Enhance user plan management and update related endpoints

- Added new configuration options for user plans in `.env.example`, including `Plans__MaxCustomConfigCount` and `Plans__MinCustomConfigCount`.
- Introduced `MapPlanEndpoints` in `Program.cs` to handle plan-related API routes.
- Implemented `SetUserPlan` endpoint in `RoleEndpoints` to allow admins to assign plans to users.
- Removed deprecated role request approval endpoints from `AdminSupportEndpoints`.
- Updated `ITelegramNotifier` and related classes to reflect changes in role request handling and payment notifications.
- Refactored role management commands to remove `MaxConfigs` and focus on `MaxIpLimit` and billing settings.
- Enhanced billing request handling to accommodate plan changes instead of role changes.
- Updated various interfaces and command handlers to support new plan management features.

backend/tests/PnvPanel.Application.Tests/Admin/Billing/ConfirmPaymentRequestCommandHandlerTests.cs

@@ -31,7 +31,8 @@ public class ConfirmPaymentRequestCommandHandlerTests
             "premium",
             IsActivated: true,
             IsBlocked: false,
-            MaxConfigs: 5,
+            ConfigQuota: 5,
+            PlanId: null,
             MaxIpLimit: 3,
             SubscriptionToken: "sub-token",
             BillingEnabled: true,
@@ -225,13 +226,13 @@ public class ConfirmPaymentRequestCommandHandlerTests
     }
 
     [Fact]
-    public async Task Handle_WhenRoleChangeTopUp_ConfirmsWithoutExtendingPaidUntil()
+    public async Task Handle_WhenPlanChangeTopUp_ConfirmsWithoutExtendingPaidUntil()
     {
         using var dbContext = InMemoryDbContextFactory.Create();
         var adminId = Guid.NewGuid();
         var userId = Guid.NewGuid();
         var existingPaidUntil = DateTimeOffset.UtcNow.AddDays(20);
-        var request = PaymentRequest.CreateRoleChangeTopUp(userId, 1200);
+        var request = PaymentRequest.CreatePlanChangeTopUp(userId, 1200);
         request.MarkPaymentSent();
         dbContext.PaymentRequests.Add(request);
         await dbContext.SaveChangesAsync(CancellationToken.None);

backend/tests/PnvPanel.Application.Tests/Admin/Billing/GrantBillingGiftCommandHandlerTests.cs

@@ -28,7 +28,8 @@ public class GrantBillingGiftCommandHandlerTests
             "premium",
             IsActivated: true,
             IsBlocked: false,
-            MaxConfigs: 5,
+            ConfigQuota: 5,
+            PlanId: null,
             MaxIpLimit: 3,
             SubscriptionToken: "sub-token",
             BillingEnabled: billingEnabled,

backend/tests/PnvPanel.Application.Tests/Admin/Billing/ListPaymentRequestsQueryHandlerTests.cs

@@ -17,7 +17,7 @@ public class ListPaymentRequestsQueryHandlerTests
         using var dbContext = InMemoryDbContextFactory.Create();
         var userId = Guid.NewGuid();
         var subscription = PaymentRequest.Create(userId, PaymentPeriod.Quarter, 1500);
-        var topUp = PaymentRequest.CreateRoleChangeTopUp(userId, 500);
+        var topUp = PaymentRequest.CreatePlanChangeTopUp(userId, 500);
         dbContext.PaymentRequests.AddRange(subscription, topUp);
         await dbContext.SaveChangesAsync(CancellationToken.None);
 
@@ -30,7 +30,7 @@ public class ListPaymentRequestsQueryHandlerTests
         var result = await handler.Handle(
             new ListPaymentRequestsQuery(
                 StatusFilter: null,
-                KindFilter: PaymentRequestKind.RoleChangeTopUp,
+                KindFilter: PaymentRequestKind.PlanChangeTopUp,
                 Search: null,
                 Page: 1,
                 PageSize: 20

backend/tests/PnvPanel.Application.Tests/Admin/Billing/RejectPaymentRequestCommandHandlerTests.cs

@@ -42,7 +42,8 @@ public class RejectPaymentRequestCommandHandlerTests
             "premium",
             IsActivated: true,
             IsBlocked: false,
-            MaxConfigs: 5,
+            ConfigQuota: 5,
+            PlanId: null,
             MaxIpLimit: 3,
             SubscriptionToken: "sub-token",
             BillingEnabled: true,

backend/tests/PnvPanel.Application.Tests/Admin/Maintenance/FactoryResetCommandHandlerTests.cs

