create-ailk 0.1.0 → 0.2.0

package/templates/apps/web/__tests__/blog-source-populated.test.ts

@@ -1,130 +0,0 @@
-/**
- * Integration test: Fumadocs corpus populated after U1 content migration + U2 codegen wire-up.
- *
- * Requires `pnpm --filter @working-theory/web build` to have run first — the build
- * step invokes `fumadocs-mdx/next` codegen and writes `apps/web/.source/`.
- *
- * fumadocs-core and fumadocs-mdx are ESM-only packages incompatible with
- * ts-jest's CJS mode. We mock them and assert on the observable data-layer
- * contract: the codegen output file exists, the source swap is in place,
- * and the content/en/blog/ directory has the expected MDX entries (which the
- * loader will serve at runtime). Per AC-U2-3, data-layer assertions are
- * sufficient when a render harness cannot easily be wired up.
- *
- * i18n Phase 3 S2 (2026-05-18) moved blog content from `content/blog/` to
- * `content/en/blog/`.
- */
-
-import * as fs from "fs";
-import * as path from "path";
-
-// Root of apps/web — two directories up from __tests__/
-const webRoot = path.resolve(__dirname, "..");
-const nextConfigSrc = fs.readFileSync(
-  path.join(webRoot, "next.config.mjs"),
-  "utf8",
-);
-const sourceSrc = fs.readFileSync(
-  path.join(webRoot, "lib", "source.ts"),
-  "utf8",
-);
-
-describe("U2 codegen wire-up — data-layer assertions (AC-U2-3)", () => {
-  describe("AC-U2-1: next.config.mjs wraps with createMDX()", () => {
-    it("next.config.mjs imports createMDX from fumadocs-mdx/next", () => {
-      expect(nextConfigSrc).toContain('from "fumadocs-mdx/next"');
-      expect(nextConfigSrc).toContain("createMDX");
-    });
-
-    it("next.config.mjs exports createMDX()(nextConfig)", () => {
-      expect(nextConfigSrc).toContain("createMDX()(nextConfig)");
-    });
-
-    it("next.config.mjs preserves reactStrictMode: true", () => {
-      expect(nextConfigSrc).toContain("reactStrictMode: true");
-    });
-  });
-
-  describe("AC-U2-2: lib/source.ts swap completed", () => {
-    it("lib/source.ts does not contain the Phase 0 placeholder arrays", () => {
-      expect(sourceSrc).not.toContain("const docs: Parameters");
-      expect(sourceSrc).not.toContain("const meta: Parameters");
-      // Match the specific placeholder assignment pattern, not any occurrence of "= []"
-      expect(sourceSrc).not.toMatch(/\bconst (?:docs|meta)[^=]+=\s*\[\]/);
-    });
-
-    it("lib/source.ts imports blog from @/.source/server", () => {
-      // fumadocs-mdx@15 codegen splits output into server.ts / browser.ts /
-      // dynamic.ts (no top-level index.ts). The `blog` collection lives on
-      // the server entry point.
-      expect(sourceSrc).toContain('@/.source/server"');
-      expect(sourceSrc).toContain("blog");
-    });
-
-    it("lib/source.ts no longer contains Phase 0 skeleton comments", () => {
-      expect(sourceSrc).not.toContain("Phase 0 skeleton");
-      expect(sourceSrc).not.toContain("Phase 2 swap target");
-    });
-  });
-
-  describe("AC-U2-4: codegen output exists and is gitignored", () => {
-    it(".source/server.ts exists after build (codegen ran)", () => {
-      // fumadocs-mdx@15 emits server.ts / browser.ts / dynamic.ts. server.ts
-      // is the canonical entry the loader consumes — its existence proves
-      // codegen ran.
-      const sourcePath = path.join(webRoot, ".source", "server.ts");
-      expect(fs.existsSync(sourcePath)).toBe(true);
-    });
-
-    it(".source/ is listed in .gitignore", () => {
-      // Root .gitignore covers apps/web/.source/
-      const rootGitignore = fs.readFileSync(
-        path.resolve(webRoot, "..", "..", ".gitignore"),
-        "utf8",
-      );
-      expect(rootGitignore).toContain("apps/web/.source/");
-    });
-  });
-
-  describe("AC-U2-3: apps/web/content/en/blog/ corpus populated (issue #1459 path divergence)", () => {
-    // Issue #1459 (2026-05-25): blog content moved from <repo-root>/content/en/blog/
-    // to apps/web/content/en/blog/ (per-app content directory convention).
-    const blogDir = path.resolve(webRoot, "content", "en", "blog");
-
-    it("apps/web/content/en/blog/ directory exists", () => {
-      expect(fs.existsSync(blogDir)).toBe(true);
-    });
-
-    it("apps/web/content/en/blog/ contains at least one MDX file (corpus non-empty)", () => {
-      const files = fs.readdirSync(blogDir).filter((f) => f.endsWith(".mdx"));
-      expect(files.length).toBeGreaterThanOrEqual(1);
-    });
-
-    it("launching-ailk.mdx exists in apps/web/content/en/blog/", () => {
-      const filePath = path.join(blogDir, "launching-ailk.mdx");
-      expect(fs.existsSync(filePath)).toBe(true);
-    });
-
-    it("launching-ailk.mdx contains the expected title in frontmatter", () => {
-      const content = fs.readFileSync(
-        path.join(blogDir, "launching-ailk.mdx"),
-        "utf8",
-      );
-      expect(content).toContain("title: Launching AI Launch Kit");
-    });
-  });
-
-  describe("BLOG_EMPTY_SENTINEL export", () => {
-    it("page.tsx exports BLOG_EMPTY_SENTINEL as a non-empty string (smoke import check)", () => {
-      // Reading the file directly avoids loading RSC-incompatible next/navigation
-      // under jsdom. The sentinel value is a plain string constant.
-      const src = fs.readFileSync(
-        path.join(webRoot, "app", "[locale]", "blog", "[[...slug]]", "page.tsx"),
-        "utf8",
-      );
-      const match = src.match(/BLOG_EMPTY_SENTINEL\s*=\s*"([^"]+)"/);
-      expect(match).not.toBeNull();
-      expect(match![1]!.length).toBeGreaterThan(0);
-    });
-  });
-});

