@nextsparkjs/theme-default 0.1.0-beta.1 → 0.1.0-beta.100

package/tests/cypress/e2e/uat/features/roles/owner-full-crud.cy.ts

@@ -0,0 +1,247 @@
+/// <reference types="cypress" />
+
+/**
+ * Owner Role - Full CRUD Permissions
+ *
+ * Tests to verify that Owner role maintains full CRUD access to customers.
+ * This validates that extensible roles don't break existing owner capabilities.
+ *
+ * Test user: Carlos Mendoza (carlos.mendoza@nextspark.dev) - Everpoint Labs
+ */
+
+import * as allure from 'allure-cypress'
+
+import { CustomersPOM } from '../../../../src/entities/CustomersPOM'
+import { loginAsDefaultOwner } from '../../../../src/session-helpers'
+
+describe('Owner Role - Full CRUD Permissions', {
+  tags: ['@uat', '@feat-teams', '@security', '@role-owner', '@regression']
+}, () => {
+  const customers = CustomersPOM.create()
+
+  beforeEach(() => {
+    allure.epic('UAT')
+    allure.feature('Permissions')
+    allure.story('Owner Full CRUD')
+    customers.setupApiIntercepts()
+    loginAsDefaultOwner()
+  })
+
+  describe('UI Access - All Buttons Visible', { tags: '@smoke' }, () => {
+    it('OWNER_CRUD_001: Owner sees Add button on customers list', { tags: '@smoke' }, () => {
+      allure.severity('critical')
+
+      customers.visitList()
+      customers.api.waitForList()
+      customers.waitForList()
+
+      // Owner should see the Add button
+      cy.get(customers.selectors.addButton).should('be.visible')
+
+      cy.log('✅ Owner can see Add button')
+    })
+
+    it('OWNER_CRUD_002: Owner sees row actions menu on customer rows', { tags: '@smoke' }, () => {
+      allure.severity('critical')
+
+      customers.visitList()
+      customers.api.waitForList()
+      customers.waitForList()
+
+      cy.get('body').then($body => {
+        if ($body.find(customers.selectors.rowGeneric).length > 0) {
+          // Row actions menu trigger should be visible (Owner has edit/delete permissions)
+          cy.get(`[data-cy^="${customers.entitySlug}-menu-"]`).first().should('be.visible')
+
+          cy.log('✅ Owner can see row actions menu on rows')
+        } else {
+          cy.log('⚠️ No customers to check row actions')
+        }
+      })
+    })
+
+    it('OWNER_CRUD_003: Owner sees Edit and Delete options in row menu', () => {
+      allure.severity('critical')
+
+      customers.visitList()
+      customers.api.waitForList()
+      customers.waitForList()
+
+      cy.get('body').then($body => {
+        if ($body.find(customers.selectors.rowGeneric).length > 0) {
+          // Open the first row's menu
+          cy.get(`[data-cy^="${customers.entitySlug}-menu-"]`).first().click()
+
+          // Edit and Delete options should be visible in the dropdown
+          cy.get('[role="menuitem"]').contains('Edit').should('be.visible')
+          cy.get('[role="menuitem"]').contains('Delete').should('be.visible')
+
+          // Close dropdown by pressing escape
+          cy.get('body').type('{esc}')
+
+          cy.log('✅ Owner can see Edit and Delete in row menu')
+        } else {
+          cy.log('⚠️ No customers to check row menu')
+        }
+      })
+    })
+  })
+
+  describe('CRUD Operations - Full Access', () => {
+    it('OWNER_CRUD_004: Owner can access customer create form', () => {
+      allure.severity('critical')
+
+      customers.visitList()
+      customers.api.waitForList()
+
+      // Click Add button
+      cy.get(customers.selectors.addButton).click()
+
+      // Should navigate to create form
+      cy.url().should('include', '/create')
+      customers.waitForForm()
+
+      cy.log('✅ Owner can access customer create form')
+    })
+
+    it('OWNER_CRUD_005: Owner can access create form and see submit button', () => {
+      allure.severity('critical')
+
+      customers.visitCreate()
+      customers.waitForForm()
+
+      // Owner should see the form fields
+      cy.get(`[data-cy="${customers.entitySlug}-field-name"]`).should('be.visible')
+      cy.get(`[data-cy="${customers.entitySlug}-field-account"]`).should('be.visible')
+
+      // Owner should see the submit button
+      cy.get(`[data-cy="${customers.entitySlug}-form-submit"]`).should('be.visible')
+
+      cy.log('✅ Owner can access create form with submit capability')
+    })
