
+    id: TEST_CONSTANTS.orgId,
+    name: TEST_CONSTANTS.orgName,
+    slug: TEST_CONSTANTS.orgSlug
+  }),
+  H.UserSeed({
+    id: TEST_CONSTANTS.userId,
+    organizationId: TEST_CONSTANTS.orgId,
+    name: TEST_CONSTANTS.userName,
+    email: TEST_CONSTANTS.email,
+    passwordHash: TEST_CONSTANTS.passwordHash,
+    role: 'admin'
+  })
+)
+
+setup.beforeAll(async () => {
+  await seedData.setup()
+})
+
+setup('authenticate', async ({ page }) => {
+  // Warm up Vite dev server
+  for (let i = 0; i < 3; i++) {
+    try {
+      await page.goto('/', { timeout: 10000 })
+      await page.waitForLoadState('networkidle')
+      break
+    } catch {
+      await page.waitForTimeout(3000)
+    }
+  }
+
+  await page.goto('/auth/login')
+  await page.waitForLoadState('networkidle')
+  await page.getByLabel('Organization slug').fill(TEST_CONSTANTS.orgSlug)
+  await page.getByLabel('Email address').fill(TEST_CONSTANTS.email)
+  await page.getByLabel('Password').fill(TEST_CONSTANTS.password)
+  await page.getByRole('button', { name: 'Sign in' }).click()
+  await page.waitForURL('/contacts')
+
+  await page.context().storageState({ path: authFile })
+})

package/skills/maestro-examples/references/cadence/cadence-web/tests/authorization/member-ownership.spec.ts

@@ -0,0 +1,104 @@
+import { test, expect } from '@playwright/test'
+import { H } from '@cadence/services'
+import { instantFns } from 'iso-fns'
+import { TEST_CONSTANTS } from '../constants'
+
+const orgId = TEST_CONSTANTS.orgId
+
+// Use clean storage state (not the default admin auth)
+test.use({ storageState: { cookies: [], origins: [] } })
+
+const seedData = H.SeedPipe(
+  H.OrganizationSeed({
+    id: TEST_CONSTANTS.orgId,
+    name: TEST_CONSTANTS.orgName,
+    slug: TEST_CONSTANTS.orgSlug
+  }),
+  H.UserSeed({
+    id: TEST_CONSTANTS.userId,
+    organizationId: TEST_CONSTANTS.orgId,
+    name: TEST_CONSTANTS.userName,
+    email: TEST_CONSTANTS.email,
+    passwordHash: TEST_CONSTANTS.passwordHash,
+    role: 'admin'
+  }),
+  H.UserSeed({
+    id: 10300,
+    organizationId: orgId,
+    name: 'Member A',
+    email: 'member-a@cadence.example.com',
+    passwordHash: TEST_CONSTANTS.passwordHash,
+    role: 'member'
+  }),
+  H.UserSeed({
+    id: 10301,
+    organizationId: orgId,
+    name: 'Member B',
+    email: 'member-b@cadence.example.com',
+    passwordHash: TEST_CONSTANTS.passwordHash,
+    role: 'member'
+  }),
+  H.ContactSeed({
+    id: 10300,
+    organizationId: orgId,
+    firstName: 'Ownership',
+    lastName: 'TestContact'
+  }),
+  H.InteractionSeed({
+    id: 10300,
+    contactId: 10300,
+    userId: 10300,
+    type: 'note',
+    body: '<p>Member A note</p>',
+    date: instantFns.now()
+  })
+)
+
+test.beforeAll(async () => {
+  await seedData.setup()
+})
+
+test.afterAll(async () => {
+  await seedData.teardown()
+})
+
+async function loginAs(page: any, email: string) {
+  await page.goto('/auth/login')
+  await page.waitForLoadState('networkidle')
+  await page.getByLabel('Organization slug').fill(TEST_CONSTANTS.orgSlug)
+  await page.getByLabel('Email address').fill(email)
+  await page.getByLabel('Password').fill(TEST_CONSTANTS.password)
+  await page.getByRole('button', { name: 'Sign in' }).click()
+  await page.waitForURL('/contacts')
+}
+
+test('member B cannot edit or delete member A interaction', async ({ page }) => {
+  await loginAs(page, 'member-b@cadence.example.com')
+
+  await page.goto('/contacts/10300')
+  await page.waitForLoadState('networkidle')
+
+  // The interaction body should be visible
+  await expect(page.getByText('Member A note')).toBeVisible()
+
+  // Member B should NOT see Edit or Delete buttons on Member A's interaction
+  const interactionCard = page.locator('.rounded-lg.border-neutral-200').filter({ hasText: 'Member A note' })
+  await expect(interactionCard.getByRole('button', { name: 'Edit' })).not.toBeVisible()
+  await expect(interactionCard.getByRole('button', { name: 'Delete' })).not.toBeVisible()
+})
+
+test('admin can edit and delete any member interaction', async ({ page }) => {
+  // Log in as the default admin user
+  await loginAs(page, TEST_CONSTANTS.email)
+
+  await page.goto('/contacts/10300')
+  await page.waitForLoadState('networkidle')
+
+  // The interaction body should be visible
+  await expect(page.getByText('Member A note')).toBeVisible()
+
+  // Admin should see Edit and Delete buttons on Member A's interaction
+  const interactionCard = page.locator('.rounded-lg.border-neutral-200').filter({ hasText: 'Member A note' })
+  await expect(interactionCard.getByRole('button', { name: 'Edit' })).toBeVisible()
+  await expect(interactionCard.getByRole('button', { name: 'Delete' })).toBeVisible()
+})

