@teamscala/service-boot 0.23.481 → 0.23.493

package/src/fn-routers/assessment-report-email.ts

@@ -1,256 +0,0 @@
-/**
- * @system service-boot
- * @status handwritten
- * @edit edit directly
- *
- * Best-effort branded Authority Index Report email for a public assessment
- * submit: org brand tokens, the email_template row's copy/layout, per-stage
- * report sections, Resend send with platform-sender fallback, and the
- * email_send_log audit row.
- *
- * Split out of fn-routers/public-assessment-router.ts (591 lines) —
- * byte-for-byte move; import paths adjusted only.
- */
-
-import * as v from "valibot";
-import { getAppLogger } from "@teamscala/logger/app-loggers";
-import { sendResendEmail } from "./resend-client.ts";
-import { applyTemplateVars, lookupTemplate } from "@teamscala/email-template/lookup";
-import { resolveEmailSender } from "@teamscala/email/identity/resolve-email-sender";
-import { decryptSecretConfig } from "@teamscala/encryption/crypto/secret-config";
-import { loadRegistryConfig } from "@teamscala/db/registry/load-config";
-import type { PrismaClient } from "@teamscala/db/client";
-import { fetchOrgBrand } from "@teamscala/resolver-engine/data-resolvers/fetch-org-brand";
-import type { StageBand } from "./assessment-report-data.ts";
-import {
-	generateNarrative,
-	orderRoadmap,
-} from "./assessment-report-data.ts";
-
-export async function sendAuthorityReportEmail(opts: {
-	to: string;
-	firstName: string;
-	totalScore: number;
-	bandLabel: string;
-	stageBand: StageBand | null;
-	reportTitle: string;
-	categoryScores: Record<string, number>;
-	ctaUrl?: string;
-	organisationId?: string | null;
-	prisma: PrismaClient;
-	/**
-	 * Absolute origin (e.g. "https://quiz.scala.business") of the service that
-	 * received the submit — the origin that serves /api/assets. Mail clients
-	 * cannot resolve a relative src, so an org logo stored as a relative path
-	 * only renders when this is provided. Null → a relative logo stays absent
-	 * (previous behaviour) rather than emitting a broken src.
-	 */
-	publicBaseUrl?: string | null;
-}): Promise<void> {
-	const log = getAppLogger();
-	const rawSecret = await loadRegistryConfig(
-		"secret",
-		"resend-api-key",
-		v.looseObject({ token: v.optional(v.string()) }),
-	).catch(() => null);
-	const decrypted = rawSecret
-		? (decryptSecretConfig(rawSecret as never) as { token?: string })
-		: null;
-	const resendToken = decrypted?.token;
-	if (!resendToken) {
-		log.warn("[authority-report-email] Resend token unavailable — skipping");
-		return;
-	}
-
-	const brandRow =
-		opts.organisationId && opts.prisma
-			? await fetchOrgBrand(
-					opts.prisma as unknown as Parameters<typeof fetchOrgBrand>[0],
-					opts.organisationId,
-				).catch(() => null)
-			: null;
-	// Brand assets are stored as service-relative paths ("/api/assets/…") —
-	// the same origin that served the submit request serves them, so the email
-	// derives the absolute URL from that origin at resolve time instead of the
-	// profile row being mutated per consumer. Already-absolute logos pass through.
-	const absolutizeAssetUrl = (url: string | null): string | null => {
-		if (!url) return null;
-		if (/^https?:\/\//.test(url)) return url;
-		if (url.startsWith("/") && opts.publicBaseUrl) return `${opts.publicBaseUrl}${url}`;
-		return null;
-	};
-	const sender = await resolveEmailSender(opts.organisationId ?? null, {
-		brand: brandRow
-			? {
-					// The FRIENDLY name is the customer-facing one; company_name is the
-					// legal entity. Recipients were getting "GMG APAC: your Authority
-					// Index" and alt="GMG APAC" on the logo, for an org whose brand is
-					// Launcha. Same precedence the platform already uses in
-					// agreement-gate (friendly ?? legal), so an org that never set a
-					// friendly name is unchanged.
