@nocobase/client-v2 2.3.0-beta.9 → 2.4.0-alpha.10

package/src/__tests__/browserChecker.test.ts

@@ -15,8 +15,11 @@ import { fileURLToPath } from 'node:url';
 type BrowserCheckerCase = {
   pathname: string;
   publicPath: string;
+  search?: string;
+  hash?: string;
   modernClientPrefix?: string;
   appClientEntryMode?: string;
+  scriptSrc?: string;
   expectedRedirect?: string;
 };
 
@@ -47,8 +50,8 @@ function executeBrowserChecker(scriptPath: string, input: BrowserCheckerCase) {
       location: {
         origin: 'http://c.local.nocobase.com',
         pathname: input.pathname,
-        search: '',
-        hash: '',
+        search: input.search || '',
+        hash: input.hash || '',
         replace,
       },
       console: consoleMock,
@@ -58,6 +61,13 @@ function executeBrowserChecker(scriptPath: string, input: BrowserCheckerCase) {
       onresize: undefined,
     },
     document: {
+      currentScript: {
+        src:
+          input.scriptSrc ||
+          (scriptPath.includes('/app/client-v2/public/')
+            ? 'http://assets.local.nocobase.com/v/browser-checker.js?v=1'
+            : 'http://assets.local.nocobase.com/browser-checker.js?v=1'),
+      },
       documentElement: {
         className: '',
         clientWidth: 1280,
@@ -80,11 +90,11 @@ function executeBrowserChecker(scriptPath: string, input: BrowserCheckerCase) {
 describe.each(browserCheckerCases)('$label', ({ scriptPath }) => {
   it('normalizes a relative public path before redirecting to the trailing-slash entry', () => {
     const replace = executeBrowserChecker(scriptPath, {
-      pathname: '/nocobase/v',
-      publicPath: 'nocobase/v/',
+      pathname: '/nocobase/console',
+      publicPath: 'nocobase/console/',
     });
 
-    expect(replace).toHaveBeenCalledWith('http://c.local.nocobase.com/nocobase/v/');
+    expect(replace).toHaveBeenCalledWith('http://c.local.nocobase.com/nocobase/console/');
   });
 
   it('prefixes outside paths with a root-relative basename instead of duplicating a relative segment', () => {
@@ -98,7 +108,7 @@ describe.each(browserCheckerCases)('$label', ({ scriptPath }) => {
 
   it('does not redirect when the current path is already under the normalized basename', () => {
     const replace = executeBrowserChecker(scriptPath, {
-      pathname: '/nocobase/v/',
+      pathname: '/nocobase/v/admin',
       publicPath: 'nocobase/v/',
     });
 
@@ -126,6 +136,30 @@ describe.each(browserCheckerCases)('$label', ({ scriptPath }) => {
       expect(replace).toHaveBeenCalledWith('http://c.local.nocobase.com/v/');
     });
 
+    it('redirects app root to modern entry for modern-only', () => {
+      const replace = executeBrowserChecker(scriptPath, {
+        pathname: '/',
+        publicPath: '/',
+        modernClientPrefix: 'v',
+        appClientEntryMode: 'modern-only',
+      });
+
+      expect(replace).toHaveBeenCalledWith('http://c.local.nocobase.com/v/');
+    });
+
+    it.each(['/', '/index.html'])('redirects app root entry %s to Settings for settings-default', (pathname) => {
+      const replace = executeBrowserChecker(scriptPath, {
+        pathname,
+        publicPath: '/',
+        modernClientPrefix: 'v',
+        appClientEntryMode: 'settings-default',
+        search: '?from=entry',
+        hash: '#panel',
+      });
+
+      expect(replace).toHaveBeenCalledWith('http://c.local.nocobase.com/settings/?from=entry#panel');
+    });
+
     it('does not redirect legacy deep links for modern-default', () => {
       const replace = executeBrowserChecker(scriptPath, {
         pathname: '/admin',
@@ -137,6 +171,17 @@ describe.each(browserCheckerCases)('$label', ({ scriptPath }) => {
       expect(replace).not.toHaveBeenCalled();
     });
 
