@stigmer/react 3.35.0 → 3.37.0

package/src/settings/__tests__/PlatformClientsSection.test.tsx

@@ -1,186 +0,0 @@
-/**
- * Pins PlatformClientsSection's posture gate: every edition serves platform
- * clients, but only a server that authenticates its callers mints their
- * tokens. On such a server the section offers the create button and no
- * notice; on a server that says it trusts every request it explains why no
- * client can be created there and offers no create button; on a server too
- * old to report its posture it offers the button and no notice, because a
- * console that ships ahead of its server must not claim a limitation the
- * server never reported; while the server's answer is still loading it
- * offers neither, so no button flashes and disappears.
- *
- * And its caller gate (stigmer/stigmer#1302): the button also needs
- * `can_create_platform_client` on the organization, checked on the
- * organization's id and never offered while the check is in flight; a
- * caller the server refuses is told the organization's admins manage
- * platform clients, in place of the list's own empty state. The list panel
- * is proven by its own tests and stubbed here; the permission check is
- * stubbed.
- */
-import { describe, it, expect, vi, afterEach } from "vitest";
-import { cleanup, render, screen } from "@testing-library/react";
-import type { UseServerInfoReturn } from "../../server-info";
-
-let serverInfo: UseServerInfoReturn;
-
-const permission = vi.hoisted(() => ({
-  allowed: true,
-  isLoading: false,
-  checked: [] as Array<[string, string, string]>,
-}));
-
-vi.mock("../../server-info.js", () => ({
-  useServerInfo: () => serverInfo,
-}));
-vi.mock("../../organization/OrgProvider.js", () => ({
-  useActiveOrgSlug: () => "acme",
-  useActiveOrgId: () => "org_acme",
-}));
-vi.mock("../../iam-policy/useCheckPermission.js", () => ({
-  useCheckPermission: (
-    resource: { kind: string; id: string } | null,
-    relation: string,
-  ) => {
-    if (resource !== null) {
-      permission.checked.push([resource.kind, resource.id, relation]);
-    }
-    return {
-      allowed: permission.allowed,
-      isLoading: permission.isLoading,
-      error: null,
-    };
-  },
-}));
-vi.mock("../../platform-client/PlatformClientListPanel.js", () => ({
-  PlatformClientListPanel: ({
-    org,
-    emptyState,
-  }: {
-    org: string;
-    emptyState?: string;
-  }) => (
-    <div data-testid="list-panel">
-      clients of {org}
-      {emptyState !== undefined && <p data-testid="empty-state">{emptyState}</p>}
-    </div>
-  ),
-}));
-
-import { PlatformClientsSection } from "../PlatformClientsSection";
-
-/** A server that has answered; `undefined` is a server that predates the posture field. */
-function answering(
-  authenticationRequired: boolean | undefined,
-): UseServerInfoReturn {
-  return {
-    serverInfo: {
-      deploymentMode: "local",
-      edition: 1,
-      version: "dev",
-      authenticationRequired,
-    },
-    isLoading: false,
-    error: null,
-  };
-}
-
-const LOADING: UseServerInfoReturn = {
-  serverInfo: null,
-  isLoading: true,
-  error: null,
-};
-
-afterEach(() => {
-  cleanup();
-  permission.allowed = true;
-  permission.isLoading = false;
-  permission.checked = [];
-});
-
-describe("PlatformClientsSection's posture gate", () => {
-  it("offers the create button and no notice on a server that authenticates its callers", () => {
-    serverInfo = answering(true);
-    render(<PlatformClientsSection />);
-    expect(
-      screen.getByRole("button", { name: /new platform client/i }),
-    ).toBeTruthy();
-    expect(screen.queryByText(/trusts every request/i)).toBeNull();
-    expect(screen.getByTestId("list-panel").textContent).toContain("acme");
-  });
-
-  it("explains the missing identity provider and offers no create button on a server that trusts every request", () => {
-    serverInfo = answering(false);
-    render(<PlatformClientsSection />);
-    expect(screen.getByText(/trusts every request/i)).toBeTruthy();
-    expect(screen.getByText("STIGMER_OIDC_ISSUER")).toBeTruthy();
-    expect(
-      screen.queryByRole("button", { name: /new platform client/i }),
-    ).toBeNull();
-    expect(
-      screen.getByTestId("list-panel"),
-      "existing clients stay listed",
-    ).toBeTruthy();
-  });
-
-  it("offers the create button and no notice on a server too old to report its posture", () => {
-    serverInfo = answering(undefined);
-    render(<PlatformClientsSection />);
-    expect(
-      screen.getByRole("button", { name: /new platform client/i }),
-    ).toBeTruthy();
-    expect(screen.queryByText(/trusts every request/i)).toBeNull();
-  });
-
-  it("offers neither while the server's answer is loading", () => {
-    serverInfo = LOADING;
-    render(<PlatformClientsSection />);
-    expect(
-      screen.queryByRole("button", { name: /new platform client/i }),
-    ).toBeNull();
-    expect(screen.queryByText(/trusts every request/i)).toBeNull();
-  });
-});
-
-describe("PlatformClientsSection's caller gate", () => {
-  it("checks can_create_platform_client on the active organization's id", () => {
-    serverInfo = answering(true);
-    render(<PlatformClientsSection />);
-    expect(permission.checked).toContainEqual([
-      "organization",
-      "org_acme",
-      "can_create_platform_client",
-    ]);
-  });
-
-  it("offers the create button to a caller who may create, and keeps the list's own empty state", () => {
-    serverInfo = answering(true);
-    render(<PlatformClientsSection />);
-    expect(
-      screen.getByRole("button", { name: /new platform client/i }),
-    ).toBeTruthy();
-    expect(screen.queryByTestId("empty-state")).toBeNull();
-  });
-
-  it("offers no create button to a caller the server refuses, and says who manages platform clients", () => {
-    serverInfo = answering(true);
-    permission.allowed = false;
-    render(<PlatformClientsSection />);
-    expect(
-      screen.queryByRole("button", { name: /new platform client/i }),
-    ).toBeNull();
-    expect(screen.getByTestId("empty-state").textContent).toBe(
-      "Platform clients are managed by your organization's admins.",
-    );
-  });
-
-  it("offers nothing and claims nothing while the check is in flight", () => {
-    serverInfo = answering(true);
-    permission.isLoading = true;
-    permission.allowed = false;
-    render(<PlatformClientsSection />);
-    expect(
-      screen.queryByRole("button", { name: /new platform client/i }),
-    ).toBeNull();
-    expect(screen.queryByTestId("empty-state")).toBeNull();
-  });
-});

