@nextsparkjs/theme-crm 0.1.0-beta.19 → 0.1.0-beta.20

package/tests/cypress/e2e/ui/companies/companies-owner.cy.ts

@@ -0,0 +1,189 @@
+/// <reference types="cypress" />
+
+/**
+ * Companies CRUD - Owner Role (Full Access)
+ *
+ * Uses CRM theme-specific POMs with Entity Testing Convention.
+ * Selectors follow the pattern: {slug}-{component}-{detail}
+ */
+
+import { CompaniesPOM } from '../../../src/entities/CompaniesPOM'
+import { loginAsCrmOwner } from '../../../src/session-helpers'
+
+describe('Companies CRUD - Owner Role (Full Access)', () => {
+  const companies = new CompaniesPOM()
+
+  beforeEach(() => {
+    loginAsCrmOwner()
+    cy.visit('/dashboard/companies')
+    companies.list.validatePageVisible()
+  })
+
+  describe('CREATE - Owner can create companies', () => {
+    it('OWNER_COMPANY_CREATE_001: should create new company with required fields', () => {
+      const timestamp = Date.now()
+      const companyName = `Test Company ${timestamp}`
+
+      companies.list.clickCreate()
+      companies.form.validateFormVisible()
+
+      companies.fillCompanyForm({
+        name: companyName,
+        industry: 'technology'
+      })
+
+      companies.submitForm()
+
+      cy.url().should('include', '/dashboard/companies')
+      cy.contains(companyName).should('be.visible')
+    })
+
+    it('OWNER_COMPANY_CREATE_002: should create company with all fields', () => {
+      const timestamp = Date.now()
+      const companyName = `Full Company ${timestamp}`
+
+      companies.list.clickCreate()
+      companies.form.validateFormVisible()
+
+      companies.fillCompanyForm({
+        name: companyName,
+        industry: 'healthcare',
+        website: 'https://example.com',
+        phone: '+1-555-0123'
+      })
+
+      companies.submitForm()
+
+      cy.url().should('include', '/dashboard/companies')
+      cy.contains(companyName).should('be.visible')
+    })
+  })
+
+  describe('READ - Owner can read companies', () => {
+    it('OWNER_COMPANY_READ_001: should view company list', () => {
+      companies.list.validatePageVisible()
+      companies.list.validateTableVisible()
+    })
+
+    it('OWNER_COMPANY_READ_002: should view company details', () => {
+      cy.get(companies.list.selectors.rowGeneric).then($rows => {
+        if ($rows.length > 0) {
+          companies.list.clickRowByIndex(0)
+          cy.url().should('match', /\/dashboard\/companies\/[a-z0-9-]+/)
+        }
+      })
+    })
+
+    it('OWNER_COMPANY_READ_003: should search companies', () => {
+      companies.list.search('test')
+      cy.wait(500)
+      companies.list.clearSearch()
+    })
+  })
+
+  describe('UPDATE - Owner can update companies', () => {
+    it('OWNER_COMPANY_UPDATE_001: should edit company', () => {
+      cy.get(companies.list.selectors.rowGeneric).then($rows => {
+        if ($rows.length > 0) {
+          companies.list.clickRowByIndex(0)
+
+          cy.url().then(url => {
+            const companyId = url.split('/').pop()
+            companies.form.visitEdit(companyId!)
+            companies.form.validateFormVisible()
+
+            const updatedName = `Updated Company ${Date.now()}`
+            companies.form.typeInField('name', updatedName)
+
+            companies.submitForm()
+
+            cy.url().should('include', '/dashboard/companies')
+            cy.contains(updatedName).should('be.visible')
+          })
+        }
+      })
+    })
+
+    it('OWNER_COMPANY_UPDATE_002: should update company with optional fields', () => {
+      cy.get(companies.list.selectors.rowGeneric).then($rows => {
+        if ($rows.length > 0) {
+          companies.list.clickRowByIndex(0)
+
+          cy.url().then(url => {
+            const companyId = url.split('/').pop()
+            companies.form.visitEdit(companyId!)
