@teamscala/service-boot 0.23.396 → 0.23.398

package/package.json

@@ -6,7 +6,7 @@
   },
   "name": "@teamscala/service-boot",
   "type": "module",
-  "version": "0.23.396",
+  "version": "0.23.398",
   "sideEffects": false,
   "imports": {
     "#service-boot/*": "./src/*",
@@ -16,7 +16,6 @@
     "src"
   ],
   "dependencies": {
-    "@orpc/server": "*",
     "@teamscala/agreement-generation": "*",
     "@teamscala/api-resend": "*",
     "@teamscala/assessment-block": "*",
@@ -46,6 +45,7 @@
     "@teamscala/timing": "*",
     "@teamscala/tool-executor": "*",
     "@teamscala/watchdog": "*",
+    "@orpc/server": "*",
     "hono": "*",
     "pg-boss": "*",
     "tailwindcss": "*",

package/src/fn-routers/public-assessment-router.test.ts

@@ -0,0 +1,277 @@
+/**
+ * @system service-boot
+ * @status handwritten
+ * @edit edit directly
+ *
+ * Locks the single-band-source contract of the Authority Index completion
+ * email (quiz-email-band-single-sourced): the band the email names, the tag
+ * it records and the report narrative it renders all derive from
+ * assessments.stage_bands through the same helpers the report page uses, so
+ * the email can no longer name a different band than the report for one
+ * score (the retired `<id>-bands` config row disagreed at 45 and 85), and an
+ * authored `{{score}}` placeholder never reaches the recipient unsubstituted.
+ */
+
+import { beforeEach, describe, expect, mock, test } from "bun:test";
+import { applyTemplateVars } from "@teamscala/email/templates/lookup";
+
+interface CapturedEmail {
+	to: string;
+	subject: string;
+	html: string;
+	text: string;
+}
+
+let capturedEmail: CapturedEmail | null = null;
+let emailResolve: ((email: CapturedEmail) => void) | null = null;
+let capturedEvent: { kind: string; payload: Record<string, unknown> } | null = null;
+
+const noopLogger = {
+	info: () => {},
+	warn: () => {},
+	error: () => {},
+	debug: () => {},
+};
+
+mock.module("@teamscala/logger/app-loggers", () => ({
+	getAppLogger: () => noopLogger,
+}));
+
+mock.module("@teamscala/api-resend/send-email", () => ({
+	initResendClient: () => {},
+	sendEmail: async (args: CapturedEmail) => {
+		capturedEmail = args;
+		emailResolve?.(args);
+		return { success: true as const, id: "re_test_123" };
+	},
+}));
+
+// The row owns copy + layout; the test mirrors the authority-index-report
+// row's merge tokens so the substitution surface exercised is the real one.
+// applyTemplateVars stays the REAL implementation — only lookup is stubbed.
+mock.module("@teamscala/email/templates/lookup", () => ({
+	lookupTemplate: async () => ({
+		subject: "Your Authority Index — {{totalScore}}/100 ({{bandLabel}})",
+		bodyHtml:
+			"<h1>{{totalScore}}/100 — {{bandLabel}}</h1><h2>{{reportTitle}}</h2><p>{{tagline}}</p>{{narrativeHtml}}{{pillarNotesHtml}}{{priorityActionsHtml}}{{roadmapHtml}}{{strategicFocusHtml}}{{opportunitiesHtml}}{{twelveMonthTargetHtml}}",
+		bodyText:
+			"{{totalScore}}/100 — {{bandLabel}}\n{{reportTitle}}\n{{tagline}}\n{{narrativeText}}",
+	}),
+	applyTemplateVars,
+}));
+
+mock.module("@teamscala/db/registry/load-config", () => ({
+	loadRegistryConfig: async () => ({ token: "test-token" }),
+}));
+
+mock.module("@teamscala/encryption/crypto/secret-config", () => ({
+	decryptSecretConfig: (raw: unknown) => raw,
+}));
+
+mock.module("@teamscala/resolver-engine/data-resolvers/fetch-org-brand", () => ({
+	fetchOrgBrand: async () => null,
+}));
+
+mock.module("@teamscala/email/identity/resolve-email-sender", () => ({
+	resolveEmailSender: async () => ({
+		from: "Test <test@example.com>",
+		replyTo: undefined,
+		isOrgIdentity: false,
+		brand: {
+			orgName: "TestCo",
+			primaryColor: "#123456",
+			accentColor: "#abcdef",
+			logoUrl: null,
+		},
+	}),
+}));
+
+mock.module("@teamscala/event-log/record-event", () => ({
+	recordEvent: (e: { kind: string; payload: Record<string, unknown> }) => {
+		capturedEvent = e;
+	},
+}));
+
+const { publicAssessmentRouter } = await import("./public-assessment-router.ts");
+
+// Mirrors the authored assessments.stage_bands shape (ascending max, the last
+// band the catch-all) with the real threshold edges 20/40/60/80 — the band
+// set the report page renders.
