@maestro-js/agent-skills 1.0.0-alpha.2 → 1.0.0-alpha.21

package/skills/maestro-examples/references/chorus/chorus-web/tests/channel-manage-moderators.test.ts

@@ -0,0 +1,59 @@
+import { test, expect } from '@playwright/test'
+import { H } from '@chorus/services'
+import { TEST_CONSTANTS } from './constants'
+
+const seedData = H.SeedPipe(
+  H.ProfileSeed({
+    profileId: 2401,
+    username: 'mod-target',
+    passwordHash: TEST_CONSTANTS.passwordHash
+  }),
+  H.ChannelSeed({
+    id: 2400,
+    ownerProfileId: TEST_CONSTANTS.profileId,
+    name: 'Mod Test',
+    slug: 'mod-test',
+    description: 'For moderator tests'
+  })
+)
+
+test.beforeAll(async () => {
+  await seedData.setup()
+})
+
+test.afterAll(async () => {
+  await seedData.teardown()
+})
+
+test.describe.serial('moderator management', () => {
+  test('owner sees empty moderators list', async ({ page }) => {
+    await page.goto('/c/mod-test/manage')
+    await page.waitForLoadState('networkidle')
+    await expect(page.getByText('No moderators yet.')).toBeVisible()
+  })
+
+  test('owner can add a moderator', async ({ page }) => {
+    await page.goto('/c/mod-test/manage')
+    await page.waitForLoadState('networkidle')
+    await page.getByRole('link', { name: 'Add' }).click()
+    await expect(page.getByRole('heading', { name: 'Add moderator' })).toBeVisible()
+    await page.getByPlaceholder('Username').fill('mod-target')
+    await page.getByRole('button', { name: 'Add' }).click()
+
+    await page.waitForURL(/\/c\/mod-test\/manage$/)
+    await expect(page.getByText('mod-target')).toBeVisible()
+    await expect(page.getByText('No moderators yet.')).not.toBeVisible()
+  })
+
+  test('owner can remove a moderator', async ({ page }) => {
+    await page.goto('/c/mod-test/manage')
+    await page.waitForLoadState('networkidle')
+    await expect(page.getByText('mod-target')).toBeVisible()
+
+    await page.getByText('mod-target').locator('..').locator('..').getByRole('button').click()
+    await expect(page.getByText('Remove?')).toBeVisible()
+    await page.getByRole('button', { name: 'Confirm' }).click()
+
+    await expect(page.getByText('No moderators yet.')).toBeVisible()
+  })
+})

package/skills/maestro-examples/references/chorus/chorus-web/tests/channel-manage-permissions.test.ts

@@ -0,0 +1,55 @@
+import { test, expect } from '@playwright/test'
+import { H } from '@chorus/services'
+import { TEST_CONSTANTS } from './constants'
+
+test.use({ storageState: { cookies: [], origins: [] } })
+
+const seedData = H.SeedPipe(
+  H.ProfileSeed({ profileId: 2300 }),
+  H.ChannelSeed({
+    id: 2300,
+    ownerProfileId: 2300,
+    name: 'Perm Edit Channel',
+    slug: 'perm-edit-channel',
+    description: 'Testing permissions'
+  }),
+  H.ProfileSeed({
+    profileId: 2301,
+    email: 'nonowner-perm@test.com',
+    passwordHash: TEST_CONSTANTS.passwordHash
+  })
+)
+
+test.beforeAll(async () => {
+  await seedData.setup()
+})
+
+test.afterAll(async () => {
+  await seedData.teardown()
+})
+
+test('non-owner cannot access channel edit page', async ({ page }) => {
+  await page.goto('/login')
+  await page.waitForLoadState('networkidle')
+  await page.getByLabel('Email').fill('nonowner-perm@test.com')
+  await page.getByLabel('Password', { exact: true }).fill(TEST_CONSTANTS.password)
+  await page.getByRole('button', { name: 'Log in' }).click()
+  await page.waitForURL('/')
+
+  await page.goto('/c/perm-edit-channel/edit')
+  await page.waitForLoadState('networkidle')
+  await expect(page.getByRole('heading', { name: 'Edit Channel' })).not.toBeVisible()
+})
+
+test('non-owner cannot access channel manage page', async ({ page }) => {
+  await page.goto('/login')
+  await page.waitForLoadState('networkidle')
+  await page.getByLabel('Email').fill('nonowner-perm@test.com')
+  await page.getByLabel('Password', { exact: true }).fill(TEST_CONSTANTS.password)
+  await page.getByRole('button', { name: 'Log in' }).click()
+  await page.waitForURL('/')
+
+  await page.goto('/c/perm-edit-channel/manage')
+  await page.waitForLoadState('networkidle')
+  await expect(page.getByRole('heading', { name: /Manage/ })).not.toBeVisible()
+})

