Files
HealthLog/src/components/settings/__tests__/settings-shell.test.tsx
T
Marc-André Bombeck 0918451e02 fix(settings): unlist Preview features until the topic pages ship
The switch was stored and shown, but nothing reads the topics flag
yet, so the page promised a change it could not make. The section,
its nav entry, its loader and its copy are gone, so its palette
entry goes with them; /settings/preview is no longer a route. The
stored flag, /api/settings/preview-features and its backup round-trip
stay, and the column's pending-consumer note says why.
2026-10-22 00:09:40 +02:00

577 lines
25 KiB
TypeScript

import { describe, expect, it, vi } from "vitest";
import { renderToStaticMarkup } from "react-dom/server";
import { readFileSync } from "node:fs";
import { join } from "node:path";
// `<SettingsShell>` reads the active route from `usePathname()`. We stub
// next/navigation so the SSR test render works without an App-Router
// runtime. The mock reads `mockPathnameRef.value` at call-time (not at
// module-load) so each test can mutate the ref before rendering and the
// shell will see the updated path.
const mockPathnameRef = { value: "/settings/account" };
vi.mock("next/navigation", () => ({
usePathname: () => mockPathnameRef.value,
useRouter: () => ({ replace: () => {}, push: () => {} }),
}));
// v1.18.0 — the shell module-gates per-submodule nav entries off
// `useAuth().user.modules`. The mock returns a user whose modules map is
// mutated per-test via `mockModulesRef`. `undefined` (the default) means
// every gate fails open, so all entries render.
const mockModulesRef: { value: Record<string, boolean> | undefined } = {
value: undefined,
};
// v1.37.0 — the shell also filters by which record the browser is inside.
// Unlike the module gate above, that filter is NOT hydration-deferred: the
// server has already resolved which record is active, so it applies on the SSR
// pass and is assertable from a static render.
const mockActiveRecordRef: {
value: {
recordKind: "managed" | "shared";
level: string;
manageableDomains: string[];
} | null;
} = { value: null };
vi.mock("@/hooks/use-auth", () => ({
useAuth: () => ({
user: {
id: "u1",
role: "USER",
modules: mockModulesRef.value,
accountAccess: mockActiveRecordRef.value
? {
accounts: [mockActiveRecordRef.value],
active: mockActiveRecordRef.value,
canSwitch: true,
}
: null,
},
isAuthenticated: true,
isLoading: false,
refetch: vi.fn(),
}),
}));
import { I18nProvider } from "@/lib/i18n/context";
import { delegatedDomains } from "@/lib/sharing/domain-write-support";
import {
SETTINGS_SECTION_SLUGS,
SETTINGS_SECTIONS,
SettingsShell,
isSettingsSectionSlug,
} from "../settings-shell";
import { primeLocales } from "@/__tests__/helpers/prime-locales";
primeLocales("de");
function renderShell(props: {
active?: (typeof SETTINGS_SECTION_SLUGS)[number];
pathname?: string;
locale?: "en" | "de";
modules?: Record<string, boolean>;
activeRecord?: {
recordKind: "managed" | "shared";
level: string;
manageableDomains: string[];
} | null;
}) {
mockPathnameRef.value = props.pathname ?? "/settings/account";
mockModulesRef.value = props.modules;
mockActiveRecordRef.value = props.activeRecord ?? null;
return renderToStaticMarkup(
<I18nProvider initialLocale={props.locale ?? "en"}>
<SettingsShell active={props.active}>
<div>section body</div>
</SettingsShell>
</I18nProvider>,
);
}
describe("SETTINGS_SECTION_SLUGS", () => {
it("declares every section", () => {
// Order matters — `generateStaticParams()` and the sidebar derive their
// ordering from this constant, so a reorder is a behaviour change.
// v1.4.3 split the dashboard panel: layout stays under `dashboard`,
// per-metric overrides moved to their own `thresholds` slug so it's
// a top-level entry in the settings nav.
// v1.4.16 phase B7 added the consolidated `export` section between
// `api` and `advanced` so every "give me my data out" path lives in
// one place.