package/skills/maestro-examples/references/cadence/cadence-web/tests/authorization/viewer-read-only.spec.ts

@@ -0,0 +1,103 @@
+import { test, expect } from '@playwright/test'
+import { H } from '@cadence/services'
+import { TEST_CONSTANTS } from '../constants'
+
+const orgId = TEST_CONSTANTS.orgId
+
+// Use clean storage state (not the default admin auth)
+test.use({ storageState: { cookies: [], origins: [] } })
+
+const seedData = H.SeedPipe(
+  H.OrganizationSeed({
+    id: TEST_CONSTANTS.orgId,
+    name: TEST_CONSTANTS.orgName,
+    slug: TEST_CONSTANTS.orgSlug
+  }),
+  H.UserSeed({
+    id: 10200,
+    organizationId: orgId,
+    name: 'Viewer User',
+    email: 'viewer@cadence.example.com',
+    passwordHash: TEST_CONSTANTS.passwordHash,
+    role: 'viewer'
+  }),
+  H.ContactSeed({
+    id: 10200,
+    organizationId: orgId,
+    firstName: 'Viewer',
+    lastName: 'TestContact'
+  })
+)
+
+test.beforeAll(async () => {
+  await seedData.setup()
+})
+
+test.afterAll(async () => {
+  await seedData.teardown()
+})
+
+async function loginAsViewer(page: any) {
+  await page.goto('/auth/login')
+  await page.waitForLoadState('networkidle')
+  await page.getByLabel('Organization slug').fill(TEST_CONSTANTS.orgSlug)
+  await page.getByLabel('Email address').fill('viewer@cadence.example.com')
+  await page.getByLabel('Password').fill(TEST_CONSTANTS.password)
+  await page.getByRole('button', { name: 'Sign in' }).click()
+  await page.waitForURL('/contacts')
+}
+
+test('viewer cannot see New Contact button on contacts page', async ({ page }) => {
+  await loginAsViewer(page)
+
+  await expect(page.getByRole('button', { name: 'New Contact' })).not.toBeVisible()
+  await expect(page.getByRole('link', { name: 'New Contact' })).not.toBeVisible()
+})
+
+test('viewer cannot see edit/archive/delete or interaction buttons on contact detail', async ({ page }) => {
+  await loginAsViewer(page)
+
+  await page.goto('/contacts/10200')
+  await page.waitForLoadState('networkidle')
+
+  // Contact info should be visible
+  await expect(page.getByText('Viewer TestContact')).toBeVisible()
+
+  // No Edit, Archive, Delete buttons
+  await expect(page.getByRole('link', { name: 'Edit' })).not.toBeVisible()
+  await expect(page.getByRole('button', { name: 'Archive' })).not.toBeVisible()
+  await expect(page.getByRole('button', { name: 'Delete' })).not.toBeVisible()
+
+  // No Log Email / Log Note buttons
+  await expect(page.getByRole('button', { name: 'Log Email' })).not.toBeVisible()
+  await expect(page.getByRole('button', { name: 'Log Note' })).not.toBeVisible()
+})
+
+test('viewer cannot see invite form on users page', async ({ page }) => {
+  await loginAsViewer(page)
+
+  await page.goto('/users')
+  await page.waitForLoadState('networkidle')
+
+  // Users heading should be visible
+  await expect(page.getByRole('heading', { name: 'Users' })).toBeVisible()
+
+  // No invite form
+  await expect(page.getByText('Invite user')).not.toBeVisible()
+})
+
+test('viewer cannot see edit or delete on settings page', async ({ page }) => {
+  await loginAsViewer(page)
+
+  await page.goto('/settings')
+  await page.waitForLoadState('networkidle')
+
+  // Settings heading visible
+  await expect(page.getByText('Organization Settings')).toBeVisible()
+
+  // No Save button (edit form)
+  await expect(page.getByRole('button', { name: 'Save changes' })).not.toBeVisible()
+
+  // No Delete organization button
+  await expect(page.getByRole('button', { name: 'Delete' })).not.toBeVisible()
+})