+    it('does not redirect legacy deep links for settings-default', () => {
+      const replace = executeBrowserChecker(scriptPath, {
+        pathname: '/admin',
+        publicPath: '/',
+        modernClientPrefix: 'v',
+        appClientEntryMode: 'settings-default',
+      });
+
+      expect(replace).not.toHaveBeenCalled();
+    });
+
     it('rewrites legacy document paths for modern-only', () => {
       const replace = executeBrowserChecker(scriptPath, {
         pathname: '/admin/settings/workflow',
@@ -159,6 +204,19 @@ describe.each(browserCheckerCases)('$label', ({ scriptPath }) => {
       expect(replace).toHaveBeenCalledWith('http://c.local.nocobase.com/nocobase/v/');
     });
 
+    it('redirects a sub-path app root directly to Settings for settings-default', () => {
+      const replace = executeBrowserChecker(scriptPath, {
+        pathname: '/nocobase/',
+        publicPath: '/nocobase/',
+        modernClientPrefix: 'v',
+        appClientEntryMode: 'settings-default',
+        search: '?from=entry',
+        hash: '#panel',
+      });
+
+      expect(replace).toHaveBeenCalledWith('http://c.local.nocobase.com/nocobase/settings/?from=entry#panel');
+    });
+
     it('rewrites sub-app legacy deep links for modern-only without collapsing the sub-app segment', () => {
       const replace = executeBrowserChecker(scriptPath, {
         pathname: '/nocobase/apps/a_31itq60q4kg/admin/',
@@ -170,4 +228,112 @@ describe.each(browserCheckerCases)('$label', ({ scriptPath }) => {
       expect(replace).toHaveBeenCalledWith('http://c.local.nocobase.com/nocobase/v/apps/a_31itq60q4kg/admin');
     });
   }
+
+  if (scriptPath.includes('/app/client-v2/public/')) {
+    it.each([
+      ['/v', 'http://c.local.nocobase.com/v/'],
+      ['/v/', undefined],
+    ])('normalizes the modern client root %s without redirecting to Settings', (pathname, expectedRedirect) => {
+      const replace = executeBrowserChecker(scriptPath, {
+        pathname,
+        publicPath: '/v/',
+        modernClientPrefix: 'v',
+      });
+
+      if (expectedRedirect) {
+        expect(replace).toHaveBeenCalledOnce();
+        expect(replace).toHaveBeenCalledWith(expectedRedirect);
+      } else {
+        expect(replace).not.toHaveBeenCalled();
+      }
+    });
+
+    it.each(['/v/apps/demo', '/v/apps/demo/', '/v/_app/demo', '/v/_app/demo/'])(
+      'lets the scoped modern client handle its root %s',
+      (pathname) => {
+        const replace = executeBrowserChecker(scriptPath, {
+          pathname,
+          publicPath: '/v/',
+          modernClientPrefix: 'v',
+        });
+
+        expect(replace).not.toHaveBeenCalled();
+      },
+    );
+
+    it.each([
+      ['/settings/apps/demo', '/', '/settings/apps/demo/', 'v'],
+      ['/settings/_app/demo', '/', '/settings/_app/demo/', 'v'],
+      ['/nocobase/settings/apps/demo', '/nocobase/', '/nocobase/settings/apps/demo/', 'v'],