+            companies.form.validateFormVisible()
+
+            const timestamp = Date.now()
+            companies.form.typeInField('website', `https://updated-${timestamp}.com`)
+            companies.form.typeInField('phone', '+1-555-9999')
+
+            companies.submitForm()
+
+            cy.url().should('include', '/dashboard/companies')
+          })
+        }
+      })
+    })
+
+    it('OWNER_COMPANY_UPDATE_003: should cancel update without saving', () => {
+      cy.get(companies.list.selectors.rowGeneric).then($rows => {
+        if ($rows.length > 0) {
+          companies.list.clickRowByIndex(0)
+
+          cy.url().then(url => {
+            const companyId = url.split('/').pop()
+            companies.form.visitEdit(companyId!)
+            companies.form.validateFormVisible()
+
+            companies.form.typeInField('name', 'ShouldNotSave')
+
+            companies.form.cancel()
+            cy.url().should('not.include', '/edit')
+          })
+        }
+      })
+    })
+  })
+
+  describe('DELETE - Owner can delete companies', () => {
+    it('OWNER_COMPANY_DELETE_001: should delete company successfully', () => {
+      const timestamp = Date.now()
+      const companyName = `Delete Test ${timestamp}`
+
+      companies.list.clickCreate()
+      companies.fillCompanyForm({
+        name: companyName,
+        industry: 'technology'
+      })
+      companies.submitForm()
+
+      cy.contains(companyName).should('be.visible')
+
+      companies.list.search(companyName)
+
+      cy.get(companies.list.selectors.rowGeneric).first().within(() => {
+        cy.get('[data-cy*="delete"]').click()
+      })
+
+      companies.list.confirmDelete()
+
+      cy.wait(1000)
+      companies.list.search(companyName)
+      cy.get(companies.list.selectors.emptyState).should('be.visible')
+    })
+
+    it('OWNER_COMPANY_DELETE_002: should cancel deletion', () => {
+      cy.get(companies.list.selectors.rowGeneric).then($rows => {
+        if ($rows.length > 0) {
+          cy.get(companies.list.selectors.rowGeneric).first().within(() => {
+            cy.get('[data-cy*="delete"]').click()
+          })
+
+          companies.list.cancelDelete()
+          companies.list.validateTableVisible()
+        }
+      })
+    })
+  })
+})

package/tests/cypress/e2e/ui/contacts/contacts-admin.cy.ts

@@ -0,0 +1,252 @@
+/// <reference types="cypress" />
+
+/**
+ * Contacts CRUD - Admin Role (Full Access)
+ *
+ * Uses CRM theme-specific POMs with Entity Testing Convention.
