@ploykit/ui 0.5.0 → 0.6.2

package/src/pages/admin/__tests__/UsersPageActions.test.tsx

@@ -0,0 +1,188 @@
+
+import '@testing-library/jest-dom/vitest'
+import { fireEvent, render, screen, waitFor } from '@testing-library/react'
+import { MemoryRouter } from 'react-router'
+import { QueryClient, QueryClientProvider } from '@tanstack/react-query'
+import { describe, it, expect, vi, beforeEach } from 'vitest'
+
+const mockedGet = vi.hoisted(() => vi.fn())
+const mockedPatch = vi.hoisted(() => vi.fn())
+const mockedPost = vi.hoisted(() => vi.fn())
+const confirmMock = vi.hoisted(() => vi.fn())
+vi.mock('@ploykit/client', () => ({
+  api: {
+    get: mockedGet,
+    put: vi.fn(),
+    post: mockedPost,
+    patch: mockedPatch,
+    delete: vi.fn(),
+  },
+  ApiError: class ApiError extends Error {
+    status: number
+    code: string
+    constructor(status: number, code: string, message: string) {
+      super(message)
+      this.status = status
+      this.code = code
+    }
+  },
+}))
+vi.mock('../../../../../hooks/src/hooks/useApi', () => ({
+  useApi: () => ({
+    get: mockedGet,
+    put: vi.fn(),
+    post: mockedPost,
+    patch: mockedPatch,
+    delete: vi.fn(),
+  }),
+}))
+vi.mock('../../../../../hooks/src/hooks/useAuth', () => ({
+  useAuth: () => ({
+    user: { id: 'me-1', email: 'admin@audit.local', is_platform_admin: true },
+    loading: false,
+    refresh: vi.fn(),
+    logout: vi.fn(),
+    workspaces: [],
+  }),
+}))
+vi.mock('../../../components/ConfirmDialog', () => ({
+  useConfirm: () => confirmMock,
+}))
+
+import { UsersPage } from '../UsersPage'
+
+const ME = {
+  id: 'me-1',
+  email: 'admin@audit.local',
+  display_name: 'Admin',
+  status: 'active',
+  is_platform_admin: true,
+  email_verified: true,
+  created_at: '2026-09-01T00:00:00Z',
+}
+const OTHER = {
+  id: 'u-9',
+  email: 'user@audit.local',
+  display_name: 'User',
+  status: 'active',
+  is_platform_admin: false,
+  email_verified: true,
+  created_at: '2026-09-02T00:00:00Z',
+}
+
+function renderPage(props: Parameters<typeof UsersPage>[0] = {}) {
+  const qc = new QueryClient({ defaultOptions: { queries: { retry: false } } })
+  return render(
+    <MemoryRouter initialEntries={['/admin/users']}>
+      <QueryClientProvider client={qc}>
+        <UsersPage {...props} />
+      </QueryClientProvider>
+    </MemoryRouter>,
+  )
+}
+
+beforeEach(() => {
+  mockedGet.mockReset().mockImplementation(async (path: string) => {
+    if (path.startsWith('/api/admin/users')) return { items: [ME, OTHER], total: 2 }
+    throw new Error('unexpected GET ' + path)
+  })
+  mockedPatch.mockReset().mockResolvedValue({})
+  mockedPost.mockReset().mockResolvedValue({})
+  confirmMock.mockReset().mockResolvedValue(true)
+})
+
+describe('UsersPage 危险操作（P2-25）', () => {
+  it('B-users-1 回归：行操作菜单可打开且不崩溃（Label 在 Group 内）', async () => {
+    renderPage()
+    await screen.findAllByText('user@audit.local')
+    fireEvent.click(screen.getByRole('button', { name: '操作 user@audit.local' }))
+    
+    expect(await screen.findByRole('menuitem', { name: '用户详情' })).toBeInTheDocument()
+    expect(screen.getByRole('menuitem', { name: '封禁账号' })).toBeInTheDocument()
+    expect(screen.getByRole('menuitem', { name: '模拟登录' })).toBeInTheDocument()
+  })
+
+  it('封禁：ImpactConfirmation 勾选后 PATCH status=disabled', async () => {
