feat: v2.7.6 — edit users in one form, Settings → Account, display names, copy over plain HTTP

- Users page: one Edit user form (display name, email, role, active, a new or
  generated password, workspaces given or taken back, sign out everywhere),
  validated as a whole before anything is written (PATCH /api/users/:id,
  GET /api/users/:id); users.display_name/email added migration-safe.
- Settings → Account for every signed-in user: profile, own password (the
  current one required, this login kept), sign out other devices
  (/api/me/account, /api/me/password, /api/me/sign-out-others; login cookie
  only, never a pane token).
- Display names wherever a person is named (sidebar, workspace owner groups,
  Users page and audit log); owner_display_name / reader_display additive.
- Users page: admins add and remove Claude/Codex pool accounts.
- Folder browser: an admin with their own Linux account opens in their home;
  the "Server folder" tick opens the host's (never remembered).
- AI Proxy: "Config 9router" beside Add profile when 9router is installed,
  opened on the dashboard's own host (GET /api/ai-proxies/9router).
- Terminal: a tmux selection reaches the clipboard over plain HTTP too
  (writeClipboard's textarea fallback, focus handed back).
- Chat: a file the session touched outside the workspace previews
  (GET /api/sessions/:id/file).
- install-system: `!requiretty` only when visudo accepts it (sudo-rs on
  Ubuntu 25.10+ rejects the setting).
- openapi.yaml regenerated; docs (API, SERVER-MODE, LANES) updated.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
2026-10-13 17:10:29 +07:00
parent 9c573f1e3c
commit 0c2f49876d
74 changed files with 5347 additions and 392 deletions
@@ -10,7 +10,7 @@
import { describe, it, expect, vi, beforeEach } from "vitest";
import { render, screen, waitFor, within } from "@testing-library/react";
import userEvent from "@testing-library/user-event";
import { AiProxyConfig } from "../AiProxyConfig";
import { AiProxyConfig, nineRouterUrl } from "../AiProxyConfig";
import { api } from "../../lib/api";
import { settleConfirm, subscribeConfirm, type PendingConfirm } from "../../lib/confirm";
import type { AuthState } from "../../lib/api";
@@ -28,6 +28,7 @@ vi.mock("../../lib/api", () => ({
update: vi.fn(),
remove: vi.fn(),
test: vi.fn(),
nineRouter: vi.fn(),
},
},
}));
@@ -74,6 +75,7 @@ beforeEach(() => {
vi.mocked(api.aiProxies.create).mockReset().mockResolvedValue(nineRouter);
vi.mocked(api.aiProxies.update).mockReset().mockResolvedValue(nineRouter);
vi.mocked(api.aiProxies.remove).mockReset().mockResolvedValue({ removed: "9router" });
vi.mocked(api.aiProxies.nineRouter).mockReset().mockResolvedValue({ installed: false });
vi.mocked(api.aiProxies.test)
.mockReset()
.mockResolvedValue({
@@ -83,6 +85,27 @@ beforeEach(() => {
});
describe("AiProxyConfig", () => {
it("shows Config 9router beside Add profile only when 9router is installed", async () => {
vi.mocked(api.aiProxies.nineRouter).mockResolvedValue({ installed: true });
render(<AiProxyConfig />);
const link = await screen.findByRole("link", { name: /aiProxy\.config9router/ });
// The dashboard's own host (jsdom's is localhost), not a fixed localhost.
expect(link).toHaveAttribute("href", `http://${window.location.hostname}:20128`);
expect(link).toHaveAttribute("target", "_blank");
});
it("points Config 9router at the host the dashboard was opened on", () => {
expect(nineRouterUrl({ hostname: "10.1.13.7" })).toBe("http://10.1.13.7:20128");
expect(nineRouterUrl({ hostname: "::1" })).toBe("http://[::1]:20128");
});
it("hides Config 9router when 9router is not installed", async () => {
render(<AiProxyConfig />);
await screen.findByText("Native (Claude / Codex)");
await waitFor(() => expect(api.aiProxies.nineRouter).toHaveBeenCalled());
expect(screen.queryByRole("link", { name: /aiProxy\.config9router/ })).toBeNull();
});
it("lists the built-in native profile with no edit or delete control", async () => {
render(<AiProxyConfig />);
expect(await screen.findByText("Native (Claude / Codex)")).toBeInTheDocument();
+30 -13
View File
@@ -3,8 +3,9 @@
* @description The Users page: local mode and a member are sent home; an
* analyst reads the table with no account controls; an admin adds a user only
* with their own password typed (the confirm stays disabled until then), sees
* a wrong password reported in the dialog, and cannot change their own role or
* disable themselves.
