@lightupai/polaris 0.0.43 → 0.0.45

package/.github/workflows/community-alerts.yml

@@ -0,0 +1,33 @@
+name: Community activity alerts
+
+on:
+  discussion:
+    types: [created]
+  discussion_comment:
+    types: [created]
+
+jobs:
+  notify:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Post to Slack
+        env:
+          SLACK_BOT_TOKEN: ${{ secrets.SIGNUP_SLACK_BOT_TOKEN }}
+        run: |
+          if [ "${{ github.event_name }}" = "discussion" ]; then
+            TITLE="${{ github.event.discussion.title }}"
+            AUTHOR="${{ github.event.discussion.user.login }}"
+            URL="${{ github.event.discussion.html_url }}"
+            CATEGORY="${{ github.event.discussion.category.name }}"
+            TEXT=":speech_balloon: New discussion in *${CATEGORY}*: <${URL}|${TITLE}> by ${AUTHOR}"
+          else
+            AUTHOR="${{ github.event.comment.user.login }}"
+            TITLE="${{ github.event.discussion.title }}"
+            URL="${{ github.event.comment.html_url }}"
+            TEXT=":left_speech_bubble: ${AUTHOR} commented on <${URL}|${TITLE}>"
+          fi
+
+          curl -s -X POST https://slack.com/api/chat.postMessage \
+            -H "Authorization: Bearer ${SLACK_BOT_TOKEN}" \
+            -H "Content-Type: application/json" \
+            -d "$(jq -n --arg channel "#alerts-mql-stream" --arg text "$TEXT" '{channel: $channel, text: $text}')"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lightupai/polaris",
-  "version": "0.0.43",
+  "version": "0.0.45",
   "type": "module",
   "bin": {
     "polaris": "bin/polaris",

package/src/web/layout.ts

@@ -69,7 +69,8 @@ export function nav(token?: string, opts?: NavOpts): string {
            <a href="/" class="block px-3 py-2 text-sm text-gray-700 hover:bg-gray-50">Log out</a>
          </div>
        </div>`
-    : `<a href="/login" class="text-sm font-medium text-gray-500 hover:text-gray-700 hidden sm:block">Sign in</a>
+    : `<a href="https://github.com/lightup-data/polaris/discussions" class="text-sm font-medium text-gray-500 hover:text-gray-700 hidden sm:block">Community</a>
+       <a href="/login" class="text-sm font-medium text-gray-500 hover:text-gray-700 hidden sm:block">Sign in</a>
        <a href="/signup" class="inline-flex items-center gap-2 px-3 py-1.5 sm:px-4 sm:py-2 bg-white border border-gray-300 rounded-lg shadow-sm hover:bg-gray-50 transition text-xs sm:text-sm font-medium text-gray-700">
          <svg width="14" height="14" viewBox="0 0 18 18" xmlns="http://www.w3.org/2000/svg"><path d="M17.64 9.2c0-.637-.057-1.251-.164-1.84H9v3.481h4.844a4.14 4.14 0 01-1.796 2.716v2.259h2.908c1.702-1.567 2.684-3.875 2.684-6.615z" fill="#4285F4"/><path d="M9 18c2.43 0 4.467-.806 5.956-2.18l-2.908-2.259c-.806.54-1.837.86-3.048.86-2.344 0-4.328-1.584-5.036-3.711H.957v2.332A8.997 8.997 0 009 18z" fill="#34A853"/><path d="M3.964 10.71A5.41 5.41 0 013.682 9c0-.593.102-1.17.282-1.71V4.958H.957A8.996 8.996 0 000 9c0 1.452.348 2.827.957 4.042l3.007-2.332z" fill="#FBBC05"/><path d="M9 3.58c1.321 0 2.508.454 3.44 1.345l2.582-2.58C13.463.891 11.426 0 9 0A8.997 8.997 0 00.957 4.958L3.964 6.29C4.672 4.163 6.656 2.58 9 3.58z" fill="#EA4335"/></svg>
          Sign up

package/src/web/pages.ts

@@ -401,11 +401,15 @@ export function renderLandingPage(): string {
       <div class="py-16 border-t border-gray-200 text-center">
