@ploykit/ui 0.5.0 → 0.6.2

package/src/pages/workspace/__tests__/WebhooksPage.test.tsx

@@ -0,0 +1,309 @@
+import '@testing-library/jest-dom/vitest'
+import { act, fireEvent, render, screen, waitFor } from '@testing-library/react'
+import { QueryClient, QueryClientProvider } from '@tanstack/react-query'
+import { describe, it, expect, vi, beforeEach } from 'vitest'
+import { WebhooksPage } from '../WebhooksPage'
+
+const apiMocks = vi.hoisted(() => ({
+  get: vi.fn(), post: vi.fn(), put: vi.fn(), patch: vi.fn(), delete: vi.fn(),
+}))
+vi.mock('../../../../../hooks/src/hooks/useApi', () => ({ useApi: () => apiMocks }))
+
+const wsMock = vi.hoisted(() => ({
+  current: {
+    id: 'ws-1', name: 'Acme', slug: 'acme', plan_code: 'free', role: 'owner',
+  },
+}))
+vi.mock('../../../../../hooks/src/hooks/useWorkspace', () => ({
+  useWorkspace: () => ({
+    ...wsMock,
+    switchTo: vi.fn(),
+    clear: vi.fn(),
+  }),
+}))
+
+const toastMocks = vi.hoisted(() => ({
+  success: vi.fn(), error: vi.fn(), info: vi.fn(),
+}))
+vi.mock('../../../components/toast', () => ({ toast: toastMocks }))
+
+
+const confirmMock = vi.hoisted(() => ({ calls: [] as Array<{ title?: string; description?: string }>, ret: true }))
+vi.mock('../../../components/ConfirmDialog', () => ({
+  useConfirm: () => async (opts: { title?: string; description?: string }) => {
+    confirmMock.calls.push(opts)
+    return confirmMock.ret
+  },
+}))
+
+function renderPage() {
+  const qc = new QueryClient({ defaultOptions: { queries: { retry: false } } })
+  return render(
+    <QueryClientProvider client={qc}>
+      <WebhooksPage />
+    </QueryClientProvider>,
+  )
+}
+
+const subscription = {
+  id: 'sub-1', workspace_id: 'ws-1', event_types: ['task.created'],
+  url: 'https://example.com/hook', description: 'CI 触发', is_active: true,
+  created_at: '2026-06-01T00:00:00Z',
+}
+const delivery = {
+  id: 'dlv-1', subscription_id: 'sub-1', event_id: 'evt-1', event_type: 'task.created',
+  status: 'delivered', attempts: 1, last_status_code: 200,
+  delivered_at: '2026-06-02T00:00:00Z', created_at: '2026-06-02T00:00:00Z',
+}
+
+beforeEach(() => {
+  vi.clearAllMocks()
+  wsMock.current = {
+    id: 'ws-1', name: 'Acme', slug: 'acme', plan_code: 'free', role: 'owner',
+  }
+  confirmMock.calls.length = 0
+  confirmMock.ret = true
+  apiMocks.get.mockImplementation(async (path: string) => {
+    if (path.endsWith('/subscriptions')) return { items: [subscription] }
+    if (path.includes('/deliveries')) return { items: [delivery] }
+    if (path.endsWith('/events')) {
+      return { items: [{ type: 'task.created', description: '任务创建' }, { type: 'task.deleted', description: '任务删除' }] }
+    }
+    throw new Error('unexpected GET ' + path)
+  })
+  apiMocks.post.mockResolvedValue({})
+  apiMocks.patch.mockResolvedValue(subscription)
+  apiMocks.delete.mockResolvedValue({})
+})
+
+describe('WebhooksPage（从 example 提升进框架）', () => {
+  it('渲染订阅表（URL/事件 chips/Switch/最近投递）', async () => {
+    renderPage()
+    expect(await screen.findByText('https://example.com/hook')).toBeInTheDocument()
+    expect(screen.getByText('task.created')).toBeInTheDocument()
+    expect(screen.getByRole('switch', { name: /暂停订阅/ })).toHaveAttribute('aria-checked', 'true')
