create-ailk 0.18.0 → 0.19.0

package/templates/database/migrations/20261012120000_member_contract/migration.sql

@@ -0,0 +1,192 @@
+-- #8168 — the member area data model (spec
+-- docs/specs/8168-member-area-data-model-spec.md D1–D3, D5, D7–D9, D12).
+--
+--   piece_versions (inbox)          — one delivery of a piece to its client:
+--                                     a private library file OR an https
+--                                     link, numbered from 1 per piece, with
+--                                     the client's review recorded on it.
+--                                     NO round count, limit or remaining
+--                                     column (#8140 disposition 3).
+--   pieces.approved_at              — set with an `approved` review; freezes
+--                                     review (D5).
+--   pieces_id_person_id_workspace_id_key — a unique index over a triple the
+--                                     PK already makes unique: the target of
+--                                     piece_versions_piece_fk, so "a piece of
+--                                     THIS Person in THIS workspace" is one
+--                                     database fact (D1).
+--   interactions.kind / .payload    — `message` · `quote` · `review`, and the
+--                                     stored payload of a quote or review;
+--                                     `inbound` joins `outbound` (D3). An
+--                                     outbound row stays a payload-free
+--                                     `message` — #7877's rows, unchanged.
+--   flow_definitions.customers_enabled — whether a signed-in client may submit
+--                                     the magnet from the member area (D7).
+--   the `request-quote` magnet      — one draft `contact` magnet with
+--                                     customers_enabled = true, backfilled
+--                                     into EVERY existing workspace (D8).
+--
+-- The only new foreign key stays inside the inbox namespace (ADR 0009
+-- invariant 1). asset_id and delivered_by name rows of other namespaces:
+-- plain columns with format CHECKs, no foreign key. The backfill reads
+-- "workspaces" (auth namespace) in SQL only — no relation.
+--
+-- ADDITIVE: every ADD COLUMN is nullable or carries a constant default, so no
+-- existing row fails a new CHECK — every existing interaction is an outbound
+-- `message` with no payload, which the replaced and added CHECKs admit
+-- (interactions_body_length keeps its 1–10000 rule for a `message`). The
+-- unique index on "pieces" builds under the file's transaction, holding a
+-- SHARE lock on "pieces" for one scan of a table that is a few rows per
+-- client. The backfill inserts one row per workspace and NEVER overwrites a
+-- workspace's existing (site_id, slug) row (ON CONFLICT DO NOTHING) —
+-- re-running the block adds nothing.
+--
+-- Rollout: deploy this migration BEFORE any code that writes piece_versions,
+-- pieces.approved_at, an inbound interaction, interactions.kind/payload or
+-- flow_definitions.customers_enabled. Code written before it never names the
+-- new columns, so it keeps working against the migrated database.
+--
+-- Rollback (safe while nothing but #8168's siblings use the new surface):
+--   DELETE FROM "flow_definitions" WHERE "slug" = 'request-quote' AND "status" = 'draft' AND "customers_enabled";
+--   ALTER TABLE "flow_definitions" DROP COLUMN "customers_enabled";
+--   DELETE FROM "interactions" WHERE "direction" = 'inbound';
+--   ALTER TABLE "interactions" DROP CONSTRAINT "interactions_kind_allowed",
+--     DROP CONSTRAINT "interactions_outbound_shape", DROP CONSTRAINT "interactions_payload_by_kind",
+--     DROP CONSTRAINT "interactions_payload_size", DROP CONSTRAINT "interactions_body_length",
+--     DROP CONSTRAINT "interactions_direction_allowed";
+--   ALTER TABLE "interactions" DROP COLUMN "kind", DROP COLUMN "payload";
+--   then re-add #7877's interactions_direction_allowed (direction = 'outbound')
+--   and interactions_body_length (1–10000 once trimmed) from
+--   20261011120000_member_area;
+--   DROP TABLE "piece_versions"; DROP INDEX "pieces_id_person_id_workspace_id_key";