+ * Selectors follow the pattern: {slug}-{component}-{detail}
+ */
+
+import { ContactsPOM } from '../../../src/entities/ContactsPOM'
+import { loginAsCrmAdmin } from '../../../src/session-helpers'
+
+describe('Contacts CRUD - Admin Role (Full Access)', () => {
+  const contacts = new ContactsPOM()
+
+  beforeEach(() => {
+    loginAsCrmAdmin()
+    cy.visit('/dashboard/contacts')
+    contacts.list.validatePageVisible()
+  })
+
+  describe('CREATE - Admin can create contacts', () => {
+    it('ADMIN_CONTACT_CREATE_001: should create new contact with required fields', () => {
+      const firstName = `Sofia${Date.now()}`
+      const lastName = 'TestAdmin'
+      const email = `sofia.admin.${Date.now()}@test.com`
+
+      contacts.list.clickCreate()
+      contacts.form.validateFormVisible()
+
+      contacts.fillContactForm({
+        firstName,
+        lastName,
+        email
+      })
+
+      contacts.submitForm()
+
+      cy.url().should('include', '/dashboard/contacts')
+      cy.contains(firstName).should('be.visible')
+      cy.contains(lastName).should('be.visible')
+    })
+
+    it('ADMIN_CONTACT_CREATE_002: should create contact with business fields', () => {
+      const timestamp = Date.now()
+
+      contacts.list.clickCreate()
+      contacts.form.validateFormVisible()
+
+      contacts.fillContactForm({
+        firstName: `Maria${timestamp}`,
+        lastName: 'Gonzalez',
+        email: `maria.admin.${timestamp}@test.com`,
+        phone: '+34 91 555 1234',
+        title: 'Marketing Manager'
+      })
+
+      contacts.submitForm()
+
+      cy.url().should('include', '/dashboard/contacts')
+      cy.contains(`Maria${timestamp}`).should('be.visible')
+    })
+
+    it('ADMIN_CONTACT_CREATE_003: should validate email uniqueness', () => {
+      const firstName = `Unique${Date.now()}`
+      const lastName = 'Test'
+      const email = `unique.admin.${Date.now()}@test.com`
+
+      // Create first contact
+      contacts.list.clickCreate()
+      contacts.fillContactForm({ firstName, lastName, email })
+      contacts.submitForm()
+
+      cy.contains(firstName).should('be.visible')
+
+      // Return to list and try creating with same email
+      cy.visit('/dashboard/contacts')
+      contacts.list.validatePageVisible()
+
+      contacts.list.clickCreate()
+      contacts.fillContactForm({
+        firstName: 'Duplicate',
+        lastName: 'Contact',
+        email
+      })
+      contacts.submitForm()
+
+      // Should show error or stay on form
+      cy.get('body').then($body => {
+        const isOnCreatePage = window.location.pathname.includes('/create')
+        const hasErrorMessage = $body.text().includes('already exists') || $body.text().includes('duplicate')
+
+        if (isOnCreatePage || hasErrorMessage) {
+          cy.log('Email uniqueness validation working')
+        }
+      })
+    })
+
+    it('ADMIN_CONTACT_CREATE_004: should cancel contact creation', () => {
+      contacts.list.clickCreate()
+      contacts.form.validateFormVisible()
+
+      contacts.fillContactForm({
+        firstName: 'Cancel',
+        lastName: 'Test'
+      })
+
+      contacts.form.cancel()
+      contacts.list.validatePageVisible()
+    })
+  })
+
+  describe('READ - Admin can read contacts', () => {
+    it('ADMIN_CONTACT_READ_001: should view contact list', () => {
+      contacts.list.validatePageVisible()
+      contacts.list.validateTableVisible()
+    })
+
+    it('ADMIN_CONTACT_READ_002: should view contact details', () => {
+      cy.get(contacts.list.selectors.rowGeneric).then($rows => {
+        if ($rows.length > 0) {
+          contacts.list.clickRowByIndex(0)
+          cy.url().should('match', /\/dashboard\/contacts\/[a-z0-9-]+/)
+        }
+      })
+    })
+
+    it('ADMIN_CONTACT_READ_003: should search and filter contacts', () => {
+      contacts.list.search('test')
+      cy.wait(500)
+      contacts.list.clearSearch()
+    })
+
+    it('ADMIN_CONTACT_READ_004: should view all contacts regardless of creator', () => {
+      contacts.list.validatePageVisible()
+      contacts.list.validateTableVisible()
+    })
+  })
+
+  describe('UPDATE - Admin can update contacts', () => {
+    it('ADMIN_CONTACT_UPDATE_001: should edit contact successfully', () => {
+      cy.get(contacts.list.selectors.rowGeneric).then($rows => {
+        if ($rows.length > 0) {
+          contacts.list.clickRowByIndex(0)
+
+          cy.url().then(url => {
+            const contactId = url.split('/').pop()
+            contacts.form.visitEdit(contactId!)