@@ -72,8 +72,8 @@ public class FactoryResetCommandHandlerTests
             .Returns(
                 new List<RoleDto>
                 {
-                    new(adminRoleId, "admin", -1, -1, IsSystem: true, BillingEnabled: false),
-                    new(customRoleId, "premium", 10, 5, IsSystem: false, BillingEnabled: false),
+                    new(adminRoleId, "admin", -1, IsSystem: true, BillingEnabled: false),
+                    new(customRoleId, "premium", 5, IsSystem: false, BillingEnabled: false),
                 }
             );
         _roleService

backend/tests/PnvPanel.Application.Tests/Admin/Plans/PlanCommandHandlerTests.cs

@@ -0,0 +1,129 @@
+using PnvPanel.Application.Admin.Plans;
+using PnvPanel.Application.Tests.TestSupport;
+using PnvPanel.Domain.Plans;
+using Xunit;
+
+namespace PnvPanel.Application.Tests.Admin.Plans;
+
+public class PlanCommandHandlerTests
+{
+    [Fact]
+    public async Task Create_AddsPlan()
+    {
+        using var dbContext = InMemoryDbContextFactory.Create();
+        var handler = new CreatePlanCommandHandler(dbContext);
+
+        var result = await handler.Handle(
+            new CreatePlanCommand("Стандарт", 3, 0),
+            CancellationToken.None
+        );
+        await dbContext.SaveChangesAsync(CancellationToken.None);
+
+        Assert.True(result.IsSuccess);
+        Assert.Equal("Стандарт", result.Value.Name);
+        Assert.Equal(3, result.Value.ConfigCount);
+        Assert.True(result.Value.IsEnabled);
+        Assert.NotNull(await dbContext.Plans.FindAsync([result.Value.Id], CancellationToken.None));
+    }
+
+    [Fact]
+    public async Task Update_WhenNotFound_ReturnsNotFound()
+    {
+        using var dbContext = InMemoryDbContextFactory.Create();
+        var handler = new UpdatePlanCommandHandler(dbContext);
+
+        var result = await handler.Handle(
+            new UpdatePlanCommand(Guid.NewGuid(), "Плюс", 6, 1, true),
+            CancellationToken.None
+        );
+
+        Assert.False(result.IsSuccess);
+        Assert.Equal(PnvPanel.Application.Plans.PlanErrors.NotFound, result.Error);
+    }
+
+    [Fact]
+    public async Task Update_WhenFound_UpdatesFields()
+    {
+        using var dbContext = InMemoryDbContextFactory.Create();
+        var plan = Plan.Create("Стандарт", 3, 0);
+        dbContext.Plans.Add(plan);
+        await dbContext.SaveChangesAsync(CancellationToken.None);
+
+        var handler = new UpdatePlanCommandHandler(dbContext);
+        var result = await handler.Handle(
+            new UpdatePlanCommand(plan.Id, "Плюс", 6, 1, false),
+            CancellationToken.None
+        );
+
+        Assert.True(result.IsSuccess);
+        Assert.Equal("Плюс", result.Value.Name);
+        Assert.Equal(6, result.Value.ConfigCount);
+        Assert.False(result.Value.IsEnabled);
+    }
+
+    [Fact]
+    public async Task Delete_WhenNotFound_ReturnsNotFound()
+    {
+        using var dbContext = InMemoryDbContextFactory.Create();
+        var handler = new DeletePlanCommandHandler(dbContext);
+
+        var result = await handler.Handle(
+            new DeletePlanCommand(Guid.NewGuid()),
+            CancellationToken.None
+        );
+
+        Assert.False(result.IsSuccess);
+        Assert.Equal(PnvPanel.Application.Plans.PlanErrors.NotFound, result.Error);
+    }
+
+    [Fact]
+    public async Task Delete_WhenFound_RemovesPlan()
+    {
+        using var dbContext = InMemoryDbContextFactory.Create();
+        var plan = Plan.Create("Стандарт", 3, 0);
+        dbContext.Plans.Add(plan);
+        await dbContext.SaveChangesAsync(CancellationToken.None);
+
+        var handler = new DeletePlanCommandHandler(dbContext);
+        var result = await handler.Handle(new DeletePlanCommand(plan.Id), CancellationToken.None);
+        await dbContext.SaveChangesAsync(CancellationToken.None);
+
+        Assert.True(result.IsSuccess);
+        Assert.Null(await dbContext.Plans.FindAsync([plan.Id], CancellationToken.None));
+    }
+
+    [Fact]
+    public async Task ListAdmin_ReturnsAllPlansOrderedBySortOrder()
+    {
+        using var dbContext = InMemoryDbContextFactory.Create();
+        dbContext.Plans.AddRange(
+            Plan.Create("Про", 9, 2),
+            Plan.Create("Стандарт", 3, 0),
+            Plan.Create("Плюс", 6, 1)
+        );
+        await dbContext.SaveChangesAsync(CancellationToken.None);
+
+        var handler = new ListAdminPlansQueryHandler(dbContext);
+        var result = await handler.Handle(new ListAdminPlansQuery(), CancellationToken.None);
+
+        Assert.True(result.IsSuccess);
+        Assert.Equal(["Стандарт", "Плюс", "Про"], result.Value.Select(p => p.Name));
+    }
+
+    [Fact]
+    public async Task ListPublic_OnlyReturnsEnabledPlans()
+    {
+        using var dbContext = InMemoryDbContextFactory.Create();
+        var disabled = Plan.Create("Скрытый", 12, 3);
+        disabled.Update(disabled.Name, disabled.ConfigCount, disabled.SortOrder, isEnabled: false);
+        dbContext.Plans.AddRange(Plan.Create("Стандарт", 3, 0), disabled);
+        await dbContext.SaveChangesAsync(CancellationToken.None);
+
+        var handler = new PnvPanel.Application.Plans.ListPlansQueryHandler(dbContext);
+        var result = await handler.Handle(new PnvPanel.Application.Plans.ListPlansQuery(), CancellationToken.None);
+
+        Assert.True(result.IsSuccess);
+        Assert.Single(result.Value);
+        Assert.Equal("Стандарт", result.Value[0].Name);
+    }
+}