         <h2 class="text-2xl font-bold text-gray-900">Ready to try it?</h2>
         <p class="mt-2 text-sm text-gray-500">Set up takes less than two minutes.</p>
-        <div class="mt-6">
+        <div class="mt-6 flex flex-col items-center gap-4">
           <a href="/signup" class="inline-flex items-center gap-3 px-5 py-2.5 bg-white border border-gray-300 rounded-lg shadow-sm hover:bg-gray-50 transition text-sm font-medium text-gray-700">
             <svg width="16" height="16" viewBox="0 0 18 18" xmlns="http://www.w3.org/2000/svg"><path d="M17.64 9.2c0-.637-.057-1.251-.164-1.84H9v3.481h4.844a4.14 4.14 0 01-1.796 2.716v2.259h2.908c1.702-1.567 2.684-3.875 2.684-6.615z" fill="#4285F4"/><path d="M9 18c2.43 0 4.467-.806 5.956-2.18l-2.908-2.259c-.806.54-1.837.86-3.048.86-2.344 0-4.328-1.584-5.036-3.711H.957v2.332A8.997 8.997 0 009 18z" fill="#34A853"/><path d="M3.964 10.71A5.41 5.41 0 013.682 9c0-.593.102-1.17.282-1.71V4.958H.957A8.996 8.996 0 000 9c0 1.452.348 2.827.957 4.042l3.007-2.332z" fill="#FBBC05"/><path d="M9 3.58c1.321 0 2.508.454 3.44 1.345l2.582-2.58C13.463.891 11.426 0 9 0A8.997 8.997 0 00.957 4.958L3.964 6.29C4.672 4.163 6.656 2.58 9 3.58z" fill="#EA4335"/></svg>
             Sign up with Google
           </a>
+          <a href="https://github.com/lightup-data/polaris/discussions" class="inline-flex items-center gap-2 px-5 py-2.5 text-sm font-medium text-gray-500 hover:text-gray-700 transition">
+            <svg class="w-4 h-4" viewBox="0 0 16 16" fill="currentColor"><path d="M1.5 8a6.5 6.5 0 1113 0 6.5 6.5 0 01-13 0zM8 0a8 8 0 100 16A8 8 0 008 0zM5 8a1 1 0 11-2 0 1 1 0 012 0zm4 0a1 1 0 11-2 0 1 1 0 012 0zm3 1a1 1 0 100-2 1 1 0 000 2z"/></svg>
+            Join the community
+          </a>
         </div>
       </div>
     </div>
@@ -414,6 +418,7 @@ export function renderLandingPage(): string {
       <div class="max-w-3xl mx-auto px-6 py-8 flex items-center justify-between text-sm text-gray-400">
         <span>Polaris</span>
         <div class="flex items-center gap-6">
+          <a href="https://github.com/lightup-data/polaris/discussions" class="hover:text-gray-600 transition">Community</a>
           <a href="/login" class="hover:text-gray-600 transition">Sign in</a>
         </div>
       </div>

package/tests/signup-notifications.test.ts

@@ -0,0 +1,286 @@
+import { describe, expect, test, beforeAll, afterAll, beforeEach } from "bun:test";
+import { createDb, createOrg, createUser, getRecentSignups, type Sql } from "../src/service/db";
+import { resetTestData } from "./helpers";
+
+const DATABASE_URL = process.env.DATABASE_URL ?? "postgres://polaris:polaris@localhost:5432/polaris_test";
+
+let sql: Sql;
+
+// Capture outgoing Slack API calls
+const slackCalls: Array<{ url: string; body: Record<string, unknown> }> = [];
+const originalFetch = globalThis.fetch;
+
+beforeAll(async () => {
+  sql = await createDb(DATABASE_URL);
+
+  // Intercept fetch to capture Slack API calls
+  globalThis.fetch = async (input: RequestInfo | URL, init?: RequestInit) => {
+    const url = typeof input === "string" ? input : input.toString();
+
+    if (url.startsWith("https://slack.com/api/")) {
+      const body = JSON.parse(init?.body as string);
+      slackCalls.push({ url, body });
+      return new Response(JSON.stringify({ ok: true }), {
+        headers: { "Content-Type": "application/json" },
+      });
+    }
+
+    return originalFetch(input, init);
