fix subscription page

apps/dashboard/src/components/layout/DashboardAccessGuard.boundary.test.ts

@@ -1,4 +1,5 @@
 import { describe, expect, it } from 'vitest'
+import { resolveDashboardRoutePolicy, roleCanAccessPolicy } from '@/lib/dashboardRoutePolicies'
 import { flattenInternalRoutes, isAllowedRoute, resolveAccessRedirect } from './DashboardAccessGuard'
 
 describe('DashboardAccessGuard route helpers', () => {
@@ -38,4 +39,19 @@ describe('DashboardAccessGuard route helpers', () => {
     expect(resolveAccessRedirect('/settings', ['/', '/fleet'])).toBe('/')
     expect(resolveAccessRedirect('/fleet/123', ['/', '/fleet'])).toBeNull()
   })
+
+  it('treats subscription as an owner-only recovery route independent of menu registration', () => {
+    const policy = resolveDashboardRoutePolicy('/subscription')
+
+    expect(policy).toMatchObject({
+      authenticationRequired: true,
+      allowedRoles: ['OWNER'],
+      subscriptionRequired: false,
+      menuRegistrationRequired: false,
+      billingRecoveryRoute: true,
+    })
+    expect(roleCanAccessPolicy('OWNER', policy)).toBe(true)
+    expect(roleCanAccessPolicy('MANAGER', policy)).toBe(false)
+    expect(roleCanAccessPolicy('AGENT', policy)).toBe(false)
+  })
 })