+
+    it('OWNER_CRUD_006: Owner can access customer edit form', () => {
+      allure.severity('critical')
+
+      customers.visitList()
+      customers.api.waitForList()
+      customers.waitForList()
+
+      cy.get('body').then($body => {
+        if ($body.find(customers.selectors.rowGeneric).length > 0) {
+          // Open the first row's menu and click Edit
+          cy.get(`[data-cy^="${customers.entitySlug}-menu-"]`).first().click()
+          cy.get('[role="menuitem"]').contains('Edit').click()
+
+          // Should navigate to edit form
+          cy.url().should('include', '/edit')
+          customers.waitForForm()
+
+          cy.log('✅ Owner can access customer edit form')
+        } else {
+          cy.log('⚠️ No customers to test edit access')
+        }
+      })
+    })
+
+    it('OWNER_CRUD_007: Owner can access edit form with submit capability', () => {
+      allure.severity('critical')
+
+      customers.visitList()
+      customers.api.waitForList()
+      customers.waitForList()
+
+      cy.get('body').then($body => {
+        if ($body.find(customers.selectors.rowGeneric).length > 0) {
+          // Open the first row's menu and click Edit
+          cy.get(`[data-cy^="${customers.entitySlug}-menu-"]`).first().click()
+          cy.get('[role="menuitem"]').contains('Edit').click()
+          customers.waitForForm()
+
+          // Owner should see the form fields
+          cy.get(`[data-cy="${customers.entitySlug}-field-name"]`).should('be.visible')
+
+          // Owner should see the submit button
+          cy.get(`[data-cy="${customers.entitySlug}-form-submit"]`).should('be.visible')
+
+          cy.log('✅ Owner can access edit form with submit capability')
+        } else {
+          cy.log('⚠️ No customers to test edit access')
+        }
+      })
+    })
+
+    it('OWNER_CRUD_008: Owner can see Delete option in row menu', () => {
+      allure.severity('critical')
+
+      customers.visitList()
+      customers.api.waitForList()
+      customers.waitForList()
+
+      cy.get('body').then($body => {
+        if ($body.find(customers.selectors.rowGeneric).length > 0) {
+          // Open the first row's menu
+          cy.get(`[data-cy^="${customers.entitySlug}-menu-"]`).first().click()
+
+          // Owner should see the Delete option (this verifies delete permission)
+          cy.get('[role="menuitem"]').contains('Delete').should('be.visible')
+
+          // Close dropdown
+          cy.get('body').type('{esc}')
+
+          cy.log('✅ Owner can see Delete option in row menu')
+        } else {
+          cy.log('⚠️ No customers to test delete capability')
+        }
+      })
+    })
+  })
+
+  describe('Direct URL Access - Full Access', () => {
+    it('OWNER_CRUD_009: Owner can access /customers/create via URL', () => {
+      cy.visit(`/dashboard/${customers.entitySlug}/create`)
+
+      // Should NOT show permission denied
+      cy.get('[data-cy="permission-denied"]').should('not.exist')
+
+      // Should show form
+      customers.waitForForm()
+
+      cy.log('✅ Owner can access create via direct URL')
+    })
+
+    it('OWNER_CRUD_010: Owner can access /customers/[id]/edit via URL', () => {
+      customers.visitList()
+      customers.api.waitForList()
+
+      cy.get('body').then($body => {
+        if ($body.find(customers.selectors.rowGeneric).length > 0) {
+          // Extract customer ID
+          cy.get(customers.selectors.rowGeneric).first()
+            .invoke('attr', 'data-cy')
+            .then((dataCy) => {
+              const customerId = dataCy?.replace(`${customers.entitySlug}-row-`, '')
+
+              if (customerId) {
+                cy.visit(`/dashboard/${customers.entitySlug}/${customerId}/edit`)
+
+                // Should NOT show permission denied
+                cy.get('[data-cy="permission-denied"]').should('not.exist')
+
+                // Should show form
+                customers.waitForForm()
+
+                cy.log('✅ Owner can access edit via direct URL')
+              }
+            })
+        } else {
+          cy.log('⚠️ No customers to test direct URL edit')
+        }
+      })
+    })
+  })
+
+  after(() => {
+    cy.log('✅ Owner CRUD permission tests completed')
+  })
+})