+            contacts.form.validateFormVisible()
+
+            const updatedFirstName = `UpdatedAdmin${Date.now()}`
+            contacts.form.typeInField('firstName', updatedFirstName)
+
+            contacts.submitForm()
+
+            cy.url().should('include', '/dashboard/contacts')
+            cy.contains(updatedFirstName).should('be.visible')
+          })
+        }
+      })
+    })
+
+    it('ADMIN_CONTACT_UPDATE_002: should update contact work info', () => {
+      const firstName = `WorkUpdate${Date.now()}`
+      const lastName = 'Admin'
+      const email = `work.admin.${Date.now()}@test.com`
+
+      contacts.list.clickCreate()
+      contacts.fillContactForm({ firstName, lastName, email })
+      contacts.submitForm()
+
+      cy.contains(firstName).should('be.visible')
+
+      // Edit the contact
+      cy.get(contacts.list.selectors.rowGeneric).first().within(() => {
+        cy.get('[data-cy*="edit"]').click()
+      })
+
+      contacts.form.validateFormVisible()
+
+      contacts.form.typeInField('title', 'VP of Sales')
+      contacts.form.typeInField('phone', '+34 91 888 7777')
+
+      contacts.submitForm()
+
+      cy.url().should('include', '/dashboard/contacts')
+    })
+
+    it('ADMIN_CONTACT_UPDATE_003: should cancel update without saving', () => {
+      cy.get(contacts.list.selectors.rowGeneric).then($rows => {
+        if ($rows.length > 0) {
+          contacts.list.clickRowByIndex(0)
+
+          cy.url().then(url => {
+            const contactId = url.split('/').pop()
+            contacts.form.visitEdit(contactId!)
+            contacts.form.validateFormVisible()
+
+            contacts.form.typeInField('firstName', 'ShouldNotSave')
+
+            contacts.form.cancel()
+            cy.url().should('not.include', '/edit')
+          })
+        }
+      })
+    })
+  })
+
+  describe('DELETE - Admin can delete contacts', () => {
+    it('ADMIN_CONTACT_DELETE_001: should delete contact successfully', () => {
+      const firstName = `DeleteTest${Date.now()}`
+      const lastName = 'Admin'
+      const email = `delete.admin.${Date.now()}@test.com`
+
+      contacts.list.clickCreate()
+      contacts.fillContactForm({ firstName, lastName, email })
+      contacts.submitForm()
+
+      cy.contains(firstName).should('be.visible')
+
+      contacts.list.search(firstName)
+
+      cy.get(contacts.list.selectors.rowGeneric).first().within(() => {
+        cy.get('[data-cy*="delete"]').click()
+      })
+
+      contacts.list.confirmDelete()
+
+      cy.wait(1000)
+      contacts.list.search(firstName)
+      cy.get(contacts.list.selectors.emptyState).should('be.visible')
+    })
+
+    it('ADMIN_CONTACT_DELETE_002: should cancel deletion', () => {
+      cy.get(contacts.list.selectors.rowGeneric).then($rows => {
+        if ($rows.length > 0) {
+          cy.get(contacts.list.selectors.rowGeneric).first().within(() => {
+            cy.get('[data-cy*="delete"]').click()
+          })
+
+          contacts.list.cancelDelete()
+          contacts.list.validateTableVisible()
+        }
+      })
+    })
+
+    it('ADMIN_CONTACT_DELETE_003: should handle bulk delete', () => {
+      contacts.list.selectAll()
+      contacts.list.validateBulkActionsVisible()
+    })
+  })
+})

package/tests/cypress/e2e/ui/contacts/contacts-member.cy.ts

@@ -0,0 +1,224 @@
+/// <reference types="cypress" />
+
+/**
+ * Contacts CRUD - Member Role (Create + Read + Update, No Delete)
+ *
+ * Uses CRM theme-specific POMs with Entity Testing Convention.