package/skills/maestro-examples/references/cadence/cadence-web/tests/constants.ts

@@ -0,0 +1,11 @@
+export const TEST_CONSTANTS = {
+  orgSlug: 'e2e-test-org',
+  orgName: 'E2E Test Org',
+  orgId: 1000,
+  email: 'e2etest@cadence.example.com',
+  password: 'password123',
+  passwordHash: '$2b$12$INJ2/8QWIwTkmpLWQ1wMmeBPVvDpZstXucYx355vjdonr1nBAuj8a',
+  userId: 1000,
+  userName: 'E2E Test Admin',
+  baseURL: 'http://localhost:3000'
+}

package/skills/maestro-examples/references/cadence/cadence-web/tests/contacts/archive-restore.spec.ts

@@ -0,0 +1,77 @@
+import { test, expect } from '@playwright/test'
+import { H } from '@cadence/services'
+import { TEST_CONSTANTS } from '../constants'
+
+const contactId = 8900
+
+const seedData = H.SeedPipe(
+  H.OrganizationSeed({
+    id: TEST_CONSTANTS.orgId,
+    name: TEST_CONSTANTS.orgName,
+    slug: TEST_CONSTANTS.orgSlug
+  }),
+  H.UserSeed({
+    id: TEST_CONSTANTS.userId,
+    organizationId: TEST_CONSTANTS.orgId,
+    name: TEST_CONSTANTS.userName,
+    email: TEST_CONSTANTS.email,
+    passwordHash: TEST_CONSTANTS.passwordHash,
+    role: 'admin'
+  }),
+  H.ContactSeed({
+    id: contactId,
+    organizationId: TEST_CONSTANTS.orgId,
+    firstName: 'Evan',
+    lastName: 'Park',
+    email: 'evan.park@example.com'
+  })
+)
+
+test.beforeAll(async () => {
+  await seedData.setup()
+})
+
+test.afterAll(async () => {
+  await seedData.teardown()
+})
+
+test('archive a contact, verify in archive, then restore', async ({ page }) => {
+  // Go to the contact detail page and archive it
+  await page.goto(`/contacts/${contactId}`)
+  await page.waitForLoadState('networkidle')
+  await expect(page.getByRole('heading', { name: 'Evan Park' })).toBeVisible()
+
+  await page.getByRole('button', { name: 'Archive' }).click()
+
+  // Should stay on the detail page with archived notice
+  await page.waitForURL(`/contacts/${contactId}`)
+  await expect(page.getByText('Contact archived')).toBeVisible()
+
+  // Verify the contact is gone from /contacts
+  await page.goto('/contacts')
+  await page.waitForLoadState('networkidle')
+  await expect(page.getByText('Evan Park')).not.toBeVisible()
+
+  // Verify the contact is in /archive
+  await page.goto('/archive')
+  await page.waitForLoadState('networkidle')
+  await expect(page.getByText('Evan Park')).toBeVisible()
+
+  // Restore from the archive table
+  const archiveRow = page.getByRole('row').filter({ hasText: 'Evan Park' })
+  await archiveRow.getByRole('button', { name: 'Restore' }).click()
+
