fix(ui): изолировать операции Firewall по источнику

tests/e2e/firewall-context.spec.ts

@@ -0,0 +1,91 @@
+import { test, expect, type Page } from "@playwright/test"
+
+const rule = { id: "rule-1", rosId: "*1", serverId: "1", serverName: "Роутер", family: "ip", table: "filter", chain: "forward", action: "accept", proto: "tcp", src: "", dst: "", port: "443", iface: "", comment: "Контекст правило", enabled: true, hits: 1 }
+const headers = { "access-control-allow-origin": "*", "access-control-allow-methods": "GET,POST,PUT,PATCH,DELETE,OPTIONS", "access-control-allow-headers": "Content-Type,Authorization" }
+async function setup(page: Page) {
+  let oldReads = 0
+  await page.route("**/health", route => route.fulfill({ headers, json: { ok: true } }))
+  await page.route("**/api/**", route => {
+    const url = new URL(route.request().url())
+    if (url.pathname === "/api/firewall/all" && url.port === "8000") oldReads++
+    return route.fulfill({ headers, json: url.pathname === "/api/auth/config" ? { required: false }
+      : url.pathname === "/api/firewall/all" ? { rules: [{ ...rule, port: url.port === "8101" ? "8443" : "443" }], addressLists: [] }
+      : url.pathname === "/api/servers" ? [{ id: 1, name: "Роутер", host: "192.0.2.1", type: "exit-node", enabled: true, country: "RU", status: "online" }] : {} })
+  })
+  await page.goto("/settings")
+  await page.getByRole("link", { name: "Firewall", exact: true }).click()
+  await expect(page.locator("tr[data-row-id]")).toHaveCount(1)
+  return () => oldReads
+}
+async function changeBackend(page: Page) {
+  const field = page.getByPlaceholder("http://localhost:8000")
+  await field.fill("http://localhost:8101")
+  await field.press("Enter")
+}
+async function flush(page: Page) {
+  await page.evaluate(() => new Promise<void>(resolve => requestAnimationFrame(() => requestAnimationFrame(() => resolve()))))
+}
+
+for (const fails of [false, true]) {
+  test(`Firewall: смена backend игнорирует старое чтение ${fails}`, async ({ page }) => {
+    await setup(page)
+    let release: (() => void) | undefined
+    const gate = new Promise<void>(resolve => { release = resolve })
+    let started = false
+    await page.route("**/api/firewall/all", async route => {
+      if (new URL(route.request().url()).port !== "8000") return route.fallback()
+      started = true
+      await gate
+      return route.fulfill(fails ? { headers, status: 500, json: { error: "Ошибка старого источника тест" } } : { headers, json: { rules: [], addressLists: [] } })
+    })
+    await page.getByRole("button", { name: "Обновить", exact: true }).click()
+    await expect.poll(() => started).toBe(true)
+    await page.goBack()
+    await expect(page).toHaveURL(/settings/)
+    await changeBackend(page)
+    await page.getByRole("link", { name: "Firewall", exact: true }).click()
+    await expect(page.locator("tr[data-row-id]")).toContainText("8443")
+    const response = page.waitForResponse(r => r.url().includes(":8000/api/firewall/all"))
+    release!()
+    await (await response).finished()
+    await flush(page)
+    await expect(page.locator("tr[data-row-id]")).toHaveCount(1)
+    await expect(page.locator("tr[data-row-id]")).toContainText("8443")
+    await expect(page.getByRole("alert").filter({ hasText: "Ошибка старого источника" })).toHaveCount(0)
+  })
+}
+
+for (const change of ["backend", "mode"]) {
+  test(`Firewall: позднее удаление не меняет новый контекст ${change}`, async ({ page }) => {
+    const oldReads = await setup(page)
+    let release: (() => void) | undefined
+    const gate = new Promise<void>(resolve => { release = resolve })
+    let attempts = 0
+    await page.route("**/api/firewall/rules", async route => {
+      if (route.request().method() === "OPTIONS") return route.fulfill({ headers, json: {} })
+      attempts++
+      await gate
+      return route.fulfill({ headers, json: { ok: true } })
+    })
+    await page.getByRole("button", { name: "Действия: forward accept", exact: true }).click()
+    await page.getByRole("menuitem", { name: "Удалить правило", exact: true }).click()
+    await page.getByRole("alertdialog").getByRole("button", { name: "Удалить", exact: true }).click()
+    await expect.poll(() => attempts).toBe(1)
+    const readsBefore = oldReads()
+    await page.goBack()
+    await expect(page).toHaveURL(/settings/)
+    if (change === "backend") await changeBackend(page)
+    else await page.getByRole("button", { name: "Моковые", exact: true }).click()
+    await page.getByRole("link", { name: "Firewall", exact: true }).click()
+    if (change === "backend") await expect(page.locator("tr[data-row-id]")).toContainText("8443")
+    else await expect(page.locator('tr[data-row-id="rule-1"]')).toHaveCount(0)
+    const response = page.waitForResponse(r => r.url().includes(":8000/api/firewall/rules") && r.request().method() === "DELETE")
+    release!()
+    await (await response).finished()
+    await flush(page)
+    expect(oldReads()).toBe(readsBefore)
+    await expect(page.getByText("Правило удалено", { exact: true })).toHaveCount(0)
+    await expect(page.getByRole("alertdialog")).toHaveCount(0)
+    await expect(page.getByRole("button", { name: "Новое правило", exact: true })).toBeEnabled()
+  })
+}