+      ['/nocobase/settings/_app/demo', '/nocobase/', '/nocobase/settings/_app/demo/', 'v'],
+      ['/tenant/apps/root/settings/apps/demo', '/tenant/apps/root/', '/tenant/apps/root/settings/apps/demo/', 'v'],
+      ['/tenant/_app/root/settings/_app/demo', '/tenant/_app/root/', '/tenant/_app/root/settings/_app/demo/', 'v'],
+      ['/tenant/v/settings/apps/demo', '/tenant/v/', '/tenant/v/settings/apps/demo/', 'v'],
+      ['/tenant/modern/settings/_app/demo', '/tenant/modern/', '/tenant/modern/settings/_app/demo/', 'modern'],
+    ])('normalizes the scoped Settings root %s to %s', (pathname, publicPath, expectedPathname, modernClientPrefix) => {
+      const replace = executeBrowserChecker(scriptPath, {
+        pathname,
+        publicPath,
+        modernClientPrefix,
+        scriptSrc: 'https://cdn.example.com/ui/settings/browser-checker.js?v=1',
+        search: '?tab=overview',
+        hash: '#panel',
+      });
+
+      expect(replace).toHaveBeenCalledOnce();
+      expect(replace).toHaveBeenCalledWith(`http://c.local.nocobase.com${expectedPathname}?tab=overview#panel`);
+    });
+
+    it.each([
+      ['/tenant/apps/root/modern/apps/demo/', '/tenant/apps/root/modern/'],
+      ['/tenant/_app/root/modern/_app/demo/', '/tenant/_app/root/modern/'],
+    ])('lets the modern client handle %s under a nested public path', (pathname, publicPath) => {
+      const replace = executeBrowserChecker(scriptPath, {
+        pathname,
+        publicPath,
+        modernClientPrefix: 'modern',
+        search: '?tab=overview',
+        hash: '#panel',
+      });
+
+      expect(replace).not.toHaveBeenCalled();
+    });
+
+    it.each([
+      ['/v/admin', '/v/'],
+      ['/v/apps/demo/admin', '/v/'],
+      ['/v/_app/demo/admin', '/v/'],
+      ['/v/_apps/demo', '/v/'],
+      ['/v/settings/apps/demo', '/v/'],
+      ['/nocobase/modern/settings/_app/demo', '/nocobase/modern/', 'modern'],
+    ])('does not redirect a non-root modern path %s to Settings', (pathname, publicPath, modernClientPrefix = 'v') => {
+      const replace = executeBrowserChecker(scriptPath, {
+        pathname,
+        publicPath,
+        modernClientPrefix,
+      });
+
+      expect(replace).not.toHaveBeenCalled();
+    });
+
+    it.each([
+      ['/settings', '/'],
+      ['/settings/', '/'],
+      ['/settings/apps/demo/', '/'],
+      ['/settings/_app/demo/', '/'],
+      ['/settings/apps/demo/multi-portal', '/'],
+      ['/settings/_app/demo/multi-portal', '/'],
+      ['/settings/_apps/demo', '/'],
+      ['/nocobase/settings/apps/demo/multi-portal', '/nocobase/'],
+    ])('does not redirect a non-target Settings path %s', (pathname, publicPath) => {
+      const replace = executeBrowserChecker(scriptPath, {
+        pathname,
+        publicPath,
+        modernClientPrefix: 'v',
+        scriptSrc: 'https://cdn.example.com/ui/settings/browser-checker.js?v=1',
+      });
+
+      expect(replace).not.toHaveBeenCalled();
+    });
+  }
 });