package/src/settings/__tests__/TeamsSection.test.tsx

@@ -1,102 +0,0 @@
-/**
- * Pins TeamsSection's edition posture and its create gate:
- *
- *   - where the edition does not serve teams (open source) the section
- *     says so and never asks the server for a team list it would answer
- *     UNIMPLEMENTED;
- *   - on Enterprise and Cloud it lists the organization's teams;
- *   - "New team" is offered only to a caller who holds `can_create_team`
- *     on the organization, checked on the organization's id.
- *
- * The data hook and the permission gate are stubbed; the panels are real.
- */
-import { describe, it, expect, vi, afterEach } from "vitest";
-import { cleanup, render, screen } from "@testing-library/react";
-import { create } from "@bufbuild/protobuf";
-import { TeamSchema, type Team } from "@stigmer/protos/ai/stigmer/iam/team/v1/api_pb";
-import type { DeploymentMode } from "@stigmer/sdk";
-import { DeploymentModeContext } from "../../deployment-mode";
-
-const stubs = vi.hoisted(() => ({
-  listedOrg: undefined as string | null | undefined,
-  teams: [] as Team[],
-  allowed: new Set<string>(),
-  checked: [] as Array<[string, string, string]>,
-}));
-
-vi.mock("../../organization/OrgProvider.js", () => ({
-  useOrg: () => ({
-    activeOrg: { metadata: { id: "org_acme", slug: "acme", name: "Acme" } },
-  }),
-}));
-vi.mock("../../team/useTeamList.js", () => ({
-  useTeamList: (org: string | null) => {
-    stubs.listedOrg = org;
-    return { teams: stubs.teams, isLoading: false, isRefetching: false, error: null, refetch: () => {} };
-  },
-}));
-vi.mock("../../iam-policy/PermissionGate.js", () => ({
-  PermissionGate: ({
-    resource,
-    relation,
-    children,
-  }: {
-    resource: { kind: string; id: string };
-    relation: string;
-    children: React.ReactNode;
-  }) => {
-    stubs.checked.push([resource.kind, resource.id, relation]);
-    return stubs.allowed.has(relation) ? <>{children}</> : null;
-  },
-}));
-
-import { TeamsSection } from "../TeamsSection";
-
-function renderSection(mode: DeploymentMode) {
-  return render(
-    <DeploymentModeContext.Provider value={mode}>
-      <TeamsSection />
-    </DeploymentModeContext.Provider>,
-  );
-}
-
-afterEach(() => {
-  cleanup();
-  stubs.listedOrg = undefined;
-  stubs.teams = [];
-  stubs.allowed = new Set();
-  stubs.checked = [];
-});
-
-describe("TeamsSection", () => {
-  it("says teams are not served on the open-source edition and lists nothing", () => {
-    renderSection("local");
-    expect(screen.getByText(/Teams are available in Stigmer Enterprise and Cloud/)).toBeTruthy();
-    expect(stubs.listedOrg).toBeNull();
-    expect(screen.queryByRole("button", { name: /New team/ })).toBeNull();
-  });
-
-  it("lists the organization's teams on the editions that serve them", () => {
-    stubs.teams = [
-      create(TeamSchema, {
-        metadata: { id: "tm_sre", name: "Site Reliability" },
-        spec: { description: "On call" },
-      }),
-    ];
-    renderSection("enterprise");
-    expect(stubs.listedOrg).toBe("acme");
-    expect(screen.getByRole("button", { name: /Site Reliability/ })).toBeTruthy();
-    expect(screen.queryByText(/available in Stigmer Enterprise and Cloud/)).toBeNull();
-  });
-
-  it("offers New team only with can_create_team on the organization", () => {
-    renderSection("cloud");
-    expect(screen.queryByRole("button", { name: /New team/ })).toBeNull();
-    expect(stubs.checked).toContainEqual(["organization", "org_acme", "can_create_team"]);
-
-    cleanup();
-    stubs.allowed = new Set(["can_create_team"]);
-    renderSection("cloud");
-    expect(screen.getByRole("button", { name: /New team/ })).toBeTruthy();
-  });
-});