backend/tests/PnvPanel.Application.Tests/Admin/Support/ApproveExtensionRequestCommandHandlerTests.cs

@@ -31,7 +31,8 @@ public class ApproveExtensionRequestCommandHandlerTests
             "premium",
             IsActivated: true,
             IsBlocked: false,
-            MaxConfigs: 5,
+            ConfigQuota: 5,
+            PlanId: null,
             MaxIpLimit: 3,
             SubscriptionToken: "sub-token",
             BillingEnabled: true,

backend/tests/PnvPanel.Application.Tests/Admin/Support/ApproveRoleRequestCommandHandlerTests.cs

@@ -1,265 +0,0 @@
-using NSubstitute;
-using PnvPanel.Application.Admin.Roles;
-using PnvPanel.Application.Admin.Support;
-using PnvPanel.Application.Common.Interfaces;
-using PnvPanel.Application.Common.Messaging;
-using PnvPanel.Application.Common.Models;
-using PnvPanel.Application.Support;
-using PnvPanel.Application.Tests.TestSupport;
-using PnvPanel.Domain.Billing;
-using PnvPanel.Domain.Support;
-using Xunit;
-
-namespace PnvPanel.Application.Tests.Admin.Support;
-
-public class ApproveRoleRequestCommandHandlerTests
-{
-    private readonly IRoleService _roleService = Substitute.For<IRoleService>();
-    private readonly IIdentityService _identityService = Substitute.For<IIdentityService>();
-    private readonly IRealtimeNotifier _notifier = Substitute.For<IRealtimeNotifier>();
-    private readonly ITelegramNotifier _telegramNotifier = Substitute.For<ITelegramNotifier>();
-
-    private ApproveRoleRequestCommandHandler CreateHandler(IAppDbContext dbContext, ICurrentUser currentUser) =>
-        new(dbContext, _roleService, _identityService, _notifier, _telegramNotifier, currentUser);
-
-    private static CurrentUserProfile Profile(
-        Guid userId,
-        int maxConfigs,
-        DateTimeOffset? billingPaidUntil = null
-    ) =>
-        new(
-            userId,
-            "alice",
-            Guid.NewGuid(),
-            "old-role",
-            IsActivated: true,
-            IsBlocked: false,
-            MaxConfigs: maxConfigs,
-            MaxIpLimit: 3,
-            SubscriptionToken: "sub-token",
-            BillingEnabled: billingPaidUntil != null,
-            BillingPaidUntil: billingPaidUntil,
-            BillingSuspended: false
-        );
-
-    [Fact]
-    public async Task Handle_ForNewRoleRequest_CreatesRoleAssignsAndResolves()
-    {
-        using var dbContext = InMemoryDbContextFactory.Create();
-        var userId = Guid.NewGuid();
-        var ticket = SupportTicket.CreateRoleRequestForNewRole(userId, "premium", 10, 5);
-        dbContext.SupportTickets.Add(ticket);
-        await dbContext.SaveChangesAsync(CancellationToken.None);
-
-        var newRoleId = Guid.NewGuid();
-        _roleService
-            .CreateRoleAsync("premium", 10, 5, false, Arg.Any<CancellationToken>())
-            .Returns(Result.Success(new RoleDto(newRoleId, "premium", 10, 5, false, false)));
-        _roleService
-            .ChangeUserRoleAsync(userId, newRoleId, Arg.Any<CancellationToken>())
-            .Returns(Result.Success());
-
-        var currentUser = FakeCurrentUser.Authenticated(Guid.NewGuid(), "admin");
-        var handler = CreateHandler(dbContext, currentUser);
-
-        var result = await handler.Handle(
-            new ApproveRoleRequestCommand(ticket.Id),
-            CancellationToken.None
-        );
-
-        Assert.True(result.IsSuccess);
-        Assert.Equal(TicketStatus.Resolved, ticket.Status);
-        await _roleService
-            .Received(1)
-            .CreateRoleAsync("premium", 10, 5, false, Arg.Any<CancellationToken>());
-        await _roleService
-            .Received(1)
-            .ChangeUserRoleAsync(userId, newRoleId, Arg.Any<CancellationToken>());
-        await _telegramNotifier
-            .Received(1)
-            .NotifyUserAsync(
-                userId,
-                Arg.Any<string>(),
-                Arg.Any<string?>(),