+--   ALTER TABLE "pieces" DROP COLUMN "approved_at";
+-- The first DELETE also removes an operator's own edits to a still-draft
+-- seeded magnet; check for those before rolling back.
+
+-- AlterTable
+ALTER TABLE "flow_definitions" ADD COLUMN     "customers_enabled" BOOLEAN NOT NULL DEFAULT false;
+
+-- AlterTable
+-- Existing rows and #7877's writer (which names no kind) stay `message`.
+ALTER TABLE "interactions" ADD COLUMN     "kind" VARCHAR(16) NOT NULL DEFAULT 'message',
+ADD COLUMN     "payload" JSONB;
+
+-- AlterTable
+ALTER TABLE "pieces" ADD COLUMN     "approved_at" TIMESTAMP(3);
+
+-- CreateTable
+CREATE TABLE "piece_versions" (
+    "id" TEXT NOT NULL DEFAULT ('pver_'::text || (uuidv7())::text),
+    "workspace_id" TEXT NOT NULL,
+    "person_id" TEXT NOT NULL,
+    "piece_id" TEXT NOT NULL,
+    "version" INTEGER NOT NULL,
+    "asset_id" TEXT,
+    "link" VARCHAR(2048),
+    "note" TEXT,
+    "delivered_by" TEXT NOT NULL,
+    "delivered_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "review" VARCHAR(24),
+    "review_comment" TEXT,
+    "reviewed_at" TIMESTAMP(3),
+
+    CONSTRAINT "piece_versions_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateIndex
+-- A client's artifacts: workspace_id = $1 AND person_id = $2 ORDER BY delivered_at DESC.
+CREATE INDEX "piece_versions_workspace_id_person_id_delivered_at_idx" ON "piece_versions"("workspace_id", "person_id", "delivered_at");
+
+-- CreateIndex
+-- The public asset read's "is this asset a version file" check (AC-MAA-21).
+CREATE INDEX "piece_versions_asset_id_idx" ON "piece_versions"("asset_id");
+
+-- CreateIndex
+-- A version number is a fact per piece; the writer numbers, this is the backstop.
+CREATE UNIQUE INDEX "piece_versions_piece_id_version_key" ON "piece_versions"("piece_id", "version");
+
+-- CreateIndex
+-- Redundant with the PK; piece_versions_piece_fk needs it as its target.
+CREATE UNIQUE INDEX "pieces_id_person_id_workspace_id_key" ON "pieces"("id", "person_id", "workspace_id");
+
+-- AddForeignKey
+-- A version names a piece of THIS Person in THIS workspace (the piece's own
+-- FK already ties it to a Person of its workspace); deleting a piece with a
+-- version is refused.
+ALTER TABLE "piece_versions" ADD CONSTRAINT "piece_versions_piece_fk" FOREIGN KEY ("piece_id", "person_id", "workspace_id") REFERENCES "pieces"("id", "person_id", "workspace_id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- ADR-0031 rule 3 — piece_versions: pver_ (registered in
+-- packages/ids/src/registry.ts; this migration's path is added to
+-- migration-sync.test.ts's PK_CHECK_MIGRATIONS). Each reference column
+-- carries the format CHECK of the entity it names, in the #7877 shape.
+ALTER TABLE "piece_versions" ALTER COLUMN "id" TYPE text COLLATE "C";
+ALTER TABLE "piece_versions" ALTER COLUMN "id" SET DEFAULT ('pver_'::text || (uuidv7())::text);
+ALTER TABLE "piece_versions" ADD CONSTRAINT "piece_versions_id_format" CHECK ("id" ~ '^pver_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
+ALTER TABLE "piece_versions" ADD CONSTRAINT "piece_versions_workspace_id_format" CHECK ("workspace_id" ~ '^wksp_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
+ALTER TABLE "piece_versions" ADD CONSTRAINT "piece_versions_person_id_format" CHECK ("person_id" ~ '^person_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
+ALTER TABLE "piece_versions" ADD CONSTRAINT "piece_versions_piece_id_format" CHECK ("piece_id" ~ '^piece_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
+ALTER TABLE "piece_versions" ADD CONSTRAINT "piece_versions_asset_id_format" CHECK ("asset_id" ~ '^asset_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
+ALTER TABLE "piece_versions" ADD CONSTRAINT "piece_versions_delivered_by_format" CHECK ("delivered_by" ~ '^user_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
+
+-- D2 — a version's shape is held here, not by the writer alone.
+ALTER TABLE "piece_versions" ADD CONSTRAINT "piece_versions_version_positive"
+  CHECK ("version" >= 1);
+-- A delivery is a file or a link: exactly one.
+ALTER TABLE "piece_versions" ADD CONSTRAINT "piece_versions_one_target"
+  CHECK (("asset_id" IS NULL) <> ("link" IS NULL));