package/src/settings/__tests__/settings-nav.test.ts

@@ -1,27 +0,0 @@
-import { describe, it, expect } from "vitest";
-import { SETTINGS_NAV_GROUPS } from "../settings-nav";
-
-// The nav model is the single source for the sidebar AND both client-app
-// landing grids — these entries disappearing would silently orphan the
-// preference pages everywhere at once.
-describe("SETTINGS_NAV_GROUPS preference entries", () => {
-  it("lists org preferences in the Organization group", () => {
-    const organization = SETTINGS_NAV_GROUPS.find(
-      (g) => g.label === "Organization",
-    );
-    expect(organization).toBeDefined();
-    expect(
-      organization!.items.find((i) => i.href === "/settings/org-preferences")
-        ?.label,
-    ).toBe("Preferences");
-  });
-
-  it("lists account preferences in the Account group", () => {
-    const account = SETTINGS_NAV_GROUPS.find((g) => g.label === "Account");
-    expect(account).toBeDefined();
-    expect(
-      account!.items.find((i) => i.href === "/settings/account-preferences")
-        ?.label,
-    ).toBe("Preferences");
-  });
-});

package/src/settings/__tests__/useSettingsNavGroups.test.tsx

@@ -1,158 +0,0 @@
-import { describe, it, expect, vi, afterEach } from "vitest";
-import { cleanup, fireEvent, render, screen } from "@testing-library/react";
-import { useRef, useState } from "react";
-import { SETTINGS_NAV_GROUPS, PLATFORM_SETTINGS_NAV_GROUP } from "../settings-nav";
-import { useSettingsNavGroups } from "../useSettingsNavGroups";
-
-// Drive the nav gate through the permission hook. The fail-closed
-// semantics themselves are covered by useCheckPermission's own suite —
-// here we assert the nav hook's per-item composition of the verdicts.
-// Verdicts are keyed by relation so each platform permission can be
-// granted independently.
-let verdicts: Record<string, boolean> = {};
-let checkedRelations: string[] = [];
-let lastCheckArgs: readonly unknown[] = [];
-
-vi.mock("../../iam-policy/useCheckPermission", () => ({
-  useCheckPermission: (
-    ...args: [unknown, string, { fail?: string } | undefined]
-  ) => {
-    lastCheckArgs = args;
-    checkedRelations.push(args[1]);
-    return { allowed: verdicts[args[1]] === true, isLoading: false, error: null };
-  },
-}));
-
-afterEach(() => {
-  cleanup();
-  verdicts = {};
-  checkedRelations = [];
-});
-
-function GroupsProbe() {
-  const groups = useSettingsNavGroups();
-  const platform = groups.find((g) => g.label === PLATFORM_SETTINGS_NAV_GROUP.label);
-  return (
-    <div
-      data-testid="groups"
-      data-labels={groups.map((g) => g.label).join(",")}
-      data-platform-items={platform?.items.map((i) => i.label).join(",") ?? ""}
-    />
-  );
-}
-
-const BASE_LABELS = SETTINGS_NAV_GROUPS.map((g) => g.label).join(",");
-
-describe("useSettingsNavGroups", () => {
-  it("appends the full Platform group when the operator holds every platform permission", () => {
-    verdicts = {
-      can_manage_model_pricing: true,
-      can_manage_cursor_accounts: true,
-      can_view_provider_standing: true,
-      can_issue_license: true,
-    };
-    render(<GroupsProbe />);
-
-    const el = screen.getByTestId("groups");
-    expect(el.getAttribute("data-labels")).toBe(
-      `${BASE_LABELS},${PLATFORM_SETTINGS_NAV_GROUP.label}`,
-    );