-                Arg.Any<CancellationToken>()
-            );
-    }
-
-    [Fact]
-    public async Task Handle_ForExistingRoleRequest_SkipsRoleCreation()
-    {
-        using var dbContext = InMemoryDbContextFactory.Create();
-        var userId = Guid.NewGuid();
-        var roleId = Guid.NewGuid();
-        var ticket = SupportTicket.CreateRoleRequestForExistingRole(userId, roleId);
-        dbContext.SupportTickets.Add(ticket);
-        await dbContext.SaveChangesAsync(CancellationToken.None);
-
-        _roleService
-            .ListRolesAsync(Arg.Any<CancellationToken>())
-            .Returns(new List<RoleDto> { new(roleId, "premium", 10, 5, false, false) });
-        _roleService
-            .ChangeUserRoleAsync(userId, roleId, Arg.Any<CancellationToken>())
-            .Returns(Result.Success());
-
-        var currentUser = FakeCurrentUser.Authenticated(Guid.NewGuid());
-        var handler = CreateHandler(dbContext, currentUser);
-
-        var result = await handler.Handle(
-            new ApproveRoleRequestCommand(ticket.Id),
-            CancellationToken.None
-        );
-
-        Assert.True(result.IsSuccess);
-        await _roleService
-            .DidNotReceive()
-            .CreateRoleAsync(
-                Arg.Any<string>(),
-                Arg.Any<int>(),
-                Arg.Any<int>(),
-                Arg.Any<bool>(),
-                Arg.Any<CancellationToken>()
-            );
-    }
-
-    [Fact]
-    public async Task Handle_WhenNotRoleRequestType_ReturnsError()
-    {
-        using var dbContext = InMemoryDbContextFactory.Create();
-        var ticket = SupportTicket.CreateBugReport(Guid.NewGuid());
-        dbContext.SupportTickets.Add(ticket);
-        await dbContext.SaveChangesAsync(CancellationToken.None);
-
-        var currentUser = FakeCurrentUser.Authenticated(Guid.NewGuid());
-        var handler = CreateHandler(dbContext, currentUser);
-
-        var result = await handler.Handle(
-            new ApproveRoleRequestCommand(ticket.Id),
-            CancellationToken.None
-        );
-
-        Assert.False(result.IsSuccess);
-        Assert.Equal(SupportErrors.NotRoleRequest, result.Error);
-    }
-
-    [Fact]
-    public async Task Handle_WhenTicketIsOwnedByAdmin_StillApproves()
-    {
-        // Одобрить свою же заявку можно — единственный реальный риск (снять admin с последнего
-        // администратора) ловит RoleService.ChangeUserRoleAsync, а не этот хендлер (см. соседний тест).
-        using var dbContext = InMemoryDbContextFactory.Create();
-        var adminId = Guid.NewGuid();
-        var roleId = Guid.NewGuid();
-        var ticket = SupportTicket.CreateRoleRequestForExistingRole(adminId, roleId);
-        dbContext.SupportTickets.Add(ticket);
-        await dbContext.SaveChangesAsync(CancellationToken.None);
-
-        _roleService
-            .ListRolesAsync(Arg.Any<CancellationToken>())
-            .Returns(new List<RoleDto> { new(roleId, "premium", 10, 5, false, false) });
-        _roleService
-            .ChangeUserRoleAsync(adminId, roleId, Arg.Any<CancellationToken>())
-            .Returns(Result.Success());
-
-        var currentUser = FakeCurrentUser.Authenticated(adminId, "admin");
-        var handler = CreateHandler(dbContext, currentUser);
-
-        var result = await handler.Handle(
-            new ApproveRoleRequestCommand(ticket.Id),
-            CancellationToken.None
-        );
-
-        Assert.True(result.IsSuccess);
-        Assert.Equal(TicketStatus.Resolved, ticket.Status);
-    }
-
-    [Fact]
-    public async Task Handle_WhenRoleServiceRefusesLastAdminDowngrade_PropagatesFailure()
-    {
-        using var dbContext = InMemoryDbContextFactory.Create();
-        var adminId = Guid.NewGuid();
-        var roleId = Guid.NewGuid();
-        var ticket = SupportTicket.CreateRoleRequestForExistingRole(adminId, roleId);
