@teamscala/service-boot 0.23.479 → 0.23.492

package/src/fn-routers/public-assessment-router.test.ts

@@ -1,437 +0,0 @@
-/**
- * @system service-boot
- * @status handwritten
- * @edit edit directly
- *
- * Locks the single-band-source contract of the Authority Index completion
- * email (quiz-email-band-single-sourced): the band the email names, the tag
- * it records and the report narrative it renders all derive from
- * assessments.stage_bands through the same helpers the report page uses, so
- * the email can no longer name a different band than the report for one
- * score (the retired `<id>-bands` config row disagreed at 45 and 85), and an
- * authored `{{score}}` placeholder never reaches the recipient unsubstituted.
- */
-
-import { beforeEach, describe, expect, mock, test } from "bun:test";
-import { applyTemplateVars } from "@teamscala/email-template/lookup";
-
-interface CapturedEmail {
-	to: string;
-	subject: string;
-	html: string;
-	text: string;
-}
-
-let capturedResponseRow: Record<string, unknown> | null = null;
-let capturedEmail: CapturedEmail | null = null;
-let emailResolve: ((email: CapturedEmail) => void) | null = null;
-let capturedEvent: { kind: string; payload: Record<string, unknown> } | null = null;
-/** Mutable so one test can stub a brand row with a relative logo path. */
-let brandRowStub: {
-	companyName: string | null;
-	companyFriendlyName?: string | null;
-	primaryColor: string;
-	accentColor: string | null;
-	logo: { light: string | null; dark: string | null; brand: string | null };
-} | null = null;
-
-const noopLogger = {
-	info: () => {},
-	warn: () => {},
-	error: () => {},
-	debug: () => {},
-};
-
-mock.module("@teamscala/logger/app-loggers", () => ({
-	getAppLogger: () => noopLogger,
-}));
-
-mock.module("@teamscala/api-resend", () => ({
-	createResendAdapter: () => ({ bridged: true }),
-	emailsSend: async (_client: unknown, _params: unknown, args: CapturedEmail) => {
-		capturedEmail = args;
-		emailResolve?.(args);
-		return { id: "re_test_123" };
-	},
-}));
-
-// The row owns copy + layout; the test mirrors the authority-index-report
-// row's merge tokens so the substitution surface exercised is the real one.
-// applyTemplateVars stays the REAL implementation — only lookup is stubbed.
-mock.module("@teamscala/email-template/lookup", () => ({
-	lookupTemplate: async () => ({
-		// Mirrors the live authority-index-report row, which leads with {{orgName}}
-		// — a stub without it cannot catch a wrong org name in the subject.
-		subject: "{{orgName}}: your Authority Index — {{totalScore}}/100 ({{bandLabel}})",
-		bodyHtml:
-			"{{brandLogoHtml}}<h1>{{totalScore}}/100 — {{bandLabel}}</h1><h2>{{reportTitle}}</h2><p>{{tagline}}</p>{{narrativeHtml}}{{pillarNotesHtml}}{{priorityActionsHtml}}{{roadmapHtml}}{{strategicFocusHtml}}{{opportunitiesHtml}}{{twelveMonthTargetHtml}}",
-		bodyText:
-			"{{totalScore}}/100 — {{bandLabel}}\n{{reportTitle}}\n{{tagline}}\n{{narrativeText}}",
-	}),
-	applyTemplateVars,
-}));
-
-mock.module("@teamscala/db/registry/load-config", () => ({
-	loadRegistryConfig: async () => ({ token: "test-token" }),
-}));
-
-mock.module("@teamscala/encryption/crypto/secret-config", () => ({
-	decryptSecretConfig: (raw: unknown) => raw,
-}));
-
-mock.module("@teamscala/resolver-engine/data-resolvers/fetch-org-brand", () => ({
-	fetchOrgBrand: async () => brandRowStub,
-}));
-
-mock.module("@teamscala/email/identity/resolve-email-sender", () => ({
-	resolveEmailSender: async (
-		_organisationId: string | null | undefined,
-		opts?: { brand?: Record<string, unknown> },
-	) => ({
-		from: "Test <test@example.com>",
-		replyTo: undefined,
-		isOrgIdentity: false,
-		brand:
-			opts?.brand ?? {
-				orgName: "TestCo",
-				primaryColor: "#123456",
-				accentColor: "#abcdef",
-				logoUrl: null,
-			},
-	}),
-}));
-
-mock.module("@teamscala/event-log/record-event", () => ({
-	recordEvent: (e: { kind: string; payload: Record<string, unknown> }) => {
-		capturedEvent = e;
-	},
-}));
-
-const { publicAssessmentRouter } = await import("./public-assessment-router.ts");
-
-// Mirrors the authored assessments.stage_bands shape (ascending max, the last
-// band the catch-all) with the real threshold edges 20/40/60/80 — the band
-// set the report page renders.