-    expect(el.getAttribute("data-platform-items")).toBe(
-      "Pricing Governance,Cursor Accounts,Provider Standing,Licenses",
-    );
-  });
-
-  it("filters per item: pricing-only operator sees only Pricing Governance", () => {
-    verdicts = { can_manage_model_pricing: true };
-    render(<GroupsProbe />);
-
-    expect(screen.getByTestId("groups").getAttribute("data-platform-items")).toBe(
-      "Pricing Governance",
-    );
-  });
-
-  it("filters per item: cursor-accounts-only operator sees only Cursor Accounts", () => {
-    verdicts = { can_manage_cursor_accounts: true };
-    render(<GroupsProbe />);
-
-    expect(screen.getByTestId("groups").getAttribute("data-platform-items")).toBe(
-      "Cursor Accounts",
-    );
-  });
-
-  it("filters per item: standing-only operator sees only Provider Standing", () => {
-    verdicts = { can_view_provider_standing: true };
-    render(<GroupsProbe />);
-
-    expect(screen.getByTestId("groups").getAttribute("data-platform-items")).toBe(
-      "Provider Standing",
-    );
-  });
-
-  it("filters per item: license-issuing operator sees only Licenses", () => {
-    verdicts = { can_issue_license: true };
-    render(<GroupsProbe />);
-
-    expect(screen.getByTestId("groups").getAttribute("data-platform-items")).toBe(
-      "Licenses",
-    );
-  });
-
-  it("returns exactly the base groups when not authorized", () => {
-    function IdentityProbe() {
-      const groups = useSettingsNavGroups();
-      return (
-        <div
-          data-testid="identity"
-          data-is-base={String(groups === SETTINGS_NAV_GROUPS)}
-        />
-      );
-    }
-    render(<IdentityProbe />);
-
-    // Not just equivalent — the same array, no needless copy.
-    expect(screen.getByTestId("identity").getAttribute("data-is-base")).toBe("true");
-  });
-
-  it("checks every declared platform permission on platform:stigmer, fail-closed", () => {
-    render(<GroupsProbe />);
-
-    // Exhaustiveness guard: every requiredPermission declared on the
-    // platform group must have a corresponding hook check — a new
-    // platform surface that forgets to add its check fails here.
-    const declared = PLATFORM_SETTINGS_NAV_GROUP.items.map(
-      (item) => item.requiredPermission,
-    );
-    for (const permission of declared) {
-      expect(permission, "platform items must declare requiredPermission").toBeDefined();
-      expect(checkedRelations).toContain(permission);
-    }
-    expect(lastCheckArgs[0]).toEqual({ kind: "platform", id: "stigmer" });
-    expect(lastCheckArgs[2]).toEqual({ fail: "closed" });
-  });
-
-  it("keeps the array reference stable across re-renders", () => {
-    verdicts = {
-      can_manage_model_pricing: true,
-      can_manage_cursor_accounts: true,
-    };
-
-    function StabilityProbe() {
-      const groups = useSettingsNavGroups();
-      const first = useRef(groups);
-      const [, force] = useState(0);
-      return (
-        <button
-          data-testid="stability"
-          data-stable={String(first.current === groups)}
-          onClick={() => force((n) => n + 1)}
-        />
-      );
-    }
-
-    render(<StabilityProbe />);
-    const el = screen.getByTestId("stability");
-    fireEvent.click(el);
-    expect(el.getAttribute("data-stable")).toBe("true");
-  });
-});