+    expect(screen.getByText('已投递')).toBeInTheDocument() 
+  })
+
+  it('Switch 暂停订阅 → PATCH subscriptions/{id} {is_active:false}', async () => {
+    renderPage()
+    const sw = await screen.findByRole('switch', { name: /暂停订阅/ })
+    fireEvent.click(sw)
+    await waitFor(() =>
+      expect(apiMocks.patch).toHaveBeenCalledWith(
+        '/api/workspaces/ws-1/webhooks/subscriptions/sub-1',
+        { is_active: false },
+      ),
+    )
+  })
+
+  it('行操作菜单：删除（destructive）→ DELETE subscriptions/{id}', async () => {
+    renderPage()
+    fireEvent.click(await screen.findByRole('button', { name: /example.com\/hook 的操作/ }))
+    fireEvent.click(await screen.findByRole('menuitem', { name: '删除' }))
+    await waitFor(() =>
+      expect(apiMocks.delete).toHaveBeenCalledWith(
+        '/api/workspaces/ws-1/webhooks/subscriptions/sub-1',
+      ),
+    )
+    await waitFor(() => expect(toastMocks.success).toHaveBeenCalled())
+  })
+
+  it('创建订阅：提交正确 payload，secret 走 SecretModal 一次性展示', async () => {
+    apiMocks.post.mockResolvedValue({ subscription, secret: 'whsec_abc123' })
+    renderPage()
+    fireEvent.click(await screen.findByRole('button', { name: /创建订阅/ }))
+
+    fireEvent.change(await screen.findByLabelText('回调 URL'), {
+      target: { value: 'https://example.com/hook' },
+    })
+    
+    const checkbox = screen.getByRole('checkbox', { name: /task\.created/ })
+    fireEvent.click(checkbox)
+    fireEvent.click(screen.getByRole('button', { name: '创建订阅' }))
+
+    await waitFor(() =>
+      expect(apiMocks.post).toHaveBeenCalledWith('/api/workspaces/ws-1/webhooks/subscriptions', {
+        url: 'https://example.com/hook',
+        description: '',
+        events: ['task.created'],
+      }),
+    )
+    
+    await waitFor(() => expect(screen.getByText('whsec_abc123')).toBeInTheDocument())
+  })
+
+  it('投递记录页签：状态 Badge + 重投 POST deliveries/{id}/redeliver', async () => {
+    apiMocks.post.mockResolvedValue({ ...delivery, id: 'dlv-2', event_id: 'evt-2' })
+    renderPage()
+    fireEvent.click(await screen.findByRole('tab', { name: /投递记录/ }))
+
+    fireEvent.click(await screen.findByRole('button', { name: '重新投递' }))
+    await waitFor(() =>
+      expect(apiMocks.post).toHaveBeenCalledWith(
+        '/api/workspaces/ws-1/webhooks/deliveries/dlv-1/redeliver',
+      ),
+    )
+    await waitFor(() => expect(toastMocks.success).toHaveBeenCalled())
+  })
+
+  
+
+  it('轮换密钥：确认弹窗明示 24h 宽限双签名，POST rotate-secret，新明文走 SecretModal 一次性展示', async () => {
+    apiMocks.post.mockImplementation(async (path: string) => {
+      if (path.endsWith('/rotate-secret')) return { secret: 'whk_rotated_new' }
+      return {}
+    })
+    renderPage()
+    fireEvent.click(await screen.findByRole('button', { name: /example.com\/hook 的操作/ }))
+    fireEvent.click(await screen.findByRole('menuitem', { name: '轮换密钥' }))
+
+    
+    await waitFor(() => expect(confirmMock.calls.length).toBeGreaterThan(0))
+    expect(confirmMock.calls[0].description).toContain('24h 宽限期')
+    expect(confirmMock.calls[0].description).toContain('双签名')
+
+    await waitFor(() =>
+      expect(apiMocks.post).toHaveBeenCalledWith(
+        '/api/workspaces/ws-1/webhooks/subscriptions/sub-1/rotate-secret',
+      ),
+    )