-					orgName: brandRow.companyFriendlyName || brandRow.companyName || "",
-					primaryColor: brandRow.primaryColor,
-					accentColor: brandRow.accentColor ?? null,
-					logoUrl: absolutizeAssetUrl(brandRow.logo.light),
-				}
-			: undefined,
-	});
-	const primary = sender.brand.primaryColor;
-	const muted = "#6b7280"; // structural neutral for body labels
-	const logoUrl = sender.brand.logoUrl;
-	const logoHtml =
-		logoUrl && /^https?:\/\//.test(logoUrl)
-			? `<p style="margin:0 0 20px"><img src="${logoUrl}" alt="${sender.brand.orgName || ""}" style="max-height:56px;display:block"></p>`
-			: "";
-
-	// Subject + body from the `authority-index-report` email_template row, not
-	// literals here (email-template-registry-type). Dynamic markup is rendered
-	// here and passed as merge vars — the row owns copy + layout; colours +
-	// logo come from the org brand tokens, NOT inline literals.
-	const pillarRows = (
-		Object.entries(opts.categoryScores) as Array<[string, number]>
-	)
-		.map(
-			([name, score]) =>
-				`<tr><td style="padding:6px 0;color:${muted}">${name}</td><td style="padding:6px 0;text-align:right;font-weight:600;color:${primary}">${score} / 100</td></tr>`,
-		)
-		.join("");
-	const pillarsText = (
-		Object.entries(opts.categoryScores) as Array<[string, number]>
-	)
-		.map(([name, score]) => `${name}: ${score} / 100`)
-		.join("\n");
-	// REPORT SECTIONS. Authored per stage on assessments.stage_bands and rendered
-	// here as markup, so the template row stays copy + layout. Every section is
-	// optional: a stage that has not authored one yields an empty string and the
-	// row simply renders nothing for it.
-	const b = opts.stageBand;
-	const sectionHtml = (heading: string, inner: string) =>
-		inner
-			? `<h3 style="margin:24px 0 8px;font-size:16px;font-weight:700;color:${primary}">${heading}</h3>${inner}`
-			: "";
-	const paraHtml = (text?: string) =>
-		text ? `<p style="margin:0 0 12px;color:${muted}">${text}</p>` : "";
-	const bulletsHtml = (items?: string[]) =>
-		Array.isArray(items) && items.length > 0
-			? `<ul style="margin:0 0 12px;padding-left:20px;color:${muted}">${items
-					.map((i) => `<li style="margin:0 0 4px">${i}</li>`)
-					.join("")}</ul>`
-			: "";
-	const actionsHtml =
-		Array.isArray(b?.priorityActions) && b.priorityActions.length > 0
-			? b.priorityActions
-					.map(
-						(a) =>
-							`<p style="margin:0 0 10px"><strong style="font-size:14px;color:${primary}">${a.title}</strong><br><span style="color:${muted}">${a.description ?? ""}</span></p>`,
-					)
-					.join("")
-			: "";
-	const roadmapHtml = orderRoadmap(b?.roadmap)
-		.map(
-			(phase) =>
-				`<p style="margin:0 0 10px"><strong style="font-size:14px;color:${primary}">${phase.focus ?? ""}</strong><br><span style="color:${muted}">${(phase.actions ?? []).join(" · ")}</span></p>`,
-		)
-		.join("");
-	const notes = b?.pillarNotes ?? {};
-	const pillarNotesHtml = Object.keys(notes).length
-		? Object.entries(notes)
-				.map(
-					([k, v]) =>
-						`<p style="margin:0 0 8px;color:${muted}"><strong style="font-size:14px;color:${primary};text-transform:capitalize">${k}</strong> — ${v}</p>`,
-				)
-				.join("")
-		: "";
-	const narrative = generateNarrative(opts.totalScore, b ?? null);
-
-	const tpl = applyTemplateVars(await lookupTemplate("authority-index-report"), {
-		firstName: opts.firstName || "there",
-		totalScore: String(opts.totalScore),
-		bandLabel: opts.bandLabel,
-		pillarRows,
-		pillarsText,
-		reportTitle: opts.reportTitle,
-		tagline: b?.tagline ?? "",
-		narrativeHtml: paraHtml(narrative),
-		pillarNotesHtml: sectionHtml("Where you stand", pillarNotesHtml),
-		priorityActionsHtml: sectionHtml("Your priority actions", actionsHtml),
-		roadmapHtml: sectionHtml("Your next 90 days", roadmapHtml),
-		strategicFocusHtml: sectionHtml("Strategic focus", paraHtml(b?.strategicFocus)),
-		opportunitiesHtml: sectionHtml("Opportunities", bulletsHtml(b?.opportunities)),
-		twelveMonthTargetHtml: sectionHtml("Twelve-month target", paraHtml(b?.twelveMonthTarget)),
-		narrativeText: narrative,
-		brandPrimaryColor: primary,
-		brandAccentColor: sender.brand.accentColor ?? primary,
-		brandLogoHtml: logoHtml,
-		orgName: sender.brand.orgName,
-		ctaHtml: opts.ctaUrl
-			? `<p style="margin:24px 0 0"><a href="${opts.ctaUrl}" style="display:inline-block;background:${primary};color:#ffffff;text-decoration:none;font-weight:600;padding:12px 22px;border-radius:8px">Book your Authority Growth Session</a></p>`
-			: "",
-		ctaText: opts.ctaUrl ? `\nBook your Authority Growth Session: ${opts.ctaUrl}` : "",
-	});
-
-	const sendOnce = async (fromHeader: string, replyToHeader: string | undefined) =>
-		sendResendEmail(resendToken, {
-			from: fromHeader,
-			to: opts.to,
-			subject: tpl.subject,
-			html: tpl.bodyHtml,
-			text: tpl.bodyText,
-			reply_to: replyToHeader,
-		});
-
-	let res = await sendOnce(sender.from, sender.replyTo);
-	let usedFrom = sender.from;
-	if (!res.success) {
-		// Resend refused the org sender (likely unverified domain). Fall back
-		// to the platform sender; never fail because a verification lookup
-		// failed — the resolver returns the row, the failure is at Resend.