package/tests/cypress/fixtures/blocks.json

@@ -0,0 +1,218 @@
+{
+  "$schema": "./blocks.schema.json",
+  "_warning": "AUTO-GENERATED by build-registry.mjs - DO NOT EDIT MANUALLY",
+  "_theme": "default",
+  "_totalBlocks": 16,
+  "available": [
+    {
+      "slug": "benefits",
+      "name": "Benefits Grid",
+      "description": "3-column grid showcasing benefits with optional colored top borders",
+      "category": "features",
+      "icon": "LayoutGrid",
+      "scope": [
+        "pages"
+      ]
+    },
+    {
+      "slug": "cta-section",
+      "name": "CTA Section",
+      "description": "Call-to-action section with title, description, and action buttons",
+      "category": "cta",
+      "icon": "Megaphone",
+      "scope": [
+        "pages"
+      ]
+    },
+    {
+      "slug": "faq-accordion",
+      "name": "FAQ Accordion",
+      "description": "A frequently asked questions section with expandable/collapsible accordion items",
+      "category": "faq",
+      "icon": "HelpCircle",
+      "scope": [
+        "pages"
+      ]
+    },
+    {
+      "slug": "features-grid",
+      "name": "Features Grid",
+      "description": "Grid layout displaying multiple features with icons, titles, and descriptions",
+      "category": "content",
+      "icon": "Grid",
+      "scope": [
+        "pages"
+      ]
+    },
+    {
+      "slug": "hero",
+      "name": "Hero Section",
+      "description": "Full-width hero section with title, subtitle, CTA button, and background image",
+      "category": "hero",
+      "icon": "Rocket",
+      "scope": [
+        "pages",
+        "posts"
+      ]
+    },
+    {
+      "slug": "hero-with-form",
+      "name": "Hero With Form",
+      "description": "Full-width hero section with background image, title/subtitle on the left, and a lead capture form card on the right",
+      "category": "hero",
+      "icon": "FileText",
+      "scope": [
+        "pages"
+      ]
+    },
+    {
+      "slug": "jumbotron",
+      "name": "Jumbotron",
+      "description": "A large, attention-grabbing hero block with optional fullscreen mode that takes 100% of the viewport height when enabled. Features centered content with support for 1-2 CTAs that automatically center based on count.",
+      "category": "hero",
+      "icon": "Maximize2",
+      "scope": [
+        "pages",
+        "posts"
+      ]
+    },
+    {
+      "slug": "logo-cloud",
+      "name": "Logo Cloud",
+      "description": "A section displaying client/partner logos in a grid or row layout (",
+      "category": "content",
+      "icon": "Building2",
+      "scope": [
+        "pages"
+      ]
+    },
+    {
+      "slug": "post-content",
+      "name": "Post Content",
+      "description": "A rich text content block designed for long-form blog posts with editorial styling similar to Medium. Features beautiful typography, proper spacing, and optional elements like drop caps, pull quotes, and images.",
+      "category": "content",
+      "icon": "FileText",
+      "scope": [
+        "posts"
+      ]
+    },
+    {
+      "slug": "pricing-table",
+      "name": "Pricing Table",
+      "description": "A pricing comparison table showing different plans with features list, price, CTA button, and optional ",
+      "category": "pricing",
+      "icon": "DollarSign",
+      "scope": [
+        "pages"
+      ]
+    },
+    {
+      "slug": "split-content",
+      "name": "Split Content",
+      "description": "A two-column section with image on one side and text content on the other, with option to reverse the order",
+      "category": "content",
+      "icon": "LayoutGrid",
+      "scope": [
+        "pages",
+        "posts"
+      ]
+    },
+    {
+      "slug": "stats-counter",
+      "name": "Stats Counter",
+      "description": "A section displaying key metrics/statistics with large numbers and labels (e.g., ",
+      "category": "stats",
+      "icon": "TrendingUp",
+      "scope": [
+        "pages",
+        "posts"
+      ]
+    },
+    {
+      "slug": "testimonials",
+      "name": "Testimonials",
+      "description": "Display customer testimonials with quotes, authors, and avatars",
+      "category": "testimonials",
+      "icon": "Quote",
+      "scope": [
+        "pages"
+      ]
+    },
+    {
+      "slug": "text-content",
+      "name": "Text Content",
+      "description": "Rich text content block for paragraphs, lists, and formatted text",
+      "category": "content",
+      "icon": "FileText",
+      "scope": [
+        "pages"
+      ]
+    },
+    {
+      "slug": "timeline",
+      "name": "Timeline",
+      "description": "A vertical or horizontal timeline showing chronological events, process steps, or history",
+      "category": "content",
+      "icon": "GitBranch",
+      "scope": [
+        "pages",
+        "posts"
+      ]
+    },
+    {
+      "slug": "video-hero",
+      "name": "Video Hero",
+      "description": "A hero section with embedded video (YouTube/Vimeo) either as background or inline, with title, subtitle, and optional CTA",
+      "category": "hero",
+      "icon": "Video",
+      "scope": [
+        "pages",
+        "posts"
+      ]
+    }
+  ],
+  "categories": [
+    "content",
+    "cta",
+    "faq",
+    "features",
+    "hero",
+    "pricing",
+    "stats",
+    "testimonials"
+  ],
+  "byCategory": {
+    "features": [
+      "benefits"
+    ],
+    "cta": [
+      "cta-section"
+    ],
+    "faq": [
+      "faq-accordion"
+    ],
+    "content": [
+      "features-grid",
+      "logo-cloud",
+      "post-content",
+      "split-content",
+      "text-content",
+      "timeline"
+    ],
+    "hero": [
+      "hero",
+      "hero-with-form",
+      "jumbotron",
+      "video-hero"
+    ],
+    "pricing": [
+      "pricing-table"
+    ],
+    "stats": [
+      "stats-counter"
+    ],
+    "testimonials": [
+      "testimonials"
+    ]
+  }
+}