package/templates/apps/web/__tests__/data-testid-coverage.test.tsx

@@ -1,60 +0,0 @@
-/**
- * data-testid coverage tests for issue #518.
- *
- * Verifies that the five high-leverage user-flow elements carry the expected
- * data-testid attributes. These selectors serve as stable anchors for the
- * post-OSS e2e test suite (docs/internal/roadmaps/e2e-testing-roadmap.md §5.2).
- */
-
-import { render, screen } from "@testing-library/react";
-import * as React from "react";
-
-// ---------------------------------------------------------------------------
-// ContactForm — submit button
-// ---------------------------------------------------------------------------
-
-// Mocks required by ContactForm (uses React 19 useFormState / useFormStatus)
-jest.mock("react-dom", () => ({
-  ...jest.requireActual("react-dom"),
-  useFormState: jest.fn((_action: unknown, init: unknown) => [init, jest.fn()]),
-  useFormStatus: jest.fn(() => ({ pending: false })),
-}));
-
-// eslint-disable-next-line no-restricted-syntax -- test-seam mock required to isolate ContactForm from server action; tracked in #507
-jest.mock("../app/[locale]/contact/contact.actions", () => ({
-  captureLeadAction: jest.fn(),
-}));
-
-import { ContactForm } from "../app/[locale]/contact/ContactForm";
-
-describe("ContactForm — data-testid coverage", () => {
-  it("submit button has data-testid=contact-submit", () => {
-    render(<ContactForm />);
-    const btn = screen.getByTestId("contact-submit");
-    expect(btn).toBeInTheDocument();
-    expect(btn.tagName).toBe("BUTTON");
-    expect(btn).toHaveAttribute("type", "submit");
-  });
-});
-
-// ---------------------------------------------------------------------------
-// SiteNav — nav link testids
-// ---------------------------------------------------------------------------
-
-import { SiteNav } from "../src/components/SiteNav";
-
-describe("SiteNav — data-testid coverage", () => {
-  it("home link has data-testid=nav-home-link", () => {
-    render(<SiteNav />);
-    const link = screen.getByTestId("nav-home-link");
-    expect(link).toBeInTheDocument();
-    expect(link).toHaveAttribute("href", "/");
-  });
-
-  it("contact link has data-testid=nav-contact-link", () => {
-    render(<SiteNav />);
-    const link = screen.getByTestId("nav-contact-link");
-    expect(link).toBeInTheDocument();
-    expect(link).toHaveAttribute("href", "/contact");
-  });
-});