-		const platformRow = await loadRegistryConfig(
-			"config",
-			"email-defaults",
-			v.looseObject({ default_sender: v.optional(v.string()) }),
-		).catch(() => null);
-		const fallbackFrom =
-			(platformRow?.default_sender as string | undefined)?.trim() ||
-			"scala <noreply@gateway.scala.business>";
-		log.warn(
-			`[authority-report-email] org sender ${sender.from} refused by Resend (${res.error ?? "unknown"}); falling back to platform ${fallbackFrom}`,
-		);
-		res = await sendOnce(fallbackFrom, undefined);
-		usedFrom = fallbackFrom;
-	}
-
-	if (res.success) {
-		log.info(
-			`[authority-report-email] sent to ${opts.to}${res.id ? ` (id ${res.id})` : ""} from=${usedFrom}${sender.isOrgIdentity ? "" : " (platform fallback)"}`,
-		);
-	} else {
-		log.error(
-			`[authority-report-email] failed to ${opts.to}: ${res.error ?? "unknown"}`,
-		);
-	}
-
-	// email-send-audited: best-effort audit row. Guarded so a stale prisma
-	// client (scala-quiz schema predates email_send_log) skips cleanly.
-	try {
-		const auditPrisma = opts.prisma as {
-			email_send_log?: { create: (args: unknown) => Promise<unknown> };
-		};
-		if (auditPrisma?.email_send_log) {
-			await auditPrisma.email_send_log.create({
-				data: {
-					to_address: opts.to,
-					template_slug: "authority-index-report",
-					status: res.success ? "sent" : "failed",
-					provider_message_id: res.id ?? null,
-					error: res.success ? null : (res.error ?? "unknown"),
-					from_address: usedFrom,
-				},
-			});
-		}
-	} catch (auditErr) {
-		log.warn(
-			`[authority-report-email] audit row write failed: ${auditErr instanceof Error ? auditErr.message : String(auditErr)}`,
-		);
-	}
-}

package/src/fn-routers/assessment-report-pair.test.ts

@@ -1,136 +0,0 @@
-import { describe, expect, test } from "bun:test";
-import { resolveReportHalves } from "./assessment-report-pair.ts";
-import type { ReportResearchInput } from "./assessment-research-report-data.ts";
-
-const ANNA_LINKEDIN_RAW = "https://www.linkedin.com/in/annaosherov/";
-const ANNA_KEY = "linkedin.com/in/annaosherov";
-
-function annaResearch(overrides: Partial<ReportResearchInput> = {}): ReportResearchInput {
-	return {
-		id: "research-anna",
-		assessment_id: "assessment-launcha",
-		display_name: "Anna Osherov",
-		linkedin_url: ANNA_LINKEDIN_RAW,
-		identity_key: ANNA_KEY,
-		validation_note: "Confirmed.",
-		total_score: 71,
-		category_scores: { "Be Seen": 57, "Be Heard": 76, "Be Chosen": 80 },
-		researched_at: "2026-09-04T00:00:00Z",
-		superseded_at: null,
-		...overrides,
-	};
-}
-
-const ANNA_RESPONSE = {
-	id: "response-anna",
-	assessment_id: "assessment-launcha",
-	first_name: "Anna",
-	linkedin_url: ANNA_LINKEDIN_RAW,
-	total_score: 54,
-};
-
-function fakeClient(overrides: {
-	researchLive?: ReportResearchInput | null;
-	responses?: Array<{ linkedin_url: string | null } & Record<string, unknown>>;
-}) {
-	return {
-		assessment_research: {
-			findFirst: async () => overrides.researchLive ?? null,
-		},
-		assessment_responses: {
-			findFirst: async () => null,
-			findMany: async () => overrides.responses ?? [],
-		},
-	};
-}
-
-describe("resolveReportHalves", () => {
-	test("response-anchored :id pairs the research by normalised identity", async () => {
-		const halves = await resolveReportHalves({
-			input: { response: ANNA_RESPONSE, research: null, id: "response-anna" },
-			client: fakeClient({ researchLive: annaResearch() }),
-			params: {},
-		});
-		expect(halves.research?.identity_key).toBe(ANNA_KEY);
-	});
-
-	test("research-anchored :id pairs the quiz response by normalised identity", async () => {
-		const halves = await resolveReportHalves({