-        dbContext.SupportTickets.Add(ticket);
-        await dbContext.SaveChangesAsync(CancellationToken.None);
-
-        _roleService
-            .ListRolesAsync(Arg.Any<CancellationToken>())
-            .Returns(new List<RoleDto> { new(roleId, "premium", 10, 5, false, false) });
-        _roleService
-            .ChangeUserRoleAsync(adminId, roleId, Arg.Any<CancellationToken>())
-            .Returns(Result.Failure(RoleErrors.CannotRemoveLastAdmin));
-
-        var currentUser = FakeCurrentUser.Authenticated(adminId, "admin");
-        var handler = CreateHandler(dbContext, currentUser);
-
-        var result = await handler.Handle(
-            new ApproveRoleRequestCommand(ticket.Id),
-            CancellationToken.None
-        );
-
-        Assert.False(result.IsSuccess);
-        Assert.Equal(RoleErrors.CannotRemoveLastAdmin, result.Error);
-        // Тикет остаётся Open — можно повторить попытку после назначения второго админа.
-        Assert.Equal(TicketStatus.Open, ticket.Status);
-    }
-
-    [Fact]
-    public async Task Handle_WhenNewRoleMoreExpensiveWithActivePaidPeriod_CreatesRoleChangeTopUp()
-    {
-        using var dbContext = InMemoryDbContextFactory.Create();
-        var userId = Guid.NewGuid();
-        var roleId = Guid.NewGuid();
-        var ticket = SupportTicket.CreateRoleRequestForExistingRole(userId, roleId);
-        dbContext.SupportTickets.Add(ticket);
-
-        var pricing = PnvPanel.Domain.Pricing.PricingSettings.CreateDefault();
-        pricing.Update(500, 450, 400);
-        dbContext.PricingSettings.Add(pricing);
-        await dbContext.SaveChangesAsync(CancellationToken.None);
-
-        _roleService
-            .ListRolesAsync(Arg.Any<CancellationToken>())
-            .Returns(new List<RoleDto> { new(roleId, "premium", MaxConfigs: 10, 5, false, BillingEnabled: true) });
-        _roleService.ChangeUserRoleAsync(userId, roleId, Arg.Any<CancellationToken>()).Returns(Result.Success());
-        _identityService
-            .GetProfileAsync(userId, Arg.Any<CancellationToken>())
-            .Returns(Profile(userId, maxConfigs: 3, billingPaidUntil: DateTimeOffset.UtcNow.AddDays(30)));
-
-        var handler = CreateHandler(dbContext, FakeCurrentUser.Authenticated(Guid.NewGuid(), "admin"));
-
-        var result = await handler.Handle(new ApproveRoleRequestCommand(ticket.Id), CancellationToken.None);
-
-        Assert.True(result.IsSuccess);
-        var topUp = Assert.Single(dbContext.PaymentRequests.Local);
-        Assert.Equal(PaymentRequestKind.RoleChangeTopUp, topUp.Kind);
-        Assert.Null(topUp.Period);
-        Assert.True(topUp.AmountSnapshot > 0);
-    }
-
-    [Fact]
-    public async Task Handle_WhenNoActivePaidPeriod_DoesNotCreateTopUp()
-    {
-        using var dbContext = InMemoryDbContextFactory.Create();
-        var userId = Guid.NewGuid();
-        var roleId = Guid.NewGuid();
-        var ticket = SupportTicket.CreateRoleRequestForExistingRole(userId, roleId);
-        dbContext.SupportTickets.Add(ticket);
-        await dbContext.SaveChangesAsync(CancellationToken.None);
-
-        _roleService
-            .ListRolesAsync(Arg.Any<CancellationToken>())
-            .Returns(new List<RoleDto> { new(roleId, "premium", MaxConfigs: 10, 5, false, BillingEnabled: true) });
-        _roleService.ChangeUserRoleAsync(userId, roleId, Arg.Any<CancellationToken>()).Returns(Result.Success());
-        _identityService
-            .GetProfileAsync(userId, Arg.Any<CancellationToken>())
-            .Returns(Profile(userId, maxConfigs: 3, billingPaidUntil: null));
-
-        var handler = CreateHandler(dbContext, FakeCurrentUser.Authenticated(Guid.NewGuid(), "admin"));
-
-        var result = await handler.Handle(new ApproveRoleRequestCommand(ticket.Id), CancellationToken.None);
-
-        Assert.True(result.IsSuccess);
-        Assert.Empty(dbContext.PaymentRequests.Local);
-    }
-}

