create-ailk 0.18.0 → 0.19.0

package/templates/apps/api/src/__tests__/review-surface-registration.test.ts

@@ -1,167 +0,0 @@
-/**
- * @file review-surface-registration.test.ts
- * @description The `multi-tenant || signal-collectors` registration matrix for
- * the review surface (#5677).
- *
- * This is the TWO-SIDED check the unit turns on. `signal-collectors` (Pro) is
- * the module that sells the instruments — flows, deliverables, project
- * listings, waitlist experiments — so a Pro customer could collect submissions
- * and not read them, because the review routes registered only inside the
- * multi-tenant scope. Widening the gate has to make the Pro side work WITHOUT
- * moving the Pro Plus side, and only exercising both builds shows that.
- *
- * It cannot fold into `module-exclusion.test.ts`: that suite's shape is
- * "excluding module X 404s every route X owns", and these routes register
- * under EITHER module, so excluding one while the other is on leaves them
- * registered by design — the same reason `workspace-module-registration.test.ts`
- * is its own file, whose structure this mirrors.
- *
- * "Resolves" is measured as "not Fastify's own 404". An unauthenticated
- * request to a registered tenant route answers 401, never 404, so the two
- * states are unambiguous.
- *
- * Mirrors `src/__tests__/server.test.ts`'s external-boundary mocks (CORS,
- * rate-limit, email) — see that file's header for why each is mocked.
- */
-
-jest.mock('@fastify/cors', () => {
-  return jest.fn().mockResolvedValue(undefined);
-});
-
-jest.mock('@fastify/rate-limit', () => {
-  return jest.fn().mockResolvedValue(undefined);
-});
-
-jest.mock('@working-theory/email', () => ({
-  sendLeadNotification: jest.fn().mockResolvedValue({ ok: true }),
-}));
-
-import { build } from '../server';
-
-// eslint-disable-next-line @typescript-eslint/no-explicit-any -- server is typed via Fastify generics; explicit any avoids pulling in the full FastifyInstance type here
-type App = any;
-
-const EXPERIMENT = 'wlx_00000000-0000-7000-8000-0000000000aa';
-
-/** The review surface — registers under EITHER module since #5677. */
-const REVIEW_ROUTES = [
-  { method: 'GET' as const, url: '/v1/waitlist-experiments' },
-  { method: 'GET' as const, url: `/v1/waitlist-experiments/${EXPERIMENT}` },
-  {
-    method: 'GET' as const,
-    url: `/v1/waitlist-experiments/${EXPERIMENT}/signups`,
-  },
-  { method: 'GET' as const, url: '/v1/project-listings' },
-];
-
-/**
- * Organization/Workspace ADMINISTRATION — deliberately left alone by #5677,
- * because it is not a site's own submissions. These stay multi-tenant-only.
- */
-const MULTI_TENANT_ONLY_ROUTES = [
-  { method: 'GET' as const, url: '/v1/workspaces' },
-  { method: 'GET' as const, url: '/v1/billing' },
-];
-
-async function withEnabledModules<T>(
-  enabled: string,
-  fn: () => Promise<T>,
-): Promise<T> {
-  const prior = process.env.AILK_ENABLED_MODULES;
-  process.env.AILK_ENABLED_MODULES = enabled;
-  try {
-    return await fn();
-  } finally {
-    if (prior === undefined) {
-      delete process.env.AILK_ENABLED_MODULES;
-    } else {
-      process.env.AILK_ENABLED_MODULES = prior;
-    }
-  }
-}
-
-/** Every (method, path) pair Fastify's router holds, one per line. */
-function routeLines(app: App): string[] {
-  return (app.printRoutes({ commonPrefix: false }) as string)
-    .split('\n')
-    .map((line: string) => line.trim())
-    .filter(Boolean);
-}
-
-describe('review-surface registration matrix (#5677)', () => {
-  let app: App;
-
-  afterEach(async () => {
-    if (app) {
-      await app.close();
-      app = undefined;
-    }
-    delete process.env.AILK_ENABLED_MODULES;
-  });
-
-  it("with 'signal-collectors' alone (a Pro build), every review route resolves behind the base tenant guard", async () => {
-    app = await withEnabledModules('signal-collectors', () => build());
-
-    for (const { method, url } of REVIEW_ROUTES) {
-      const res = await app.inject({ method, url });
-      expect({ url, status: res.statusCode }).toEqual({ url, status: 401 });
-    }
-  });
-
-  it("with 'signal-collectors' alone, Organization/Workspace administration stays unregistered", async () => {
-    app = await withEnabledModules('signal-collectors', () => build());
-
-    for (const { method, url } of MULTI_TENANT_ONLY_ROUTES) {
-      const res = await app.inject({ method, url });
-      expect({ url, status: res.statusCode }).toEqual({ url, status: 404 });
-    }
-  });
-
-  it("with 'multi-tenant' alone (a Pro Plus build), every review route resolves exactly as before — the regression floor", async () => {
-    app = await withEnabledModules('multi-tenant', () => build());
-
-    for (const { method, url } of [
-      ...REVIEW_ROUTES,
-      ...MULTI_TENANT_ONLY_ROUTES,
-    ]) {
-      const res = await app.inject({ method, url });
-      expect({ url, status: res.statusCode }).not.toEqual({ url, status: 404 });
-    }
-  });
-
-  it('with BOTH enabled, each review route registers exactly once', async () => {
-    // build() itself is the first assertion: Fastify throws
-    // FST_ERR_DUPLICATED_ROUTE at registration time, so a double-registration
-    // never reaches the router tree to be counted.
-    app = await withEnabledModules('multi-tenant,signal-collectors', () =>
-      build(),
-    );
-
-    const lines = routeLines(app);
-    const experimentRoutes = lines.filter((line) =>
-      line.includes('waitlist-experiments'),
-    );
-    expect(experimentRoutes.length).toBeGreaterThan(0);
-    expect(new Set(experimentRoutes).size).toBe(experimentRoutes.length);
-
-    for (const { method, url } of [
-      ...REVIEW_ROUTES,
-      ...MULTI_TENANT_ONLY_ROUTES,
-    ]) {
-      const res = await app.inject({ method, url });
-      expect({ url, status: res.statusCode }).not.toEqual({ url, status: 404 });
-    }
-  });
-
-  it('with NEITHER enabled (a Free build), no review route registers — Free is unaffected', async () => {
-    app = await withEnabledModules('', () => build());
-
-    for (const { method, url } of [
-      ...REVIEW_ROUTES,
-      ...MULTI_TENANT_ONLY_ROUTES,
-    ]) {
-      const res = await app.inject({ method, url });
-      expect({ url, status: res.statusCode }).toEqual({ url, status: 404 });
-    }
-  });
-});