+  // Should redirect to the contact detail with restore toast
+  await page.waitForURL(`/contacts/${contactId}`)
+  await expect(page.getByText('Contact restored')).toBeVisible()
+
+  // Verify the contact is back in /contacts
+  await page.goto('/contacts')
+  await page.waitForLoadState('networkidle')
+  await expect(page.getByText('Evan Park')).toBeVisible()
+
+  // Verify the contact is gone from /archive
+  await page.goto('/archive')
+  await page.waitForLoadState('networkidle')
+  await expect(page.getByText('Evan Park')).not.toBeVisible()
+})

package/skills/maestro-examples/references/cadence/cadence-web/tests/contacts/create-contact.spec.ts

@@ -0,0 +1,56 @@
+import { test, expect } from '@playwright/test'
+import { H } from '@cadence/services'
+import { TEST_CONSTANTS } from '../constants'
+
+const seedData = H.SeedPipe(
+  H.OrganizationSeed({
+    id: TEST_CONSTANTS.orgId,
+    name: TEST_CONSTANTS.orgName,
+    slug: TEST_CONSTANTS.orgSlug
+  }),
+  H.UserSeed({
+    id: TEST_CONSTANTS.userId,
+    organizationId: TEST_CONSTANTS.orgId,
+    name: TEST_CONSTANTS.userName,
+    email: TEST_CONSTANTS.email,
+    passwordHash: TEST_CONSTANTS.passwordHash,
+    role: 'admin'
+  })
+)
+
+test.beforeAll(async () => {
+  await seedData.setup()
+})
+
+test.afterAll(async () => {
+  await seedData.teardown()
+})
+
+test('create a new contact via the form', async ({ page }) => {
+  await page.goto('/contacts')
+  await page.waitForLoadState('networkidle')
+
+  // Click "New Contact" button
+  await page.getByRole('link', { name: 'New Contact' }).first().click()
+  await page.waitForURL('/contacts/new')
+
+  // Fill out the form
+  await page.getByLabel('First name').fill('Alice')
+  await page.getByLabel('Last name').fill('Johnson')
+  await page.getByLabel('Email').fill('alice.johnson@example.com')
+
+  // Submit
+  await page.getByRole('button', { name: 'Create Contact' }).click()
+
+  // Should redirect to the detail page
+  await page.waitForURL(/\/contacts\/\d+/)
+
+  // Verify contact info is displayed on the detail page
+  await expect(page.getByRole('heading', { name: 'Alice Johnson' })).toBeVisible()
+  await expect(page.getByText('alice.johnson@example.com')).toBeVisible()
+
+  // Navigate back to the list and verify the contact appears
+  await page.goto('/contacts')
+  await page.waitForLoadState('networkidle')
+  await expect(page.getByText('Alice Johnson')).toBeVisible()
+})

package/skills/maestro-examples/references/cadence/cadence-web/tests/contacts/delete-contact.spec.ts