+    renderPage()
+    await screen.findAllByText('user@audit.local')
+    fireEvent.click(screen.getByRole('button', { name: '操作 user@audit.local' }))
+    fireEvent.click(await screen.findByRole('menuitem', { name: '封禁账号' }))
+
+    
+    const confirmBtn = await screen.findByRole('button', { name: '封禁' })
+    expect(confirmBtn).toBeDisabled()
+    expect(screen.getByText(/其名下工作区与数据保留/)).toBeInTheDocument()
+    fireEvent.click(screen.getByLabelText(/我理解并接受以上影响/))
+    fireEvent.click(screen.getByRole('button', { name: '封禁' }))
+
+    await waitFor(() =>
+      expect(mockedPatch).toHaveBeenCalledWith('/api/admin/users/u-9/status', {
+        status: 'disabled',
+      }),
+    )
+  })
+
+  it('授予平台管理员：confirm 确认后 PATCH admin {is_admin:true}，文案明示后果', async () => {
+    renderPage()
+    await screen.findAllByText('user@audit.local')
+    fireEvent.click(screen.getByRole('button', { name: '操作 user@audit.local' }))
+    fireEvent.click(await screen.findByRole('menuitem', { name: '授予平台管理员' }))
+
+    await waitFor(() => expect(confirmMock).toHaveBeenCalled())
+    expect(confirmMock.mock.calls[0][0].description).toContain('平台管理权限')
+    await waitFor(() =>
+      expect(mockedPatch).toHaveBeenCalledWith('/api/admin/users/u-9/admin', {
+        is_admin: true,
+      }),
+    )
+  })
+
+  it('取消确认则不提权', async () => {
+    confirmMock.mockResolvedValueOnce(false)
+    renderPage()
+    await screen.findAllByText('user@audit.local')
+    fireEvent.click(screen.getByRole('button', { name: '操作 user@audit.local' }))
+    fireEvent.click(await screen.findByRole('menuitem', { name: '授予平台管理员' }))
+
+    await waitFor(() => expect(confirmMock).toHaveBeenCalled())
+    expect(mockedPatch).not.toHaveBeenCalled()
+  })
+
+  it('模拟登录：ImpactConfirmation 勾选后 POST impersonate → 跳 impersonatePath', async () => {
+    renderPage({ impersonatePath: '/custom-app' })
+    await screen.findAllByText('user@audit.local')
+    fireEvent.click(screen.getByRole('button', { name: '操作 user@audit.local' }))
+    fireEvent.click(await screen.findByRole('menuitem', { name: '模拟登录' }))
+
+    const confirmBtn = await screen.findByRole('button', { name: '以该用户进入产品' })
+    fireEvent.click(screen.getByLabelText(/我理解并接受以上影响/))
+    fireEvent.click(confirmBtn)
+
+    await waitFor(() =>
+      expect(mockedPost).toHaveBeenCalledWith('/api/admin/users/u-9/impersonate'),
+    )
+    // window.location.href 整页跳转在 jsdom 未实现（Not implemented: navigation）——
+    // 以 POST 完成即视为链路通；跳转目标由 impersonatePath prop 驱动（P2-15）。
+  })
+
+  it('自己的行不渲染封禁/互模入口（详情可看）', async () => {
+    renderPage()
+    await screen.findAllByText('admin@audit.local')
+    expect(
+      screen.queryByRole('button', { name: '操作 admin@audit.local' }),
+    ).not.toBeInTheDocument()
+    expect(screen.getByRole('button', { name: '详情' })).toBeInTheDocument()
+  })
+
+  it('平台管理员行：模拟登录入口禁用（服务端禁止互模）', async () => {
+    mockedGet.mockImplementation(async () => ({
+      items: [ME, { ...OTHER, id: 'u-10', email: 'admin2@audit.local', is_platform_admin: true }],
+      total: 2,
+    }))
+    renderPage()
+    await screen.findAllByText('admin2@audit.local')
+    fireEvent.click(screen.getByRole('button', { name: '操作 admin2@audit.local' }))
+    const item = await screen.findByRole('menuitem', { name: '模拟登录' })
+    expect(item).toHaveAttribute('aria-disabled', 'true')
+  })
+})