-const STAGE_BANDS = {
-	bands: [
-		{
-			name: "Unknown",
-			max: 20,
-			tagline: "tagline-unknown",
-			executiveSummary: "You scored {{score}} — Unknown stage.",
-			pillarNotes: { seen: "seen-unknown" },
-			priorityActions: [{ title: "Act U1", description: "desc-u1" }],
-			roadmap: { month1: { focus: "Focus U", actions: ["u-a"] } },
-			strategicFocus: "focus-unknown",
-			opportunities: ["opp-u"],
-			twelveMonthTarget: "target-unknown",
-		},
-		{
-			name: "Testing",
-			max: 40,
-			tagline: "tagline-testing",
-			executiveSummary: "You scored {{score}} — Testing stage.",
-			pillarNotes: { seen: "seen-testing" },
-			priorityActions: [{ title: "Act T1", description: "desc-t1" }],
-			roadmap: { month1: { focus: "Focus T", actions: ["t-a"] } },
-			strategicFocus: "focus-testing",
-			opportunities: ["opp-t"],
-			twelveMonthTarget: "target-testing",
-		},
-		{
-			name: "Experimenting",
-			max: 60,
-			tagline: "tagline-experimenting",
-			executiveSummary: "You scored {{score}} — Experimenting stage.",
-			pillarNotes: { seen: "seen-experimenting", heard: "heard-experimenting" },
-			priorityActions: [
-				{ title: "Act E1", description: "desc-e1" },
-				{ title: "Act E2", description: "desc-e2" },
-			],
-			roadmap: {
-				month1: { focus: "Focus E1", actions: ["e1-a"] },
-				month2: { focus: "Focus E2", actions: ["e2-a"] },
-			},
-			strategicFocus: "focus-experimenting",
-			opportunities: ["opp-e"],
-			twelveMonthTarget: "target-experimenting",
-		},
-		{
-			name: "Recognised",
-			max: 80,
-			tagline: "tagline-recognised",
-			executiveSummary: "You scored {{score}} — Recognised stage.",
-			pillarNotes: {},
-			priorityActions: [],
-			strategicFocus: "focus-recognised",
-			twelveMonthTarget: "target-recognised",
-		},
-		{
-			name: "Industry Influencer",
-			tagline: "tagline-influencer",
-			executiveSummary: "You scored {{score}} — Influencer stage.",
-			pillarNotes: {},
-			priorityActions: [],
-			strategicFocus: "focus-influencer",
-			twelveMonthTarget: "target-influencer",
-		},
-	],
-};
-
-function makeFakePrisma() {
-	return {
-		assessments: {
-			findUnique: async () => ({
-				id: "asmt-1",
-				organisation_id: "org-1",
-				questions: Array.from({ length: 20 }, (_, i) => ({
-					id: `q${i + 1}`,
-					type: "scale",
-					category: `Pillar ${(i % 4) + 1}`,
-				})),
-				cta_url: "https://book.example/session",
-				slug: "authority-index",
-				stage_bands: STAGE_BANDS,
-				report_title: "Personalised Authority Blueprint",
-			}),
-		},
-		// client_database deliberately absent — the quiz prisma client is
-		// scoped without it, so the CRM branch must skip without error.