@@ -0,0 +1,53 @@
+import { test, expect } from '@playwright/test'
+import { H } from '@cadence/services'
+import { TEST_CONSTANTS } from '../constants'
+
+const contactId = 9000
+
+const seedData = H.SeedPipe(
+  H.OrganizationSeed({
+    id: TEST_CONSTANTS.orgId,
+    name: TEST_CONSTANTS.orgName,
+    slug: TEST_CONSTANTS.orgSlug
+  }),
+  H.UserSeed({
+    id: TEST_CONSTANTS.userId,
+    organizationId: TEST_CONSTANTS.orgId,
+    name: TEST_CONSTANTS.userName,
+    email: TEST_CONSTANTS.email,
+    passwordHash: TEST_CONSTANTS.passwordHash,
+    role: 'admin'
+  }),
+  H.ContactSeed({
+    id: contactId,
+    organizationId: TEST_CONSTANTS.orgId,
+    firstName: 'Fiona',
+    lastName: 'Grant',
+    email: 'fiona.grant@example.com'
+  })
+)
+
+test.beforeAll(async () => {
+  await seedData.setup()
+})
+
+test.afterAll(async () => {
+  await seedData.teardown()
+})
+
+test('delete a contact from the detail page', async ({ page }) => {
+  // Go to the contact detail page
+  await page.goto(`/contacts/${contactId}`)
+  await page.waitForLoadState('networkidle')
+  await expect(page.getByRole('heading', { name: 'Fiona Grant' })).toBeVisible()
+
+  // Click the Delete button
+  await page.getByRole('button', { name: 'Delete' }).click()
+
+  // Should redirect to /contacts with toast
+  await page.waitForURL('/contacts')
+  await expect(page.getByText('Contact deleted')).toBeVisible()
+
+  // The contact should not be in the list
+  await expect(page.getByText('Fiona Grant')).not.toBeVisible()
+})

package/skills/maestro-examples/references/cadence/cadence-web/tests/contacts/edit-contact.spec.ts

@@ -0,0 +1,60 @@
+import { test, expect } from '@playwright/test'
+import { H } from '@cadence/services'
+import { TEST_CONSTANTS } from '../constants'
+
+const contactId = 8700
+
+const seedData = H.SeedPipe(
+  H.OrganizationSeed({
+    id: TEST_CONSTANTS.orgId,
+    name: TEST_CONSTANTS.orgName,
+    slug: TEST_CONSTANTS.orgSlug
+  }),
+  H.UserSeed({
+    id: TEST_CONSTANTS.userId,
+    organizationId: TEST_CONSTANTS.orgId,
+    name: TEST_CONSTANTS.userName,
+    email: TEST_CONSTANTS.email,
+    passwordHash: TEST_CONSTANTS.passwordHash,
+    role: 'admin'
+  }),
+  H.ContactSeed({
+    id: contactId,
+    organizationId: TEST_CONSTANTS.orgId,
+    firstName: 'Carol',
+    lastName: 'Davis',
+    email: 'carol.davis@example.com'
+  })
+)
+
+test.beforeAll(async () => {
+  await seedData.setup()
+})
+
+test.afterAll(async () => {
+  await seedData.teardown()
+})
+
+test('edit a contact lastName and email', async ({ page }) => {
+  // Go to the contact detail page
+  await page.goto(`/contacts/${contactId}`)
+  await page.waitForLoadState('networkidle')
+
+  // Click the Edit button
+  await page.getByRole('link', { name: 'Edit' }).click()
+  await page.waitForURL(`/contacts/${contactId}/edit`)
+
+  // Change lastName and email
+  await page.getByLabel('Last name').clear()
+  await page.getByLabel('Last name').fill('Martinez')
+  await page.getByLabel('Email').clear()
+  await page.getByLabel('Email').fill('carol.martinez@example.com')
+
+  // Save
+  await page.getByRole('button', { name: 'Save Changes' }).click()
+
+  // Should redirect to the detail page with updated info
+  await page.waitForURL(`/contacts/${contactId}`)
+  await expect(page.getByRole('heading', { name: 'Carol Martinez' })).toBeVisible()
+  await expect(page.getByText('carol.martinez@example.com')).toBeVisible()
+})