package/src/pages/admin/__tests__/WorkspaceDetailPageTransfer.test.tsx

@@ -0,0 +1,170 @@
+
+import '@testing-library/jest-dom/vitest';
+import {
+  fireEvent,
+  render,
+  screen,
+  waitFor,
+  within,
+} from '@testing-library/react';
+import { QueryClient, QueryClientProvider } from '@tanstack/react-query';
+import { describe, it, expect, vi, beforeEach } from 'vitest';
+
+const mockedGet = vi.hoisted(() => vi.fn());
+const mockedPost = vi.hoisted(() => vi.fn());
+vi.mock('@ploykit/client', () => ({
+  api: {
+    get: mockedGet,
+    put: vi.fn(),
+    post: mockedPost,
+    patch: vi.fn(),
+    delete: vi.fn(),
+  },
+  ApiError: class ApiError extends Error {
+    status: number;
+    code: string;
+    constructor(status: number, code: string, message: string) {
+      super(message);
+      this.status = status;
+      this.code = code;
+    }
+  },
+}));
+
+
+vi.mock('../../../../../hooks/src/hooks/useAuth', () => ({
+  useAuth: () => ({
+    user: { id: 'op-admin', email: 'op@test.local' },
+    loading: false,
+  }),
+}));
+
+vi.mock('react-router', () => ({
+  useParams: () => ({ id: 'ws-1' }),
+  useNavigate: () => () => {},
+  Link: ({ to, children }: { to: string; children: React.ReactNode }) => (
+    <a href={to}>{children}</a>
+  ),
+}));
+
+import { WorkspaceDetailPage } from '../WorkspaceDetailPage';
+// fail-fast 后 useConfirm 无 Provider 即抛错：此测试直接渲染页面，须包 ConfirmProvider
+import { ConfirmProvider } from '../../../components/ConfirmDialog';
+
+const DETAIL = {
+  id: 'ws-1',
+  slug: 'acme',
+  name: 'Acme',
+  plan_code: 'free',
+  member_count: 3,
+  created_at: '2026-09-01T08:00:00Z',
+  members: [
+    {
+      user_id: 'alice',
+      email: 'alice@t.co',
+      display_name: 'Alice',
+      role: 'owner',
+      created_at: '2026-09-01T08:00:00Z',
+    },
+    {
+      user_id: 'bob',
+      email: 'bob@t.co',
+      display_name: 'Bob',
+      role: 'member',
+      created_at: '2026-09-02T08:00:00Z',
+    },
+    
+    {
+      user_id: 'op-admin',
+      email: 'op@test.local',
+      display_name: 'Op',
+      role: 'admin',
+      created_at: '2026-09-03T08:00:00Z',
+    },
+  ],
+};
+
+function rowOf(email: string): HTMLElement {
+  const row = screen.getByText(email).closest('tr');
+  if (!row) throw new Error(`row of ${email} not found`);
+  return row;
+}
+
+function renderPage() {
+  const qc = new QueryClient({ defaultOptions: { queries: { retry: false } } });
+  return render(
+    <QueryClientProvider client={qc}>
+      <ConfirmProvider>
+        <WorkspaceDetailPage />
+      </ConfirmProvider>
+    </QueryClientProvider>,
+  );
+}
+
+beforeEach(() => {
+  mockedGet.mockReset().mockResolvedValue(DETAIL);
+  mockedPost.mockReset().mockResolvedValue({ status: 'ok' });
+});
+
+describe('WorkspaceDetailPage · 转让所有权', () => {
+  it('member/admin 行有"转让所有权"，owner 行与自己没有', async () => {
+    renderPage();
+
+    await screen.findByText('alice@t.co');
+    
+    expect(
+      within(rowOf('bob@t.co')).getByRole('button', { name: '转让所有权' }),
+    ).toBeInTheDocument();
+    
+    expect(
+      within(rowOf('op@test.local')).queryByRole('button', {
+        name: '转让所有权',
+      }),
+    ).not.toBeInTheDocument();
+    
+    expect(
+      within(rowOf('alice@t.co')).queryByRole('button', { name: '转让所有权' }),
+    ).not.toBeInTheDocument();
+  });
+
+  it('ImpactConfirmation 列明降级影响 → 勾选后 POST transfer-ownership', async () => {
+    renderPage();
+    await screen.findByText('bob@t.co');
+
+    fireEvent.click(
+      within(rowOf('bob@t.co')).getByRole('button', { name: '转让所有权' }),
+    );
+
+    
+    expect(
+      await screen.findByText('转让 Acme 的所有权给 bob@t.co'),
+    ).toBeInTheDocument();
+    expect(screen.getByText(/alice@t\.co 将降为 member/)).toBeInTheDocument();
+    expect(screen.getByText(/始终保有 owner/)).toBeInTheDocument();
+
+    fireEvent.click(screen.getByLabelText(/我理解并接受以上影响/));
+    fireEvent.click(screen.getByRole('button', { name: '确认转让' }));
+
+    await waitFor(() =>
+      expect(mockedPost).toHaveBeenCalledWith(
+        '/api/admin/workspaces/ws-1/transfer-ownership',
+        {
+          user_id: 'bob',
+        },
+      ),
+    );
+  });
+
+  it('不勾选接受影响 → 确认按钮禁用，不发 POST', async () => {
+    renderPage();
+    await screen.findByText('bob@t.co');
+
+    fireEvent.click(
+      within(rowOf('bob@t.co')).getByRole('button', { name: '转让所有权' }),
+    );
+    expect(
+      await screen.findByRole('button', { name: '确认转让' }),
+    ).toBeDisabled();
+    expect(mockedPost).not.toHaveBeenCalled();
+  });
+});

