feat(portal): M10.1 — fill the 10 customer-area shells

Four real surfaces wired to tenant-registry (settings, settings/api-keys CRUD, audit pagination, products live entitlements), five forward-looking empty states with CTAs. 56 vitest tests + 10 Playwright canaries. lib/format.ts consolidates date helpers. Refs: M10.1
2026-05-20 07:20:31 +00:00
parent ecbe6ae74b
commit e387b9a963
16 changed files with 1093 additions and 49 deletions
@@ -0,0 +1,26 @@
+import { expect, test } from "@playwright/test";
+
+// One canary per shell surface — confirms the route mounts and renders
+// SOMETHING the user can see (heading or 403 gate) without OIDC.
+// All run signed-out, so role-gated routes land on the NotAuthorized 403.
+
+test.describe("customer-area surfaces @needs-stack", () => {
+  const surfaces = [
+    { path: "/products",                expected: "403" },
+    { path: "/projects",                expected: "403" },
+    { path: "/catalog",                 expected: "403" },
+    { path: "/settings",                expected: "403" },
+    { path: "/settings/users",          expected: "403" },
+    { path: "/settings/api-keys",       expected: "403" },
+    { path: "/settings/integrations",   expected: "403" },
+    { path: "/billing",                 expected: "403" },
+    { path: "/audit",                   expected: "403" },
+    { path: "/support",                 expected: "403" },
+  ];
+  for (const { path, expected } of surfaces) {
+    test(`acme${path} renders signed-out`, async ({ page }) => {
+      await page.goto(path);
+      await expect(page.getByRole("heading", { name: new RegExp(expected, "i") })).toBeVisible();
+    });
+  }
+});