test: massive test coverage expansion (+1,437 tests, 22 new files)

Expand test coverage across all layers via 14 parallel agents:

Unit tests (3,378 total, +534):
- First-ever AI sidecar tests (157 tests covering bridge lifecycle, all 12 tool modules)
- API route infrastructure (auth, pipeline, batch, settings, teams, roles, audit, api-keys, files, docs)
- Lib coverage improvements (audit 7%->95%, worker-pool 33%->100%)
- Web store/lib gap fills (features-store, tool-registry)

Integration tests (4,403 total, +903):
- Expanded 19 tool test files with parameter variations, format edge cases, boundary values
- Cross-format matrix: 290 tests covering 14 tools x 17 formats
- Adversarial/edge cases: 63 tests for extreme inputs, concurrent requests, corrupted files

E2E-Docker (125 new tests):
- Expanded 8 spec files + 1 new file covering all 49 tools
- Added HEIC/format handling, auth failures, download verification

GUI E2E (expanded 28 spec files):
- Navigation, responsive layout, keyboard shortcuts
- All 51 tool UIs with settings, processing, display modes
- Batch/pipeline workflows, settings/RBAC, visual regression
- Resilience, accessibility (ARIA, contrast, focus), performance budgets
This commit is contained in:
SnapOtter
2026-05-09 09:02:29 +08:00
parent 4f0fbade6d
commit 649ad5db9e
138 changed files with 22105 additions and 327 deletions
+55
View File
@@ -62,6 +62,61 @@ test.describe("GUI Settings - Security Tab", () => {
await expect(page.getByText(/at least 4 characters/i)).toBeVisible({ timeout: 5_000 });
});
test("wrong current password shows error message", async ({ loggedInPage: page }) => {
await openSettings(page);
await page.getByRole("button", { name: /security/i }).click();
await page.getByPlaceholder("Current Password").fill("wrongpassword");
await page.getByPlaceholder("New Password").first().fill("NewPass123");
await page.getByPlaceholder("Confirm New Password").fill("NewPass123");
await page.getByRole("button", { name: /change password/i }).click();
// The API returns 401 which maps to "Current password is incorrect"
await expect(page.getByText("Current password is incorrect")).toBeVisible({ timeout: 5_000 });
});
test("successful password change shows success message", async ({ loggedInPage: page }) => {
await openSettings(page);
await page.getByRole("button", { name: /security/i }).click();
// Change password from admin -> admin (same value, to avoid breaking other tests)
await page.getByPlaceholder("Current Password").fill("admin");
await page.getByPlaceholder("New Password").first().fill("admin");
await page.getByPlaceholder("Confirm New Password").fill("admin");
await page.getByRole("button", { name: /change password/i }).click();
await expect(page.getByText("Password changed successfully")).toBeVisible({ timeout: 5_000 });
});
test("form fields are cleared after successful password change", async ({
loggedInPage: page,
}) => {
await openSettings(page);
await page.getByRole("button", { name: /security/i }).click();
await page.getByPlaceholder("Current Password").fill("admin");
await page.getByPlaceholder("New Password").first().fill("admin");
await page.getByPlaceholder("Confirm New Password").fill("admin");
await page.getByRole("button", { name: /change password/i }).click();
await expect(page.getByText("Password changed successfully")).toBeVisible({ timeout: 5_000 });
// All fields should be cleared after success
await expect(page.getByPlaceholder("Current Password")).toHaveValue("");
await expect(page.getByPlaceholder("New Password").first()).toHaveValue("");
await expect(page.getByPlaceholder("Confirm New Password")).toHaveValue("");
});
test("section heading and description are displayed", async ({ loggedInPage: page }) => {
await openSettings(page);
await page.getByRole("button", { name: /security/i }).click();
await expect(page.locator("h3").filter({ hasText: "Security" })).toBeVisible();
await expect(page.getByText("Password and authentication settings.")).toBeVisible();
});
test("security section shows login attempt limit reference", async ({ loggedInPage: page }) => {
await openSettings(page);
await page.getByRole("button", { name: /security/i }).click();