package/src/pages/admin/__tests__/WorkspacesPagePlans.test.tsx

@@ -0,0 +1,138 @@
+
+import '@testing-library/jest-dom/vitest';
+import { fireEvent, render, screen, waitFor } from '@testing-library/react';
+import { QueryClient, QueryClientProvider } from '@tanstack/react-query';
+import { describe, it, expect, vi, beforeEach } from 'vitest';
+
+const mockedGet = vi.hoisted(() => vi.fn());
+const mockedPatch = vi.hoisted(() => vi.fn());
+vi.mock('@ploykit/client', () => ({
+  api: {
+    get: mockedGet,
+    put: vi.fn(),
+    post: vi.fn(),
+    patch: mockedPatch,
+    delete: vi.fn(),
+  },
+  ApiError: class ApiError extends Error {
+    status: number;
+    code: string;
+    constructor(status: number, code: string, message: string) {
+      super(message);
+      this.status = status;
+      this.code = code;
+    }
+  },
+}));
+vi.mock('react-router', () => ({
+  Link: ({ to, children }: { to: string; children: React.ReactNode }) => (
+    <a href={to}>{children}</a>
+  ),
+  useSearchParams: () => [
+    new URLSearchParams(),
+    (_p: URLSearchParams) => {},
+  ],
+}));
+
+import { WorkspacesPage } from '../WorkspacesPage';
+
+const WS = {
+  id: 'ws-1',
+  name: 'Acme',
+  slug: 'acme',
+  plan_code: 'free',
+  member_count: 2,
+  created_at: '2026-09-01T08:00:00Z',
+};
+
+function renderPage() {
+  const qc = new QueryClient({ defaultOptions: { queries: { retry: false } } });
+  return render(
+    <QueryClientProvider client={qc}>
+      <WorkspacesPage />
+    </QueryClientProvider>,
+  );
+}
+
+beforeEach(() => {
+  mockedGet.mockReset().mockImplementation(async (path: string) => {
+    if (path.startsWith('/api/admin/workspaces'))
+      return { items: [WS], total: 1 };
+    if (path.startsWith('/api/admin/plans')) {
+      return {
+        items: ['free', 'pro'],
+        plans: [
+          {
+            code: 'free',
+            name: 'Free',
+            currency: 'CNY',
+            trial_days: 0,
+            sort_no: 1,
+          },
+          {
+            code: 'pro',
+            name: 'Pro',
+            currency: 'CNY',
+            trial_days: 14,
+            sort_no: 2,
+          },
+        ],
+      };
+    }
+    throw new Error('unexpected GET ' + path);
+  });
+  mockedPatch.mockReset().mockResolvedValue({});
+});
+
+describe('WorkspacesPage 套餐选项（批次 2.5 收尾）', () => {
+  it('选项用 plan.name 并标注试用天数（B-workspaces-9）：Pro（14 天）带提示，Free 纯名', async () => {
+    renderPage();
+    expect(await screen.findByText('Acme')).toBeInTheDocument();
+
+    const trigger = screen.getByRole('combobox', { name: /变更 Acme 套餐/ });
+    fireEvent.click(trigger);
+    expect(
+      await screen.findByRole('option', { name: 'Pro（新订阅享 14 天试用）' }),
+    ).toBeInTheDocument();
+    expect(screen.getByRole('option', { name: 'Free' })).toBeInTheDocument();
+  });
+
+  it('plans 视图缺失（老后端只有码表）→ 回退纯码表标签', async () => {
+    mockedGet.mockImplementation(async (path: string) => {
+      if (path.startsWith('/api/admin/workspaces'))
+        return { items: [WS], total: 1 };
+      if (path.startsWith('/api/admin/plans'))
+        return { items: ['free', 'pro'] };
+      throw new Error('unexpected GET ' + path);
+    });
+    renderPage();
+    await screen.findByText('Acme');
+
+    const trigger = screen.getByRole('combobox', { name: /变更 Acme 套餐/ });
+    fireEvent.click(trigger);
+    expect(
+      await screen.findByRole('option', { name: 'pro' }),
+    ).toBeInTheDocument();
+  });
+
+  it('选中试用套餐 → PATCH plan {plan_code}', async () => {
+    renderPage();
+    await screen.findByText('Acme');
+
+    const trigger = screen.getByRole('combobox', { name: /变更 Acme 套餐/ });
+    fireEvent.click(trigger);
+    const option = await screen.findByRole('option', {
+      name: 'Pro（新订阅享 14 天试用）',
+    });
+    fireEvent.pointerDown(option, { button: 0, pointerType: 'mouse' });
+    fireEvent.pointerUp(option, { button: 0, pointerType: 'mouse' });
+    fireEvent.click(option);
+
+    await waitFor(() =>
+      expect(mockedPatch).toHaveBeenCalledWith(
+        '/api/admin/workspaces/ws-1/plan',
+        { plan_code: 'pro' },
+      ),
+    );
+  });
+});