+ * Selectors follow the pattern: {slug}-{component}-{detail}
+ */
+
+import { ContactsPOM } from '../../../src/entities/ContactsPOM'
+import { loginAsCrmMember } from '../../../src/session-helpers'
+
+describe('Contacts CRUD - Member Role (Create + Read + Update)', () => {
+  const contacts = new ContactsPOM()
+
+  beforeEach(() => {
+    loginAsCrmMember()
+    cy.visit('/dashboard/contacts')
+    contacts.list.validatePageVisible()
+  })
+
+  describe('CREATE - Member CAN create contacts', () => {
+    it('MEMBER_CONTACT_CREATE_001: should show add button', () => {
+      cy.get(contacts.list.selectors.createButton).should('be.visible')
+    })
+
+    it('MEMBER_CONTACT_CREATE_002: should create new contact successfully', () => {
+      contacts.list.clickCreate()
+      contacts.form.validateFormVisible()
+
+      const timestamp = Date.now()
+
+      contacts.fillContactForm({
+        firstName: `MemberContact${timestamp}`,
+        lastName: 'Test',
+        email: `membercontact${timestamp}@test.com`,
+        phone: '+34 600 123 456',
+        title: 'Sales Manager'
+      })
+
+      contacts.submitForm()
+
+      cy.url().should('include', '/dashboard/contacts')
+      cy.contains(`MemberContact${timestamp}`).should('be.visible')
+    })
+
+    it('MEMBER_CONTACT_CREATE_003: should create contact with minimal required fields', () => {
+      contacts.list.clickCreate()
+      contacts.form.validateFormVisible()
+
+      const timestamp = Date.now()
+      contacts.fillContactForm({
+        firstName: `MinimalMemberContact${timestamp}`,
+        email: `minimal${timestamp}@test.com`
+      })
+
+      contacts.submitForm()
+      cy.url().should('include', '/dashboard/contacts')
+    })
+  })
+
+  describe('READ - Member can read contacts', () => {
+    it('MEMBER_CONTACT_READ_001: should view contact list', () => {
+      contacts.list.validatePageVisible()
+      contacts.list.validateTableVisible()
+    })
+
+    it('MEMBER_CONTACT_READ_002: should view contact details', () => {
+      cy.get(contacts.list.selectors.rowGeneric).then($rows => {
+        if ($rows.length > 0) {
+          contacts.list.clickRowByIndex(0)
+          cy.url().should('match', /\/dashboard\/contacts\/[a-z0-9-]+/)
+        }
+      })
+    })
+
+    it('MEMBER_CONTACT_READ_003: should search contacts', () => {
+      contacts.list.search('test')
+      cy.wait(500)
+      contacts.list.clearSearch()
+    })
+
+    it('MEMBER_CONTACT_READ_004: should view all contacts in organization', () => {
+      contacts.list.validatePageVisible()
+
+      cy.get(contacts.list.selectors.rowGeneric).then($rows => {
+        if ($rows.length > 0) {
+          cy.get(contacts.list.selectors.rowGeneric).should('have.length.at.least', 1)
+        }
+      })
+    })
+  })
+
+  describe('UPDATE - Member CAN update contacts', () => {
+    it('MEMBER_CONTACT_UPDATE_001: should edit contact successfully', () => {
+      cy.get(contacts.list.selectors.rowGeneric).then($rows => {
+        if ($rows.length > 0) {
+          contacts.list.clickRowByIndex(0)
+
+          cy.url().then(url => {
+            const contactId = url.split('/').pop()
+            contacts.form.visitEdit(contactId!)
+            contacts.form.validateFormVisible()
+
+            const updatedFirstName = `UpdatedMember${Date.now()}`
+            contacts.form.typeInField('firstName', updatedFirstName)
+
+            contacts.submitForm()
+
+            cy.url().should('include', '/dashboard/contacts')
+            cy.contains(updatedFirstName).should('be.visible')
+          })
+        }
+      })
+    })
+
+    it('MEMBER_CONTACT_UPDATE_002: should update contact details', () => {
+      cy.get(contacts.list.selectors.rowGeneric).then($rows => {
+        if ($rows.length > 0) {
+          contacts.list.clickRowByIndex(0)
+
+          cy.url().then(url => {
+            const contactId = url.split('/').pop()
+            contacts.form.visitEdit(contactId!)
