create-ailk 0.15.0 → 0.16.0

package/templates/database/__tests__/fixtures/person-backfill.json

@@ -0,0 +1,264 @@
+{
+  "_comment": "#852 AC-4 — the Person backfill fixture. person.db.test.ts seeds `input` into live Postgres, runs database/migrations/20261010121000_person_backfill/migration.sql, and asserts the people rows equal `expected.people`; apps/api's person.test.ts seeds `expected.people` into the in-memory double and calls findOrCreatePerson on every raw email in `input`, asserting zero new rows. `emails` pairs each raw address with its normalized form, so the TypeScript and SQL normalizations are checked against the same values. Timestamps are UTC.",
+  "workspaces": {
+    "A": "wksp_01920000-0852-7000-8000-00000000000a",
+    "B": "wksp_01920000-0852-7000-8000-00000000000b"
+  },
+  "input": {
+    "users": [
+      { "key": "pat", "email": "Pat@P852.test", "emailVerified": true },
+      { "key": "uma", "email": "uma@p852.test", "emailVerified": false },
+      { "key": "dee", "email": "someone-else@p852.test", "emailVerified": true }
+    ],
+    "leads": [
+      {
+        "key": "L1",
+        "workspace": "A",
+        "email": " Ada@Example.COM\t",
+        "payload": { "name": "Ada Lovelace" },
+        "createdAt": "2026-01-01T00:00:00.000Z"
+      },
+      {
+        "key": "L2",
+        "workspace": "A",
+        "email": "ada@example.com",
+        "payload": { "name": "Later Ada" },
+        "createdAt": "2026-01-02T00:00:00.000Z"
+      },
+      {
+        "key": "L3",
+        "workspace": "A",
+        "email": "ADA@EXAMPLE.COM",
+        "payload": {},
+        "createdAt": "2026-01-03T00:00:00.000Z"
+      },
+      {
+        "key": "L4",
+        "workspace": "B",
+        "email": "ada@example.com",
+        "payload": { "name": "Ada B" },
+        "createdAt": "2026-01-01T00:00:00.000Z"
+      },
+      {
+        "key": "L5",
+        "workspace": "A",
+        "email": "vic@x.dev",
+        "payload": { "name": 42 },
+        "createdAt": "2026-01-04T00:00:00.000Z"
+      },
+      {
+        "key": "L6",
+        "workspace": "A",
+        "email": "\u000Bdana@x.io\u000B",
+        "payload": { "name": "  Dana\u202E  " },
+        "createdAt": "2026-01-05T00:00:00.000Z"
+      },
+      {
+        "key": "L7",
+        "workspace": "A",
+        "email": " Eve@X.IO\t",
+        "payload": {},
+        "createdAt": "2026-01-06T00:00:00.000Z"
+      },
+      {
+        "key": "L8",
+        "workspace": "A",
+        "email": "pat@p852.test",
+        "payload": {},
+        "createdAt": "2026-01-07T00:00:00.000Z",
+        "promotedUser": "pat",
+        "promotedAt": "2026-02-01T00:00:00.000Z"
+      },
+      {
+        "key": "L9",
+        "workspace": "A",
+        "email": "uma@p852.test",
+        "payload": {},
+        "createdAt": "2026-01-08T00:00:00.000Z",
+        "promotedUser": "uma",
+        "promotedAt": "2026-02-02T00:00:00.000Z"
+      },
+      {
+        "key": "L10",
+        "workspace": "A",
+        "email": "dee@p852.test",
+        "payload": {},
+        "createdAt": "2026-01-09T00:00:00.000Z",
+        "promotedUser": "dee",
+        "promotedAt": "2026-02-03T00:00:00.000Z"
+      },
+      {
+        "key": "L11",
+        "workspace": "A",
+        "email": "not-an-email",
+        "payload": {},
+        "createdAt": "2026-01-10T00:00:00.000Z"
+      }
+    ],
+    "flowCheckouts": [
+      {
+        "key": "C1",
+        "workspace": "A",
+        "lead": "L1",
+        "status": "completed",
+        "stripeCustomerId": "cus_old",
+        "completedAt": "2026-03-01T00:00:00.000Z",
+        "createdAt": "2026-03-01T00:00:00.000Z"
+      },
+      {
+        "key": "C2",
+        "workspace": "A",
+        "lead": "L2",
+        "status": "completed",
+        "stripeCustomerId": "cus_new",
+        "completedAt": "2026-03-05T00:00:00.000Z",
+        "createdAt": "2026-03-05T00:00:00.000Z"
+      },
+      {
+        "key": "C3",
+        "workspace": "A",
+        "lead": "L7",
+        "status": "expired",