+-- An https scheme, a host with no userinfo, no whitespace anywhere — the
+-- database floor under packages/validation's isHttpsLink (SEC-8168-5).
+ALTER TABLE "piece_versions" ADD CONSTRAINT "piece_versions_link_https"
+  CHECK ("link" IS NULL OR ("link" ~ '^https://[^[:space:]/?#@]+([/?#][^[:space:]]*)?$' AND char_length("link") <= 2048));
+ALTER TABLE "piece_versions" ADD CONSTRAINT "piece_versions_note_length"
+  CHECK ("note" IS NULL OR char_length(btrim("note")) BETWEEN 1 AND 2000);
+ALTER TABLE "piece_versions" ADD CONSTRAINT "piece_versions_review_allowed"
+  CHECK ("review" IS NULL OR "review" IN ('approved', 'changes-requested'));
+-- A review and its timestamp are set together or not at all.
+ALTER TABLE "piece_versions" ADD CONSTRAINT "piece_versions_review_stamped"
+  CHECK (("review" IS NULL) = ("reviewed_at" IS NULL));
+ALTER TABLE "piece_versions" ADD CONSTRAINT "piece_versions_comment_needs_review"
+  CHECK ("review_comment" IS NULL OR "review" IS NOT NULL);
+ALTER TABLE "piece_versions" ADD CONSTRAINT "piece_versions_changes_need_comment"
+  CHECK ("review" IS DISTINCT FROM 'changes-requested' OR char_length(btrim(coalesce("review_comment", ''))) >= 1);
+ALTER TABLE "piece_versions" ADD CONSTRAINT "piece_versions_comment_length"
+  CHECK ("review_comment" IS NULL OR char_length("review_comment") <= 5000);
+
+-- D3 — the second direction and the kinds. Replaced IN PLACE under the same
+-- names, so #7877's tests keep naming the same constraints.
+ALTER TABLE "interactions" DROP CONSTRAINT "interactions_direction_allowed";
+ALTER TABLE "interactions" ADD CONSTRAINT "interactions_direction_allowed"
+  CHECK ("direction" IN ('outbound', 'inbound'));
+ALTER TABLE "interactions" ADD CONSTRAINT "interactions_kind_allowed"
+  CHECK ("kind" IN ('message', 'quote', 'review'));
+-- An outbound row is a payload-free `message` — #7877's rows, unchanged.
+ALTER TABLE "interactions" ADD CONSTRAINT "interactions_outbound_shape"
+  CHECK ("direction" <> 'outbound' OR ("kind" = 'message' AND "payload" IS NULL));
+-- A quote or a review always carries its stored payload.
+ALTER TABLE "interactions" ADD CONSTRAINT "interactions_payload_by_kind"
+  CHECK ("kind" = 'message' OR "payload" IS NOT NULL);
+-- 64 items of a 200-character label and a 2000-character value fit with room (SEC-8168-4).
+ALTER TABLE "interactions" ADD CONSTRAINT "interactions_payload_size"
+  CHECK ("payload" IS NULL OR octet_length("payload"::text) <= 262144);
+-- A message body stays 1–10000 characters once trimmed; a quote or review
+-- body may be empty; no body exceeds 10000.
+ALTER TABLE "interactions" DROP CONSTRAINT "interactions_body_length";
+ALTER TABLE "interactions" ADD CONSTRAINT "interactions_body_length"
+  CHECK (
+    char_length("body") <= 10000
+    AND ("kind" <> 'message' OR char_length(btrim("body")) BETWEEN 1 AND 10000)
+  );
+
+-- D8/D9 — the request-quote magnet in every existing workspace. The config
+-- literal below is test-held to `requestQuoteFlowConfig`
+-- (packages/validation/src/schemas/flow.ts) by
+-- database/__tests__/member-contract-migration.test.ts, and the block is
+-- re-executed verbatim by member-contract.db.test.ts to prove it idempotent.
+-- Do not edit one without the other.
+-- BEGIN request-quote backfill
+INSERT INTO "flow_definitions" ("site_id", "workspace_id", "slug", "config", "kind", "title", "status", "customers_enabled", "updated_at")
+SELECT w."id", w."id", 'request-quote',
+  '{"slug":"request-quote","defaultLocale":"en","steps":[{"key":"request","type":"field","copy":{"title":{"en":"Request a quote"}},"fields":[{"name":"need","inputType":"textarea","required":true,"copy":{"label":{"en":"What do you need?"}}},{"name":"timing","inputType":"text","copy":{"label":{"en":"When do you need it?"}}},{"name":"budget","inputType":"text","copy":{"label":{"en":"Budget range"},"help":{"en":"A rough range is fine."}}},{"name":"link","inputType":"url","copy":{"label":{"en":"Link"},"help":{"en":"A brief, a document or an example. Must start with https://."}}}]}]}'::jsonb,
+  'contact', 'Request a quote', 'draft', true, CURRENT_TIMESTAMP
+FROM "workspaces" w
+ON CONFLICT ("site_id", "slug") DO NOTHING;
+-- END request-quote backfill