+            contacts.form.validateFormVisible()
+
+            const timestamp = Date.now()
+            contacts.form.typeInField('firstName', `Miguel${timestamp}`)
+            contacts.form.typeInField('title', 'Sales Representative')
+            contacts.form.typeInField('phone', '+34 600 111 222')
+
+            contacts.submitForm()
+
+            cy.url().should('include', '/dashboard/contacts')
+            cy.contains(`Miguel${timestamp}`).should('be.visible')
+          })
+        }
+      })
+    })
+
+    it('MEMBER_CONTACT_UPDATE_003: should cancel update without saving', () => {
+      cy.get(contacts.list.selectors.rowGeneric).then($rows => {
+        if ($rows.length > 0) {
+          contacts.list.clickRowByIndex(0)
+
+          cy.url().then(url => {
+            const contactId = url.split('/').pop()
+            contacts.form.visitEdit(contactId!)
+            contacts.form.validateFormVisible()
+
+            contacts.form.typeInField('firstName', 'ShouldNotSave')
+
+            contacts.form.cancel()
+            cy.url().should('not.include', '/edit')
+          })
+        }
+      })
+    })
+  })
+
+  describe('DELETE - Member CANNOT delete contacts', () => {
+    it('MEMBER_CONTACT_DELETE_001: should NOT show delete button', () => {
+      cy.get('[data-cy*="delete"]').should('not.exist')
+    })
+
+    it('MEMBER_CONTACT_DELETE_002: should NOT delete contact via API', () => {
+      cy.get(contacts.list.selectors.rowGeneric).then($rows => {
+        if ($rows.length > 0) {
+          cy.get(contacts.list.selectors.rowGeneric).first().invoke('attr', 'data-cy').then(dataCy => {
+            if (dataCy) {
+              const contactId = dataCy.replace('contacts-row-', '')
+
+              cy.request({
+                method: 'DELETE',
+                url: `/api/v1/contacts/${contactId}`,
+                failOnStatusCode: false,
+              }).then(response => {
+                expect(response.status).to.be.oneOf([401, 403, 404])
+              })
+            }
+          })
+        }
+      })
+    })
+  })
+
+  describe('PERMISSIONS - Member role capabilities', () => {
+    it('MEMBER_CONTACT_PERMISSIONS_001: should have create, read, and update access', () => {
+      contacts.list.validatePageVisible()
+
+      // Check for add button (create permission)
+      cy.get(contacts.list.selectors.createButton).should('be.visible')
+
+      // Check for no delete buttons (no delete permission)
+      cy.get('[data-cy*="delete"]').should('not.exist')
+    })
+
+    it('MEMBER_CONTACT_PERMISSIONS_002: should see all organization contacts', () => {
+      contacts.list.validatePageVisible()
+
+      cy.get(contacts.list.selectors.rowGeneric).then($rows => {
+        if ($rows.length > 0) {
+          cy.get(contacts.list.selectors.rowGeneric).should('have.length.at.least', 1)
+        }
+      })
+    })
+
+    it('MEMBER_CONTACT_PERMISSIONS_003: should create and update any contact', () => {
+      cy.get(contacts.list.selectors.createButton).should('be.visible')
+
+      cy.get(contacts.list.selectors.rowGeneric).then($rows => {
+        if ($rows.length > 0) {
+          // Verify edit capability
+          contacts.list.clickRowByIndex(0)
+          cy.url().then(url => {
+            const contactId = url.split('/').pop()
+            contacts.form.visitEdit(contactId!)
+            contacts.form.validateFormVisible()
+          })
+        }
+      })
+    })
+  })
+})