* a wrong password reported in the edit dialog, opens ONE Edit per row (no
* separate role/password/workspace/disable buttons any more), and sees the
* display name and email under a username.
* @author Nguyễn Ngọc Trí Vĩ <vinnt@smartgift.vn>
*/
@@ -37,6 +38,7 @@ const users = vi.hoisted(() => ({
update: vi.fn(),
setPassword: vi.fn(),
assignWorkspace: vi.fn(),
get: vi.fn(),
}));
vi.mock("../../lib/api", async (importOriginal) => {
@@ -46,6 +48,9 @@ vi.mock("../../lib/api", async (importOriginal) => {
api: {
users,
lanes: { list: vi.fn(async () => ({ lanes: [], counts: {} })) },
accountPool: {
list: vi.fn(async () => ({ accounts: [], codex: [], blockPercent: 90 })),
},
},
};
});
@@ -69,6 +74,10 @@ beforeEach(() => {
users: [row(1, "boss", "admin"), row(2, "mia", "developer")],
});
users.audit.mockResolvedValue({ entries: [] });
users.get.mockImplementation(async (id: number) => ({
user: { id, username: "x", role: "developer", disabled: false },
workspaces: [],
}));
});
describe("Users page", () => {
@@ -119,15 +128,15 @@ describe("Users page", () => {
expect(users.list).toHaveBeenCalledTimes(2); // reloaded after the change
});
it("reports a wrong password in the dialog and keeps it open", async () => {
it("reports a wrong password in the edit dialog and keeps it open", async () => {
authState = { mode: "server", user: { id: 1, username: "boss", role: "admin" } };
users.setPassword.mockRejectedValue(
users.update.mockRejectedValue(
Object.assign(new Error("your password is wrong"), { code: "EREAUTH" })
);
const ue = userEvent.setup();
renderPage();
await screen.findByText("mia");
await ue.click(screen.getAllByRole("button", { name: "Reset password" })[1]!);
await ue.click(screen.getAllByRole("button", { name: "Edit user" })[1]!);
await ue.type(screen.getByLabelText("New password"), "mia-new-pass-1");
await ue.type(screen.getByLabelText("Your password"), "wrong{Enter}");
expect(await screen.findByRole("alert")).toHaveProperty(
@@ -135,18 +144,26 @@ describe("Users page", () => {
"Your password is wrong."
);
expect(screen.getByRole("dialog")).toBeTruthy();
expect(users.setPassword).toHaveBeenCalledWith(2, "mia-new-pass-1", "wrong");
expect(users.update).toHaveBeenCalledWith(2, { password: "mia-new-pass-1" }, "wrong");
});
it("never offers an admin a role change or disable on their own row", async () => {
it("offers one Edit per row and no separate account buttons", async () => {
authState = { mode: "server", user: { id: 1, username: "boss", role: "admin" } };
renderPage();
await screen.findByText("mia");
const [ownRole, miaRole] = screen.getAllByRole("button", { name: "Change role" });
const [ownLock, miaLock] = screen.getAllByRole("button", { name: "Disable" });
expect(ownRole!.hasAttribute("disabled")).toBe(true);
expect(ownLock!.hasAttribute("disabled")).toBe(true);
expect(miaRole!.hasAttribute("disabled")).toBe(false);
expect(miaLock!.hasAttribute("disabled")).toBe(false);
expect(screen.getAllByRole("button", { name: "Edit user" })).toHaveLength(2);
for (const name of ["Change role", "Reset password", "Give a workspace", "Disable"])
expect(screen.queryByRole("button", { name })).toBeNull();
});
it("shows the display name first, with @username beside it, and the email", async () => {
authState = { mode: "server", user: { id: 1, username: "boss", role: "admin" } };
users.list.mockResolvedValue({
users: [{ ...row(2, "mia", "developer"), displayName: "Mia Tran", email: "mia@x.vn" }],
});
renderPage();
expect(await screen.findByText("Mia Tran")).toBeTruthy();
expect(screen.getByText("@mia")).toBeTruthy();
expect(screen.getByText("mia@x.vn")).toBeTruthy();
});
});
@@ -7178,7 +7178,7 @@ exports[`screen snapshots > Settings — about 1`] = `
<span
class="text-status-warning/90"
>
UI build v2.7.5 (rebuild client to match)
UI build v2.7.6 (rebuild client to match)
</span>
</p>
</div>