package/templates/apps/web/__tests__/google-analytics.test.tsx

@@ -1,104 +0,0 @@
-// Tests for the env-driven Google Analytics component (#886).
-// When NEXT_PUBLIC_GOOGLE_TAG_ID is set, the component renders two script
-// elements: an external gtag.js loader and an inline init script. When unset,
-// the component renders nothing. STEALTH state is intentionally not consulted
-// — Sam's call per #886.
-//
-// next/script is mocked locally because Next's runtime script-injection
-// machinery isn't available under jsdom; the mock renders a plain <script>
-// element so RTL queries can observe the output. Mocking a third-party module
-// (not an internal one) keeps the test within the no-restricted-syntax rule.
-
-import * as React from "react";
-import { render } from "@testing-library/react";
-
-jest.mock("next/script", () => ({
-  __esModule: true,
-  default: ({
-    src,
-    id,
-    children,
-  }: {
-    src?: string;
-    id?: string;
-    strategy?: string;
-    children?: React.ReactNode;
-  }): React.ReactElement =>
-    React.createElement(
-      "script",
-      { "data-testid": id ? `script-${id}` : "script-external", src, id },
-      children,
-    ),
-}));
-
-describe("apps/web — GoogleAnalytics (#886)", () => {
-  const originalTagId = process.env.NEXT_PUBLIC_GOOGLE_TAG_ID;
-  const originalStealth = process.env.STEALTH;
-
-  afterEach(() => {
-    if (originalTagId === undefined) {
-      delete process.env.NEXT_PUBLIC_GOOGLE_TAG_ID;
-    } else {
-      process.env.NEXT_PUBLIC_GOOGLE_TAG_ID = originalTagId;
-    }
-    if (originalStealth === undefined) {
-      delete process.env.STEALTH;
-    } else {
-      process.env.STEALTH = originalStealth;
-    }
-    jest.resetModules();
-  });
-
-  it("renders gtag.js loader + init script when NEXT_PUBLIC_GOOGLE_TAG_ID is set", () => {
-    jest.isolateModules(() => {
-      process.env.NEXT_PUBLIC_GOOGLE_TAG_ID = "G-MJFBVBHCK9";
-
-      const { GoogleAnalytics } = require("../components/google-analytics");
-      const { container } = render(React.createElement(GoogleAnalytics));
-      const scripts = container.querySelectorAll("script");
-      expect(scripts).toHaveLength(2);
-      const external = scripts[0]!;
-      expect(external.getAttribute("src")).toBe(
-        "https://www.googletagmanager.com/gtag/js?id=G-MJFBVBHCK9",
-      );
-      const init = scripts[1]!;
-      expect(init.getAttribute("id")).toBe("ga-init");
-      expect(init.textContent).toContain("gtag('config', 'G-MJFBVBHCK9')");
-      expect(init.textContent).toContain(
-        "window.dataLayer = window.dataLayer || []",
-      );
-    });
-  });
-
-  it("renders nothing when NEXT_PUBLIC_GOOGLE_TAG_ID is unset", () => {
-    jest.isolateModules(() => {
-      delete process.env.NEXT_PUBLIC_GOOGLE_TAG_ID;
-
-      const { GoogleAnalytics } = require("../components/google-analytics");
-      const { container } = render(React.createElement(GoogleAnalytics));
-      expect(container.querySelectorAll("script")).toHaveLength(0);
-      expect(container.textContent).toBe("");
-    });
-  });
-
-  it("renders nothing when NEXT_PUBLIC_GOOGLE_TAG_ID is empty string", () => {
-    jest.isolateModules(() => {
-      process.env.NEXT_PUBLIC_GOOGLE_TAG_ID = "";
-
-      const { GoogleAnalytics } = require("../components/google-analytics");
-      const { container } = render(React.createElement(GoogleAnalytics));
-      expect(container.querySelectorAll("script")).toHaveLength(0);
-    });
-  });
-
-  it("renders scripts regardless of STEALTH=true (analytics not gated on stealth)", () => {
-    jest.isolateModules(() => {
-      process.env.NEXT_PUBLIC_GOOGLE_TAG_ID = "G-TESTABC123";
-      process.env.STEALTH = "true";
-
-      const { GoogleAnalytics } = require("../components/google-analytics");
-      const { container } = render(React.createElement(GoogleAnalytics));
-      expect(container.querySelectorAll("script")).toHaveLength(2);
-    });
-  });
-});