package/skills/maestro-examples/references/chorus/chorus-web/tests/channel-transfer.test.ts

@@ -0,0 +1,47 @@
+import { test, expect } from '@playwright/test'
+import { H } from '@chorus/services'
+import { TEST_CONSTANTS } from './constants'
+
+const seedData = H.SeedPipe(
+  H.ProfileSeed({
+    profileId: 2501,
+    username: 'transfer-target',
+    passwordHash: TEST_CONSTANTS.passwordHash
+  }),
+  H.ChannelSeed({
+    id: 2500,
+    ownerProfileId: TEST_CONSTANTS.profileId,
+    name: 'Transfer Test',
+    slug: 'transfer-test',
+    description: 'For transfer test'
+  })
+)
+
+test.beforeAll(async () => {
+  await seedData.setup()
+})
+
+test.afterAll(async () => {
+  await seedData.teardown()
+})
+
+test('owner can transfer channel ownership', async ({ page }) => {
+  await page.goto('/c/transfer-test/manage')
+  await page.waitForLoadState('networkidle')
+  await page.getByRole('link', { name: 'Transfer' }).click()
+  await expect(page.getByRole('heading', { name: 'Transfer ownership' })).toBeVisible()
+
+  await page.getByPlaceholder('New owner username').fill('transfer-target')
+  await page.getByRole('button', { name: 'Transfer' }).first().click()
+
+  // Confirm in the alert dialog
+  await expect(page.getByRole('heading', { name: 'Transfer Ownership?' })).toBeVisible()
+  await page.getByRole('button', { name: 'Transfer' }).last().click()
+
+  // Should redirect to channel page
+  await page.waitForURL(/\/c\/transfer-test$/)
+
+  // Original owner should no longer have manage access
+  await page.goto('/c/transfer-test/manage')
+  await expect(page.getByRole('heading', { name: /Manage/ })).not.toBeVisible()
+})

package/skills/maestro-examples/references/chorus/chorus-web/tests/constants.ts

@@ -0,0 +1,7 @@
+export const TEST_CONSTANTS = {
+  email: 'e2etest@chorus.example.com',
+  password: 'password123',
+  passwordHash: '$2b$12$INJ2/8QWIwTkmpLWQ1wMmeBPVvDpZstXucYx355vjdonr1nBAuj8a',
+  profileId: 1000,
+  username: 'e2e-primary'
+}

package/skills/maestro-examples/references/chorus/chorus-web/tests/forgot-password.test.ts

@@ -0,0 +1,33 @@
+import { test, expect } from '@playwright/test'
+
+test.use({ storageState: { cookies: [], origins: [] } })
+
+test('submitting email shows confirmation screen', async ({ page }) => {
+  await page.goto('/forgot-password')
+  await page.waitForLoadState('networkidle')
+  await page.getByLabel('Email').fill('someone@example.com')
+  await page.getByRole('button', { name: 'Send reset link' }).click()
+  await expect(page.getByRole('heading', { name: 'Check your email' })).toBeVisible()
+  await expect(page.getByText(/If an account exists/)).toBeVisible()
+})
+
+test('back to login link navigates to login page', async ({ page }) => {
+  await page.goto('/forgot-password')
+  await page.waitForLoadState('networkidle')
+  await page.getByRole('link', { name: 'Back to login' }).click()
+  await expect(page).toHaveURL(/\/login/)
+})
+
+test('invalid reset link shows error page', async ({ page }) => {
+  await page.goto('/reset-password?token=invalid&id=999')
+  await page.waitForLoadState('networkidle')
+  await expect(page.getByRole('heading', { name: 'Invalid reset link' })).toBeVisible()
+  await expect(page.getByRole('link', { name: 'Request a new link' })).toBeVisible()
+})
+
+test('request a new link navigates to forgot password', async ({ page }) => {
+  await page.goto('/reset-password?token=invalid&id=999')
+  await page.waitForLoadState('networkidle')
+  await page.getByRole('link', { name: 'Request a new link' }).click()
+  await expect(page).toHaveURL(/\/forgot-password/)
+})