+    await waitFor(() => expect(toastMocks.success).toHaveBeenCalledWith('密钥已轮换'))
+    
+    expect(await screen.findByText('whk_rotated_new')).toBeInTheDocument()
+    expect(screen.getByText('Webhook 签名密钥轮换成功')).toBeInTheDocument()
+  })
+
+  it('P2-5：member 不渲染任何写入口（创建/Switch/行菜单/重投），只读浏览', async () => {
+    wsMock.current = { ...wsMock.current, role: 'member' }
+    renderPage()
+
+    
+    expect(await screen.findByText('已启用')).toBeInTheDocument()
+    
+    expect(screen.queryByRole('button', { name: /创建订阅/ })).not.toBeInTheDocument()
+    expect(screen.queryByRole('switch')).not.toBeInTheDocument()
+    expect(screen.queryByRole('button', { name: /example.com\/hook 的操作/ })).not.toBeInTheDocument()
+    
+    fireEvent.click(await screen.findByRole('tab', { name: '投递记录' }))
+    await waitFor(() => expect(screen.queryByRole('button', { name: '重新投递' })).not.toBeInTheDocument())
+  })
+
+  it('轮换密钥失败 → toast.error，不弹 SecretModal', async () => {
+    apiMocks.post.mockRejectedValue(new Error('boom'))
+    renderPage()
+    fireEvent.click(await screen.findByRole('button', { name: /example.com\/hook 的操作/ }))
+    fireEvent.click(await screen.findByRole('menuitem', { name: '轮换密钥' }))
+
+    await waitFor(() => expect(toastMocks.error).toHaveBeenCalled())
+    expect(screen.queryByText(/whk_/)).not.toBeInTheDocument()
+  })
+
+  
+
+  it('B3：点击事件目录 label 文本区可切换选中（恰好一次，不双发）', async () => {
+    apiMocks.post.mockResolvedValue({ subscription, secret: 'whsec_abc123' })
+    renderPage()
+    fireEvent.click(await screen.findByRole('button', { name: /创建订阅/ }))
+
+    fireEvent.change(await screen.findByLabelText('回调 URL'), {
+      target: { value: 'https://example.com/hook' },
+    })
+    
+    fireEvent.click(await screen.findByText('任务创建'))
+    fireEvent.click(screen.getByRole('button', { name: '创建订阅' }))
+
+    await waitFor(() =>
+      expect(apiMocks.post).toHaveBeenCalledWith('/api/workspaces/ws-1/webhooks/subscriptions', {
+        url: 'https://example.com/hook',
+        description: '',
+        
+        events: ['task.created'],
+      }),
+    )
+  })
+
+  it('B3：直接点方块本体仍单次切换（label 接管处理不与 Checkbox 自身双发）', async () => {
+    apiMocks.post.mockResolvedValue({ subscription, secret: 'whsec_abc123' })
+    renderPage()
+    fireEvent.click(await screen.findByRole('button', { name: /创建订阅/ }))
+
+    fireEvent.change(await screen.findByLabelText('回调 URL'), {
+      target: { value: 'https://example.com/hook' },
+    })
+    fireEvent.click(screen.getByRole('checkbox', { name: /task\.created/ }))
+    fireEvent.click(screen.getByRole('checkbox', { name: /task\.deleted/ }))
+    fireEvent.click(screen.getByRole('button', { name: '创建订阅' }))
+
+    await waitFor(() =>
+      expect(apiMocks.post).toHaveBeenCalledWith('/api/workspaces/ws-1/webhooks/subscriptions', {
+        url: 'https://example.com/hook',
+        description: '',
+        events: ['task.created', 'task.deleted'],
+      }),
+    )
+  })
+
+  
+
+  it('B5：投递记录 15s 轮询（页面可见时自动 refetch，进度无需手动刷新）', async () => {
+    
+    vi.useFakeTimers({ shouldAdvanceTime: true })
+    try {
+      renderPage()
+      await screen.findByText('已投递') 
+      const deliveriesCalls = () =>
+        apiMocks.get.mock.calls.filter(([p]: [string]) => p.includes('/deliveries')).length