package/src/__tests__/mockSettingsApplication.ts

@@ -0,0 +1,29 @@
+/**
+ * This file is part of the NocoBase (R) project.
+ * Copyright (c) 2020-2024 NocoBase Co., Ltd.
+ * Authors: NocoBase Team.
+ *
+ * This project is dual-licensed under AGPL-3.0 and NocoBase Commercial License.
+ * For more information, please refer to: https://www.nocobase.com/agreement.
+ */
+
+import MockAdapter from 'axios-mock-adapter';
+import type { ApplicationOptions } from '../Application';
+import { SettingsApplication } from '../settings-app/SettingsApplication';
+
+class MockSettingsApplication extends SettingsApplication {
+  readonly apiMock: MockAdapter;
+
+  constructor(options: ApplicationOptions = {}) {
+    super({
+      router: { type: 'memory', initialEntries: ['/settings'] },
+      ws: false,
+      ...options,
+    });
+    this.apiMock = new MockAdapter(this.apiClient.axios);
+  }
+}
+
+export function createMockSettingsClient(options?: ApplicationOptions) {
+  return new MockSettingsApplication(options);
+}

package/src/__tests__/nocobase-buildin-plugin-auth.test.tsx

@@ -51,6 +51,42 @@ class AuthBootstrapRoutePlugin extends Plugin {
   }
 }
 
+class TestAdminPortalPlugin extends Plugin {
+  async load() {
+    this.app.layoutManager.registerLayout({
+      routeName: 'admin',
+      routePath: '/admin',
+      uid: 'admin-layout-model',
+      layoutModelClass: 'AdminLayoutModel',
+    });
+  }
+}
+
+class TestRootPortalPlugin extends Plugin {
+  async load() {
+    this.router.add('root', {
+      path: '/',
+      authCheck: true,
+      Component: () => <div>portal landing</div>,
+    });
+  }
+}
+
+class TestScopedPortalPlugin extends Plugin {
+  async load() {
+    this.router.add('customer-portal', {
+      path: '/customer/*',
+      authCheck: true,
+      Component: () => <div>customer portal</div>,
+    });
+    this.router.add('customer-portal-signin', {
+      path: '/customer/signin',
+      skipAuthCheck: true,
+      Component: () => <div>customer portal signin</div>,
+    });
+  }
+}
+
 describe('nocobase buildin plugin auth redirect', () => {
   const originalLocation = globalThis.window.location;
 
@@ -85,6 +121,16 @@ describe('nocobase buildin plugin auth redirect', () => {
     vi.restoreAllMocks();
   });
 
+  it('should leave Admin portal registration to runtime plugins', async () => {
+    const app = createMockClient();
+    const plugin = new NocoBaseBuildInPlugin({}, app);
+
+    await plugin.load();
+
+    expect(app.layoutManager.hasLayout('admin')).toBe(false);
+    expect(app.router.has('root')).toBe(false);
+  });
+
   it('should navigate to v2 signin when /auth:check returns no user', async () => {
     // Aligns with v1: use react-router navigate (virtual) rather than
     // `window.location.replace`, so a `window.location.href` queued elsewhere
@@ -92,7 +138,7 @@ describe('nocobase buildin plugin auth redirect', () => {
     // overridden.
     const app = createMockClient({
       publicPath: '/v2/',
-      plugins: [NocoBaseBuildInPlugin as any],
+      plugins: [NocoBaseBuildInPlugin as any, TestAdminPortalPlugin as typeof Plugin],
       router: { type: 'memory', initialEntries: ['/v2/admin/7vu4c2sdk6h'] },
     });
     app.apiMock.onGet('app:getLang').reply(200, {
@@ -115,7 +161,7 @@ describe('nocobase buildin plugin auth redirect', () => {
     // and race the 2FA response interceptor with its own signin redirect.
     const app = createMockClient({
       publicPath: '/v2/',
-      plugins: [NocoBaseBuildInPlugin as any],
+      plugins: [NocoBaseBuildInPlugin as any, TestAdminPortalPlugin as typeof Plugin],
       router: { type: 'memory', initialEntries: ['/v2/admin'] },
     });
     app.apiClient.auth.setToken('test-token');
@@ -136,29 +182,56 @@ describe('nocobase buildin plugin auth redirect', () => {
     expect(app.apiMock.history.post.filter((request) => request.url === 'auth:syncCookies')).toHaveLength(0);
   });
 
-  it('should redirect unauthenticated v2 root access to v2 signin via <Navigate />', async () => {
+  it('should redirect an unauthenticated Portal root to v2 signin', async () => {
     const app = createMockClient({
       publicPath: '/nocobase/v2/',
-      plugins: [NocoBaseBuildInPlugin as any],
+      plugins: [NocoBaseBuildInPlugin as any, TestRootPortalPlugin as typeof Plugin],
       router: { type: 'memory', initialEntries: ['/nocobase/v2/'] },
     });
     app.apiMock.onGet('app:getLang').reply(200, {
       data: { lang: 'en-US', resources: { client: {} }, cron: {} },
     });
+    app.apiMock.onGet('/auth:check').reply(200, { data: {} });
 
     const Root = app.getRootComponent();
     render(<Root />);
 
     await waitFor(() => {
       expect(app.router.router.state.location.pathname).toBe('/nocobase/v2/signin');
-      expect(app.router.router.state.location.search).toBe('?redirect=%2Fnocobase%2Fv2%2Fadmin');
+      expect(app.router.router.state.location.search).toBe('?redirect=%2Fnocobase%2Fv2');
+    });
+  });
+
+  it('should use an explicitly registered Portal signin route when unauthenticated', async () => {
+    const app = createMockClient({
+      publicPath: '/v2/',
+      plugins: [NocoBaseBuildInPlugin as unknown as typeof Plugin, TestScopedPortalPlugin as typeof Plugin],
+      router: { type: 'memory', initialEntries: ['/v2/customer/dashboard?tab=overview#panel'] },
+    });
+    app.apiMock.onGet('app:getLang').reply(200, {
+      data: { lang: 'en-US', resources: { client: {} }, cron: {} },
+    });
+    app.apiMock.onGet('/auth:check').reply(200, { data: {} });
+
+    const Root = app.getRootComponent();
+    render(<Root />);
+
+    await waitFor(() => {
+      expect(app.router.router.state.location.pathname).toBe('/v2/customer/signin');
+      expect(app.router.router.state.location.search).toBe(
+        '?redirect=%2Fv2%2Fcustomer%2Fdashboard%3Ftab%3Doverview%23panel',
+      );
     });
   });
 
