Initial commit: Port Nimara CRM (Layers 0-4)

Full CRM rebuild with Next.js 15, TypeScript, Tailwind, Drizzle ORM,
PostgreSQL, Redis, BullMQ, MinIO, and Socket.io. Includes 461 source
files covering clients, berths, interests/pipeline, documents/EOI,
expenses/invoices, email, notifications, dashboard, admin, and
client portal. CI/CD via Gitea Actions with Docker builds.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

tests/e2e/smoke/19-system-monitoring.spec.ts

@@ -0,0 +1,82 @@
+import { test, expect } from '@playwright/test';
+import { login, navigateTo, PORT_SLUG } from './helpers';
+
+test.describe('System Monitoring', () => {
+  // Test 43: Monitoring dashboard shows health checks
+  test('system monitoring shows service health', async ({ page }) => {
+    await login(page, 'super_admin');
+    await navigateTo(page, '/admin/monitoring');
+    await page.waitForTimeout(3_000);
+
+    // Should see health status indicators for services
+    const pgStatus = page.getByText(/postgres/i).first();
+    const redisStatus = page.getByText(/redis/i).first();
+    const minioStatus = page.getByText(/minio/i).first();
+
+    await expect(pgStatus).toBeVisible({ timeout: 10_000 });
+    await expect(redisStatus).toBeVisible({ timeout: 5_000 });
+    await expect(minioStatus).toBeVisible({ timeout: 5_000 });
+
+    // Should show healthy/degraded/down indicators
+    const healthIndicators = page.getByText(/healthy|degraded|down/i);
+    const indicatorCount = await healthIndicators.count();
+    expect(indicatorCount).toBeGreaterThanOrEqual(1);
+  });
+
+  // Test 44: All 10 BullMQ queues listed
+  test('all BullMQ queues listed with stats', async ({ page }) => {
+    await login(page, 'super_admin');
+    await navigateTo(page, '/admin/monitoring');
+    await page.waitForTimeout(3_000);
+
+    // Expected queue names from QUEUE_CONFIGS
+    const queueNames = [
+      'email', 'documents', 'notifications', 'import',
+      'export', 'reports', 'webhooks', 'maintenance', 'ai', 'bulk',
+    ];
+
+    let foundCount = 0;
+    for (const name of queueNames) {
+      const queueCard = page.getByText(name, { exact: false }).first();
+      if (await queueCard.isVisible({ timeout: 2_000 }).catch(() => false)) {
+        foundCount++;
+      }
+    }
+
+    // Should find most/all queues (at least 8 out of 10)
+    expect(foundCount).toBeGreaterThanOrEqual(8);
+
+    // Each queue should show numeric stats (waiting, active, failed counts)
+    const numericStats = page.locator('[class*="queue"] [class*="stat"], [class*="queue"] span').filter({
+      hasText: /^\d+$/,
+    });
+    const statsCount = await numericStats.count();
+    expect(statsCount).toBeGreaterThan(0);
+  });
+
+  // Test 45: Sales agent cannot access monitoring
+  test('sales agent blocked from monitoring', async ({ page }) => {
+    await login(page, 'sales_agent');
+    await page.waitForTimeout(2_000);
+
+    // Try to access monitoring via API
+    const healthRes = await page.request.get('/api/v1/admin/health');
+    // Should be 403 (forbidden) for non-super_admin
+    expect([401, 403].includes(healthRes.status())).toBeTruthy();
+
+    const queuesRes = await page.request.get('/api/v1/admin/queues');
+    expect([401, 403].includes(queuesRes.status())).toBeTruthy();
+
+    // Try accessing the page directly
+    await navigateTo(page, '/admin/monitoring');
+    await page.waitForTimeout(3_000);
+
+    // Should see an error/blocked state or be redirected
+    const url = page.url();
+    const hasPermError = await page.getByText(/permission|forbidden|access denied|not authorized/i)
+      .isVisible({ timeout: 3_000 }).catch(() => false);
+    const wasRedirected = !url.includes('/admin/monitoring');
+
+    expect(hasPermError || wasRedirected).toBeTruthy();
+  });
+});