+      const before = deliveriesCalls()
+
+      await act(async () => {
+        await vi.advanceTimersByTimeAsync(15_000)
+      })
+      
+      expect(deliveriesCalls()).toBeGreaterThan(before)
+    } finally {
+      vi.useRealTimers()
+    }
+  })
+
+  
+
+  it('B8：订阅已删的投递行标注"已删除订阅"，命中行显示归属 URL', async () => {
+    apiMocks.get.mockImplementation(async (path: string) => {
+      if (path.endsWith('/subscriptions')) return { items: [subscription] }
+      if (path.includes('/deliveries')) {
+        return {
+          items: [
+            delivery,
+            { ...delivery, id: 'dlv-orphan', subscription_id: 'sub-gone', event_id: 'evt-2' },
+          ],
+        }
+      }
+      if (path.endsWith('/events')) {
+        return { items: [{ type: 'task.created', description: '任务创建' }] }
+      }
+      throw new Error('unexpected GET ' + path)
+    })
+    renderPage()
+    fireEvent.click(await screen.findByRole('tab', { name: /投递记录/ }))
+
+    await screen.findByText('evt-2')
+    expect(screen.getByText('已删除订阅')).toBeInTheDocument()
+    
+    expect(screen.getAllByText('https://example.com/hook').length).toBeGreaterThan(0)
+  })
+
+  it('B8：订阅列表未成功加载时不误标"已删除订阅"（显示 —）', async () => {
+    apiMocks.get.mockImplementation(async (path: string) => {
+      if (path.endsWith('/subscriptions')) throw new Error('subs down')
+      if (path.includes('/deliveries')) return { items: [delivery] }
+      if (path.endsWith('/events')) return { items: [] }
+      throw new Error('unexpected GET ' + path)
+    })
+    renderPage()
+    fireEvent.click(await screen.findByRole('tab', { name: /投递记录/ }))
+
+    await screen.findByText('evt-1')
+    expect(screen.queryByText('已删除订阅')).not.toBeInTheDocument()
+  })
+})

package/src/pages/workspace/__tests__/WorkspaceAuditPage.test.tsx

@@ -0,0 +1,112 @@
+import '@testing-library/jest-dom/vitest'
+import { fireEvent, render, screen, waitFor } from '@testing-library/react'
+import { MemoryRouter } from 'react-router'
+import { describe, it, expect, vi, beforeEach } from 'vitest'
+import { WorkspaceAuditPage } from '../WorkspaceAuditPage'
+
+const auditMocks = vi.hoisted(() => ({
+  useAudit: vi.fn(),
+  exportAuditCsv: vi.fn(),
+}))
+vi.mock('../../../../../hooks/src/hooks/useAudit', async (importOriginal) => {
+  const orig = await importOriginal<typeof import('../../../hooks/useAudit')>()
+  return { ...orig, useAudit: auditMocks.useAudit, exportAuditCsv: auditMocks.exportAuditCsv }
+})
+
+const toastMocks = vi.hoisted(() => ({
+  success: vi.fn(), error: vi.fn(), info: vi.fn(),
+}))
+vi.mock('../../../components/toast', () => ({ toast: toastMocks }))
+
+const items = [
+  {
+    id: 'ev-1', workspace_id: 'ws-1', actor_type: 'user', actor_id: 'u-1',
+    actor_snapshot: { email: 'alice@example.com' },
+    action: 'workspace.rename', resource_type: 'workspace',
+    resource_id: 'ws-1', metadata: {}, created_at: '2026-10-01T08:00:00Z',
+  },
+  {
+    id: 'ev-2', workspace_id: 'ws-1', actor_type: 'system', actor_id: null,
+    actor_snapshot: {}, action: 'billing.plan_changed', resource_type: 'workspace',
+    resource_id: 'ws-1', metadata: {}, created_at: '2026-10-02T08:00:00Z',
+  },
+]
+
+function stubAudit(overrides: Record<string, unknown> = {}) {