-		assessment_responses: {
-			create: async (args: { data: Record<string, unknown> }) => {
-				capturedResponseRow = args?.data ?? null;
-				return { id: "resp-1" };
-			},
-		},
-		email_send_log: {
-			create: async () => ({}),
-		},
-	};
-}
-
-/** 20 scale questions (max 80); 9 answered 5 (earned 36) + 11 answered 1 (earned 0) → 45%. */
-function answersForScore45() {
-	return Array.from({ length: 20 }, (_, i) => ({
-		questionId: `q${i + 1}`,
-		scaleValue: i < 9 ? 5 : 1,
-	}));
-}
-
-type SubmitHandler = (opts: {
-	input: Record<string, unknown>;
-	context: { prisma: unknown; headers: Headers };
-}) => Promise<Record<string, unknown>>;
-
-async function submitWith45(
-	headers = new Headers(),
-	extraInput: Record<string, unknown> = {},
-) {
-	// The raw handler under ~orpc only reads { input, context }; the other
-	// ProcedureHandlerOptions fields are middleware plumbing this procedure
-	// (no middlewares) never touches, so the narrowed call shape is cast.
-	const handler = publicAssessmentRouter.submit["~orpc"].handler as unknown as SubmitHandler;
-	return handler({
-		input: {
-			assessmentId: "asmt-1",
-			firstName: "Alex Reader",
-			email: "alex@example.com",
-			answers: answersForScore45(),
-			...extraInput,
-		},
-		context: { prisma: makeFakePrisma(), headers },
-	});
-}
-
-beforeEach(() => {
-	capturedEmail = null;
-	capturedEvent = null;
-	capturedResponseRow = null;
-	brandRowStub = null;
-});
-
-describe("publicAssessment.submit — email band single-sourced from stage_bands", () => {
-	test("score 45 names the stage_bands band (Experimenting), not the retired config band (Testing)", async () => {
-		const result = await submitWith45();
-		expect(result.totalScore).toBe(45);
-		expect(result.band).toBe("Experimenting");
-	});
-
-	test("the email arrives naming the same band, with the narrative substituted and no literal {{score}}", async () => {
-		const emailPromise = new Promise<CapturedEmail>((resolve) => {
-			emailResolve = resolve;
-		});
-		await submitWith45();
-		const email = await emailPromise;
-
-		expect(email.subject).toContain("45/100");
-		expect(email.subject).toContain("Experimenting");
-		expect(email.html).toContain("45/100 — Experimenting");
-		expect(email.html).toContain("You scored 45 — Experimenting stage.");
-		expect(email.html).not.toContain("{{score}}");
-		expect(email.text).toContain("You scored 45 — Experimenting stage.");
-		expect(email.text).not.toContain("{{score}}");
-	});
-
-	test("report sections render from the same band the header names", async () => {
-		const emailPromise = new Promise<CapturedEmail>((resolve) => {
-			emailResolve = resolve;
-		});
-		await submitWith45();
-		const email = await emailPromise;
-
-		expect(email.html).toContain("Personalised Authority Blueprint");
-		expect(email.html).toContain("tagline-experimenting");
-		expect(email.html).toContain("Act E1");
-		expect(email.html).toContain("desc-e1");
-		expect(email.html).toContain("Focus E1");
-		expect(email.html).toContain("focus-experimenting");
-		expect(email.html).toContain("opp-e");
-		expect(email.html).toContain("target-experimenting");
-		// other bands' copy must not leak into this band's email
-		expect(email.html).not.toContain("Act T1");
-		expect(email.html).not.toContain("Act U1");
-		expect(email.html).not.toContain("Recognised stage");
-	});
-
-	test("the event tag slug derives from the authored band name", async () => {
-		await submitWith45();
-		expect(capturedEvent?.kind).toBe("assessment.authority.completed");
-		expect(capturedEvent?.payload.band).toBe("experimenting");
-	});
-
-	test("the subject and logo alt use the FRIENDLY name, not the legal entity", async () => {
-		// company_name is the legal entity (GMG APAC); company_friendly_name is
-		// what customers know the org as (launcha). Recipients were getting
-		// "GMG APAC: your Authority Index" and alt="GMG APAC".