package/skills/maestro-examples/references/chorus/chorus-web/tests/hide-post-author.test.ts

@@ -0,0 +1,62 @@
+import { test, expect } from '@playwright/test'
+import { H, Db } from '@chorus/services'
+import { TEST_CONSTANTS } from './constants'
+
+const seedData = H.SeedPipe(
+  H.ChannelSeed({
+    id: 5000,
+    ownerProfileId: TEST_CONSTANTS.profileId,
+    name: 'Hide Test Channel',
+    slug: 'hide-test-channel',
+    description: 'For hide post tests'
+  }),
+  H.PostSeed({
+    id: 5000,
+    channelId: 5000,
+    profileId: TEST_CONSTANTS.profileId,
+    content: 'Post to be deleted'
+  }),
+  H.PostSeed({
+    id: 5001,
+    channelId: 5000,
+    profileId: TEST_CONSTANTS.profileId,
+    content: 'Another post to delete'
+  })
+)
+
+test.beforeAll(async () => {
+  await seedData.setup()
+})
+
+test.afterAll(async () => {
+  await seedData.teardown()
+})
+
+test('post author can delete their own post', async ({ page }) => {
+  await page.goto('/c/hide-test-channel')
+  await page.waitForLoadState('networkidle')
+  await page.getByText('Post to be deleted').click()
+  await page.waitForURL(/\/post\/\d+/)
+
+  await page.locator('button:has(svg use[href*="ellipsis-vertical"])').first().click()
+  await page.getByRole('menuitem', { name: /delete/i }).click()
+  await expect(page.getByRole('heading', { name: 'Delete post?' })).toBeVisible()
+
+  const [response] = await Promise.all([
+    page.waitForResponse((resp) => resp.url().includes('/api/hide-post/')),
+    page.getByRole('button', { name: 'Delete' }).click()
+  ])
+  expect(response.ok()).toBeTruthy()
+
+  await page.reload()
+  await expect(page.getByText('This post has been deleted.')).toBeVisible()
+})
+
+test('deleted post shows deleted state on detail page', async ({ page }) => {
+  // Delete the second post directly via DB to avoid flaky UI interaction
+  await Db.update('UPDATE posts SET hiddenDate = NOW() WHERE id = ?', [5001])
+
+  await page.goto('/c/hide-test-channel/post/5001')
+  await page.waitForLoadState('networkidle')
+  await expect(page.getByText('This post has been deleted.')).toBeVisible()
+})

package/skills/maestro-examples/references/chorus/chorus-web/tests/hide-post-nonauthor.test.ts

@@ -0,0 +1,36 @@
+import { test, expect } from '@playwright/test'
+import { H } from '@chorus/services'
+
+const seedData = H.SeedPipe(
+  H.ProfileSeed({ profileId: 5100 }),
+  H.ChannelSeed({
+    id: 5100,
+    ownerProfileId: 5100,
+    name: 'Non-Author Hide Channel',
+    slug: 'non-author-hide-channel',
+    description: 'For non-author hide tests'
+  }),
+  H.PostSeed({
+    id: 5100,
+    channelId: 5100,
+    profileId: 5100,
+    content: 'Only author can delete this'
+  })
+)
+
+test.beforeAll(async () => {
+  await seedData.setup()
+})
+
+test.afterAll(async () => {
+  await seedData.teardown()
+})
+
+test('non-author does not see delete menu', async ({ page }) => {
+  await page.goto('/c/non-author-hide-channel')
+  await page.waitForLoadState('networkidle')
+  await page.getByText('Only author can delete this').click()
+  await page.waitForURL(/\/post\/\d+/)
+  await expect(page.getByText('Only author can delete this')).toBeVisible()
+  await expect(page.locator('button:has(svg use[href*="ellipsis-vertical"])')).not.toBeVisible()
+})

package/skills/maestro-examples/references/chorus/chorus-web/tests/like-toggle.test.ts