package/src/pages/admin/shared.ts

@@ -0,0 +1,42 @@
+
+import { ApiError } from '@ploykit/hooks';
+import { apiErrorMessage } from '../../lib/api-error';
+
+
+export const ADMIN_PAGE_SIZE = 20;
+
+
+export function adminError(err: unknown, fallback: string): string {
+  if (err instanceof ApiError && err.status === 403) {
+    return '需要平台管理员权限（当前账号无权访问管理控制台）';
+  }
+  return apiErrorMessage(err, fallback);
+}
+
+
+export interface AdminListEnvelope<T> {
+  items: T[];
+  total: number;
+}
+
+
+export function adminListQuery(
+  page: number,
+  pageSize: number = ADMIN_PAGE_SIZE,
+  filters: Record<string, string | undefined> = {},
+): string {
+  const p = new URLSearchParams();
+  p.set('page', String(page));
+  p.set('page_size', String(pageSize));
+  for (const [k, v] of Object.entries(filters)) {
+    if (v && v.trim()) p.set(k, v.trim());
+  }
+  return `?${p.toString()}`;
+}
+
+
+export function formatCents(cents: number, currency = 'CNY'): string {
+  const symbol =
+    currency.toUpperCase() === 'CNY' ? '¥' : `${currency.toUpperCase()} `;
+  return `${symbol}${(cents / 100).toLocaleString('zh-CN', { minimumFractionDigits: 2, maximumFractionDigits: 2 })}`;
+}

package/src/pages/auth/ForgotPasswordPage.tsx

@@ -0,0 +1,83 @@
+
+import { useState, type FormEvent } from 'react'
+import { AuthShell } from '../../layouts/AuthShell'
+import { FormField } from '../../components/FormField'
+import { Button } from '../../components/ui/button'
+import { Input } from '../../components/ui/input'
+import { usePasswordReset } from '@ploykit/hooks'
+
+export interface ForgotPasswordPageProps {
+  
+  title?: string
+  
+  sentHint?: string
+  
+  backPath?: string
+}
+
+export function ForgotPasswordPage({
+  title = '找回密码',
+  sentHint = '如果该邮箱存在，重置链接已发送，请查收邮箱。',
+  backPath = '/login',
+}: ForgotPasswordPageProps) {
+  const { requestReset } = usePasswordReset()
+  const [email, setEmail] = useState('')
+  const [loading, setLoading] = useState(false)
+  const [sent, setSent] = useState(false)
+  const [error, setError] = useState<string | null>(null)
+
+  const handleSubmit = async (e: FormEvent) => {
+    e.preventDefault()
+    if (!email) return
+    setError(null)
+    setLoading(true)
+    try {
+      await requestReset(email)
+      setSent(true)
+    } catch (err) {
+      setError(err instanceof Error ? err.message : '发送失败，请稍后重试')
+    } finally {
+      setLoading(false)
+    }
+  }
+
+  return (
+    <AuthShell>
+      <form onSubmit={handleSubmit} className="space-y-4">
+        <div className="space-y-1 text-center">
+          <h1 className="text-2xl font-bold tracking-tight">{title}</h1>
+        </div>
+
+        {sent ? (
+          <p className="text-sm text-muted-foreground" data-testid="sent-hint">
+            {sentHint}
+          </p>
+        ) : (
+          <>
+            <FormField label="邮箱" error={error ?? undefined} htmlFor="forgot-email">
+              <Input
+                id="forgot-email"
+                type="email"
+                value={email}
+                onChange={(e) => setEmail(e.target.value)}
+                placeholder="you@example.com"
+                required
+              />
+            </FormField>
+
+            <Button type="submit" className="w-full" disabled={loading || !email}>
+              {loading ? '发送中…' : '发送重置链接'}
+            </Button>
+          </>
+        )}
+
+        <a
+          href={backPath}
+          className="block text-center text-sm text-primary underline-offset-4 hover:underline"
+        >
+          返回登录
+        </a>
+      </form>
+    </AuthShell>
+  )
+}