package/templates/database/migrations/20261013120000_lead_spoke_checkout/migration.sql

@@ -0,0 +1,20 @@
+-- #8185 — record, at the moment the hub writes it, that a lead is a spoke's
+-- live paid checkout (spec docs/specs/8185-spoke-checkout-purchases-spec.md
+-- D1, D6, D10).
+--
+--   leads.spoke_checkout — set true by apps/api/src/services/lead-routing.ts
+--                          only for a spoke-keyed, unrelayed submit passing
+--                          the #7877 checkout plan rule's predicate. Written
+--                          at creation, never updated. NOT NULL with a
+--                          constant default, so existing rows read false and
+--                          nothing is rewritten; they are deliberately NOT
+--                          backfilled (D6: no stored fact proves an older
+--                          lead's provenance).
+--
+-- Rollout order (D10): apply this migration to a deployment's database BEFORE
+-- deploying the API that writes the column. The old API is unaffected by it;
+-- the new API's marked create fails without it.
+--
+-- Rollback: ALTER TABLE "leads" DROP COLUMN "spoke_checkout";
+
+ALTER TABLE "leads" ADD COLUMN "spoke_checkout" BOOLEAN NOT NULL DEFAULT false;

package/templates/database/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@working-theory/database",
-  "version": "0.38.0",
+  "version": "0.39.0",
   "license": "Apache-2.0",
   "publishConfig": {
     "access": "public"
@@ -16,7 +16,8 @@
     "inbox",
     "ops",
     "tenancy.ts",
-    "prisma.config.ts"
+    "prisma.config.ts",
+    "NOTICE"
   ],
   "description": "AI Launch Kit database schema (single-tenant Prisma)",
   "type": "module",

package/templates/database/seed.ts

@@ -25,6 +25,12 @@ import "dotenv/config";
 
 import { basename } from "node:path";
 
+import {
+  REQUEST_QUOTE_FLOW_SLUG,
+  REQUEST_QUOTE_FLOW_TITLE,
+  requestQuoteFlowConfig,
+} from "@working-theory/validation";
+
 import type { PrismaClient } from "./generated/client/client.js";
 import {
   DEFAULT_ORG_ID,
@@ -47,14 +53,14 @@ export {
 };
 
 /**
- * The DI surface `provisionDefaultWorkspace` needs — just the two Prisma
+ * The DI surface `provisionDefaultWorkspace` needs — just the three Prisma
  * delegates it touches. A `Pick` off the real `PrismaClient` type (not a
  * hand-rolled shape), so a real client satisfies it by construction and the
  * DB-free unit test can pass a lightweight stub with no live Postgres.
  */
 export type DefaultWorkspacePrismaClient = Pick<
   PrismaClient,
-  "organization" | "workspace"
+  "organization" | "workspace" | "flowDefinition"
 >;
 
 /**
@@ -62,6 +68,12 @@ export type DefaultWorkspacePrismaClient = Pick<
  * yet; no-op (no create/upsert calls) once any Workspace is present — covering
  * both single-tenant re-run idempotency and a multi-tenant deployment that
  * already has real Workspaces.
+ *
+ * #8168 D8 (C4) — the default workspace also gets its `request-quote` magnet.
+ * A fresh install runs `migrate deploy` BEFORE this seed, so the migration's
+ * backfill finds no workspace and seeds nothing; this is where the default
+ * workspace's magnet comes from. Insert-if-absent: an `upsert` with an empty
+ * `update`, so an existing `(site_id, slug)` row is never overwritten.
  */
 export async function provisionDefaultWorkspace(
   prisma: DefaultWorkspacePrismaClient,
@@ -97,6 +109,26 @@ export async function provisionDefaultWorkspace(
     update: {},
   });
 