+  auditMocks.useAudit.mockReturnValue({
+    wsId: 'ws-1', items, total: 2, loading: false, error: null, refetch: vi.fn(),
+    ...overrides,
+  })
+}
+
+
+function renderPage() {
+  return render(<MemoryRouter><WorkspaceAuditPage /></MemoryRouter>)
+}
+
+beforeEach(() => {
+  vi.clearAllMocks()
+  auditMocks.exportAuditCsv.mockResolvedValue(undefined)
+})
+
+describe('WorkspaceAuditPage', () => {
+  it('渲染过滤行与审计表（时间/操作者/动作/资源）', () => {
+    stubAudit()
+    renderPage()
+    expect(screen.getByText('审计日志')).toBeInTheDocument()
+    expect(screen.getByRole('button', { name: /查询/ })).toBeInTheDocument()
+    expect(screen.getByRole('button', { name: /导出 CSV/ })).toBeInTheDocument()
+    expect(screen.getByText('alice@example.com')).toBeInTheDocument()
+    expect(screen.getByText('workspace.rename')).toBeInTheDocument()
+    
+    expect(
+      screen.getByText((_, el) =>
+        el?.getAttribute('data-slot') === 'data-table-pagination' &&
+        /共\s*2\s*条\s*·\s*第\s*1\/1\s*页/.test(el.textContent ?? ''),
+      ),
+    ).toBeInTheDocument()
+    expect(screen.getByRole('button', { name: '上一页' })).toBeDisabled()
+    expect(screen.getByRole('button', { name: '下一页' })).toBeDisabled()
+  })
+
+  it('过滤条件随“查询”提交（日期补 RFC3339 边界），offset 归零', async () => {
+    auditMocks.useAudit.mockImplementation((filters: { action: string; from: string; to: string }, _limit: number, offset: number) => ({
+      wsId: 'ws-1', items: [], total: 0, loading: false, error: null, refetch: vi.fn(), _filters: filters, _offset: offset,
+    }))
+    renderPage()
+
+    fireEvent.change(screen.getByPlaceholderText('如 workspace.rename'), { target: { value: 'workspace.rename' } })
+    fireEvent.change(screen.getByLabelText('开始日期'), { target: { value: '2026-10-01' } })
+    fireEvent.change(screen.getByLabelText('结束日期'), { target: { value: '2026-10-05' } })
+    fireEvent.click(screen.getByRole('button', { name: /查询/ }))
+
+    await waitFor(() => expect(auditMocks.useAudit).toHaveBeenCalled())
+    const lastCall = auditMocks.useAudit.mock.calls.at(-1)
+    expect(lastCall?.[0]).toMatchObject({
+      action: 'workspace.rename',
+      from: '2026-10-01T00:00:00Z',
+      to: '2026-10-05T23:59:59Z',
+    })
+    expect(lastCall?.[2]).toBe(0)
+  })
+
+  it('加载中显示 PageLoading；错误显示重试', () => {
+    const { rerender } = renderPage()
+    stubAudit({ loading: true, items: [] })
+    rerender(<MemoryRouter><WorkspaceAuditPage /></MemoryRouter>)
+    expect(screen.getByText('加载审计日志…')).toBeInTheDocument()
+
+    stubAudit({ loading: false, items: [], error: new Error('boom') })
+    rerender(<MemoryRouter><WorkspaceAuditPage /></MemoryRouter>)
+    expect(screen.getByText('boom')).toBeInTheDocument()
+    expect(screen.getByRole('button', { name: '重试' })).toBeInTheDocument()
+  })
+
+  it('导出 CSV 调用 exportAuditCsv（当前过滤条件）', async () => {
+    stubAudit()
+    renderPage()
+    fireEvent.click(screen.getByRole('button', { name: /导出 CSV/ }))
+    await waitFor(() => expect(auditMocks.exportAuditCsv).toHaveBeenCalledTimes(1))
+    expect(toastMocks.success).toHaveBeenCalled()
+  })
+})

package/src/pages/workspace/__tests__/WorkspaceGeneralPage.test.tsx

@@ -0,0 +1,164 @@
+import '@testing-library/jest-dom/vitest'