package/skills/maestro-examples/references/cadence/cadence-web/tests/contacts/filter-by-last-contacted.spec.ts

@@ -0,0 +1,85 @@
+import { test, expect } from '@playwright/test'
+import { H } from '@cadence/services'
+import { instantFns } from 'iso-fns'
+import { TEST_CONSTANTS } from '../constants'
+
+const orgId = TEST_CONSTANTS.orgId
+const userId = TEST_CONSTANTS.userId
+
+const seedData = H.SeedPipe(
+  H.OrganizationSeed({
+    id: TEST_CONSTANTS.orgId,
+    name: TEST_CONSTANTS.orgName,
+    slug: TEST_CONSTANTS.orgSlug
+  }),
+  H.UserSeed({
+    id: TEST_CONSTANTS.userId,
+    organizationId: TEST_CONSTANTS.orgId,
+    name: TEST_CONSTANTS.userName,
+    email: TEST_CONSTANTS.email,
+    passwordHash: TEST_CONSTANTS.passwordHash,
+    role: 'admin'
+  }),
+  H.ContactSeed({
+    id: 9200,
+    organizationId: orgId,
+    firstName: 'Contacted',
+    lastName: 'Recently'
+  }),
+  H.ContactSeed({
+    id: 9201,
+    organizationId: orgId,
+    firstName: 'Never',
+    lastName: 'Contacted'
+  }),
+  H.InteractionSeed({
+    id: 9200,
+    contactId: 9200,
+    userId,
+    type: 'email',
+    subject: 'Recent check-in',
+    body: '<p>Just checking in</p>',
+    date: instantFns.now()
+  })
+)
+
+test.beforeAll(async () => {
+  await seedData.setup()
+})
+
+test.afterAll(async () => {
+  await seedData.teardown()
+})
+
+test('filter contacts by last contacted', async ({ page }) => {
+  await page.goto('/contacts')
+  await page.waitForLoadState('networkidle')
+
+  // Both contacts should be visible initially
+  await expect(page.getByRole('link', { name: 'Contacted Recently' })).toBeVisible()
+  await expect(page.getByRole('link', { name: 'Never Contacted' })).toBeVisible()
+
+  // Select "Never contacted" filter
+  await page.getByRole('button', { name: 'Last Contacted' }).click()
+  await page.getByRole('option', { name: 'Never contacted' }).click()
+
+  // Only uncontacted contact shown
+  await expect(page.getByRole('link', { name: 'Never Contacted' })).toBeVisible()
+  await expect(page.getByRole('link', { name: 'Contacted Recently' })).not.toBeVisible()
+
+  // Switch to "Last 7 days"
+  await page.getByRole('button', { name: 'Last Contacted' }).click()
+  await page.getByRole('option', { name: 'Last 7 days' }).click()
+
+  // Only recently contacted contact shown
+  await expect(page.getByRole('link', { name: 'Contacted Recently' })).toBeVisible()
+  await expect(page.getByRole('link', { name: 'Never Contacted' })).not.toBeVisible()
+
+  // Remove filter
+  await page.getByRole('button', { name: 'Last Contacted' }).click()
+  await page.getByRole('option', { name: 'Clear' }).click()
+
+  // Both visible again
+  await expect(page.getByRole('link', { name: 'Contacted Recently' })).toBeVisible()
+  await expect(page.getByRole('link', { name: 'Never Contacted' })).toBeVisible()
+})