+        "stripeCustomerId": "cus_expired",
+        "completedAt": null,
+        "createdAt": "2026-03-06T00:00:00.000Z"
+      }
+    ],
+    "appointments": [
+      {
+        "key": "P1",
+        "workspace": "A",
+        "attendeeEmail": "ada@example.com",
+        "attendeeName": "Appointment Ada",
+        "createdAt": "2026-04-01T00:00:00.000Z"
+      },
+      {
+        "key": "P2",
+        "workspace": "A",
+        "attendeeEmail": "Zed@Example.com",
+        "attendeeName": "Zed\u0007 Z",
+        "createdAt": "2026-04-02T00:00:00.000Z"
+      },
+      {
+        "key": "P3",
+        "workspace": "A",
+        "attendeeEmail": "bad email@x.io",
+        "attendeeName": "Not Storable",
+        "createdAt": "2026-04-03T00:00:00.000Z"
+      }
+    ],
+    "subscribers": [{ "workspace": "A", "email": "subscriber-only@p852.test" }]
+  },
+  "emails": [
+    {
+      "raw": " Ada@Example.COM\t",
+      "normalized": "ada@example.com",
+      "storable": true
+    },
+    {
+      "raw": "ada@example.com",
+      "normalized": "ada@example.com",
+      "storable": true
+    },
+    {
+      "raw": "ADA@EXAMPLE.COM",
+      "normalized": "ada@example.com",
+      "storable": true
+    },
+    { "raw": "vic@x.dev", "normalized": "vic@x.dev", "storable": true },
+    {
+      "raw": "\u000Bdana@x.io\u000B",
+      "normalized": "dana@x.io",
+      "storable": true
+    },
+    { "raw": " Eve@X.IO\t", "normalized": "eve@x.io", "storable": true },
+    { "raw": "pat@p852.test", "normalized": "pat@p852.test", "storable": true },
+    { "raw": "Pat@P852.test", "normalized": "pat@p852.test", "storable": true },
+    { "raw": "uma@p852.test", "normalized": "uma@p852.test", "storable": true },
+    { "raw": "dee@p852.test", "normalized": "dee@p852.test", "storable": true },
+    { "raw": "not-an-email", "normalized": "not-an-email", "storable": false },
+    {
+      "raw": "Zed@Example.com",
+      "normalized": "zed@example.com",
+      "storable": true
+    },
+    {
+      "raw": "bad email@x.io",
+      "normalized": "bad email@x.io",
+      "storable": false
+    },
+    {
+      "raw": "\r\n\fFeed@X.io \r\n",
+      "normalized": "feed@x.io",
+      "storable": true
+    }
+  ],
+  "expected": {
+    "people": [
+      {
+        "workspace": "A",
+        "email": "ada@example.com",
+        "name": "Ada Lovelace",
+        "billingCustomerId": "cus_old",
+        "user": null
+      },
+      {
+        "workspace": "A",
+        "email": "dana@x.io",
+        "name": "Dana",
+        "billingCustomerId": null,
+        "user": null
+      },
+      {
+        "workspace": "A",
+        "email": "dee@p852.test",
+        "name": null,
+        "billingCustomerId": null,
+        "user": null
+      },
+      {
+        "workspace": "A",
+        "email": "eve@x.io",
+        "name": null,
+        "billingCustomerId": null,
+        "user": null
+      },
+      {
+        "workspace": "A",
+        "email": "pat@p852.test",
+        "name": null,
+        "billingCustomerId": null,
+        "user": "pat"
+      },
+      {
+        "workspace": "A",
+        "email": "uma@p852.test",
+        "name": null,
+        "billingCustomerId": null,
+        "user": null
+      },
+      {
+        "workspace": "A",
+        "email": "vic@x.dev",
+        "name": null,
+        "billingCustomerId": null,
+        "user": null
+      },
+      {
+        "workspace": "A",
+        "email": "zed@example.com",
+        "name": "Zed Z",
+        "billingCustomerId": null,
+        "user": null
+      },
+      {
+        "workspace": "B",
+        "email": "ada@example.com",
+        "name": "Ada B",
+        "billingCustomerId": null,
+        "user": null
+      }
+    ],
+    "unstamped": ["L11", "P3"]
+  }
+}

package/templates/database/__tests__/member-area.db.test.ts

@@ -0,0 +1,245 @@
+/**
+ * @file member-area.db.test.ts
+ *
+ * LIVE-DATABASE proof of the member-area records (#7877, spec
+ * docs/specs/7877-the-member-area-contract-a-spec.md D1, D2, D3; AC-1).