// v1.4.25 W5e added `sources` between `thresholds` and `ai`; v1.4.34
// IW-D merged it into `thresholds`; v1.8.7.1 split it back out.
// v1.18.0 — `sources` is no longer a standalone slug: source
// priority folded into Settings → Integrations as the "Sources"
// sub-tab. `/settings/sources` 301-redirects to `/settings/integrations`.
// v1.15.18 — `insights` sits between `dashboard` and `thresholds`: the
// overview-arrange + pill-sort customise surface for `/insights`.
// v1.16.10 — `medications` sits between `insights` and `thresholds`:
// the view-preference + manual-order customise surface for
// `/medications`, reached from the page header's Settings2 glyph.
// v1.17 — `mood` sits between `medications` and `thresholds`: the
// mood-tag management surface (groups, custom tags, hide/archive,
// picker order), reached from the /mood page header's wrench glyph.
// v1.17.1 — `layout` is the one "Layout & Personalization" home
// and sits after `notifications`. The four personalization editor
// slugs (`dashboard`, `insights`, `medications`, `mood`) keep their
// routes so deep links resolve, but they are reached through the
// Layout hub instead of four standalone nav entries.
// v1.18.0 — the standalone `reminders` hub is gone; reminder TYPES
// live in `notifications`, each gated on its module. `/settings/reminders`
// 301-redirects to `/settings/notifications`.
// v1.18.0 — `modules` ("Was du trackst") sits right after `account` as
// the single front door for enabling/disabling secondary domains.
// v1.18.0 — `gesundheitsakte` (the full health-record export) lifts
// out of Export & Import into its own top-level entry, before `export`;
// `coach` gathers the Coach preference cards out of the AI section and
// sits right after `ai`.
// v1.18.1 — `channels` + `sources` split out of the Integrations
// sub-tabs into their own left-side entries, right after `integrations`.
// v1.25.3 — `channels` folded back into Notifications as an in-page group;
// `/settings/channels` 301-redirects to `/settings/notifications#channels`.
// `sources` keeps its own entry.
// v1.18.7 — `labs`, `illness`, `vorsorge` move into the shell as
// first-class sections, right after `mood` (the three were standalone
// `ModuleSettingsFrame` pages).
// v1.18.7 — `sharing` (clinician share links) sits directly after
// `gesundheitsakte`, before `export`: minting a read-only link to the
// health record belongs next to the health-record export.
expect([...SETTINGS_SECTION_SLUGS]).toEqual([
"account",
"security",
// v1.36.0 — account sharing: who may open this record, and whose this
// account may open. Beside `security`, and distinct from the `sharing`
// slug further down (the clinician share LINK).
"access",
"modules",
"integrations",
"sources",
"notifications",
// v1.37.19 — the per-module personalization slugs (dashboard /
// insights / medications / mood / labs / illness / vorsorge) and
// `sharing` left the list: their URLs are owned by the permanent
// redirects in next.config.ts, so the dynamic route could never
// serve them.
"layout",
// v1.25 — Environment (home location, travel overrides, backfill),
// module-gated on the opt-in `environment` module.
"environment",
// v1.25 — Anamnese (allergies + family history), always shown.
"anamnesis",
// v1.35.0 — the Health Score composition surface.
"score",
"thresholds",
"ai",
"coach",
"api",
"mcp",
"gesundheitsakte",
"export",
"advanced",
// v1.23 — "Data & Privacy" assembles the export / deletion / retention /
// encryption / session / activity pieces into one pane, after `advanced`.