backend/tests/PnvPanel.Application.Tests/Admin/Support/RejectRoleRequestCommandHandlerTests.cs

@@ -1,67 +0,0 @@
-using NSubstitute;
-using PnvPanel.Application.Admin.Support;
-using PnvPanel.Application.Common.Interfaces;
-using PnvPanel.Application.Tests.TestSupport;
-using PnvPanel.Domain.Support;
-using Xunit;
-
-namespace PnvPanel.Application.Tests.Admin.Support;
-
-public class RejectRoleRequestCommandHandlerTests
-{
-    private readonly IRealtimeNotifier _notifier = Substitute.For<IRealtimeNotifier>();
-    private readonly ITelegramNotifier _telegramNotifier = Substitute.For<ITelegramNotifier>();
-
-    [Fact]
-    public async Task Handle_RejectsRoleRequest_ClosesTicket()
-    {
-        using var dbContext = InMemoryDbContextFactory.Create();
-        var userId = Guid.NewGuid();
-        var ticket = SupportTicket.CreateRoleRequestForExistingRole(userId, Guid.NewGuid());
-        dbContext.SupportTickets.Add(ticket);
-        await dbContext.SaveChangesAsync(CancellationToken.None);
-
-        var currentUser = FakeCurrentUser.Authenticated(Guid.NewGuid(), "admin");
-        var handler = new RejectRoleRequestCommandHandler(
-            dbContext,
-            _notifier,
-            _telegramNotifier,
-            currentUser
-        );
-
-        var result = await handler.Handle(
-            new RejectRoleRequestCommand(ticket.Id, "не подходит"),
-            CancellationToken.None
-        );
-
-        Assert.True(result.IsSuccess);
-        Assert.Equal(TicketStatus.Closed, ticket.Status);
-    }
-
-    [Fact]
-    public async Task Handle_WhenTicketIsOwnedByAdmin_StillRejects()
-    {
-        // Отклонить свою же заявку можно — Reject не меняет роль, риска нет.
-        using var dbContext = InMemoryDbContextFactory.Create();
-        var adminId = Guid.NewGuid();
-        var ticket = SupportTicket.CreateRoleRequestForExistingRole(adminId, Guid.NewGuid());
-        dbContext.SupportTickets.Add(ticket);
-        await dbContext.SaveChangesAsync(CancellationToken.None);
-
-        var currentUser = FakeCurrentUser.Authenticated(adminId, "admin");
-        var handler = new RejectRoleRequestCommandHandler(
-            dbContext,
-            _notifier,
-            _telegramNotifier,
-            currentUser
-        );
-
-        var result = await handler.Handle(
-            new RejectRoleRequestCommand(ticket.Id, null),
-            CancellationToken.None
-        );
-
-        Assert.True(result.IsSuccess);
-        Assert.Equal(TicketStatus.Closed, ticket.Status);
-    }
-}