+ * Requires DATABASE_URL pointing at a Postgres with the migrations applied —
+ * the live suite SKIPS when DATABASE_URL is unset, keeping the workspace Jest
+ * run DB-free (the repo convention; the `apps/api Route Tests (Postgres)`
+ * workflow exercises it).
+ *
+ * Uses the `pg` driver directly, as `person.db.test.ts` does. What it proves
+ * that a mock cannot:
+ *   1. A piece or an interaction can only name a Person of ITS OWN workspace
+ *      (the composite `(person_id, workspace_id)` foreign keys), and a Person
+ *      holding one cannot be deleted (RESTRICT).
+ *   2. Every CHECK the migration declares: the id formats, the title and
+ *      stage shapes, the one channel and one direction, the subject and body
+ *      lengths, the stage-list size; and one stage list per workspace.
+ *   3. Neither inbox table carries an email column.
+ *
+ * Two cases need no database and always run: the wire schemas name no stage
+ * or offering literal, and the product default stage list lives only in
+ * apps/api.
+ */
+import { existsSync, readdirSync, readFileSync, statSync } from "node:fs";
+import { join } from "node:path";
+
+import { Client } from "pg";
+
+const describeDb = process.env.DATABASE_URL ? describe : describe.skip;
+
+const REPO_ROOT = join(__dirname, "..", "..");
+
+/** create-ailk's generated scaffold tree (gitignored) — a copy, not package source. */
+const GENERATED_TEMPLATES = join(REPO_ROOT, "packages", "create-ailk", "templates");
+
+/**
+ * Every source `.ts` file under a directory, recursively — skipping build
+ * output, tests (this file names the constant it hunts for) and the
+ * generated scaffold copy.
+ */
+function tsFiles(dir: string): string[] {
+  const out: string[] = [];
+  for (const name of readdirSync(dir)) {
+    if (["node_modules", "dist", "__tests__"].includes(name)) continue;
+    if (join(dir, name) === GENERATED_TEMPLATES) continue;
+    const path = join(dir, name);
+    if (statSync(path).isDirectory()) out.push(...tsFiles(path));
+    else if (path.endsWith(".ts")) out.push(path);
+  }
+  return out;
+}
+
+/**
+ * The two no-database cases read the MONOREPO's `packages/` source. A
+ * scaffolded site (create-ailk's `verify-scaffold` legs run this file too) has
+ * no `packages/`, so they are skipped there rather than thrown (#7920 CI).