"privacy",
"about",
]);
});
it("lists no Preview features page until the topic pages ship", () => {
// The stored flag and its API stay; the page and its nav entry return
// with the first preview the switch actually turns on.
expect(isSettingsSectionSlug("preview")).toBe(false);
expect(SETTINGS_SECTIONS.some((s) => s.slug === ("preview" as never))).toBe(
false,
);
});
it("`isSettingsSectionSlug` accepts known slugs and rejects others", () => {
for (const slug of SETTINGS_SECTION_SLUGS) {
expect(isSettingsSectionSlug(slug)).toBe(true);
}
expect(isSettingsSectionSlug("nope")).toBe(false);
// The redirect-shadowed module slugs are no longer sections.
expect(isSettingsSectionSlug("dashboard")).toBe(false);
expect(isSettingsSectionSlug("sharing")).toBe(false);
expect(isSettingsSectionSlug("")).toBe(false);
expect(isSettingsSectionSlug("Account")).toBe(false); // case-sensitive
});
it("each section has a non-empty title key under settings.sections.<slug>", () => {
for (const section of SETTINGS_SECTIONS) {
expect(section.titleKey).toBe(`settings.sections.${section.slug}.title`);
}
});
});
describe("<SettingsShell>", () => {
it("renders the nine groups as non-interactive sidebar headers, in order", () => {
const html = renderShell({ active: "account" });
const labels = [
"Account",
"Tracking",
"Arrangement",
"Notifications",
"Health profile",
"AI",
"Connections",
"Data",
"System",
];
let cursor = -1;
for (const label of labels) {
const at = html.indexOf(`>${label}</li>`);
expect(at, label).toBeGreaterThan(cursor);
cursor = at;
}
});
it("puts every section in the group the plan names", () => {
const groupOf = Object.fromEntries(
SETTINGS_SECTIONS.map((section) => [section.slug, section.group]),
);
expect(groupOf).toEqual({
account: "account",
security: "account",
access: "account",
modules: "tracking",
layout: "arrangement",
notifications: "notifications",
score: "healthProfile",
thresholds: "healthProfile",
anamnesis: "healthProfile",
environment: "healthProfile",
ai: "ai",
coach: "ai",
integrations: "connections",
sources: "connections",
api: "connections",
mcp: "connections",
export: "data",
gesundheitsakte: "data",
privacy: "data",
advanced: "data",
about: "system",
});
// Every routable section has a nav entry, and nothing else does.
expect([...SETTINGS_SECTIONS.map((s) => s.slug)].sort()).toEqual(
[...SETTINGS_SECTION_SLUGS].sort(),
);
});
it("starts the sticky desktop sidebar on the heading row", () => {
const source = readFileSync(
join(
process.cwd(),
"src",
"components",
"settings",
"settings-shell.tsx",
),
"utf8",
);
expect(source).toMatch(
/<aside[\s\S]*?md:sticky[\s\S]*?md:col-start-1[\s\S]*?md:row-start-1/,
);
expect(source).not.toMatch(/<aside[\s\S]*?md:row-start-2/);
});
it("renders every navigable section link in the sidebar", () => {
const html = renderShell({ active: "account" });
// The phone's section sheet mounts its list only when opened, so the
// server markup carries each link once, in the desktop sidebar.
const navigableSlugs = SETTINGS_SECTIONS.map((section) => section.slug);
for (const slug of navigableSlugs) {
const matches = html.match(new RegExp(`href="/settings/${slug}"`, "g"));
expect(matches?.length ?? 0).toBe(1);
}
});
it("links use the correct `/settings/<slug>` href — regression guard against typos", () => {
const html = renderShell({ active: "account" });
// Spot-check a couple of slugs that have historic anchor aliases (e.g.
// `/settings#withings` → `/settings/integrations`) — they must NOT
// sneak back in.
expect(html).toContain('href="/settings/integrations"');
expect(html).toContain('href="/settings/ai"');
expect(html).not.toContain('href="/settings#');
expect(html).not.toContain('href="/settings"');
});
it('marks the active section with aria-current="page" (and only that one)', () => {
const html = renderShell({ active: "notifications" });
// The sidebar marks the active link; the phone sheet is closed.
const occurrences = html.match(/aria-current="page"/g);
expect(occurrences?.length ?? 0).toBe(1);
// And the active link is on the notifications href. Attribute order
// in React SSR is alphabetic, so `aria-current` precedes `href` —
// the regex deliberately doesn't pin order to stay robust against
// future React renderer changes.