package/tests/cypress/fixtures/entities.json

@@ -0,0 +1,87 @@
+{
+  "$schema": "./entities.schema.json",
+  "_warning": "AUTO-GENERATED by build-registry.mjs - DO NOT EDIT MANUALLY",
+  "_theme": "default",
+  "entities": {
+    "patterns": {
+      "slug": "patterns",
+      "singular": "pattern",
+      "plural": "Patterns",
+      "tableName": "patterns",
+      "fields": [],
+      "filters": [],
+      "source": "core"
+    },
+    "customers": {
+      "slug": "customers",
+      "singular": "customer",
+      "plural": "Customers",
+      "tableName": "customers",
+      "fields": [
+        "name",
+        "account",
+        "office",
+        "phone",
+        "salesRep",
+        "visitDays",
+        "contactDays"
+      ],
+      "filters": [],
+      "source": "theme"
+    },
+    "pages": {
+      "slug": "pages",
+      "singular": "page",
+      "plural": "Pages",
+      "tableName": "pages",
+      "fields": [
+        "title",
+        "slug",
+        "status",
+        "locale"
+      ],
+      "filters": [
+        "status"
+      ],
+      "source": "theme"
+    },
+    "posts": {
+      "slug": "posts",
+      "singular": "post",
+      "plural": "Posts",
+      "tableName": "posts",
+      "fields": [
+        "title",
+        "slug",
+        "status",
+        "excerpt",
+        "featuredImage"
+      ],
+      "filters": [
+        "status"
+      ],
+      "source": "theme"
+    },
+    "tasks": {
+      "slug": "tasks",
+      "singular": "task",
+      "plural": "Tasks",
+      "tableName": "tasks",
+      "fields": [
+        "title",
+        "description",
+        "status",
+        "priority",
+        "tags",
+        "dueDate",
+        "estimatedHours",
+        "completed"
+      ],
+      "filters": [
+        "status",
+        "priority"
+      ],
+      "source": "theme"
+    }
+  }
+}

package/tests/cypress/fixtures/page-builder.json

@@ -0,0 +1,21 @@
+{
+  "$schema": "./page-builder.schema.json",
+  "_comment": "Test data for existing pages (from sample data). API/routes handled by POMs.",
+  "_lastUpdated": "2025-12-27",
+
+  "existingPages": {
+    "aboutUs": {
+      "slug": "about-us",
+      "locale": "en",
+      "expectedBlocks": ["hero", "text-content", "features-grid", "cta-section", "testimonials", "cta-section", "benefits"]
+    },
+    "contact": {
+      "slug": "contact",
+      "locale": "en"
+    },
+    "services": {
+      "slug": "services",
+      "locale": "en"
+    }
+  }
+}