+  await prisma.flowDefinition.upsert({
+    where: {
+      siteId_slug: {
+        siteId: DEFAULT_WORKSPACE_ID,
+        slug: REQUEST_QUOTE_FLOW_SLUG,
+      },
+    },
+    create: {
+      siteId: DEFAULT_WORKSPACE_ID,
+      workspaceId: DEFAULT_WORKSPACE_ID,
+      slug: REQUEST_QUOTE_FLOW_SLUG,
+      config: requestQuoteFlowConfig,
+      kind: "contact",
+      title: REQUEST_QUOTE_FLOW_TITLE,
+      status: "draft",
+      customersEnabled: true,
+    },
+    update: {},
+  });
+
   return { created: true };
 }
 

package/versions.json

@@ -1,53 +1,53 @@
 {
-  "@working-theory/admin-ui": "0.38.0",
-  "@working-theory/aeo": "0.38.0",
-  "@working-theory/agent-context": "0.38.0",
+  "@working-theory/admin-ui": "0.39.0",
+  "@working-theory/aeo": "0.39.0",
+  "@working-theory/agent-context": "0.39.0",
   "@working-theory/agent-contract": "0.1.0",
   "@working-theory/agent-memory": "0.0.0",
   "@working-theory/ai": "0.1.0",
-  "@working-theory/analytics": "0.38.0",
-  "@working-theory/api-client": "0.38.0",
+  "@working-theory/analytics": "0.39.0",
+  "@working-theory/api-client": "0.39.0",
   "@working-theory/cda-filesystem": "0.0.0",
-  "@working-theory/cli": "0.38.0",
-  "@working-theory/common": "0.38.0",
+  "@working-theory/cli": "0.39.0",
+  "@working-theory/common": "0.39.0",
   "@working-theory/consent": "0.1.0",
-  "@working-theory/content-adapters": "0.38.0",
-  "@working-theory/content-projection": "0.38.0",
-  "@working-theory/email": "0.38.0",
+  "@working-theory/content-adapters": "0.39.0",
+  "@working-theory/content-projection": "0.39.0",
+  "@working-theory/email": "0.39.0",
   "@working-theory/env": "0.0.0",
-  "@working-theory/eslint-config": "0.38.0",
-  "@working-theory/fumadocs-schema": "0.38.0",
-  "@working-theory/ids": "0.11.0",
-  "@working-theory/jsonld": "0.38.0",
-  "@working-theory/license": "0.38.0",
-  "@working-theory/metadata": "0.38.0",
-  "@working-theory/observability": "0.38.0",
-  "@working-theory/page-renderer": "0.38.0",
-  "@working-theory/plugin-mcp": "0.1.2",
-  "@working-theory/schema": "0.38.0",
-  "@working-theory/schema-pack-registry": "0.38.0",
-  "@working-theory/schema-validator": "0.38.0",
-  "@working-theory/sections-registry": "0.38.0",
-  "@working-theory/site-config": "0.38.0",
-  "@working-theory/spoke-checkout": "0.4.0",
-  "@working-theory/stripe-client": "0.38.0",
-  "@working-theory/templates": "0.38.0",
-  "@working-theory/theme": "0.38.0",
-  "@working-theory/ui": "0.38.0",
-  "@working-theory/validation": "0.38.0",
-  "@working-theory/web-i18n": "0.38.0",
+  "@working-theory/eslint-config": "0.39.0",
+  "@working-theory/fumadocs-schema": "0.39.0",
+  "@working-theory/ids": "0.12.0",
+  "@working-theory/jsonld": "0.39.0",
+  "@working-theory/license": "0.39.0",
+  "@working-theory/metadata": "0.39.0",
+  "@working-theory/observability": "0.39.0",
+  "@working-theory/page-renderer": "0.39.0",
+  "@working-theory/plugin-mcp": "0.1.3",
+  "@working-theory/schema": "0.39.0",
+  "@working-theory/schema-pack-registry": "0.39.0",
+  "@working-theory/schema-validator": "0.39.0",
+  "@working-theory/sections-registry": "0.39.0",
+  "@working-theory/site-config": "0.39.0",
+  "@working-theory/spoke-checkout": "0.5.0",
+  "@working-theory/stripe-client": "0.39.0",
+  "@working-theory/templates": "0.39.0",
+  "@working-theory/theme": "0.39.0",
+  "@working-theory/ui": "0.39.0",
+  "@working-theory/validation": "0.39.0",
+  "@working-theory/web-i18n": "0.39.0",
   "@working-theory/billing-client": "0.0.0",
   "@working-theory/branding": "0.0.0",
   "@working-theory/license-client": "0.0.0",
   "@working-theory/license-manifest": "0.0.0",
   "@working-theory/partner-session": "0.0.0",
   "@working-theory/preview-protocol": "0.0.0",
-  "@working-theory/ui-commerce": "0.23.16",
-  "@working-theory/ui-docs-blog": "0.23.16",
-  "@working-theory/ui-scheduling": "0.23.16",
-  "@working-theory/ui-signal-collectors": "0.25.5",
+  "@working-theory/ui-commerce": "0.23.17",
+  "@working-theory/ui-docs-blog": "0.23.17",
+  "@working-theory/ui-scheduling": "0.23.17",
+  "@working-theory/ui-signal-collectors": "0.25.6",
   "@working-theory/web": "0.0.0",
   "@working-theory/api": "1.0.0",
   "@working-theory/mcp": "0.0.0",
-  "@working-theory/database": "0.38.0"
+  "@working-theory/database": "0.39.0"
 }