@@ -0,0 +1,60 @@
+import { test, expect } from '@playwright/test'
+import { H } from '@chorus/services'
+
+const seedData = H.SeedPipe(
+  H.ProfileSeed({ profileId: 4000 }),
+  H.ChannelSeed({
+    id: 4000,
+    ownerProfileId: 4000,
+    name: 'Like Channel',
+    slug: 'like-channel',
+    description: 'For like tests'
+  }),
+  H.PostSeed({
+    id: 4000,
+    channelId: 4000,
+    profileId: 4000,
+    content: 'Like this post!'
+  })
+)
+
+test.beforeAll(async () => {
+  await seedData.setup()
+})
+
+test.afterAll(async () => {
+  await seedData.teardown()
+})
+
+test.describe.serial('like toggle', () => {
+  test('authenticated user can like a post', async ({ page }) => {
+    await page.goto('/c/like-channel')
+    await page.waitForLoadState('networkidle')
+    await page.getByText('Like this post!').click()
+    await page.waitForURL(/\/post\/\d+/)
+
+    const likeButton = page.getByRole('button', { name: /^like post/i })
+    await likeButton.click()
+    await page.waitForLoadState('networkidle')
+    await expect(page.getByRole('button', { name: /^unlike post/i })).toBeVisible({ timeout: 10000 })
+  })
+
+  test('clicking like again unlikes the post', async ({ page }) => {
+    await page.goto('/c/like-channel')
+    await page.waitForLoadState('networkidle')
+    await page.getByText('Like this post!').click()
+    await page.waitForURL(/\/post\/\d+/)
+
+    // Post should already be liked from previous test
+    await expect(page.getByRole('button', { name: /^unlike post/i })).toBeVisible()
+
+    // Unlike
+    await page.getByRole('button', { name: /^unlike post/i }).click()
+    await page.waitForLoadState('networkidle')
+    await expect(page.getByRole('button', { name: /^like post/i })).toBeVisible({ timeout: 10000 })
+
+    // Verify persistence
+    await page.reload()
+    await expect(page.getByRole('button', { name: /^like post/i })).toBeVisible()
+  })
+})

package/skills/maestro-examples/references/chorus/chorus-web/tests/like-unauth.test.ts

@@ -0,0 +1,37 @@
+import { test, expect } from '@playwright/test'
+import { H } from '@chorus/services'
+
+test.use({ storageState: { cookies: [], origins: [] } })
+
+const seedData = H.SeedPipe(
+  H.ProfileSeed({ profileId: 4100 }),
+  H.ChannelSeed({
+    id: 4100,
+    ownerProfileId: 4100,
+    name: 'Like Unauth Channel',
+    slug: 'like-unauth-channel',
+    description: 'For unauthenticated like tests'
+  }),
+  H.PostSeed({
+    id: 4100,
+    channelId: 4100,
+    profileId: 4100,
+    content: 'Post with likes'
+  })
+)
+
+test.beforeAll(async () => {
+  await seedData.setup()
+})
+
+test.afterAll(async () => {
+  await seedData.teardown()
+})
+
+test('unauthenticated user sees like count but cannot like', async ({ page }) => {
+  await page.goto('/c/like-unauth-channel')
+  await page.waitForLoadState('networkidle')
+  await page.getByText('Post with likes').click()
+  await page.waitForURL(/\/post\/\d+/)
+  await expect(page.getByRole('button', { name: /^like post/i })).toBeVisible()
+})

package/skills/maestro-examples/references/chorus/chorus-web/tests/post-create.test.ts