+  };
+});
+
+afterAll(async () => {
+  globalThis.fetch = originalFetch;
+  await sql.end();
+});
+
+beforeEach(async () => {
+  await resetTestData(sql);
+  slackCalls.length = 0;
+});
+
+// --- getRecentSignups ---
+
+describe("getRecentSignups", () => {
+  test("returns users created within the time window", async () => {
+    await createOrg(sql, "org1", "Acme", "acme.com");
+    await createUser(sql, "u1", "alice@acme.com", "Alice", "org1", "user:alice");
+    await createUser(sql, "u2", "bob@acme.com", "Bob", "org1", "user:bob");
+
+    const since = new Date(Date.now() - 60 * 60 * 1000);
+    const signups = await getRecentSignups(sql, since, 10);
+
+    expect(signups).toHaveLength(2);
+    expect(signups[0].org_name).toBe("Acme");
+    expect(signups.map((s) => s.name).sort()).toEqual(["Alice", "Bob"]);
+  });
+
+  test("excludes users created before the time window", async () => {
+    await createOrg(sql, "org1", "Acme", "acme.com");
+    await createUser(sql, "u1", "old@acme.com", "Old User", "org1", "user:old");
+    await sql`UPDATE users SET created_at = now() - interval '2 hours' WHERE id = 'u1'`;
+
+    const since = new Date(Date.now() - 60 * 60 * 1000);
+    const signups = await getRecentSignups(sql, since, 10);
+
+    expect(signups).toHaveLength(0);
+  });
+
+  test("respects limit parameter", async () => {
+    await createOrg(sql, "org1", "Acme", "acme.com");
+    for (let i = 0; i < 5; i++) {
+      await createUser(sql, `u${i}`, `user${i}@acme.com`, `User ${i}`, "org1", `user:user${i}`);
+    }
+
+    const since = new Date(Date.now() - 60 * 60 * 1000);
+    const signups = await getRecentSignups(sql, since, 3);
+
+    expect(signups).toHaveLength(3);
+  });
+
+  test("returns most recent first", async () => {
+    await createOrg(sql, "org1", "Acme", "acme.com");
+    await createUser(sql, "u1", "first@acme.com", "First", "org1", "user:first");
+    await sql`UPDATE users SET created_at = now() - interval '10 seconds' WHERE id = 'u1'`;
+    await createUser(sql, "u2", "second@acme.com", "Second", "org1", "user:second");
+
+    const since = new Date(Date.now() - 60 * 60 * 1000);
+    const signups = await getRecentSignups(sql, since, 10);
+
+    expect(signups[0].name).toBe("Second");
+    expect(signups[1].name).toBe("First");
+  });
+
+  test("joins org name correctly across multiple orgs", async () => {
+    await createOrg(sql, "org1", "Acme", "acme.com");
+    await createOrg(sql, "org2", "Startup", "startup.io");
+    await createUser(sql, "u1", "alice@acme.com", "Alice", "org1", "user:alice");
+    await createUser(sql, "u2", "bob@startup.io", "Bob", "org2", "user:bob");
+
+    const since = new Date(Date.now() - 60 * 60 * 1000);
+    const signups = await getRecentSignups(sql, since, 10);
+
+    const alice = signups.find((s) => s.name === "Alice");
+    const bob = signups.find((s) => s.name === "Bob");
+    expect(alice?.org_name).toBe("Acme");
+    expect(bob?.org_name).toBe("Startup");
+  });
+});
+
+// --- notifySignup (imported indirectly via the app module) ---
+// We test the notification by importing and calling it directly.
+
+// Since notifySignup is a private function in app.ts, we test the
+// observable behavior: when the web app processes a signup, the right
+// Slack calls are made. We simulate this by importing the notification
+// logic as a standalone function.
