feat: v2.5.12 — plan and quota for every AI tool, Grok Build and Kimi Code, Quit AgentHub (#65)

Usage panel (status bar): - every account shows its plan (Claude subscriptionType, Codex chatgpt_plan_type, Cursor membershipType, Grok subscriptionTier) - new quota rows: Cursor CLI (cursor.com usage-summary), Antigravity (`agy --print /usage`, two model pools; AGENTHUB_AGY_USAGE=0 never runs agy), Grok Build, Kimi Code, OpenCode Go — each login read from the tool's own file, sent only to its own host while valid, never refreshed - in-flight quota reads are shared between tabs AI Tools catalog: Grok Build (`grok`) and Kimi Code (`kimi`) added; Gemini CLI, Hermes and OpenClaw removed. Also: Quit AgentHub (#65, `agenthub stop`), status-area icon, Add to Chat on an editor selection, Settings in three groups, JetBrains-style Changes panel (ticked files/hunks, ignore, blame, file history), terminal font. --no-verify: :3000 is taken by another dev server (lane-detect tests); both suites run by hand — server 2636/2639 (the 3 are :3000), client 1131/1131.
2026-10-08 12:22:14 +07:00
parent 6ef9a5d4b7
commit a9c71cd905
133 changed files with 8007 additions and 1830 deletions
@@ -0,0 +1,152 @@
+/**
+ * @file Users.test.tsx
+ * @description The Users page: local mode and a member are sent home; an
+ * analyst reads the table with no account controls; an admin adds a user only
+ * with their own password typed (the confirm stays disabled until then), sees
+ * a wrong password reported in the dialog, and cannot change their own role or
+ * disable themselves.
+ * @author Nguyễn Ngọc Trí Vĩ <vinnt@smartgift.vn>
+ */
+
+import { beforeEach, describe, expect, it, vi } from "vitest";
+import { render, screen, waitFor } from "@testing-library/react";
+import userEvent from "@testing-library/user-event";
+import { MemoryRouter, Route, Routes } from "react-router-dom";
+import type { AuthState, ServerUserUsage } from "../../lib/api";
+
+let authState: AuthState = { mode: "local" };
+vi.mock("../../components/AuthGate", () => ({
+  useAuth: () => ({ state: authState, logout: async () => {} }),
+}));
+
+const usage = { cost: 0, tokens: 0 };
+const row = (id: number, username: string, role: ServerUserUsage["role"]): ServerUserUsage => ({
+  id,
+  username,
+  role,
+  disabled: false,
+  workspaces: 0,
+  sessions: 0,
+  last7d: usage,
+  last30d: usage,
+});
+const users = vi.hoisted(() => ({
+  list: vi.fn(),
+  audit: vi.fn(),
+  create: vi.fn(),
+  update: vi.fn(),
+  setPassword: vi.fn(),
+  assignWorkspace: vi.fn(),
+}));
+
+vi.mock("../../lib/api", async (importOriginal) => {
+  const actual = await importOriginal<Record<string, unknown>>();
+  return {
+    ...actual,
+    api: {
+      users,
+      lanes: { list: vi.fn(async () => ({ lanes: [], counts: {} })) },
+    },
+  };
+});
+
+import { Users } from "../Users";
+
+function renderPage() {
+  return render(
+    <MemoryRouter initialEntries={["/users"]}>
+      <Routes>
+        <Route path="/users" element={<Users />} />
+        <Route path="/" element={<div data-testid="home" />} />
+      </Routes>
+    </MemoryRouter>
+  );
+}
+
+beforeEach(() => {
+  for (const fn of Object.values(users)) fn.mockReset();
+  users.list.mockResolvedValue({
+    users: [row(1, "boss", "admin"), row(2, "mia", "member")],
+  });
+  users.audit.mockResolvedValue({ entries: [] });
+});
+
+describe("Users page", () => {
+  it("sends local mode and a member home", async () => {
+    authState = { mode: "local" };
+    renderPage();
+    expect(await screen.findByTestId("home")).toBeTruthy();