+const STAGE_BANDS = {
+	bands: [
+		{
+			name: "Unknown",
+			max: 20,
+			tagline: "tagline-unknown",
+			executiveSummary: "You scored {{score}} — Unknown stage.",
+			pillarNotes: { seen: "seen-unknown" },
+			priorityActions: [{ title: "Act U1", description: "desc-u1" }],
+			roadmap: { month1: { focus: "Focus U", actions: ["u-a"] } },
+			strategicFocus: "focus-unknown",
+			opportunities: ["opp-u"],
+			twelveMonthTarget: "target-unknown",
+		},
+		{
+			name: "Testing",
+			max: 40,
+			tagline: "tagline-testing",
+			executiveSummary: "You scored {{score}} — Testing stage.",
+			pillarNotes: { seen: "seen-testing" },
+			priorityActions: [{ title: "Act T1", description: "desc-t1" }],
+			roadmap: { month1: { focus: "Focus T", actions: ["t-a"] } },
+			strategicFocus: "focus-testing",
+			opportunities: ["opp-t"],
+			twelveMonthTarget: "target-testing",
+		},
+		{
+			name: "Experimenting",
+			max: 60,
+			tagline: "tagline-experimenting",
+			executiveSummary: "You scored {{score}} — Experimenting stage.",
+			pillarNotes: { seen: "seen-experimenting", heard: "heard-experimenting" },
+			priorityActions: [
+				{ title: "Act E1", description: "desc-e1" },
+				{ title: "Act E2", description: "desc-e2" },
+			],
+			roadmap: {
+				month1: { focus: "Focus E1", actions: ["e1-a"] },
+				month2: { focus: "Focus E2", actions: ["e2-a"] },
+			},
+			strategicFocus: "focus-experimenting",
+			opportunities: ["opp-e"],
+			twelveMonthTarget: "target-experimenting",
+		},
+		{
+			name: "Recognised",
+			max: 80,
+			tagline: "tagline-recognised",
+			executiveSummary: "You scored {{score}} — Recognised stage.",
+			pillarNotes: {},
+			priorityActions: [],
+			strategicFocus: "focus-recognised",
+			twelveMonthTarget: "target-recognised",
+		},
+		{
+			name: "Industry Influencer",
+			tagline: "tagline-influencer",
+			executiveSummary: "You scored {{score}} — Influencer stage.",
+			pillarNotes: {},
+			priorityActions: [],
+			strategicFocus: "focus-influencer",
+			twelveMonthTarget: "target-influencer",
+		},
+	],
+};
+
+function makeFakePrisma() {
+	return {
+		assessments: {
+			findUnique: async () => ({
+				id: "asmt-1",
+				organisation_id: "org-1",
+				questions: Array.from({ length: 20 }, (_, i) => ({
+					id: `q${i + 1}`,
+					type: "scale",
+					category: `Pillar ${(i % 4) + 1}`,
+				})),
+				cta_url: "https://book.example/session",
+				slug: "authority-index",
+				stage_bands: STAGE_BANDS,
+				report_title: "Personalised Authority Blueprint",
+			}),
+		},
+		// client_database deliberately absent — the quiz prisma client is
+		// scoped without it, so the CRM branch must skip without error.