+
+// Extract the notification logic for direct testing:
+function notifySignup(opts: { name: string; email: string; domain: string; orgName: string; isNewOrg: boolean }): void {
+  const botToken = process.env.SIGNUP_SLACK_BOT_TOKEN;
+  if (!botToken) return;
+
+  const emoji = opts.isNewOrg ? ":tada:" : ":wave:";
+  const action = opts.isNewOrg ? "signed up (new org)" : "joined";
+  const text = `${emoji} *${opts.name}* (${opts.email}) ${action} — ${opts.orgName} (${opts.domain})`;
+
+  fetch("https://slack.com/api/chat.postMessage", {
+    method: "POST",
+    headers: {
+      Authorization: `Bearer ${botToken}`,
+      "Content-Type": "application/json",
+    },
+    body: JSON.stringify({ channel: "#alerts-mql-stream", text }),
+  }).catch(() => {});
+}
+
+describe("notifySignup — new org", () => {
+  test("posts to #alerts-mql-stream with new org emoji and details", async () => {
+    process.env.SIGNUP_SLACK_BOT_TOKEN = "xoxb-test-token";
+
+    notifySignup({ name: "Alice Smith", email: "alice@newco.com", domain: "newco.com", orgName: "Newco", isNewOrg: true });
+
+    // Wait for the async fetch to resolve
+    await new Promise((r) => setTimeout(r, 50));
+
+    const call = slackCalls.find((c) => c.body.text?.toString().includes("Alice Smith"));
+    expect(call).toBeDefined();
+    expect(call!.body.channel).toBe("#alerts-mql-stream");
+    expect(call!.body.text).toContain(":tada:");
+    expect(call!.body.text).toContain("signed up (new org)");
+    expect(call!.body.text).toContain("alice@newco.com");
+    expect(call!.body.text).toContain("Newco");
+    expect(call!.body.text).toContain("newco.com");
+  });
+});
+
+describe("notifySignup — join existing org", () => {
+  test("posts to #alerts-mql-stream with join emoji", async () => {
+    process.env.SIGNUP_SLACK_BOT_TOKEN = "xoxb-test-token";
+
+    notifySignup({ name: "Bob Jones", email: "bob@acme.com", domain: "acme.com", orgName: "Acme", isNewOrg: false });
+
+    await new Promise((r) => setTimeout(r, 50));
+
+    const call = slackCalls.find((c) => c.body.text?.toString().includes("Bob Jones"));
+    expect(call).toBeDefined();
+    expect(call!.body.channel).toBe("#alerts-mql-stream");
+    expect(call!.body.text).toContain(":wave:");
+    expect(call!.body.text).toContain("joined");
+    expect(call!.body.text).not.toContain("signed up");
+  });
+});
+
+describe("notifySignup — no token", () => {
+  test("does not post when SIGNUP_SLACK_BOT_TOKEN is not set", async () => {
+    delete process.env.SIGNUP_SLACK_BOT_TOKEN;
+
+    notifySignup({ name: "Ghost User", email: "ghost@nowhere.com", domain: "nowhere.com", orgName: "Nowhere", isNewOrg: true });
+
+    await new Promise((r) => setTimeout(r, 50));
+
+    const call = slackCalls.find((c) => c.body.text?.toString().includes("Ghost User"));
+    expect(call).toBeUndefined();
+  });
+});
+
+describe("notifySignup — Slack API uses correct auth header", () => {
+  test("sends Bearer token in Authorization header", async () => {
+    process.env.SIGNUP_SLACK_BOT_TOKEN = "xoxb-my-secret-token";
+
+    // Override fetch to also capture headers
+    const capturedHeaders: Record<string, string>[] = [];
+    const prevFetch = globalThis.fetch;
+    globalThis.fetch = async (input: RequestInfo | URL, init?: RequestInit) => {
+      const url = typeof input === "string" ? input : input.toString();
+      if (url.startsWith("https://slack.com/api/")) {
+        const headers: Record<string, string> = {};
+        if (init?.headers) {
+          const h = init.headers as Record<string, string>;