+    authState = { mode: "server", user: { id: 2, username: "mia", role: "member" } };
+    renderPage();
+    expect((await screen.findAllByTestId("home")).length).toBeGreaterThan(0);
+    expect(users.list).not.toHaveBeenCalled();
+  });
+
+  it("shows an analyst the accounts with no controls", async () => {
+    authState = { mode: "server", user: { id: 3, username: "ana", role: "analyst" } };
+    renderPage();
+    expect(await screen.findByText("mia")).toBeTruthy();
+    expect(screen.queryByRole("button", { name: "Add user" })).toBeNull();
+    expect(screen.queryByRole("button", { name: "Reset password" })).toBeNull();
+    expect(screen.getByText("Analysts can view accounts but not change them.")).toBeTruthy();
+  });
+
+  it("adds a user only with the admin's own password", async () => {
+    authState = { mode: "server", user: { id: 1, username: "boss", role: "admin" } };
+    users.create.mockResolvedValue({
+      user: { id: 9, username: "neo", role: "member", disabled: false },
+    });
+    const ue = userEvent.setup();
+    renderPage();
+    await ue.click(await screen.findByRole("button", { name: "Add user" }));
+    const dialog = await screen.findByRole("dialog");
+    await ue.type(screen.getByLabelText("Username"), "neo");
+    await ue.type(screen.getByLabelText("Password"), "neo-pass-123");
+    const confirm = Array.from(dialog.querySelectorAll("button")).find(
+      (b) => b.textContent === "Add user"
+    )!;
+    expect(confirm.hasAttribute("disabled")).toBe(true);
+    await ue.type(screen.getByLabelText("Your password"), "boss-pass");
+    expect(confirm.hasAttribute("disabled")).toBe(false);
+    await ue.click(confirm);
+    await waitFor(() =>
+      expect(users.create).toHaveBeenCalledWith(
+        { username: "neo", password: "neo-pass-123", role: "member" },
+        "boss-pass"
+      )
+    );
+    await waitFor(() => expect(screen.queryByRole("dialog")).toBeNull());
+    expect(users.list).toHaveBeenCalledTimes(2); // reloaded after the change
+  });
+
+  it("reports a wrong password in the dialog and keeps it open", async () => {
+    authState = { mode: "server", user: { id: 1, username: "boss", role: "admin" } };
+    users.setPassword.mockRejectedValue(
+      Object.assign(new Error("your password is wrong"), { code: "EREAUTH" })
+    );
+    const ue = userEvent.setup();
+    renderPage();
+    await screen.findByText("mia");
+    await ue.click(screen.getAllByRole("button", { name: "Reset password" })[1]!);
+    await ue.type(screen.getByLabelText("New password"), "mia-new-pass-1");
+    await ue.type(screen.getByLabelText("Your password"), "wrong{Enter}");
+    expect(await screen.findByRole("alert")).toHaveProperty(
+      "textContent",
+      "Your password is wrong."
+    );
+    expect(screen.getByRole("dialog")).toBeTruthy();
+    expect(users.setPassword).toHaveBeenCalledWith(2, "mia-new-pass-1", "wrong");
+  });
+
+  it("never offers an admin a role change or disable on their own row", async () => {
+    authState = { mode: "server", user: { id: 1, username: "boss", role: "admin" } };
+    renderPage();
+    await screen.findByText("mia");
+    const [ownRole, miaRole] = screen.getAllByRole("button", { name: "Change role" });
+    const [ownLock, miaLock] = screen.getAllByRole("button", { name: "Disable" });
+    expect(ownRole!.hasAttribute("disabled")).toBe(true);
+    expect(ownLock!.hasAttribute("disabled")).toBe(true);
+    expect(miaRole!.hasAttribute("disabled")).toBe(false);
+    expect(miaLock!.hasAttribute("disabled")).toBe(false);
+  });
+});