@@ -0,0 +1,30 @@
+import { test, expect } from '@playwright/test'
+import { H } from '@chorus/services'
+import { TEST_CONSTANTS } from './constants'
+
+const seedData = H.SeedPipe(
+  H.ChannelSeed({
+    id: 3000,
+    ownerProfileId: TEST_CONSTANTS.profileId,
+    name: 'Post Test',
+    slug: 'post-test',
+    description: 'For post creation tests'
+  })
+)
+
+test.beforeAll(async () => {
+  await seedData.setup()
+})
+
+test.afterAll(async () => {
+  await seedData.teardown()
+})
+
+test('authenticated user can create a text-only post', async ({ page }) => {
+  await page.goto('/c/post-test/post/new')
+  await page.waitForLoadState('networkidle')
+  await page.getByPlaceholder("What's on your mind?").fill('This is my first post in e2e testing!')
+  await page.getByRole('button', { name: 'Post' }).click()
+  await expect(page).toHaveURL(/\/post\/\d+/)
+  await expect(page.getByText('This is my first post in e2e testing!')).toBeVisible()
+})

package/skills/maestro-examples/references/chorus/chorus-web/tests/post-listing.test.ts

@@ -0,0 +1,33 @@
+import { test, expect } from '@playwright/test'
+import { H } from '@chorus/services'
+import { TEST_CONSTANTS } from './constants'
+
+const seedData = H.SeedPipe(
+  H.ChannelSeed({
+    id: 3200,
+    ownerProfileId: TEST_CONSTANTS.profileId,
+    name: 'Listing Channel',
+    slug: 'listing-channel',
+    description: 'For listing tests'
+  }),
+  H.PostSeed({
+    id: 3200,
+    channelId: 3200,
+    profileId: TEST_CONSTANTS.profileId,
+    content: 'Should appear in listing'
+  })
+)
+
+test.beforeAll(async () => {
+  await seedData.setup()
+})
+
+test.afterAll(async () => {
+  await seedData.teardown()
+})
+
+test('post appears in channel listing', async ({ page }) => {
+  await page.goto('/c/listing-channel')
+  await page.waitForLoadState('networkidle')
+  await expect(page.getByText('Should appear in listing')).toBeVisible()
+})

package/skills/maestro-examples/references/chorus/chorus-web/tests/post-reply.test.ts

@@ -0,0 +1,48 @@
+import { test, expect } from '@playwright/test'
+import { H } from '@chorus/services'
+import { TEST_CONSTANTS } from './constants'
+
+const seedData = H.SeedPipe(
+  H.ChannelSeed({
+    id: 3300,
+    ownerProfileId: TEST_CONSTANTS.profileId,
+    name: 'Reply Channel',
+    slug: 'reply-channel',
+    description: 'For reply tests'
+  }),
+  H.PostSeed({
+    id: 3300,
+    channelId: 3300,
+    profileId: TEST_CONSTANTS.profileId,
+    content: 'Post that will get a reply'
+  })
+)
+
+test.beforeAll(async () => {
+  await seedData.setup()
+})
+
+test.afterAll(async () => {
+  await seedData.teardown()
+})
+
+test('authenticated user can reply to a post', async ({ page }) => {
+  await page.goto('/c/reply-channel')
+  await page.waitForLoadState('networkidle')
+  await page.getByText('Post that will get a reply').click()
+  await page.waitForURL(/\/post\/\d+/)
+
+  // Click the "Reply" link to show the reply form (requires ?reply search param)
+  await page.getByRole('link', { name: 'Reply', exact: true }).click()
+  await page.waitForURL(/\?reply/)
+  await page.waitForLoadState('networkidle')
+
+  const textarea = page.getByPlaceholder('Write a reply...')
+  await textarea.click()
+  await textarea.pressSequentially('This is my reply!', { delay: 20 })
+  await page.getByRole('button', { name: 'Reply' }).click()
+  // Wait for the redirect after successful reply submission
+  await page.waitForURL(/\/post\/\d+$/, { timeout: 15000 })
+  await page.waitForLoadState('networkidle')
+  await expect(page.getByText('This is my reply!').first()).toBeVisible()
+})

package/skills/maestro-examples/references/chorus/chorus-web/tests/post-view-unauth.test.ts