+import { fireEvent, render, screen, waitFor } from '@testing-library/react'
+import { QueryClient, QueryClientProvider } from '@tanstack/react-query'
+import { MemoryRouter, Routes, Route } from 'react-router'
+import { describe, it, expect, vi, beforeEach } from 'vitest'
+import { ApiError } from '@ploykit/client'
+import { WorkspaceGeneralPage } from '../WorkspaceGeneralPage'
+
+const apiMocks = vi.hoisted(() => ({
+  get: vi.fn(), post: vi.fn(), put: vi.fn(), patch: vi.fn(), delete: vi.fn(),
+}))
+vi.mock('../../../../../hooks/src/hooks/useApi', () => ({ useApi: () => apiMocks }))
+
+const wsMocks = vi.hoisted(() => ({ role: 'owner' as string }))
+vi.mock('../../../../../hooks/src/hooks/useWorkspace', () => ({
+  useWorkspace: () => ({
+    current: { id: 'ws-1', name: 'Acme', slug: 'acme', plan_code: 'free', role: wsMocks.role },
+    switchTo: vi.fn(),
+    clear: vi.fn(),
+  }),
+}))
+
+const toastMocks = vi.hoisted(() => ({
+  success: vi.fn(), error: vi.fn(), info: vi.fn(),
+}))
+vi.mock('../../../components/toast', () => ({ toast: toastMocks }))
+
+vi.mock('../../../components/ConfirmDialog', () => ({
+  useConfirm: () => async () => true,
+}))
+
+function renderPage() {
+  const qc = new QueryClient({ defaultOptions: { queries: { retry: false } } })
+  return render(
+    <QueryClientProvider client={qc}>
+      <MemoryRouter initialEntries={['/settings/workspace/general']}>
+        <Routes>
+          <Route path="/settings/workspace/general" element={<WorkspaceGeneralPage />} />
+          <Route path="/app" element={<div>app-page</div>} />
+        </Routes>
+      </MemoryRouter>
+    </QueryClientProvider>,
+  )
+}
+
+beforeEach(() => {
+  vi.clearAllMocks()
+  wsMocks.role = 'owner'
+  apiMocks.patch.mockResolvedValue({})
+  apiMocks.post.mockResolvedValue({})
+  apiMocks.delete.mockResolvedValue(undefined)
+})
+
+describe('WorkspaceGeneralPage', () => {
+  it('渲染名称表单（slug 只读）与危险区', async () => {
+    renderPage()
+    const nameInput = await screen.findByLabelText('工作区名称')
+    expect(nameInput).toHaveValue('Acme')
+    expect(screen.getByLabelText('Slug（只读）')).toBeDisabled()
+    expect(screen.getByRole('button', { name: '退出工作区' })).toBeInTheDocument()
+    expect(screen.getByRole('button', { name: '删除工作区' })).toBeInTheDocument()
+  })
+
+  it('重命名提交 PATCH /api/workspaces/{id} {name}', async () => {
+    renderPage()
+    const nameInput = await screen.findByLabelText('工作区名称')
+    fireEvent.change(nameInput, { target: { value: 'Acme Renamed' } })
+    fireEvent.click(screen.getByRole('button', { name: '保存修改' }))
+
+    await waitFor(() =>
+      expect(apiMocks.patch).toHaveBeenCalledWith('/api/workspaces/ws-1', { name: 'Acme Renamed' }),
+    )
+    await waitFor(() => expect(toastMocks.success).toHaveBeenCalled())
+  })
+
+  it('退出工作区 409（last owner）→ 直显中文可行动文案，不再英文原文+括号补丁（B7）', async () => {
+    apiMocks.post.mockRejectedValue(
+      new ApiError(409, 'E_CONFLICT', 'last owner cannot leave; transfer or delete the workspace'),
+    )
+    renderPage()
+    fireEvent.click(await screen.findByRole('button', { name: '退出工作区' }))
+    await waitFor(() => expect(toastMocks.error).toHaveBeenCalled())
+    const text = toastMocks.error.mock.calls[0][0]
+    expect(text).toContain('最后一个所有者不能离开工作区')
+    