const activeLinkRegex =
/<a\b[^>]*\baria-current="page"[^>]*\bhref="\/settings\/notifications"|<a\b[^>]*\bhref="\/settings\/notifications"[^>]*\baria-current="page"/g;
expect(html.match(activeLinkRegex)?.length ?? 0).toBe(1);
});
it("derives the active slug from the current pathname when `active` is omitted", () => {
const html = renderShell({ pathname: "/settings/api" });
const activeLinkRegex =
/<a\b[^>]*\baria-current="page"[^>]*\bhref="\/settings\/api"|<a\b[^>]*\bhref="\/settings\/api"[^>]*\baria-current="page"/g;
expect(html.match(activeLinkRegex)?.length ?? 0).toBe(1);
});
it("highlights the Arrangement hub on a legacy child path and on its sub-pages", () => {
// `/settings/dashboard` (a redirected legacy child) and the sub-pages
// under `/settings/layout/<id>` both read as the Arrangement entry.
for (const child of [
"/settings/dashboard",
"/settings/insights",
"/settings/layout/labs",
]) {
const html = renderShell({ pathname: child });
const layoutActive =
/<a\b[^>]*\baria-current="page"[^>]*\bhref="\/settings\/layout"|<a\b[^>]*\bhref="\/settings\/layout"[^>]*\baria-current="page"/g;
expect(html.match(layoutActive)?.length ?? 0).toBe(1);
}
});
it("highlights Modules on a module's own settings page", () => {
const html = renderShell({ pathname: "/settings/modules/labs" });
const modulesActive =
/<a\b[^>]*\baria-current="page"[^>]*\bhref="\/settings\/modules"|<a\b[^>]*\bhref="\/settings\/modules"[^>]*\baria-current="page"/g;
expect(html.match(modulesActive)?.length ?? 0).toBe(1);
});
// v1.37.19 — the Layout children left `SETTINGS_SECTION_SLUGS`, so no
// page can pass one as the `active` override anymore; the pathname-based
// case above is the remaining (defensive) mapping.
it("no longer surfaces the per-module nav entries (folded into Darstellung, v1.25.7)", () => {
// v1.25.7 — Medikamente / Stimmung / Labor / Krankheit / Vorsorge are no
// longer standalone left-nav entries: their settings render inline inside
// the "Darstellung" hub, gated on the same module key there. The shell
// never emits a sidebar link for them regardless of the module map.
for (const slug of ["medications", "mood", "labs", "illness", "vorsorge"]) {
expect(renderShell({ active: "account" })).not.toContain(
`href="/settings/${slug}"`,
);
// Even with the module explicitly enabled, no sidebar entry appears.
expect(
renderShell({ active: "account", modules: { [slug]: true } }),
).not.toContain(`href="/settings/${slug}"`);
}
});
it("no longer surfaces the Sharing nav entry (folded into Gesundheitsakte, v1.25.7)", () => {
expect(renderShell({ active: "account" })).not.toContain(
'href="/settings/sharing"',
);
});
it("surfaces the Coach entry on the fail-open default (v1.18.0 S5)", () => {
// coach undefined → entry shown.
expect(renderShell({ active: "account" })).toContain(
'href="/settings/coach"',
);
});
it("renders the full fail-open nav on the server pass, even for a disabled module (v1.25.9)", () => {
// v1.25.9 — the module filter must NOT run during SSR / the first client
// paint. `useAuth().user.modules` resolves at different times on the
// server-rendered pass and the hydrating client pass, so filtering in the
// SSR markup produced a different nav `<li>` count than the client's first
// render — a React #418 hydration mismatch that regenerated the whole tree
// and left every settings control non-interactive (dead disclosure /
// download buttons). The shell now emits the full fail-open list on both
// the server pass and the first client paint, and applies the module
// filter once, after mount. So a disabled module's entry is STILL present
// in the SSR markup here; its client-side removal after hydration is
// covered by the e2e suite (settings pages must stay interactive).
const ssr = renderShell({ active: "account", modules: { coach: false } });
expect(ssr).toContain('href="/settings/coach"');
});
it("always surfaces the Health-record entry, regardless of `doctorReport` (v1.18.6.1)", () => {
// The health-record (PDF / FHIR) entry is a flagship export capability
// and is no longer nav-gated: a default/unset modules map shows it, and
// even an explicit `doctorReport: false` keeps the Settings entry-point
// reachable. The server-side `/api/export/health-record` route remains
// the hard enforcement of the opt-out.