+          for (const [k, v] of Object.entries(h)) headers[k] = v;
+        }
+        capturedHeaders.push(headers);
+        return new Response(JSON.stringify({ ok: true }), {
+          headers: { "Content-Type": "application/json" },
+        });
+      }
+      return prevFetch(input, init);
+    };
+
+    notifySignup({ name: "Test", email: "test@test.com", domain: "test.com", orgName: "Test", isNewOrg: true });
+    await new Promise((r) => setTimeout(r, 50));
+
+    expect(capturedHeaders.length).toBeGreaterThan(0);
+    expect(capturedHeaders[0].Authorization).toBe("Bearer xoxb-my-secret-token");
+
+    globalThis.fetch = prevFetch;
+  });
+});
+
+// --- Rollup ---
+
+describe("signup rollup message format", () => {
+  test("builds correct rollup from recent signups", async () => {
+    process.env.SIGNUP_SLACK_BOT_TOKEN = "xoxb-test-token";
+
+    await createOrg(sql, "org1", "Acme", "acme.com");
+    await createOrg(sql, "org2", "Startup", "startup.io");
+    await createUser(sql, "u1", "alice@acme.com", "Alice Smith", "org1", "user:alice");
+    await createUser(sql, "u2", "bob@startup.io", "Bob Jones", "org2", "user:bob");
+    await createUser(sql, "u3", "carol@acme.com", "Carol Lee", "org1", "user:carol");
+
+    const since = new Date(Date.now() - 60 * 60 * 1000);
+    const signups = await getRecentSignups(sql, since, 10);
+
+    expect(signups).toHaveLength(3);
+
+    // Simulate building the rollup message (same logic as in app.ts)
+    const lines = signups.map((s) => `• *${s.name}* (${s.email}) — ${s.org_name}`);
+    const text = `:chart_with_upwards_trend: *${signups.length} signup${signups.length === 1 ? "" : "s"} in the last hour*\n${lines.join("\n")}`;
+
+    expect(text).toContain("3 signups in the last hour");
+    expect(text).toContain("Alice Smith");
+    expect(text).toContain("Bob Jones");
+    expect(text).toContain("Carol Lee");
+    expect(text).toContain("Acme");
+    expect(text).toContain("Startup");
+
+    // Now actually post via the same Slack API path
+    fetch("https://slack.com/api/chat.postMessage", {
+      method: "POST",
+      headers: {
+        Authorization: `Bearer ${process.env.SIGNUP_SLACK_BOT_TOKEN}`,
+        "Content-Type": "application/json",
+      },
+      body: JSON.stringify({ channel: "#alerts-mql-stream", text }),
+    });
+
+    await new Promise((r) => setTimeout(r, 50));
+
+    const rollupCall = slackCalls.find((c) => c.body.text?.toString().includes("signups in the last hour"));
+    expect(rollupCall).toBeDefined();
+    expect(rollupCall!.body.channel).toBe("#alerts-mql-stream");
+  });
+
+  test("singular form for single signup", async () => {
+    await createOrg(sql, "org1", "Acme", "acme.com");
+    await createUser(sql, "u1", "solo@acme.com", "Solo User", "org1", "user:solo");
+
+    const since = new Date(Date.now() - 60 * 60 * 1000);
+    const signups = await getRecentSignups(sql, since, 10);
+    const text = `:chart_with_upwards_trend: *${signups.length} signup${signups.length === 1 ? "" : "s"} in the last hour*`;
+
+    expect(text).toContain("1 signup in the last hour");
+    expect(text).not.toContain("signups");
+  });
+
+  test("empty rollup produces no Slack call", async () => {
+    const since = new Date(Date.now() - 60 * 60 * 1000);
+    const signups = await getRecentSignups(sql, since, 10);
+
+    expect(signups).toHaveLength(0);
+    // In the real code, empty signups = early return, no Slack call
+    // Verify no calls were made
+    expect(slackCalls).toHaveLength(0);
+  });
+});