+    expect(text).not.toContain('last owner')
+    
+    expect(screen.getByRole('button', { name: '保存修改' })).toBeInTheDocument()
+  })
+
+  it('删除工作区：ImpactConfirmation 确认后 DELETE /api/workspaces/{id}', async () => {
+    renderPage()
+    fireEvent.click(await screen.findByRole('button', { name: '删除工作区' }))
+
+    
+    expect(await screen.findByText('所有成员立即失去访问权限')).toBeInTheDocument()
+    const accept = screen.getByRole('checkbox')
+    fireEvent.click(accept)
+    fireEvent.click(screen.getByRole('button', { name: '永久删除' }))
+
+    await waitFor(() => expect(apiMocks.delete).toHaveBeenCalledWith('/api/workspaces/ws-1'))
+    await waitFor(() => expect(screen.getByText('app-page')).toBeInTheDocument())
+  })
+
+  it('BeforeDelete 钩子拦截（409）→ 错误经通用映射转中文（G7.4 后不再直出英文原文）', async () => {
+    apiMocks.delete.mockRejectedValue(
+      new ApiError(409, 'E_CONFLICT', 'workspace cannot be deleted: open orders exist'),
+    )
+    renderPage()
+    fireEvent.click(await screen.findByRole('button', { name: '删除工作区' }))
+    fireEvent.click(screen.getByRole('checkbox'))
+    fireEvent.click(screen.getByRole('button', { name: '永久删除' }))
+
+    await waitFor(() => expect(toastMocks.error).toHaveBeenCalled())
+    
+    expect(toastMocks.error.mock.calls[0][0]).toContain('工作区暂时无法删除')
+    expect(toastMocks.error.mock.calls[0][0]).not.toContain('cannot be deleted')
+  })
+
+  it('纯空格名称被拒（B10：trim 后非空），0 网络请求', async () => {
+    renderPage()
+    const nameInput = await screen.findByLabelText('工作区名称')
+    fireEvent.change(nameInput, { target: { value: '   ' } })
+    fireEvent.click(screen.getByRole('button', { name: '保存修改' }))
+
+    
+    await waitFor(() => expect(screen.getByRole('alert')).toBeInTheDocument())
+    expect(screen.getByRole('alert')).toHaveTextContent('请输入工作区名称')
+    expect(apiMocks.patch).not.toHaveBeenCalled()
+  })
+
+  it('首尾空白在提交前被 trim（B10：落库名称不带空白）', async () => {
+    renderPage()
+    const nameInput = await screen.findByLabelText('工作区名称')
+    fireEvent.change(nameInput, { target: { value: '  Acme Renamed  ' } })
+    fireEvent.click(screen.getByRole('button', { name: '保存修改' }))
+
+    await waitFor(() =>
+      expect(apiMocks.patch).toHaveBeenCalledWith('/api/workspaces/ws-1', { name: 'Acme Renamed' }),
+    )
+  })
+})
+
+describe('WorkspaceGeneralPage 角色门控（IA v2 矩阵）', () => {
+  it('admin：可改名，不可删除（删除卡隐藏），退出可见', async () => {
+    wsMocks.role = 'admin'
+    renderPage()
+    const nameInput = await screen.findByLabelText('工作区名称')
+    expect(nameInput).toBeEnabled()
+    expect(screen.getByRole('button', { name: '保存修改' })).toBeInTheDocument()
+    expect(screen.queryByRole('button', { name: '删除工作区' })).not.toBeInTheDocument()
+    expect(screen.getByRole('button', { name: '退出工作区' })).toBeInTheDocument()
+  })
+
+  it('member：名称只读（无保存按钮），删除卡隐藏，退出仍可见（后端兜底 last-owner）', async () => {
+    wsMocks.role = 'member'
+    renderPage()
+    const nameInput = await screen.findByLabelText('工作区名称')
+    expect(nameInput).toBeDisabled()
+    expect(screen.queryByRole('button', { name: '保存修改' })).not.toBeInTheDocument()
+    expect(screen.queryByRole('button', { name: '删除工作区' })).not.toBeInTheDocument()
+    expect(screen.getByRole('button', { name: '退出工作区' })).toBeInTheDocument()
+  })
+})