expect(renderShell({ active: "account" })).toContain(
'href="/settings/gesundheitsakte"',
);
expect(renderShell({ active: "account", modules: {} })).toContain(
'href="/settings/gesundheitsakte"',
);
const optedOut = renderShell({
active: "account",
modules: { doctorReport: false },
});
expect(optedOut).toContain('href="/settings/gesundheitsakte"');
});
describe("inside somebody else's record", () => {
/**
* #939 — a guardian could turn a module off for the profile they look
* after and had to find the page by URL to do it. The section is
* classified `managed-guardian`, which is what the shell offers a managed
* record; asserting it here is what stops a future narrowing of the filter
* from silently taking the destination away again.
*/
it("offers the Modules destination to a guardian on a managed record", () => {
const html = renderShell({
active: "account",
activeRecord: {
recordKind: "managed",
level: "manage",
manageableDomains: delegatedDomains("manage", null, "manage"),
},
});
expect(html).toContain('href="/settings/modules"');
// Its own configuration is not the record's, and stays away.
expect(html).not.toContain('href="/settings/security"');
});
it("does not offer it to an adult delegate holding MANAGE", () => {
// A delegate manages somebody's health record, not their account:
// modules, thresholds and notification routing stay with the owner.
// Integrations remains status-only on a managed record, and unreachable
// here — both are `managed-guardian`, which an adult record never opens.
const html = renderShell({
active: "account",
activeRecord: {
recordKind: "shared",
level: "manage",
manageableDomains: delegatedDomains("manage", null, "manage"),
},
});
expect(html).not.toContain('href="/settings/modules"');
expect(html).not.toContain('href="/settings/integrations"');
expect(html).toContain('href="/settings/anamnesis"');
});
it("lists nothing for a MANAGE grant that does not manage profile", () => {
// The anamnesis forms write through `requireRecordAuth("manage",
// "profile")`, which refuses a grant whose sections miss `profile`, so
// the shell does not list the page. The navigation reads the same
// predicate and offers no Settings entry either.
const html = renderShell({
active: "account",
activeRecord: {
recordKind: "shared",
level: "manage",
manageableDomains: ["labs"],
},
});
expect(html).not.toContain('href="/settings/anamnesis"');
expect(html).not.toContain('href="/settings/modules"');
// Non-zero: the shell rendered, and still names the active section in
// its heading, which it resolves from the unfiltered list.
expect(html).toContain('id="settings-section-account-title"');
});
});
it("falls back to `account` when the pathname doesn't match a known slug", () => {
const html = renderShell({ pathname: "/settings/totally-bogus" });
const activeLinkRegex =
/<a\b[^>]*\baria-current="page"[^>]*\bhref="\/settings\/account"|<a\b[^>]*\bhref="\/settings\/account"[^>]*\baria-current="page"/g;
expect(html.match(activeLinkRegex)?.length ?? 0).toBe(1);
});
it("resolves every section title via the i18n provider — English", () => {
const html = renderShell({ active: "account", locale: "en" });
expect(html).toContain("Account");
expect(html).toContain("Integrations");
// v1.9.0 — the section label is back to the shorter "Notifications"
// (single-line; the longer "Notification channels" wrapped). The
// `/notifications` inbox now shares the "Notifications" label.
expect(html).toContain("Notifications");
// v1.17.1 — the view/arrangement editors are reached through one hub
// entry (route stays `/settings/layout`). v1.42 — the hub is named
// "Layout": it arranges and picks what each module shows and holds no
// theme, so "Appearance" promised a control it does not have.
expect(html).toContain('href="/settings/layout"');
// v1.44 — the hub holds only order and view, and says so.
expect(html).toContain(">Arrangement</a>");
// v1.25.3 — Channels folded into Notifications, so it is no longer a
// left-side entry; Sources keeps its own.