package/templates/apps/web/__tests__/i18n/middleware.test.ts

@@ -1,119 +0,0 @@
-/**
- * @jest-environment node
- */
-// i18n S2 — Middleware locale detection priority chain tests (#949)
-//
-// Tests that the composed next-intl + security-headers middleware preserves
-// security headers on every response, and that the middleware config exports
-// the expected matcher pattern excluding static assets.
-//
-// Note: next-intl middleware runs in the Next.js Edge runtime and relies on
-// Next.js internals (URL rewriting, response piping) that cannot be fully
-// exercised in a jest/node environment. We test:
-//   1. Security headers are preserved (S16 preservation guarantee)
-//   2. Matcher config excludes _next/static, _next/image, favicon.ico
-//   3. The module initialises without throwing (locales read correctly)
-//
-// Locale list is now read from NEXT_PUBLIC_ENABLED_LOCALES env var (baked at
-// build time by next.config.mjs). Tests control the env var directly rather
-// than mocking lib/locales (which no longer runs in the Edge middleware path).
-
-import { NextRequest, NextResponse } from "next/server";
-
-// Mock next-intl middleware so it returns a plain NextResponse (no Edge runtime needed).
-jest.mock("next-intl/middleware", () => {
-  return function createMiddleware() {
-    return function (_req: unknown) {
-      return NextResponse.next();
-    };
-  };
-});
-
-import { middleware, config } from "../../middleware";
-
-function makeRequest(
-  path: string,
-  headers: Record<string, string> = {},
-): NextRequest {
-  return new NextRequest(new URL(path, "http://localhost:3000"), {
-    headers: { host: "localhost:3000", ...headers },
-  });
-}
-
-describe("i18n middleware — security headers preserved (S16 contract)", () => {
-  it("applies Content-Security-Policy to every response", async () => {
-    const res = await middleware(makeRequest("/"));
-    expect(res.headers.get("Content-Security-Policy")).not.toBeNull();
-    expect(res.headers.get("Content-Security-Policy")).toContain(
-      "frame-ancestors 'none'",
-    );
-  });
-
-  it("applies Strict-Transport-Security", async () => {
-    const res = await middleware(makeRequest("/"));
-    expect(res.headers.get("Strict-Transport-Security")).toContain(
-      "max-age=63072000",
-    );
-  });
-
-  it("applies X-Content-Type-Options: nosniff", async () => {
-    const res = await middleware(makeRequest("/"));
-    expect(res.headers.get("X-Content-Type-Options")).toBe("nosniff");
-  });
-
-  it("applies X-Frame-Options: DENY", async () => {
-    const res = await middleware(makeRequest("/"));
-    expect(res.headers.get("X-Frame-Options")).toBe("DENY");
-  });
-
-  it("applies Referrer-Policy", async () => {
-    const res = await middleware(makeRequest("/"));
-    expect(res.headers.get("Referrer-Policy")).toBe(
-      "strict-origin-when-cross-origin",
-    );
-  });
-
-  it("applies Permissions-Policy", async () => {
-    const res = await middleware(makeRequest("/about"));
-    expect(res.headers.get("Permissions-Policy")).toBeTruthy();
-  });
-});
-
-describe("i18n middleware — locale config reads from NEXT_PUBLIC_ENABLED_LOCALES", () => {
-  it("middleware initialises without throwing when env var is unset (falls back to [en])", async () => {
-    // NEXT_PUBLIC_ENABLED_LOCALES is not set in test env — middleware falls back to ["en"].
-    const res = await middleware(makeRequest("/"));
-    expect(res).toBeDefined();
-    expect(res.headers.get("Content-Security-Policy")).not.toBeNull();
-  });
-
-  it("middleware does not throw for two-locale config", async () => {
-    // Middleware reads env at module load time. This test verifies the
-    // middleware still handles requests regardless of locale path.
-    const res = await middleware(makeRequest("/es/about"));
-    expect(res).toBeDefined();
-    expect(res.headers.get("Content-Security-Policy")).not.toBeNull();
-  });
-});
-
-describe("i18n middleware — matcher config", () => {
-  it("excludes _next/static from matcher", () => {
-    const matcher = Array.isArray(config.matcher)
-      ? config.matcher.join(",")
-      : config.matcher;
-    expect(matcher).toContain("_next");
-  });
-
-  it("excludes favicon.ico from matcher", () => {
-    const matcher = Array.isArray(config.matcher)
-      ? config.matcher.join(",")
-      : config.matcher;
-    expect(matcher).toContain("favicon.ico");
-  });
-
-  it("matcher is a string (single pattern) or array", () => {
-    expect(
-      typeof config.matcher === "string" || Array.isArray(config.matcher),
-    ).toBe(true);
-  });
-});

