import { readFileSync } from 'node:fs' import { describe, expect, it } from 'vitest' const source = readFileSync( new URL('./AdminPanel.vue', import.meta.url), 'utf8', ) const app = readFileSync(new URL('../App.vue', import.meta.url), 'utf8') const apps = readFileSync(new URL('../config/apps.ts', import.meta.url), 'utf8') const store = readFileSync( new URL('../stores/admin.ts', import.meta.url), 'utf8', ) const server = readFileSync( new URL('../../../sky_phone/source/server/admin.lua', import.meta.url), 'utf8', ) const phoneServer = readFileSync( new URL('../../../sky_phone/source/server/phone.lua', import.meta.url), 'utf8', ) const persistenceServer = readFileSync( new URL( '../../../sky_phone/source/server/phone_persistence.lua', import.meta.url, ), 'utf8', ) const simServer = readFileSync( new URL('../../../sky_phone/source/server/sim.lua', import.meta.url), 'utf8', ) const phoneClient = readFileSync( new URL('../../../sky_phone/source/client/main.lua', import.meta.url), 'utf8', ) const focusClient = readFileSync( new URL('../../../sky_phone/source/client/focus.lua', import.meta.url), 'utf8', ) const bridge = readFileSync( new URL( '../../../sky_phone/source/client/nui_server_bridge.lua', import.meta.url, ), 'utf8', ) const config = readFileSync( new URL('../../../sky_phone/config/config.lua', import.meta.url), 'utf8', ) const schema = readFileSync( new URL('../../../sky_phone/sql/install.sql', import.meta.url), 'utf8', ) const manifest = readFileSync( new URL('../../../sky_phone/fxmanifest.lua', import.meta.url), 'utf8', ) const configuratorServer = readFileSync( new URL( '../../../sky_phone/source/server/phone_configurator.lua', import.meta.url, ), 'utf8', ) const configuratorClient = readFileSync( new URL( '../../../sky_phone/source/client/phone_configurator.lua', import.meta.url, ), 'utf8', ) const configuratorValueEditor = readFileSync( new URL('./AdminConfigValueEditor.vue', import.meta.url), 'utf8', ) describe('standalone admin panel contracts', () => { it('renders as a dedicated full-screen editor outside the phone shell', () => { expect(apps).not.toContain("id: 'admin'") expect(app).toContain("event.data?.type === 'admin:open'") expect(app).toContain('v-if="adminPanelOpen"') expect(app).toContain(' { expect(source).toContain('background: transparent') expect(source).toContain('width: min(76vw, 1220px)') expect(source).toContain('height: min(74vh, 700px)') expect(source).toContain('--admin-row-hover: linear-gradient') expect(source).toContain('--admin-row-active: linear-gradient') expect(source).toContain('background: var(--admin-nav-active)') expect(source).not.toContain('admin-panel-brand__mark') expect(source).not.toContain('admin-panel-profile-heading__status') expect(source).not.toContain('backdrop-filter: blur(2px)') for (const tab of [ 'overview', 'players', 'devices', 'apps', 'accounts', 'messages', 'calls', 'moderation', 'audit', 'configurator', ]) { expect(source).toContain(`selectTab('${tab}')`) expect(source).toContain(`t('tabs.${tab}')`) } }) it('removes manual reload and applies a persistent global accent choice', () => { expect(source).not.toContain(' { expect(source).toContain('const drafts = ref<') expect(source).toContain('@click="saveChanges"') expect(source).toContain("t('editor.noAutoSave')") expect(store).toContain("'admin:save-apps'") expect(store).not.toContain("'admin:set-app'") expect(server).toContain( 'Bridge.Callbacks.Register("sky_phone:admin:save-apps"', ) }) it('connects every operation through the standard NUI callback bridge', () => { expect(bridge).toContain('admin = [[') for (const endpoint of [ 'admin:bootstrap', 'admin:player', 'admin:save-apps', 'admin:reveal-password', 'admin:activity', 'admin:reset-passcode', 'admin:change-number', 'admin:factory-reset', 'admin:configurator', 'admin:save-configurator', ]) { expect(store).toContain(endpoint) } }) it('protects activity views and device moderation with ownership and audit checks', () => { for (const endpoint of [ 'activity', 'reset-passcode', 'change-number', 