backend/tests/PnvPanel.Application.Tests/Admin/Support/ResolveTicketCommandHandlerTests.cs

@@ -68,14 +68,13 @@ public class ResolveTicketCommandHandlerTests
     }
 
     [Fact]
-    public async Task Handle_WhenRoleRequest_ReturnsOnlyBugReportCanBeResolvedDirectly()
+    public async Task Handle_WhenExtensionRequest_ReturnsOnlyBugReportCanBeResolvedDirectly()
     {
-        // Заявку на роль/продление можно решить только через Approve/Reject — Resolve обходил бы
-        // одобрение (роль/продление так и не назначились бы), см. CLAUDE.md.
+        // Заявку на продление можно решить только через Approve/Reject — Resolve обходил бы
+        // одобрение (дни так и не начислились бы), см. CLAUDE.md.
         using var dbContext = InMemoryDbContextFactory.Create();
         var userId = Guid.NewGuid();
-        var roleId = Guid.NewGuid();
-        var ticket = SupportTicket.CreateRoleRequestForExistingRole(userId, roleId);
+        var ticket = SupportTicket.CreateExtensionRequest(userId, 14);
         dbContext.SupportTickets.Add(ticket);
         await dbContext.SaveChangesAsync(CancellationToken.None);
 

backend/tests/PnvPanel.Application.Tests/Admin/Users/AdminSetUserPlanCommandHandlerTests.cs