+ */
+const describeMonorepo = existsSync(join(REPO_ROOT, "packages", "validation"))
+  ? describe
+  : describe.skip;
+
+describeMonorepo("the member-area wire contract (#7877 AC-1, no database)", () => {
+  it("packages/validation's pieces and member schemas name no stage literal and no enum", () => {
+    for (const file of ["pieces.ts", "member.ts"]) {
+      const text = readFileSync(
+        join(REPO_ROOT, "packages", "validation", "src", "schemas", file),
+        "utf8",
+      );
+      expect(text).not.toMatch(/requested|in-progress|in-review|delivered|scoping|z\.enum/);
+    }
+  });
+
+  it("the product default stage list is named by no package", () => {
+    const hits = tsFiles(join(REPO_ROOT, "packages")).filter((file) =>
+      readFileSync(file, "utf8").includes("DEFAULT_PIECE_STAGES"),
+    );
+    expect(hits).toEqual([]);
+  });
+});
+
+describeDb("the member-area tables (#7877 D1–D3, AC-1, live DB)", () => {
+  let db: Client;
+  const WS_1 = "wksp_01920000-7877-7000-8000-0000000000a1";
+  const WS_2 = "wksp_01920000-7877-7000-8000-0000000000a2";
+  const USER = "user_01920000-7877-7000-8000-0000000000a1";
+  const ASSET = "asset_01920000-7877-7000-8000-0000000000a1";
+  const LEAD_ID = "lead_01920000-7877-7000-8000-0000000000a1";
+  let personWs1: string;
+  let personWs2: string;
+
+  const cleanup = async () => {
+    await db.query(`DELETE FROM "interactions" WHERE "workspace_id" IN ($1, $2)`, [WS_1, WS_2]);
+    await db.query(`DELETE FROM "pieces" WHERE "workspace_id" IN ($1, $2)`, [WS_1, WS_2]);
+    await db.query(`DELETE FROM "workspace_piece_stages" WHERE "workspace_id" IN ($1, $2)`, [
+      WS_1,
+      WS_2,
+    ]);
+    await db.query(`DELETE FROM "people" WHERE "workspace_id" IN ($1, $2)`, [WS_1, WS_2]);
+  };
+
+  beforeAll(async () => {
+    db = new Client({ connectionString: process.env.DATABASE_URL });
+    await db.connect();
+    await cleanup();
+    const insert = (ws: string, email: string) =>
+      db.query<{ id: string }>(
+        `INSERT INTO "people" ("workspace_id", "email", "updated_at") VALUES ($1, $2, now()) RETURNING "id"`,
+        [ws, email],
+      );
+    personWs1 = (await insert(WS_1, "client@example.com")).rows[0]!.id;
+    personWs2 = (await insert(WS_2, "client@example.com")).rows[0]!.id;
+  });
+
+  afterAll(async () => {
+    await cleanup();
+    await db.end();
+  });
+
+  type PieceCols = {
+    workspace_id?: string;
+    person_id?: string;
+    title?: string;
+    stage?: string;
+    updated_by?: string;
+  };
+  const insertPiece = (cols: PieceCols = {}) =>
+    db.query<{ id: string }>(
+      `INSERT INTO "pieces" ("workspace_id", "person_id", "title", "stage", "updated_by", "updated_at")
+       VALUES ($1, $2, $3, $4, $5, now()) RETURNING "id"`,
+      [
+        cols.workspace_id ?? WS_1,
+        cols.person_id ?? personWs1,
+        cols.title ?? "Homepage copy",
+        cols.stage ?? "in-progress",
+        cols.updated_by ?? USER,
+      ],
+    );
+
+  type InteractionCols = {
+    workspace_id?: string;
+    person_id?: string;
+    channel?: string;
+    direction?: string;
+    subject?: string;
+    body?: string;
+    asset_id?: string | null;
+  };
+  const insertInteraction = (cols: InteractionCols = {}) =>
+    db.query<{ id: string }>(
+      `INSERT INTO "interactions" ("workspace_id", "person_id", "channel", "direction", "subject", "body", "asset_id", "created_by")
+       VALUES ($1, $2, $3, $4, $5, $6, $7, $8) RETURNING "id"`,
+      [
+        cols.workspace_id ?? WS_1,
+        cols.person_id ?? personWs1,
+        cols.channel ?? "member",
+        cols.direction ?? "outbound",
+        cols.subject ?? "Draft 1",
+        cols.body ?? "Here it is",
+        cols.asset_id === undefined ? ASSET : cols.asset_id,