'factory-reset', ]) { expect(server).toContain( `Bridge.Callbacks.Register("sky_phone:admin:${endpoint}"`, ) } expect(server).toContain('data.kind ~= "messages"') expect(server).toContain('data.kind ~= "calls"') expect(server).toContain('"view_messages"') expect(server).toContain('"view_calls"') expect(server).toContain('"reset_passcode"') expect(server).toContain('"change_number"') expect(server).toContain('"factory_reset"') expect(simServer).toContain('function SkyPhoneSim.ChangeNumber(') expect(simServer).toContain('UPDATE IGNORE `sky_phone_sims`') expect(persistenceServer).toContain( 'function SkyPhonePersistence.FactoryReset(imei)', ) }) it('authorizes every server request without requiring a phone session', () => { expect(server).not.toContain('SkyPhone.RequireSession(source)') expect(server).toContain( 'Bridge.Framework.HasAdminGroup(source, Config.AdminPanel.AdminGroups)', ) expect(server).toContain('Config.AdminPanel.ReadRequestsPerMinute') expect(server).toContain('Config.AdminPanel.ActionRequestsPerMinute') expect(server).toContain('Config.AdminPanel.CredentialRevealsPerMinute') expect(config).toContain('Config.AdminPanel = {') }) it('opens directly from the configurable command with dedicated focus', () => { expect(config).toContain('Command = "phonepanel"') expect(server).toContain( 'RegisterCommand(Config.AdminPanel.Command, function(command_source)', ) expect(server).toContain( 'TriggerClientEvent("sky_phone:admin:launch", player_source)', ) expect(phoneServer).not.toContain( 'RegisterCommand(Config.AdminPanel.Command', ) expect(phoneClient).toContain('RegisterNetEvent("sky_phone:admin:launch"') expect(phoneClient).toContain('SkyPhoneFocus.SetAdminPanel(true)') expect(focusClient).toContain('function SkyPhoneFocus.SetAdminPanel(open)') }) it('validates ownership, app policy, and revision before a batch mutation', () => { expect(server).toContain('find_owned_device(target_source, data.imei)') expect(server).toContain('app_metadata(change.appId)') expect(server).toContain('error = "device_not_owned"') expect(server).toContain('error = "app_protected"') expect(server).toContain('AND `revision` = ?') expect(server).toContain('SkyPhone.RefreshDevice(data.imei)') }) it('gates plaintext account reveals behind confirmation and audit logging', () => { expect(source).toContain('revealDialogImei') expect(source).toContain("t('credentials.revealTitle')") expect(server).toContain('"reveal_account_password"') expect(server).toContain('write_audit(') expect(server).not.toContain('passcode_hash` AS') expect(schema).toContain( 'CREATE TABLE IF NOT EXISTS `sky_phone_admin_audit`', ) }) it('loads the SQL phone configurator before framework-owned configuration is read', () => { expect(config).toMatch( /Config\.PhoneConfigurator\s*=\s*\{[\s\S]*?Enabled\s*=\s*false[\s\S]*?Config\.Bridge\s*=/, ) expect(schema).toContain( 'CREATE TABLE IF NOT EXISTS `sky_phone_configurator`', ) expect( manifest.indexOf("'source/server/phone_configurator.lua'"), ).toBeLessThan(manifest.indexOf("'source/bridge/server/framework.lua'")) expect( manifest.indexOf("'source/client/phone_configurator.lua'"), ).toBeLessThan(manifest.indexOf("'source/bridge/client/framework.lua'")) expect(configuratorServer).toContain('AND `revision` = ?') expect(configuratorServer).toContain('configurator_enabled') expect(configuratorServer).toMatch( /for key, value in pairs\(Config\)[\s\S]*?key ~= "Media"[\s\S]*?key ~= "PhoneConfigurator"/, ) expect(configuratorServer).toContain( 'default_media = serialize_value(Config.Media)', ) expect(configuratorServer).toContain( 'build_sections("config", stored_config', ) expect(configuratorServer).toContain('build_sections("media", stored_media') expect(configuratorServer).toContain('sensitive_path') expect(configuratorServer).toContain('restore_redacted_values') expect(configuratorServer).not.toContain('Config.Media = client_payload') expect(configuratorClient).toContain( 'Bridge.Callbacks.Trigger("sky_phone:configurator:runtime"', ) expect(source).toContain('class="admin-panel-rail__configurator"') expect(source).toContain( '.admin-panel-rail .admin-panel-rail__configurator', ) expect(source).toContain('