tbenandClaude Opus 5.5
f24c0d7e82
- Computers get CPUs and memory (default 1 CPU, 2 GB), set at creation and editable; new resources stop, remove and recreate the container, its home dir kept. Every computer container has a docker health check and stays "creating" until it passes; only healthy computers are reached, by hostname, else by their IP on the network (dev outside docker). - Docker is required: the app creates the cobble network on startup and exits without docker. - Production container: deploy/run-app-container.sh mounts .env, the data dir and the docker socket; the database (DB_DIR), media, computers' homes and bun-sqlite's live schema now live on the data volume. - Settings pages for bots, workspaces, computers and users, sharing list components; bots can be deleted; users are created with a password and confirmation, edited and deleted through RBAC-gated APIs. - User types trimmed to super_admin, admin, member, read_only and revoked; admins manage members. UserAvatar shows profile photos from the user row. Co-Authored-By: Claude Opus 5.5 <[email protected]>
66 lines
2.3 KiB
TypeScript
66 lines
2.3 KiB
TypeScript
import { describe, expect, test } from "bun:test";
|
|
import {
|
|
RolesAdminCantUpdate,
|
|
SuperAdminOnlyEditableUserTypes,
|
|
UneditableUserTypes,
|
|
UserTypes,
|
|
UserTypeAssignmentMatrix,
|
|
UserTypeDeletionMatrix,
|
|
} from "./user-types-dict";
|
|
|
|
describe("UserTypes dict", () => {
|
|
test("has unique values", () => {
|
|
const values = UserTypes.map((ut) => ut.value);
|
|
expect(new Set(values).size).toBe(values.length);
|
|
});
|
|
|
|
test("contains required core types", () => {
|
|
const values = new Set(UserTypes.map((ut) => ut.value));
|
|
const required = [
|
|
"super_admin",
|
|
"admin",
|
|
"member",
|
|
"revoked",
|
|
"read_only",
|
|
] as const;
|
|
for (const type of required) {
|
|
expect(values.has(type)).toBe(true);
|
|
}
|
|
});
|
|
|
|
test("super_admin is uneditable and excluded from admin updates", () => {
|
|
expect(UneditableUserTypes).toContain("super_admin");
|
|
expect(RolesAdminCantUpdate).toContain("super_admin");
|
|
expect(SuperAdminOnlyEditableUserTypes).toContain("revoked");
|
|
});
|
|
});
|
|
|
|
describe("Assignment matrices", () => {
|
|
test("cover every user type", () => {
|
|
for (const ut of UserTypes) {
|
|
expect(UserTypeAssignmentMatrix[ut.value]).toBeDefined();
|
|
expect(UserTypeDeletionMatrix[ut.value]).toBeDefined();
|
|
}
|
|
});
|
|
|
|
test("super_admin is only assignable by pass-through actors", () => {
|
|
expect(
|
|
UserTypeAssignmentMatrix["super_admin"].allowed_actors,
|
|
).toBeUndefined();
|
|
});
|
|
|
|
test("admin is granted by pass-through actors only", () => {
|
|
const entry = UserTypeAssignmentMatrix["admin"];
|
|
expect(Array.isArray(entry.allowed_actors)).toBe(true);
|
|
expect((entry.allowed_actors as string[]).length).toBe(0);
|
|
});
|
|
|
|
test("admin manages member types, never on admins or the super admin", () => {
|
|
for (const type of ["member", "read_only", "revoked"] as const) {
|
|
for (const matrix of [UserTypeAssignmentMatrix, UserTypeDeletionMatrix]) {
|
|
const rules = (matrix[type].allowed_actors as Record<string, { excluded_targets?: string[] }>).admin;
|
|
expect(rules?.excluded_targets).toEqual(["super_admin", "admin"]);
|
|
}
|
|
}
|
|
});
|
|
}); |