-
🔒 Security & Access
+
Security & Access
The settings that most affect how exposed and protected your instance is.
@@ -92,7 +92,7 @@
diff --git a/frontend/src/views/settings/fields.ts b/frontend/src/views/settings/fields.ts
index cb6d605e8..ad3ebe247 100644
--- a/frontend/src/views/settings/fields.ts
+++ b/frontend/src/views/settings/fields.ts
@@ -360,7 +360,7 @@ export const GENERAL_FIELDS: SettingField[] = [
// `teams` -> `server_edition` on load, and Settings.vue aliases it defensively
// so old configs hydrate the form while edits always save under `server_edition`.
export const SERVER_EDITION_TAB_LABEL = 'Server Edition'
-export const SERVER_EDITION_SECTION_TITLE = '👥 Server Edition'
+export const SERVER_EDITION_SECTION_TITLE = 'Server Edition'
//
// Spec 107 PR-B (T054): this row set is asserted EXACTLY by
// `tests/unit/settings-server-edition-wording.spec.ts`. The `Settings`
diff --git a/frontend/tests/unit/activity-table-scanning.spec.ts b/frontend/tests/unit/activity-table-scanning.spec.ts
index 241f10f7a..58b6e0af2 100644
--- a/frontend/tests/unit/activity-table-scanning.spec.ts
+++ b/frontend/tests/unit/activity-table-scanning.spec.ts
@@ -161,6 +161,8 @@ describe('Activity table — only failures are marked (F5)', () => {
expect(successCell.text()).toBe('Success')
// sr-only: present in the accessibility tree, absent from the scan.
expect(successCell.classes()).toContain('sr-only')
+ // I8a: a visible check icon with a Success title accompanies it.
+ expect(rows(wrapper)[0].find('[data-test="activity-status-icon"] title').text()).toBe('Success')
const errorCell = rows(wrapper)
.find(r => r.text().includes('Error'))!
diff --git a/frontend/tests/unit/clients-page.spec.ts b/frontend/tests/unit/clients-page.spec.ts
index 789c3819f..32126561e 100644
--- a/frontend/tests/unit/clients-page.spec.ts
+++ b/frontend/tests/unit/clients-page.spec.ts
@@ -87,6 +87,27 @@ describe('Clients page', () => {
expect(wrapper.find('a[href="/usage?client=cursor"]').exists()).toBe(true)
})
+ it('exposes a keyboard-operable expander button whose aria-expanded flips (I7)', async () => {
+ const router = makeRouter()
+ await router.push('/clients')
+ await router.isReady()
+ const wrapper = mount(Clients, {
+ global: { plugins: [router], stubs: { ClientConnectList: true, AgentTokens: true, ModeSwitcher: true } },
+ })
+ await flushPromises()
+ const btn = wrapper.find('[data-test="client-expand-cursor"]')
+ expect(btn.element.tagName).toBe('BUTTON')
+ expect(btn.attributes('aria-expanded')).toBe('false')
+ expect(btn.attributes('aria-label')).toContain('Show details for')
+ await btn.trigger('click')
+ await flushPromises()
+ expect(btn.attributes('aria-expanded')).toBe('true')
+ expect(api.getClient).toHaveBeenCalledTimes(1)
+ await btn.trigger('click')
+ await flushPromises()
+ expect(btn.attributes('aria-expanded')).toBe('false')
+ })
+
it('reads the tab from the URL and preserves unrelated query parameters when changing tabs', async () => {
const router = makeRouter()
await router.push('/clients?tab=endpoint&token=agent-1')
diff --git a/frontend/tests/unit/server-detail-quarantine-tools-empty.spec.ts b/frontend/tests/unit/server-detail-quarantine-tools-empty.spec.ts
index bea59b01b..ac2685dde 100644
--- a/frontend/tests/unit/server-detail-quarantine-tools-empty.spec.ts
+++ b/frontend/tests/unit/server-detail-quarantine-tools-empty.spec.ts
@@ -77,6 +77,10 @@ const quarantined = (extra: ServerOverrides = {}): ServerOverrides => ({
...extra,
})
+function empty_text(w: any): string {
+ return w.find('[data-test="server-tools-empty"]').text()
+}
+
describe('ServerDetail — Tools tab empty state on a quarantined server (F08)', () => {
beforeEach(() => {
setActivePinia(createPinia())
@@ -131,15 +135,16 @@ describe('ServerDetail — Tools tab empty state on a quarantined server (F08)',
expect(text).not.toMatch(/\d/)
})
- it('offers a way through to the Security tab where the findings live', async () => {
+ it('offers a way through to the Review tab', async () => {
const wrapper = await mountDetail(
quarantined({ quarantine: { pending_count: 2, changed_count: 0, blocked_count: 0 } })
)
const cta = wrapper.find('[data-test="server-tools-empty-security"]')
expect(cta.exists()).toBe(true)
+ expect(empty_text(wrapper)).not.toContain('Security tab')
await cta.trigger('click')
await flushPromises()
- expect(wrapper.find('[data-test="security-tab"]').classes()).toContain('tab-active')
+ expect(wrapper.find('[data-test="review-tab"]').classes()).toContain('tab-active')
})
// Integrated-review finding. The withheld copy told the user to "approve the