-			input: { response: null, research: annaResearch(), id: "research-anna" },
-			client: fakeClient({
-				responses: [
-					{ id: "response-anna", linkedin_url: ANNA_LINKEDIN_RAW, total_score: 54 },
-				],
-			}),
-			params: {},
-		});
-		expect(halves.response?.id).toBe("response-anna");
-	});
-
-	test("a different person's response is never paired", async () => {
-		const halves = await resolveReportHalves({
-			input: { response: null, research: annaResearch(), id: "research-anna" },
-			client: fakeClient({
-				responses: [
-					{
-						id: "response-other",
-						linkedin_url: "https://www.linkedin.com/in/malcolm-mclean/",
-						total_score: 12,
-					},
-				],
-			}),
-			params: {},
-		});
-		expect(halves.response).toBeNull();
-	});
-
-	test("a superseded anchor resolves the person's live pass", async () => {
-		const superseded = annaResearch({ superseded_at: "2026-09-04T01:00:00Z" });
-		const halves = await resolveReportHalves({
-			input: { response: null, research: superseded, id: "research-superseded" },
-			client: fakeClient({ researchLive: annaResearch() }),
-			params: {},
-		});
-		expect(halves.research?.superseded_at).toBeNull();
-		expect(halves.research?.total_score).toBe(71);
-	});
-
-	test("an id matching neither surface refuses instead of rendering an empty report", async () => {
-		await expect(
-			resolveReportHalves({
-				input: { response: null, research: null, id: "unknown-id" },
-				client: fakeClient({}),
-				params: {},
-			}),
-		).rejects.toThrow(/matches no quiz response/);
-	});
-});
-
-describe("superseded-pass leak prevention", () => {
-	test("the live pass reaches the reader and the superseded pass's wording never does", async () => {
-		const SUPERSEDED_MARKER = "SUPERSEDED-PASS-64-PARKED-DOMAIN-CLAIM";
-		const superseded = annaResearch({
-			id: "research-superseded",
-			superseded_at: "2026-09-04T01:00:00Z",
-			findings: { intro: `${SUPERSEDED_MARKER}: no website exists.` },
-		});
-		const live = annaResearch({ id: "research-live", findings: { intro: "launcha.marketing is live and names you." } });
-		const client = {
-			assessment_research: {
-				findFirst: async () => live,
-			},
-			assessment_responses: {
-				findFirst: async () => null,
-				findMany: async () => [],
-			},
-		};
-		const halves = await resolveReportHalves({
-			input: { response: null, research: superseded, id: superseded.id },
-			client,
-			params: {},
-		});
-		const text = JSON.stringify(halves.research);
-		expect(text).not.toContain(SUPERSEDED_MARKER);
-		expect(text).toContain("launcha.marketing is live and names you");
-	});
-});

package/src/fn-routers/assessment-report-pair.ts

@@ -1,155 +0,0 @@
-/**
- * @system service-boot
- * @status handwritten @indivisible-unit owner=lane/unified-authority-index-report reason="one pairing unit: the rule that joins a report id to its response+research halves lives here alone"
- * @edit edit directly
- *
- * assessment-report-pair.ts — resolveReportHalves resolver_fn.
- *
- * /report/:id carries EITHER an assessment_responses id OR an
- * assessment_research id. This resolver turns whichever anchor arrived into
- * the complete PAIR by the person's normalised LinkedIn identity
- * (identity_key, shared unit in linkedin-identity.ts) per assessment — so
- * both URL forms render identical content, and a quiz response (re)taken
- * after research still pairs with that person's research.
- *
- * WHY A RESOLVER AND NOT LOADER SOURCES: the join key is a DERIVED value
- * (the normalised URL), not a column equality a row config can express, and
- * the response side stores raw self-reported URLs. The resolver owns the
- * lookup; the loader row stays declarative.