package/templates/apps/api/src/__tests__/content-write-production-boot.test.ts

@@ -1,104 +0,0 @@
-/**
- * @file content-write-production-boot.test.ts
- * @description A production build with `content-write` enabled boots without
- * pino-pretty (#7502).
- *
- * `services/revalidation.ts` is loaded only by the content-write routes, and it
- * used to build its logger with `createLogger({ service })` alone. The
- * observability package read a missing `environment` as development and asked
- * pino for a `pino-pretty` transport, which a production install does not carry:
- * pino threw `unable to determine transport target for "pino-pretty"` at module
- * load, `build()` rejected, and every route — `/health` included — answered 500.
- *
- * "Without pino-pretty installed" is simulated at the pino boundary: the mock
- * below throws pino's own error whenever a `pino-pretty` transport is requested,
- * and passes every other call through to the real pino. pino is mocked by its
- * resolved path because `apps/api` does not depend on it directly — only
- * `@working-theory/observability` does.
- *
- * Mirrors `module-exclusion.test.ts`'s external-boundary mocks (CORS,
- * rate-limit, email).
- */
-
-import type { FastifyInstance } from "fastify";
-
-jest.mock(
-  require.resolve("pino", {
-    paths: [`${__dirname}/../../../../packages/observability`],
-  }),
-  () => {
-    const realPino = jest.requireActual(
-      require.resolve("pino", {
-        paths: [`${__dirname}/../../../../packages/observability`],
-      }),
-    );
-    const withoutPinoPretty = (
-      options?: { transport?: { target?: string } },
-      ...rest: unknown[]
-    ) => {
-      if (options?.transport?.target === "pino-pretty") {
-        throw new Error(
-          'unable to determine transport target for "pino-pretty"',
-        );
-      }
-      return realPino(options, ...rest);
-    };
-    // pino exports itself as `default` and as `pino` too; both are replaced.
-    return Object.assign(withoutPinoPretty, realPino, {
-      default: withoutPinoPretty,
-      pino: withoutPinoPretty,
-    });
-  },
-);
-
-jest.mock("@fastify/cors", () => {
-  return jest.fn().mockResolvedValue(undefined);
-});
-
-jest.mock("@fastify/rate-limit", () => {
-  return jest.fn().mockResolvedValue(undefined);
-});
-
-jest.mock("@working-theory/email", () => ({
-  sendLeadNotification: jest.fn().mockResolvedValue({ ok: true }),
-}));
-
-describe("production boot with content-write enabled (#7502)", () => {
-  const prior = {
-    NODE_ENV: process.env.NODE_ENV,
-    AILK_ENABLED_MODULES: process.env.AILK_ENABLED_MODULES,
-  };
-  let app: FastifyInstance;
-
-  beforeAll(async () => {
-    process.env.NODE_ENV = "production";
-    // content-write registers only alongside a tenancy module (server.ts).
-    process.env.AILK_ENABLED_MODULES = "multi-tenant,content-write";
-    // The config and the observability singleton read NODE_ENV at import, so
-    // the server is loaded only after the environment is set.
-    const { build } = await import("../server");
-    app = await build();
-  });
-
-  afterAll(async () => {
-    await app?.close();
-    for (const [key, value] of Object.entries(prior)) {
-      if (value === undefined) delete process.env[key];
-      else process.env[key] = value;
-    }
-  });
-
-  it("answers /health with 200", async () => {
-    const res = await app.inject({ method: "GET", url: "/health" });
-    expect(res.statusCode).toBe(200);
-  });
-
-  it("registers the content-write routes, so revalidation.ts was loaded", async () => {
-    // Registered and session-less: 401, where an unregistered route is a 404.
-    const res = await app.inject({
-      method: "POST",
-      url: "/v1/workspaces/wksp_00000000-0000-7000-8000-0000000000aa/content",
-    });
-    expect(res.statusCode).toBe(401);
-  });
-});