workspace.spec.ts

workspace.spec.tstests/e2e/specs/workspace.spec.tsraw ← specs6,648 B← Back to the app
1/**
2 * AI Software Factory — E2E: Workspace (Phase 2)
3 *
4 * Covers: create workspace (sidebar switcher), invite a member (API) + accept
5 * (second context), role visibility, rename, delete, settings tabs render.
6 *
7 * Selector convention (tests/README.md):
8 *   data-testid="workspace-switcher"        sidebar workspace switcher menu
9 *   data-testid="workspace-switcher-new"    "Create workspace" item
10 *   data-testid="workspace-dialog"          create/rename workspace dialog
11 *   data-testid="workspace-dialog-name"     name input in the dialog
12 *   data-testid="workspace-dialog-submit"   save button in the dialog
13 *   data-testid="workspace-settings"        workspace settings page
14 *   data-testid="settings-tab-{profile|billing|security|integrations}"
15 *   data-testid="member-row-{userId}"       member row in settings
16 *   data-testid="member-role-{userId}"      role badge on the member row
17 */
18import { test, expect } from "../fixtures";
19import {
20  addMemberViaSeam,
21  renameWorkspace,
22  deleteWorkspace,
23  listMembers,
24  seamServiceToken,
25} from "../utils/api";
26 
27test.describe("Workspace — Phase 2", () => {
28  test("create workspace from sidebar switcher", async ({
29    authPage,
30    freshWorkspace,
31  }) => {
32    const ws = await freshWorkspace("My New Team Space");
33 
34    // The new workspace shows up in the sidebar switcher.
35    await authPage.goto("/");
36    await expect(authPage.getByTestId("sidebar")).toBeVisible();
37    await authPage.getByTestId("workspace-switcher").click();
38    await expect(
39      authPage.getByTestId("workspace-switcher").getByText("My New Team Space"),
40    ).toBeVisible({ timeout: 10_000 });
41 
42    // Switching into it lands on its home (an empty-state view, not 404).
43    await authPage.getByText("My New Team Space").click();
44    await authPage.waitForURL(/\/w\//, { timeout: 10_000 });
45  });
46 
47  test("add member (test seam) + second context; role visible", async ({
48    api,
49    secondUser,
50    freshWorkspace,
51  }) => {
52    const ws = await freshWorkspace("Invited Space");
53 
54    // 1) A REAL second user registers + logs in (via the fixture).
55    const { user: second, page: secondPage } = await secondUser();
56 
57    // 2) The second user is added to the workspace through the internal test
58    //    seam (TASK-0095 S9 — the D3 unblock). The public invite flow hashes
59    //    the token and emails it, so a test cannot complete it without a mail
60    //    server; the seam (service-token guarded, e2e-only) adds the member
61    //    directly. Membership is DB-authorized, so the second user's own
62    //    session (step 4's browser context) can immediately see the
63    //    workspace.
64    await addMemberViaSeam(seamServiceToken(), ws.id, second.email, "MEMBER");
65 
66    // 3) The inviter sees the new member (role MEMBER) in the list, and the
67    //    demo user is still OWNER.
68    const members = await listMembers(api, ws.id);
69    const owner = members.find((m) => m.role === "OWNER");
70    expect(owner, "demo user must be OWNER of a workspace they created").toBeTruthy();
71    const joined = members.find((m) => m.email === second.email);
72    expect(joined, "second user must be a member after the seam add").toBeTruthy();
73    expect(joined?.role).toBe("MEMBER");
74    expect(members.length).toBeGreaterThanOrEqual(2);
75 
76    // 4) The member's UI shows the role badge on the settings page.
77    await secondPage.goto(`/w/${ws.id}/settings`);
78    await expect(
79      secondPage.getByTestId("workspace-settings"),
80    ).toBeVisible({ timeout: 15_000 });
81  });
82 
83  test("rename workspace", async ({ authPage, api, freshWorkspace }) => {
84    const ws = await freshWorkspace("Rename Me");
85    const renamed = await renameWorkspace(api, ws.id, "Renamed Space");
86    expect(renamed.name).toBe("Renamed Space");
87 
88    await authPage.goto(`/w/${ws.id}`);
89    // The sidebar reflects the new name.
90    await expect(authPage.getByTestId("sidebar").getByText("Renamed Space")).toBeVisible({
91      timeout: 10_000,
92    });
93  });
94 
95  test("delete workspace (owner) — pages removed, switcher updated", async ({
96    authPage,
97    api,
98    freshWorkspace,
99  }) => {
100    const ws = await freshWorkspace("Doomed Space");
101    // Give it a page so deletion has something to clean up.
102    const pageRes = await api.post(`/api/v1/workspaces/${ws.id}/pages`, {
103      data: { title: "Orphan Candidate" },
104    });
105    expect(pageRes.status()).toBe(201);
106 
107    await deleteWorkspace(api, ws.id);
108 
109    // The workspace is gone: GET returns 404.
110    const gone = await api.get(`/api/v1/workspaces/${ws.id}`);
111    expect(gone.status()).toBe(404);
112 
113    await authPage.goto("/");
114    await authPage.getByTestId("workspace-switcher").click();
115    // Poll briefly (the sidebar refetches on focus) for the name to be gone.
116    const doomed = authPage.getByTestId("workspace-switcher").getByText("Doomed Space");
117    const deadline = Date.now() + 10_000;
118    // eslint-disable-next-line no-constant-condition
119    while (true) {
120      const count = await doomed.count();
121      if (count === 0) break;
122      if (Date.now() > deadline) throw new Error("deleted workspace still in switcher");
123      await authPage.waitForTimeout(500);
124    }
125  });
126 
127  test("settings tabs render (profile, billing placeholder, security, integrations)", async ({
128    authPage,
129    freshWorkspace,
130  }) => {
131    const ws = await freshWorkspace("Settings Space");
132    await authPage.goto(`/w/${ws.id}/settings`);
133    await expect(authPage.getByTestId("workspace-settings")).toBeVisible({
134      timeout: 15_000,
135    });
136 
137    for (const tab of ["profile", "billing", "security", "integrations"]) {
138      const tabEl = authPage.getByTestId(`settings-tab-${tab}`);
139      await expect(tabEl, `settings tab "${tab}" should render`).toBeVisible();
140      await tabEl.click();
141    }
142    // Billing + integrations are placeholders in Phase 2 (Phase 14 fills
143    // them); they must render a visible empty/placeholder state, not 404.
144    await expect(authPage.getByTestId("workspace-settings")).toBeVisible();
145  });
146 
147  test("member list only shows actual members (tenant isolation)", async ({
148    api,
149    secondUser,
150    freshWorkspace,
151  }) => {
152    const ws = await freshWorkspace("Isolated Space");
153    const { user: outsider, api: outsiderApi } = await secondUser();
154 
155    // The outsider has NO membership in this workspace.
156    const members = await listMembers(api, ws.id);
157    expect(members.some((m) => m.email === outsider.email)).toBe(false);
158 
159    // And the outsider cannot read the member list at all (403/404).
160    const denied = await outsiderApi.get(`/api/v1/workspaces/${ws.id}/members`);
161    expect([403, 404]).toContain(denied.status());
162  });
163});
164