-		brandRowStub = {
-			companyName: "GMG APAC",
-			companyFriendlyName: "launcha",
-			primaryColor: "#FF4500",
-			accentColor: null,
-			logo: { light: "/api/assets/5b742740/logos/launcha.png", dark: null, brand: null },
-		};
-		const emailPromise = new Promise<CapturedEmail>((resolve) => {
-			emailResolve = resolve;
-		});
-		await submitWith45(new Headers({ "x-forwarded-host": "quiz.scala.business" }));
-		const email = await emailPromise;
-
-		expect(email.subject).toContain("launcha:");
-		expect(email.subject).not.toContain("GMG APAC");
-		expect(email.html).toContain('alt="launcha"');
-	});
-
-	test("an org with no friendly name still gets its legal name, unchanged", async () => {
-		// The fallback must stay intact: most orgs have never set a friendly name.
-		brandRowStub = {
-			companyName: "GMG APAC",
-			companyFriendlyName: null,
-			primaryColor: "#FF4500",
-			accentColor: null,
-			logo: { light: "/api/assets/5b742740/logos/launcha.png", dark: null, brand: null },
-		};
-		const emailPromise = new Promise<CapturedEmail>((resolve) => {
-			emailResolve = resolve;
-		});
-		await submitWith45(new Headers({ "x-forwarded-host": "quiz.scala.business" }));
-		const email = await emailPromise;
-
-		expect(email.subject).toContain("GMG APAC:");
-	});
-
-	test("a relative brand logo renders as an absolute img src from the serving host", async () => {
-		brandRowStub = {
-			companyName: "GMG APAC",
-			primaryColor: "#FF4500",
-			accentColor: null,
-			logo: {
-				light: "/api/assets/5b742740/logos/launcha.png",
-				dark: null,
-				brand: null,
-			},
-		};
-		const emailPromise = new Promise<CapturedEmail>((resolve) => {
-			emailResolve = resolve;
-		});
-		await submitWith45(
-			new Headers({ "x-forwarded-host": "quiz.scala.business" }),
-		);
-		const email = await emailPromise;
-
-		expect(email.html).toContain(
-			'<img src="https://quiz.scala.business/api/assets/5b742740/logos/launcha.png"',
-		);
-	});
-
-	test("a relative logo with no host header stays absent rather than emitting a broken src", async () => {
-		brandRowStub = {
-			companyName: "GMG APAC",
-			primaryColor: "#FF4500",
-			accentColor: null,
-			logo: {
-				light: "/api/assets/5b742740/logos/launcha.png",
-				dark: null,
-				brand: null,
-			},
-		};
-		const emailPromise = new Promise<CapturedEmail>((resolve) => {
-			emailResolve = resolve;
-		});
-		await submitWith45();
-		const email = await emailPromise;
-
-		expect(email.html).not.toMatch(/<img/i);
-	});
-});
-
-describe("prospect segmentation fields are captured without touching the score", () => {
-	const SEGMENTATION = {
-		linkedinUrl: "https://www.linkedin.com/in/alex-reader",
-		website: "https://alexreader.example",
-		teamSize: "Me + team of 2–5",
-	};
-
-	test("all three persist to their own columns", async () => {
-		await submitWith45(new Headers(), SEGMENTATION);
-		expect(capturedResponseRow?.linkedin_url).toBe(SEGMENTATION.linkedinUrl);
-		expect(capturedResponseRow?.website).toBe(SEGMENTATION.website);
-		expect(capturedResponseRow?.team_size).toBe(SEGMENTATION.teamSize);
-	});
-
-	test("the Authority Index is IDENTICAL with and without them", async () => {
-		// The operator's binding constraint: these are segmentation only and must
-		// not move the score. Asserting the same answers produce the same score
-		// either way is the only check that actually proves it — asserting the
-		// columns were written says nothing about the scorer.