package/templates/apps/web/__tests__/i18n/routing.test.ts

@@ -1,114 +0,0 @@
-/**
- * @jest-environment node
- */
-// i18n S2 — Routing integration tests (#949)
-//
-// Tests the 5 AC routing cases from the spec §5.1 at the middleware level.
-// Full curl integration verification (live HTTP server) is in the PR checklist.
-//
-// What we test in unit scope:
-//   - Middleware does not throw for any of the 5 locale path shapes
-//   - Security headers are always applied (S16 preservation)
-//   - NEXT_PUBLIC_ENABLED_LOCALES controls the locale list (env var, baked at build)
-//   - Middleware config has the correct matcher (static assets excluded)
-
-import { NextRequest, NextResponse } from "next/server";
-
-// Stub next-intl so we can test middleware composition without Edge runtime.
-// next-intl's actual locale detection is tested by the library's own suite;
-// our job is to verify the composition (security headers applied, no throws).
-jest.mock("next-intl/middleware", () => {
-  return function createMiddleware() {
-    return function (_req: unknown) {
-      return NextResponse.next();
-    };
-  };
-});
-
-function makeRequest(
-  path: string,
-  headers: Record<string, string> = {},
-): NextRequest {
-  return new NextRequest(new URL(path, "http://localhost:3000"), {
-    headers: { host: "localhost:3000", ...headers },
-  });
-}
-
-// AC-1: curl http://localhost:3000/ returns 200 with English content + lang=en
-describe("AC-1: bare default-locale URL / → middleware OK", () => {
-  it("does not throw for bare / path", async () => {
-    const { middleware } = await import("../../middleware");
-    const res = await middleware(makeRequest("/"));
-    expect(res.status).not.toBe(500);
-  });
-
-  it("security headers present on /", async () => {
-    const { middleware } = await import("../../middleware");
-    const res = await middleware(makeRequest("/"));
-    expect(res.headers.get("Content-Security-Policy")).not.toBeNull();
-  });
-});
-
-// AC-2: curl http://localhost:3000/en/ returns 200 with English content + lang=en
-describe("AC-2: /en/ prefix → middleware OK", () => {
-  it("does not throw for /en/ path", async () => {
-    const { middleware } = await import("../../middleware");
-    const res = await middleware(makeRequest("/en/"));
-    expect(res.status).not.toBe(500);
-  });
-
-  it("security headers present on /en/", async () => {
-    const { middleware } = await import("../../middleware");
-    const res = await middleware(makeRequest("/en/"));
-    expect(res.headers.get("Strict-Transport-Security")).toBeTruthy();
-  });
-});
-
-// AC-3: curl -H "Accept-Language: es" http://localhost:3000/ → 200 English fallback
-describe("AC-3: Accept-Language: es on / → no error (English fallback)", () => {
-  it("does not throw with es accept-language when only en is enabled", async () => {
-    const { middleware } = await import("../../middleware");
-    const res = await middleware(
-      makeRequest("/", { "accept-language": "es,en;q=0.8" }),
-    );
-    expect(res.status).not.toBe(500);
-  });
-
-  it("security headers still applied with es accept-language", async () => {
-    const { middleware } = await import("../../middleware");
-    const res = await middleware(makeRequest("/", { "accept-language": "es" }));
-    expect(res.headers.get("Content-Security-Policy")).not.toBeNull();
-  });
-});
-
-// AC-4: /es/ with locales:[en,es] → 200 English fallback + lang=es
-// NEXT_PUBLIC_ENABLED_LOCALES is baked at build time; in tests we verify
-// middleware handles the path without throwing (actual locale routing is
-// tested via next-intl's own suite and the curl checklist).
-describe("AC-4: /es/ path → middleware handles without throwing", () => {
-  it("does not throw for /es/ path", async () => {
-    const { middleware } = await import("../../middleware");
-    const res = await middleware(makeRequest("/es/"));
-    expect(res.status).not.toBe(500);
-  });
-});
-
-// AC-5: /es/ with locales:[en] only → 404 from next-intl's router
-// In unit test scope, we verify the middleware doesn't throw — the actual 404
-// from the Next.js router (not middleware layer) is verified via curl checklist.
-describe("AC-5: /es/ with locales:[en] only → middleware does not throw", () => {
-  it("middleware processes /es/ request without throwing", async () => {
-    const { middleware } = await import("../../middleware");
-    // Middleware itself doesn't throw — Next.js router returns 404
-    const res = await middleware(makeRequest("/es/"));
-    expect(res).toBeDefined();
-  });
-
-  it("locale list falls back to [en] when NEXT_PUBLIC_ENABLED_LOCALES unset", () => {
-    // In test env, NEXT_PUBLIC_ENABLED_LOCALES is not set → middleware uses ["en"].
-    // This mirrors the next.config.mjs fallback behavior at build time.
-    const localeEnv = process.env.NEXT_PUBLIC_ENABLED_LOCALES;
-    const locales = (localeEnv ?? "en").split(",");
-    expect(locales).toEqual(["en"]);
-  });
-});