+		assessment_responses: {
+			create: async () => ({ id: "resp-1" }),
+		},
+		email_send_log: {
+			create: async () => ({}),
+		},
+	};
+}
+
+/** 20 scale questions (max 80); 9 answered 5 (earned 36) + 11 answered 1 (earned 0) → 45%. */
+function answersForScore45() {
+	return Array.from({ length: 20 }, (_, i) => ({
+		questionId: `q${i + 1}`,
+		scaleValue: i < 9 ? 5 : 1,
+	}));
+}
+
+type SubmitHandler = (opts: {
+	input: Record<string, unknown>;
+	context: { prisma: unknown; headers: Headers };
+}) => Promise<Record<string, unknown>>;
+
+async function submitWith45() {
+	// The raw handler under ~orpc only reads { input, context }; the other
+	// ProcedureHandlerOptions fields are middleware plumbing this procedure
+	// (no middlewares) never touches, so the narrowed call shape is cast.
+	const handler = publicAssessmentRouter.submit["~orpc"].handler as unknown as SubmitHandler;
+	return handler({
+		input: {
+			assessmentId: "asmt-1",
+			firstName: "Alex Reader",
+			email: "alex@example.com",
+			answers: answersForScore45(),
+		},
+		context: { prisma: makeFakePrisma(), headers: new Headers() },
+	});
+}
+
+beforeEach(() => {
+	capturedEmail = null;
+	capturedEvent = null;
+});
+
+describe("publicAssessment.submit — email band single-sourced from stage_bands", () => {
+	test("score 45 names the stage_bands band (Experimenting), not the retired config band (Testing)", async () => {
+		const result = await submitWith45();
+		expect(result.totalScore).toBe(45);
+		expect(result.band).toBe("Experimenting");
+	});
+
+	test("the email arrives naming the same band, with the narrative substituted and no literal {{score}}", async () => {
+		const emailPromise = new Promise<CapturedEmail>((resolve) => {
+			emailResolve = resolve;
+		});
+		await submitWith45();
+		const email = await emailPromise;
+
+		expect(email.subject).toContain("45/100");
+		expect(email.subject).toContain("Experimenting");
+		expect(email.html).toContain("45/100 — Experimenting");
+		expect(email.html).toContain("You scored 45 — Experimenting stage.");
+		expect(email.html).not.toContain("{{score}}");
+		expect(email.text).toContain("You scored 45 — Experimenting stage.");
+		expect(email.text).not.toContain("{{score}}");
+	});
+
+	test("report sections render from the same band the header names", async () => {
+		const emailPromise = new Promise<CapturedEmail>((resolve) => {
+			emailResolve = resolve;
+		});
+		await submitWith45();
+		const email = await emailPromise;
+
+		expect(email.html).toContain("Personalised Authority Blueprint");
+		expect(email.html).toContain("tagline-experimenting");
+		expect(email.html).toContain("Act E1");
+		expect(email.html).toContain("desc-e1");
+		expect(email.html).toContain("Focus E1");
+		expect(email.html).toContain("focus-experimenting");
+		expect(email.html).toContain("opp-e");
+		expect(email.html).toContain("target-experimenting");
+		// other bands' copy must not leak into this band's email
+		expect(email.html).not.toContain("Act T1");
+		expect(email.html).not.toContain("Act U1");
+		expect(email.html).not.toContain("Recognised stage");
+	});
+
+	test("the event tag slug derives from the authored band name", async () => {
+		await submitWith45();
+		expect(capturedEvent?.kind).toBe("assessment.authority.completed");
+		expect(capturedEvent?.payload.band).toBe("experimenting");
+	});
+});