-		const without = (await submitWith45()) as {
-			totalScore: number;
-			categoryScores: Record<string, number>;
-		};
-		const withFields = (await submitWith45(
-			new Headers(),
-			SEGMENTATION,
-		)) as { totalScore: number; categoryScores: Record<string, number> };
-
-		expect(withFields.totalScore).toBe(without.totalScore);
-		expect(withFields.categoryScores).toEqual(without.categoryScores);
-	});
-
-	test("omitting them writes null, not empty string", async () => {
-		// A skipped optional field must be absent in the data, so segmentation
-		// queries can tell "not asked" from "answered blank".
-		await submitWith45();
-		expect(capturedResponseRow?.linkedin_url).toBeNull();
-		expect(capturedResponseRow?.website).toBeNull();
-		expect(capturedResponseRow?.team_size).toBeNull();
-	});
-
-	test("the existing answers payload is unchanged by their presence", async () => {
-		// Guards the other direction: segmentation must not leak into `answers`,
-		// which is the set the scorer reads.
-		await submitWith45(new Headers(), SEGMENTATION);
-		const answers = capturedResponseRow?.answers as Array<{ question_id: string }>;
-		expect(answers).toHaveLength(20);
-		expect(JSON.stringify(answers)).not.toContain("linkedin");
-		expect(JSON.stringify(answers)).not.toContain("team of 2");
-	});
-});

package/src/fn-routers/public-assessment-router.ts

@@ -1,268 +0,0 @@
-/**
- * @system service-boot
- * @status handwritten
- * @edit edit directly
- *
- * Public ORPC procedure for submitting a public assessment (quiz) response.
- * Mirrors public-gpt-session-router: a public, system-trusted write path for an
- * anonymous/guest visitor — find-or-create the contact in client_database, score
- * the answers, and persist an assessment_responses row. This is the submit path
- * the deleted public-assessment wrapper used to provide via an injected onSubmit;
- * recovering it here brings the quiz in line with the shared machinery (the GPT's
- * publicGptSession is the sibling pattern) instead of a per-page bespoke handler.
- *
- * Scoring lives in assessment-scoring.ts; the branded report email in
- * assessment-report-email.ts — split when this file held them all at 591 lines.
- */
-
-import { os } from "@orpc/server";
-import * as v from "valibot";
-import { getAppLogger } from "@teamscala/logger/app-loggers";
-import { recordEvent } from "@teamscala/event-log/record-event";
-import {
-	readStageBands,
-	selectStageBand,
-} from "./assessment-report-data.ts";
-import { sendAuthorityReportEmail } from "./assessment-report-email.ts";
-import { scoreAnswers, toBandSlug, type StoredQuestion } from "./assessment-scoring.ts";
-import type { PrismaClient } from "@teamscala/db/client";
-
-interface Context {
-	prisma: PrismaClient;
-	headers: Headers;
-	resolveUser?: (headers: Headers, prisma: PrismaClient) => Promise<unknown>;
-}
-
-const pub = os.$context<Context>();
-
-const submitSchema = v.object({
-	assessmentId: v.string(),
-	firstName: v.string(),
-	email: v.string(),
-	company: v.optional(v.string()),
-	phone: v.optional(v.string()),
-	// Prospect segmentation, captured at the company step. All optional and all
-	// written to their own columns — none is an input to scoring, which reads
-	// `answers` alone.