   it('should check current user after navigating from skipped route to v2 admin', async () => {
     const app = createMockClient({
       publicPath: '/v2/',
-      plugins: [NocoBaseBuildInPlugin as any, SkippedPublicRoutePlugin as any],
+      plugins: [
+        NocoBaseBuildInPlugin as any,
+        TestAdminPortalPlugin as typeof Plugin,
+        SkippedPublicRoutePlugin as typeof Plugin,
+      ],
       router: { type: 'memory', initialEntries: ['/v2/public'] },
     });
     app.apiMock.onGet('app:getLang').reply(200, {
@@ -385,7 +458,7 @@ describe('nocobase buildin plugin auth redirect', () => {
   it('should render v2 admin root without redirecting away', async () => {
     const app = createMockClient({
       publicPath: '/v2/',
-      plugins: [NocoBaseBuildInPlugin as any],
+      plugins: [NocoBaseBuildInPlugin as any, TestAdminPortalPlugin as typeof Plugin],
       router: { type: 'memory', initialEntries: ['/v2/admin'] },
     });
     app.apiMock.onGet('app:getLang').reply(200, {
@@ -419,7 +492,7 @@ describe('nocobase buildin plugin auth redirect', () => {
     async (pathname) => {
       const app = createMockClient({
         publicPath: '/v2/',
-        plugins: [NocoBaseBuildInPlugin as any],
+        plugins: [NocoBaseBuildInPlugin as any, TestAdminPortalPlugin as typeof Plugin],
         router: { type: 'memory', initialEntries: [pathname] },
       });
       app.apiMock.onGet('app:getLang').reply(200, {

package/src/__tests__/plugin-manager.test.tsx

@@ -7,10 +7,11 @@
  * For more information, please refer to: https://www.nocobase.com/agreement.
  */
 
-import { ACLRolesCheckProvider, createMockClient, Plugin } from '@nocobase/client-v2';
+import { ACLRolesCheckProvider, Plugin } from '@nocobase/client-v2';
 import { fireEvent, render, screen, waitFor, within } from '@testing-library/react';
 import React from 'react';
-import { NocoBaseBuildInPlugin } from '../nocobase-buildin-plugin';
+import { SettingsBuildInPlugin } from '../settings-app/SettingsBuildInPlugin';
+import { createMockSettingsClient } from './mockSettingsApplication';
 
 class TestAclPlugin extends Plugin {
   async load() {
@@ -31,7 +32,7 @@ class TestSettingsLinkPlugin extends Plugin {
   }
 }
 
-type MockClientApplication = ReturnType<typeof createMockClient>;
+type MockClientApplication = ReturnType<typeof createMockSettingsClient>;
 
 const renderApp = (app: MockClientApplication) => {
   const Root = app.getRootComponent();
@@ -49,9 +50,9 @@ const waitForGetRequests = async (app: MockClientApplication, urls: string[]) =>
 };
 
 const setupApp = (pmList: any[], plugins: Array<typeof Plugin> = []) => {
-  const app = createMockClient({
-    plugins: [NocoBaseBuildInPlugin, TestAclPlugin, ...plugins],
-    router: { type: 'memory', initialEntries: ['/admin/settings/plugin-manager'] },
+  const app = createMockSettingsClient({
+    plugins: [SettingsBuildInPlugin, TestAclPlugin, ...plugins],
+    router: { type: 'memory', initialEntries: ['/settings/plugin-manager'] },
   });
 