@@ -0,0 +1,139 @@
+using NSubstitute;
+using PnvPanel.Application.Admin.Users;
+using PnvPanel.Application.Common.Interfaces;
+using PnvPanel.Application.Common.Models;
+using PnvPanel.Application.Plans;
+using PnvPanel.Application.Tests.TestSupport;
+using PnvPanel.Domain.Plans;
+using Xunit;
+
+namespace PnvPanel.Application.Tests.Admin.Users;
+
+public class AdminSetUserPlanCommandHandlerTests
+{
+    private readonly IIdentityService _identityService = Substitute.For<IIdentityService>();
+
+    private static CurrentUserProfile Profile(Guid userId, string role, int configQuota) =>
+        new(
+            userId,
+            "alice",
+            Guid.NewGuid(),
+            role,
+            IsActivated: true,
+            IsBlocked: false,
+            ConfigQuota: configQuota,
+            PlanId: null,
+            MaxIpLimit: 2,
+            SubscriptionToken: "sub-token",
+            BillingEnabled: false,
+            BillingPaidUntil: null,
+            BillingSuspended: false
+        );
+
+    [Fact]
+    public async Task Handle_WhenUnlimitedForNonAdmin_ReturnsUnlimitedOnlyForAdmin()
+    {
+        using var dbContext = InMemoryDbContextFactory.Create();
+        var userId = Guid.NewGuid();
+        _identityService
+            .GetProfileAsync(userId, Arg.Any<CancellationToken>())
+            .Returns(Profile(userId, "user", 3));
+
+        var handler = new AdminSetUserPlanCommandHandler(
+            dbContext,
+            _identityService,
+            FakeCurrentUser.Authenticated(Guid.NewGuid())
+        );
+
+        var result = await handler.Handle(
+            new AdminSetUserPlanCommand(userId, null, RoleQuota.Unlimited),
+            CancellationToken.None
+        );
+
+        Assert.False(result.IsSuccess);
+        Assert.Equal(PlanErrors.UnlimitedOnlyForAdmin, result.Error);
+        await _identityService
+            .DidNotReceive()
+            .SetConfigQuotaAsync(Arg.Any<Guid>(), Arg.Any<int>(), Arg.Any<Guid?>(), Arg.Any<CancellationToken>());
+    }
+
+    [Fact]
+    public async Task Handle_WhenUnlimitedForAdmin_Succeeds()
+    {
+        using var dbContext = InMemoryDbContextFactory.Create();
+        var userId = Guid.NewGuid();
+        _identityService
+            .GetProfileAsync(userId, Arg.Any<CancellationToken>())
+            .Returns(Profile(userId, "admin", -1));
+        _identityService
+            .SetConfigQuotaAsync(userId, RoleQuota.Unlimited, null, Arg.Any<CancellationToken>())
+            .Returns(Result.Success());
+
+        var handler = new AdminSetUserPlanCommandHandler(
+            dbContext,
+            _identityService,
+            FakeCurrentUser.Authenticated(Guid.NewGuid())
+        );
+
+        var result = await handler.Handle(
+            new AdminSetUserPlanCommand(userId, null, RoleQuota.Unlimited),
+            CancellationToken.None
+        );
+
+        Assert.True(result.IsSuccess);
+        await _identityService
+            .Received(1)
+            .SetConfigQuotaAsync(userId, RoleQuota.Unlimited, null, Arg.Any<CancellationToken>());
+    }
+
+    [Fact]
+    public async Task Handle_WithPlanId_UsesPlanConfigCount()
+    {
+        using var dbContext = InMemoryDbContextFactory.Create();
+        var userId = Guid.NewGuid();
+        var plan = Plan.Create("Плюс", 6, 0);
+        dbContext.Plans.Add(plan);
+        await dbContext.SaveChangesAsync(CancellationToken.None);
+
+        _identityService
+            .SetConfigQuotaAsync(userId, 6, plan.Id, Arg.Any<CancellationToken>())
+            .Returns(Result.Success());
+
+        var handler = new AdminSetUserPlanCommandHandler(
+            dbContext,
+            _identityService,
+            FakeCurrentUser.Authenticated(Guid.NewGuid())
+        );
+
+        var result = await handler.Handle(
+            new AdminSetUserPlanCommand(userId, plan.Id, null),
+            CancellationToken.None
+        );
+
+        Assert.True(result.IsSuccess);
+        await _identityService
+            .Received(1)
+            .SetConfigQuotaAsync(userId, 6, plan.Id, Arg.Any<CancellationToken>());
+        Assert.Single(dbContext.AuditLogs.Local);
+    }
+
+    [Fact]
+    public async Task Handle_WhenPlanNotFound_ReturnsNotFound()
+    {
+        using var dbContext = InMemoryDbContextFactory.Create();
+
+        var handler = new AdminSetUserPlanCommandHandler(
+            dbContext,
+            _identityService,
+            FakeCurrentUser.Authenticated(Guid.NewGuid())
+        );
+
+        var result = await handler.Handle(
+            new AdminSetUserPlanCommand(Guid.NewGuid(), Guid.NewGuid(), null),
+            CancellationToken.None
+        );
+
+        Assert.False(result.IsSuccess);
+        Assert.Equal(PlanErrors.NotFound, result.Error);
+    }
+}

backend/tests/PnvPanel.Application.Tests/Admin/Users/ListUsersQueryHandlerTests.cs

@@ -56,13 +56,13 @@ public class ListUsersQueryHandlerTests
     }
 
     [Fact]
-    public async Task Handle_WhenPendingRequestIsRoleChangeTopUp_LeavesBillingPendingReviewFalse()
+    public async Task Handle_WhenPendingRequestIsPlanChangeTopUp_LeavesBillingPendingReviewFalse()
     {
-        // RoleChangeTopUp — доплата за смену роли, не подписка; не должна показывать пользователя
+        // PlanChangeTopUp — доплата за смену тарифа, не подписка; не должна показывать пользователя
         // как "оплата на проверке" в админке (см. CLAUDE.md про Kind).
         using var dbContext = InMemoryDbContextFactory.Create();
         var userId = Guid.NewGuid();
-        var request = PaymentRequest.CreateRoleChangeTopUp(userId, 500);
+        var request = PaymentRequest.CreatePlanChangeTopUp(userId, 500);
         request.MarkPaymentSent();
         dbContext.PaymentRequests.Add(request);
         await dbContext.SaveChangesAsync(CancellationToken.None);