-	linkedinUrl: v.optional(v.string()),
-	website: v.optional(v.string()),
-	industry: v.optional(v.string()),
-	teamSize: v.optional(v.string()),
-	revenueRange: v.optional(v.string()),
-	answers: v.array(
-		v.object({
-			questionId: v.string(),
-			scaleValue: v.optional(v.number()),
-			textValue: v.optional(v.string()),
-			choiceValue: v.optional(v.string()),
-			choiceValues: v.optional(v.array(v.string())),
-		}),
-	),
-});
-
-export const publicAssessmentRouter = {
-	submit: pub.input(submitSchema).handler(async ({ input, context }) => {
-		const prisma = context.prisma;
-		const log = getAppLogger();
-		const email = (input.email ?? "").trim().toLowerCase();
-
-		try {
-			const assessment = await prisma.assessments.findUnique({
-				where: { id: input.assessmentId },
-				select: {
-					id: true,
-					organisation_id: true,
-					questions: true,
-					cta_url: true,
-					slug: true,
-					stage_bands: true,
-					report_title: true,
-				},
-			});
-			if (!assessment) return { error: "Assessment not found" } as const;
-
-			const questions = ((Array.isArray(assessment.questions)
-				? assessment.questions
-				: []) as unknown) as StoredQuestion[];
-			const { totalScore, categoryScores } = scoreAnswers(
-				questions,
-				input.answers,
-			);
-			// ONE BAND SOURCE. The report page selects from assessments.stage_bands;
-			// the email used to select from a parallel `<id>-bands` config row whose
-			// thresholds disagreed (45 was Testing to the email and Experimenting to
-			// the report). Both now read the authored bands, so the band named in the
-			// email is by construction the band the report shows.
-			const stageBands = readStageBands(assessment);
-			const stageBand = selectStageBand(stageBands, totalScore);
-			const band = stageBand
-				? { label: stageBand.name, slug: toBandSlug(stageBand.name) }
-				: null;
-
-			// Find-or-create the contact in client_database (the single contact
-			// store) — same shape as publicGptSession's gate. OPTIONAL: only
-			// services whose prisma client includes client_database (e.g. the GPT)
-			// link a CRM contact here. The quiz service's client is scoped without
-			// it, so skip gracefully — the assessment_responses row below already
-			// captures name/last_name/email/company, matching the historical quiz
-			// (which never wrote CRM contacts either).
-			const nameParts = (input.firstName ?? "").trim().split(/\s+/);
-			const firstName = nameParts[0] || "Unknown";
-			const lastName = nameParts.slice(1).join(" ") || "-";
-			const orgId = assessment.organisation_id;
-			const bandTag = band ? `authority:${band.slug}` : null;
-			const firmographicTags = [
-				input.industry ? `industry:${input.industry}` : null,
-				input.teamSize ? `team-size:${input.teamSize}` : null,
-				input.revenueRange ? `revenue:${input.revenueRange}` : null,
-			].filter((t): t is string => t !== null);
-			const assignedTags = [bandTag, ...firmographicTags].filter(
-				(t): t is string => t !== null,
-			);
-			const assignedPrefixes = [
-				"authority:",
-				"industry:",
-				"team-size:",
-				"revenue:",
-			];
-			if (orgId && prisma.client_database) {
-				const existing = await prisma.client_database.findFirst({
-					where: { organisation_id: orgId, primary_email: email },
-					select: { id: true, tags: true },
-				});
-				const websiteData = input.website
-					? { company_website: input.website }
-					: {};
-				if (existing) {
-					// Replace any prior assessment-assigned tags with the new set.