   app.apiMock.onGet('/auth:check').reply(200, {

package/src/__tests__/settings-application.test.ts

@@ -0,0 +1,164 @@
+/**
+ * This file is part of the NocoBase (R) project.
+ * Copyright (c) 2020-2024 NocoBase Co., Ltd.
+ * Authors: NocoBase Team.
+ *
+ * This project is dual-licensed under AGPL-3.0 and NocoBase Commercial License.
+ * For more information, please refer to: https://www.nocobase.com/agreement.
+ */
+
+import MockAdapter from 'axios-mock-adapter';
+import { describe, expect, it } from 'vitest';
+import { Application } from '../index';
+import { SettingsApplication } from '../settings-app/SettingsApplication';
+import { SettingsBuildInPlugin } from '../settings-app/SettingsBuildInPlugin';
+
+describe('SettingsApplication', () => {
+  it('uses the standalone settings route namespace', () => {
+    const adminApp = new Application({ router: { type: 'memory' }, ws: false });
+    const settingsApp = new SettingsApplication({ router: { type: 'memory' }, ws: false });
+
+    expect(adminApp.pluginSettingsManager.getRouteName('demo.index')).toBe('admin.settings.demo.index');
+    expect(adminApp.pluginSettingsManager.getRoutePath('demo.index')).toBe('/admin/settings/demo');
+
+    expect(settingsApp.pluginSettingsManager.getRouteName('demo.index')).toBe('settings.demo.index');
+    expect(settingsApp.pluginSettingsManager.getRoutePath('demo.index')).toBe('/settings/demo');
+    expect(settingsApp.pluginSettingsManager.getRoutePath('')).toBe('/settings/');
+  });
+
+  it.each(['apps', '_app'])('uses basename-relative paths for the %s sub-application Settings runtime', (scope) => {
+    const app = new SettingsApplication({
+      publicPath: '/nocobase/',
+      router: { type: 'memory', basename: `/nocobase/settings/${scope}/demo/` },
+      ws: false,
+    });
+
+    expect(app.pluginSettingsManager.getRouteName('demo.index')).toBe('settings.demo.index');
+    expect(app.pluginSettingsManager.getRoutePath('')).toBe('/');
+    expect(app.pluginSettingsManager.getRoutePath('demo.index')).toBe('/demo');
+
+    app.router.add('settings', { path: '/settings' });
+    app.router.add('settingsDetails.workflow.canvas', { path: '/settings/workflow/workflows/:id' });
+    app.router.add('settingsDetails.preview', { path: '/settings-preview/:id' });
+    app.router.add('auth.signin', { path: '/signin' });
+
+    expect(app.router.get('settings')).toMatchObject({ path: '/' });
+    expect(app.router.get('settingsDetails.workflow.canvas')).toMatchObject({
+      path: '/workflow/workflows/:id',
+      authCheck: true,
+    });
+    expect(
+      app.router
+        .matchRoutes(`/nocobase/settings/${scope}/demo/workflow/workflows/1`)
+        ?.some((match) => match.route.id === 'settingsDetails.workflow.canvas'),
+    ).toBe(true);
+    expect(
+      app.router
+        .matchRoutes(`/nocobase/settings/${scope}/demo/settings/workflow/workflows/1`)
+        ?.some((match) => match.route.id === 'settingsDetails.workflow.canvas'),
+    ).toBe(false);
+    expect(app.router.get('settingsDetails.preview')).toMatchObject({ path: '/settings-preview/:id' });
+    expect(app.router.get('auth.signin')).toMatchObject({ path: '/signin' });
+  });
+
+  it('does not treat an apps segment inside the main application public path as a sub-application scope', () => {
+    const app = new SettingsApplication({
+      router: { type: 'memory', basename: '/tenant/apps/root/' },
+      ws: false,
+    });
+
+    expect(app.pluginSettingsManager.getRoutePath('')).toBe('/settings/');
+    expect(app.pluginSettingsManager.getRoutePath('demo.index')).toBe('/settings/demo');
+
+    app.router.add('settingsDetails.workflow.canvas', { path: '/settings/workflow/workflows/:id' });
+    expect(app.router.get('settingsDetails.workflow.canvas')).toMatchObject({
+      path: '/settings/workflow/workflows/:id',
+    });
+  });
+
+  it.each(['apps', '_app'])(