- *
- * SUPERSEDED PASSES NEVER REACH A READER (operator correction 2026-09-04): a
- * research pass can be WRONG and get corrected; the superseded row keeps its
- * history but the report resolves the live pass (superseded_at IS NULL) even
- * when the :id anchor points at the superseded one, so an old link renders
- * the corrected report, never the withdrawn one.
- */
-import { normaliseLinkedinIdentity } from "./linkedin-identity.ts";
-import type { ReportPairResponseInput, ReportResearchInput } from "./assessment-research-report-data.ts";
-
-const RESEARCH_SELECT = {
-	id: true,
-	assessment_id: true,
-	display_name: true,
-	role_line: true,
-	linkedin_url: true,
-	identity_key: true,
-	website: true,
-	organisation_id: true,
-	validation_note: true,
-	total_score: true,
-	category_scores: true,
-	answers: true,
-	findings: true,
-	researched_at: true,
-	superseded_at: true,
-} as const;
-
-const RESPONSE_SELECT = {
-	id: true,
-	assessment_id: true,
-	first_name: true,
-	last_name: true,
-	linkedin_url: true,
-	website: true,
-	total_score: true,
-	category_scores: true,
-	answers: true,
-	completed_at: true,
-	organisation_id: true,
-} as const;
-
-interface ResearchDelegate {
-	findFirst: (args: {
-		where: Record<string, unknown>;
-		select: typeof RESEARCH_SELECT;
-	}) => Promise<ReportResearchInput | null>;
-}
-
-interface ResponseDelegate {
-	findFirst: (args: {
-		where: Record<string, unknown>;
-		select: typeof RESPONSE_SELECT;
-	}) => Promise<ReportPairResponseInput | null>;
-	findMany: (args: {
-		where: Record<string, unknown>;
-		select: typeof RESPONSE_SELECT;
-		orderBy?: Record<string, string>;
-		take?: number;
-	}) => Promise<Array<ReportPairResponseInput & { linkedin_url: string | null }>>;
-}
-
-export interface ReportHalves {
-	response: ReportPairResponseInput | null;
-	research: ReportResearchInput | null;
-}
-
-export async function resolveReportHalves({
-	input,
-	client,
-}: {
-	input: {
-		response?: ReportPairResponseInput | null;
-		research?: ReportResearchInput | null;
-		id?: string;
-	};
-	client: unknown;
-	params: Record<string, unknown>;
-}): Promise<ReportHalves> {
-	let response = input.response ?? null;
-	let research = input.research ?? null;
-	const prisma = client as {
-		assessment_research?: ResearchDelegate;
-		assessment_responses?: ResponseDelegate;
-	};
-
-	// A superseded anchor resolves to the person's LIVE pass — an old link
-	// must render the corrected report, never the withdrawn one.
-	if (research && research.superseded_at != null) {
-		research = (await prisma.assessment_research?.findFirst({
-			where: {
-				assessment_id: research.assessment_id,
-				identity_key: research.identity_key,
-				superseded_at: null,
-			},
-			select: RESEARCH_SELECT,
-		})) ?? null;
-	}
-
-	if (response && !research) {
-		const identityKey = normaliseLinkedinIdentity(response.linkedin_url);
-		if (identityKey) {
-			research = (await prisma.assessment_research?.findFirst({
-				where: {
-					assessment_id: response.assessment_id,
-					identity_key: identityKey,
-					superseded_at: null,
-				},
-				select: RESEARCH_SELECT,
-			})) ?? null;
-		}
-	} else if (research && !response) {
-		// Research-only :id — find this person's quiz response by normalised
-		// identity. The response side stores raw self-reported URLs, so the
-		// normalisation must run per candidate; ordered by recency so a
-		// (re)taken quiz pairs with the latest submission.
-		const candidates = (await prisma.assessment_responses?.findMany({
-			where: { assessment_id: research.assessment_id, linkedin_url: { not: null } },
-			select: RESPONSE_SELECT,
-			orderBy: { completed_at: "desc" },
-			take: 25,
-		})) ?? [];
-		response =
-			candidates.find(
-				(candidate) =>
-					normaliseLinkedinIdentity(candidate.linkedin_url) === research?.identity_key,
-			) ?? null;
-	}
-
-	if (!response && !research) {
-		throw new Error(
-			`[assessment-report] /report/${input.id ?? ""} matches no quiz response and no research record — check the id`,
-		);
-	}
-
-	return { response, research };
-}