-					const nextTags = [
-						...(existing.tags ?? []).filter(
-							(t: string) => !assignedPrefixes.some((p) => t.startsWith(p)),
-						),
-						...assignedTags,
-					];
-					await prisma.client_database.update({
-						where: { id: existing.id },
-						data: {
-							first_name: firstName,
-							last_name: lastName,
-							...(input.phone ? { mobile_phone: input.phone } : {}),
-							...(input.company ? { company_name: input.company } : {}),
-							...websiteData,
-							tags: nextTags,
-							last_updated_by: "assessment-gate",
-						},
-					});
-				} else {
-					await prisma.client_database.create({
-						data: {
-							organisation_id: orgId,
-							first_name: firstName,
-							last_name: lastName,
-							primary_email: email,
-							mobile_phone: input.phone ?? null,
-							company_name: input.company ?? null,
-							...websiteData,
-							lead_source: "assessment-gate",
-							data_source: "public-form",
-							referral_source: input.assessmentId,
-							lifecycle_stage: "lead",
-							tags: assignedTags,
-							created_by: "assessment-gate",
-							last_updated_by: "assessment-gate",
-						},
-					});
-				}
-			}
-
-			const response = await prisma.assessment_responses.create({
-				data: {
-					assessment_id: input.assessmentId,
-					email,
-					first_name: firstName,
-					last_name: lastName,
-					company: input.company ?? null,
-					linkedin_url: input.linkedinUrl ?? null,
-					website: input.website ?? null,
-					team_size: input.teamSize ?? null,
-					total_score: totalScore,
-					category_scores: categoryScores,
-					answers: input.answers.map((a) => ({
-						question_id: a.questionId,
-						scale_value: a.scaleValue ?? null,
-						text_value: a.textValue ?? null,
-						choice_value: a.choiceValue ?? null,
-						choice_values: a.choiceValues ?? null,
-					})),
-					organisation_id: orgId,
-					completed_at: new Date(),
-				},
-				select: { id: true },
-			});
-
-			// Detached post-submit automation: branded report email + sales notify.
-			// Failures are logged and never undo the submit.
-			const ctaUrl =
-				(typeof assessment.cta_url === "string" && assessment.cta_url) ||
-				undefined;
-			// The serving origin for brand asset paths. Behind Railway/Cloudflare the
-			// proxy host is authoritative, hence x-forwarded-host first. A
-			// non-DNS-safe value is dropped rather than passed into an email.
-			const hostHeader =
-				context.headers.get("x-forwarded-host") ?? context.headers.get("host");
-			const publicBaseUrl =
-				hostHeader && /^[A-Za-z0-9.-]+$/.test(hostHeader)
-					? `https://${hostHeader}`
-					: null;
-			if (band) {
-				void sendAuthorityReportEmail({
-					to: email,
-					firstName,
-					totalScore,
-					bandLabel: band.label,
-					stageBand,
-					reportTitle:
-						(typeof assessment.report_title === "string" && assessment.report_title) ||
-						"Your report",
-					categoryScores,
-					ctaUrl,
-					organisationId: orgId,
-					prisma,
-					publicBaseUrl,
-				}).catch((e) =>
-					log.error(
-						`[publicAssessment.submit] report email non-fatal: ${e instanceof Error ? e.message : String(e)}`,
-					),
-				);
-			}
-			if (orgId) {
-				recordEvent({
-					kind: "assessment.authority.completed",
-					payload: {
-						assessment_id: input.assessmentId,
-						response_id: response.id,
-						email,
-						organisation_id: orgId,
-						total_score: totalScore,
-						band: band?.slug ?? null,
-						category_scores: categoryScores,
-					},
-				});
-			}
-
-			return {
-				success: true as const,
-				responseId: response.id,
-				reportUrl: `/report/${response.id}`,
-				totalScore,
-				categoryScores,
-				...(band ? { band: band.label } : {}),
-			};
-		} catch (err) {
-			log.error(
-				`[publicAssessment.submit] failed: ${err instanceof Error ? err.message : String(err)}`,
-			);
-			throw err;
-		}
-	}),
-};