+    'does not treat a scoped-looking %s suffix inside the main public path as a sub-application scope',
+    (scope) => {
+      const publicPath = `/tenant/settings/${scope}/root/`;
+      const app = new SettingsApplication({
+        publicPath,
+        router: { type: 'memory', basename: publicPath },
+        ws: false,
+      });
+
+      expect(app.pluginSettingsManager.getRoutePath('')).toBe('/settings/');
+      expect(app.pluginSettingsManager.getRoutePath('demo.index')).toBe('/settings/demo');
+
+      app.router.add('settingsDetails.workflow.canvas', { path: '/settings/workflow/workflows/:id' });
+      app.router.add('auth.signin', { path: '/signin' });
+
+      expect(app.router.get('settingsDetails.workflow.canvas')).toMatchObject({
+        path: '/settings/workflow/workflows/:id',
+      });
+      expect(app.router.get('auth.signin')).toMatchObject({ path: '/settings/signin' });
+    },
+  );
+
+  it('keeps only routes owned by the settings runtime', () => {
+    const app = new SettingsApplication({ router: { type: 'memory' }, ws: false });
+
+    app.router.add('settings', { path: '/settings' });
+    app.router.add('settings.demo', { path: 'demo' });
+    app.router.add('settingsDetails.workflow.canvas', { path: '/settings/workflow/workflows/:id' });
+    app.router.add('admin.demo', { path: '/admin/demo' });
+    app.router.add('public-forms', { path: '/public-forms/:key' });
+    app.router.add('mobile', { path: '/mobile' });
+
+    expect(app.router.has('settings')).toBe(true);
+    expect(app.router.has('settings.demo')).toBe(true);
+    expect(app.router.get('settingsDetails.workflow.canvas')).toMatchObject({
+      path: '/settings/workflow/workflows/:id',
+      authCheck: true,
+    });
+    expect(app.router.has('admin.demo')).toBe(false);
+    expect(app.router.has('public-forms')).toBe(false);
+    expect(app.router.has('mobile')).toBe(false);
+    expect(app.router.has('not-found')).toBe(true);
+  });
+
+  it('keeps hidden plugin detail pages in the normal Settings route tree', () => {
+    const app = new SettingsApplication({ router: { type: 'memory' }, ws: false });
+
+    app.pluginSettingsManager.addMenuItem({ key: 'public-forms', title: 'Public forms' });
+    app.pluginSettingsManager.addPageTabItem({
+      menuKey: 'public-forms',
+      key: ':name',
+      title: false,
+      hidden: true,
+      Component: () => null,
+    });
+
+    expect(app.pluginSettingsManager.get('public-forms.:name')).toMatchObject({
+      hidden: true,
+      path: '/settings/public-forms/:name',
+    });
+    expect(app.router.get('settings.public-forms.:name')).toMatchObject({ path: ':name' });
+  });
+
+  it('registers the authenticated settings shell without the admin layout', async () => {
+    const app = new SettingsApplication({ router: { type: 'memory' }, ws: false });
+    const apiMock = new MockAdapter(app.apiClient.axios);
+    apiMock.onGet('app:getLang').reply(200, { data: { lang: 'en-US', resources: { client: {} }, cron: {} } });
+    const plugin = new SettingsBuildInPlugin({ name: 'settings-buildin' }, app);
+
+    await plugin.afterAdd();
+    await plugin.load();
+    app.router.add('settingsDetails.workflow.canvas', { path: '/settings/workflow/workflows/:id' });
+
+    expect(app.router.get('settings')).toMatchObject({ path: '/settings', authCheck: true });
+    expect(app.router.get('settingsDetails')).toMatchObject({ path: '/settings', authCheck: true });
+    expect(
+      app.router.matchRoutes('/settings/workflow/workflows/1')?.some((match) => match.route.authCheck === true),
+    ).toBe(true);
+    expect(app.router.has('admin')).toBe(false);
+    expect(app.layoutManager.hasLayout('admin')).toBe(false);
+    expect(app.pluginSettingsManager.has('plugin-manager')).toBe(true);
+    expect(app.pluginSettingsManager.has('system-settings')).toBe(true);
+    expect(app.pluginSettingsManager.has('security')).toBe(true);
+  });
+});