+        USER,
+      ],
+    );
+
+  it("mints piece_ and intx_ ids and accepts a well-formed row of each", async () => {
+    const piece = await insertPiece();
+    expect(piece.rows[0]!.id).toMatch(/^piece_[0-9a-f-]{36}$/);
+    const message = await insertInteraction();
+    expect(message.rows[0]!.id).toMatch(/^intx_[0-9a-f-]{36}$/);
+    const noAsset = await insertInteraction({ asset_id: null });
+    expect(noAsset.rows[0]!.id).toMatch(/^intx_/);
+  });
+
+  it("refuses a piece or a message naming a Person of ANOTHER workspace (the composite FK)", async () => {
+    await expect(insertPiece({ person_id: personWs2 })).rejects.toMatchObject({
+      code: "23503",
+      constraint: "pieces_person_fk",
+    });
+    await expect(insertInteraction({ person_id: personWs2 })).rejects.toMatchObject({
+      code: "23503",
+      constraint: "interactions_person_fk",
+    });
+  });
+
+  it.each([
+    ["a 201-character title", { title: "x".repeat(201) }, "pieces_title_length"],
+    ["an all-space title", { title: "   " }, "pieces_title_length"],
+    ["a stage `In Progress`", { stage: "In Progress" }, "pieces_stage_format"],
+    ["a lead_ person id", { person_id: LEAD_ID }, "pieces_person_id_format"],
+    ["a lead_ updated_by", { updated_by: LEAD_ID }, "pieces_updated_by_format"],
+  ])("refuses a piece with %s", async (_label, cols, constraint) => {
+    // A 201-character title overflows VARCHAR(200) before the CHECK runs.
+    const expected =
+      cols.title?.length === 201 ? { code: "22001" } : { code: "23514", constraint };
+    await expect(insertPiece(cols)).rejects.toMatchObject(expected);
+  });
+
+  it.each([
+    ["channel `email`", { channel: "email" }, "interactions_channel_allowed"],
+    ["direction `inbound`", { direction: "inbound" }, "interactions_direction_allowed"],
+    ["a lead_ asset id", { asset_id: LEAD_ID }, "interactions_asset_id_format"],
+    ["an empty subject", { subject: "" }, "interactions_subject_length"],
+    ["a 10001-character body", { body: "b".repeat(10001) }, "interactions_body_length"],
+  ])("refuses an interaction with %s", async (_label, cols, constraint) => {
+    await expect(insertInteraction(cols)).rejects.toMatchObject({ code: "23514", constraint });
+  });
+
+  it("holds a stage list to 1–20 stages and one row per workspace", async () => {
+    const insert = (ws: string, stages: string[]) =>
+      db.query(
+        `INSERT INTO "workspace_piece_stages" ("workspace_id", "stages", "updated_at") VALUES ($1, $2, now())`,
+        [ws, stages],
+      );
+    await expect(insert(WS_1, [])).rejects.toMatchObject({
+      code: "23514",
+      constraint: "workspace_piece_stages_count",
+    });
+    await expect(
+      insert(
+        WS_1,
+        Array.from({ length: 21 }, (_, i) => `s${i}`),
+      ),
+    ).rejects.toMatchObject({ code: "23514", constraint: "workspace_piece_stages_count" });
+    await insert(WS_1, ["scoping", "brief", "writing", "in-review", "delivered"]);
+    await expect(insert(WS_1, ["requested"])).rejects.toMatchObject({
+      code: "23505",
+      constraint: "workspace_piece_stages_workspace_id_key",
+    });
+  });
+
+  it("refuses to delete a Person who holds a piece (RESTRICT)", async () => {
+    await insertPiece();
+    await expect(
+      db.query(`DELETE FROM "people" WHERE "id" = $1`, [personWs1]),
+    ).rejects.toMatchObject({ code: "23503", constraint: "pieces_person_fk" });
+  });
+
+  it("neither inbox table has an email column", async () => {
+    const { rows } = await db.query<{ table_name: string }>(
+      `SELECT "table_name" FROM information_schema.columns
+        WHERE "table_name" IN ('pieces', 'interactions') AND "column_name" ILIKE '%email%'`,
+    );
+    expect(rows).toEqual([]);
+  });
+});