@@ -0,0 +1,37 @@
+import { test, expect } from '@playwright/test'
+import { H } from '@chorus/services'
+
+test.use({ storageState: { cookies: [], origins: [] } })
+
+const seedData = H.SeedPipe(
+  H.ProfileSeed({ profileId: 3100 }),
+  H.ChannelSeed({
+    id: 3100,
+    ownerProfileId: 3100,
+    name: 'Public Post Channel',
+    slug: 'public-post-channel',
+    description: 'For unauthenticated view tests'
+  }),
+  H.PostSeed({
+    id: 3100,
+    channelId: 3100,
+    profileId: 3100,
+    content: 'Public post content'
+  })
+)
+
+test.beforeAll(async () => {
+  await seedData.setup()
+})
+
+test.afterAll(async () => {
+  await seedData.teardown()
+})
+
+test('unauthenticated user can view a post', async ({ page }) => {
+  await page.goto('/c/public-post-channel')
+  await page.waitForLoadState('networkidle')
+  await page.getByText('Public post content').click()
+  await page.waitForURL(/\/post\/\d+/)
+  await expect(page.getByText('Public post content')).toBeVisible()
+})

package/skills/maestro-examples/references/chorus/chorus-web/tests/settings-duplicate.test.ts

@@ -0,0 +1,28 @@
+import { test, expect } from '@playwright/test'
+import { H } from '@chorus/services'
+import { TEST_CONSTANTS } from './constants'
+
+const seedData = H.SeedPipe(
+  H.ProfileSeed({
+    profileId: 6000,
+    username: 'taken-user',
+    passwordHash: TEST_CONSTANTS.passwordHash
+  })
+)
+
+test.beforeAll(async () => {
+  await seedData.setup()
+})
+
+test.afterAll(async () => {
+  await seedData.teardown()
+})
+
+test('duplicate username shows error', async ({ page }) => {
+  await page.goto('/settings')
+  await page.waitForLoadState('networkidle')
+  await page.getByLabel('Username').clear()
+  await page.getByLabel('Username').fill('taken-user')
+  await page.getByRole('button', { name: 'Save' }).click()
+  await expect(page.getByText(/already taken/i)).toBeVisible()
+})

package/skills/maestro-examples/references/chorus/chorus-web/tests/settings-update.test.ts

@@ -0,0 +1,34 @@
+import { test, expect } from '@playwright/test'
+import { Db } from '@chorus/services'
+import { TEST_CONSTANTS } from './constants'
+
+const newUsername = `updated-${Date.now()}`
+
+test.afterAll(async () => {
+  // Restore primary user's username to avoid breaking other tests
+  await Db.update('UPDATE profiles SET username = ? WHERE profileId = ?', [
+    TEST_CONSTANTS.username,
+    TEST_CONSTANTS.profileId
+  ])
+})
+
+test('authenticated user can update their username', async ({ page }) => {
+  await page.goto('/settings')
+  await page.waitForLoadState('networkidle')
+  await page.getByLabel('Username').clear()
+  await page.getByLabel('Username').fill(newUsername)
+  await page.getByRole('button', { name: 'Save' }).click()
+
+  await page.reload()
+  await page.waitForLoadState('networkidle')
+  await expect(page.getByLabel('Username')).toHaveValue(newUsername)
+})
+
+test('short username shows validation error', async ({ page }) => {
+  await page.goto('/settings')
+  await page.waitForLoadState('networkidle')
+  await page.getByLabel('Username').clear()
+  await page.getByLabel('Username').fill('ab')
+  await page.getByRole('button', { name: 'Save' }).click()
+  await expect(page.getByText(/at least 3 characters/i)).toBeVisible()
+})

package/skills/maestro-examples/references/chorus/chorus-web/tests/settings-view.test.ts

@@ -0,0 +1,17 @@
+import { test, expect } from '@playwright/test'
+
+test('authenticated user can view settings page', async ({ page }) => {
+  await page.goto('/settings')
+  await page.waitForLoadState('networkidle')
+  await expect(page.getByRole('heading', { name: 'Settings' })).toBeVisible()
+  await expect(page.getByLabel('Username')).toBeVisible()
+})
+
+test.describe('unauthenticated', () => {
+  test.use({ storageState: { cookies: [], origins: [] } })
+
+  test('unauthenticated user is redirected to login', async ({ page }) => {
+    await page.goto('/settings')
+    await expect(page).toHaveURL(/\/login/)
+  })
+})