expect(html).not.toContain('href="/settings/channels"');
expect(html).toContain('href="/settings/sources"');
// v1.25.7 — Medikamente / Stimmung (and Labor / Krankheit / Vorsorge)
// folded into "Darstellung" as inline sections, so they no longer have a
// standalone left-nav entry.
expect(html).not.toContain('href="/settings/medications"');
expect(html).not.toContain('href="/settings/mood"');
// v1.25.7 — Sharing folded into the Gesundheitsakte section.
expect(html).not.toContain('href="/settings/sharing"');
// The ampersand is HTML-escaped by React SSR — assert on the encoded
// form so we don't accidentally match a parser that double-escapes.
expect(html).toContain("API &amp; tokens");
// v1.18.0 — the health record is its own top-level entry.
expect(html).toContain('href="/settings/gesundheitsakte"');
expect(html).toContain("Health record");
// v1.4.16: the consolidated Export section is a top-level
// entry in the sidebar; the link must be present in both locales.
expect(html).toContain('href="/settings/export"');
expect(html).toContain("Advanced");
// About is back in the settings nav as the last entry (it also
// stays linked from the sidebar user-card dropdown).
expect(html).toContain('href="/settings/about"');
// v1.18.1 — Sources is a standalone nav entry again (split out of
// the Integrations sub-tabs). Targets keeps its own entry.
expect(html).toContain('href="/settings/thresholds"');
expect(html).toContain('href="/settings/sources"');
expect(html).toContain("Targets");
});
it("resolves every section title via the i18n provider — German", () => {
const html = renderShell({ active: "account", locale: "de" });
expect(html).toContain("Konto");
expect(html).toContain("Integrationen");
// v1.9.0 — back to the shorter "Benachrichtigungen" (single-line; the
// compound "Benachrichtigungs-Kanäle" wrapped). The `/notifications`
// inbox now shares the "Benachrichtigungen" label.
expect(html).toContain("Benachrichtigungen");
// v1.17.1 — the view editors are reached through one hub entry
// (route stays `/settings/layout`). v1.42 — "Layout" in German too;
// "Darstellung" now names the account page's language-and-units card.
expect(html).toContain('href="/settings/layout"');
expect(html).toContain(">Anordnung</a>");
// v1.25.3 — Channels ("Kanäle") folded into Notifications; Sources keeps
// its own left-side entry.
expect(html).not.toContain('href="/settings/channels"');
// v1.25.7 — Medikamente + Stimmung folded into "Darstellung", so they no
// longer have their own nav entries.
expect(html).not.toContain('href="/settings/medications"');
expect(html).not.toContain('href="/settings/mood"');
// Targets keeps its German nav entry ("Zielwerte").
expect(html).toContain("Zielwerte");
// v1.18.6 — the AI section is named "KI-Anbieter" in German: the
// page is about the provider / BYOK, not an "Auswertung".
expect(html).toContain("KI-Anbieter");
// German keeps the noun capitalised: "API & Tokens".
expect(html).toContain("API &amp; Tokens");
expect(html).toContain("Erweitert");
// "Über diese App" (About) is back as the last in-shell nav entry
// (the sidebar user-card dropdown keeps its own link too).
expect(html).toContain('href="/settings/about"');
// v1.18.1 — Sources is a standalone nav entry again.
expect(html).toContain('href="/settings/sources"');
});
it("does NOT surface the raw key when a translation resolves — guards against missing JSON entries", () => {
const html = renderShell({ active: "account", locale: "en" });
expect(html).not.toContain("settings.sections.");
});
it("gives the phone one button naming the section, not a strip of every section", () => {
const html = renderShell({ active: "security" });
const nav = html.match(/<nav\b[^>]*md:hidden[^>]*>[\s\S]*?<\/nav>/);
expect(nav).not.toBeNull();
expect(nav![0]).toContain('data-slot="settings-mobile-nav-trigger"');
expect(nav![0]).toContain("Security");
expect(nav![0]).toContain("Account");
expect(nav![0]).not.toContain("overflow-x-auto");
expect(nav![0]).not.toContain('href="/settings/');
});
});