package/templates/apps/api/src/__tests__/root-modules.test.ts

@@ -1,175 +0,0 @@
-/**
- * @file root-modules.test.ts
- * @description `GET /` reports the optional modules this process registered
- * routes for (#7501), so the Admin can hide what a build does not serve.
- *
- * Builds the REAL server under several `AILK_ENABLED_MODULES` values and reads
- * the root index over `inject`. `modules` must agree with the route table
- * Fastify actually registered — the content and meetings reads the Admin makes
- * are present exactly when their module is listed.
- *
- * Mirrors `src/openapi/__tests__/surface-drift.test.ts`'s external-boundary
- * mocks (CORS, rate-limit, email) — see that file's header for why each is
- * mocked.
- */
-
-jest.mock("@fastify/cors", () => {
-  return jest.fn().mockResolvedValue(undefined);
-});
-
-jest.mock("@fastify/rate-limit", () => {
-  return jest.fn().mockResolvedValue(undefined);
-});
-
-jest.mock("@working-theory/email", () => ({
-  sendLeadNotification: jest.fn().mockResolvedValue({ ok: true }),
-}));
-
-import { execFileSync } from "node:child_process";
-import path from "node:path";
-import { build } from "../server";
-import { readRegisteredRoutes } from "../openapi/spec";
-import { routeKey } from "../openapi/surface-drift";
-
-const CONTENT_READ = routeKey("GET", "/v1/workspaces/:workspaceId/content");
-const MEETINGS_READ = routeKey("GET", "/v1/workspaces/:workspaceId/meetings");
-
-/** Every route the Admin reads under `multi-tenant` alone (spec §1 fact 4). */
-const ADMIN_MULTI_TENANT_READS = [
-  routeKey("GET", "/v1/workspaces"),
-  routeKey("GET", "/v1/billing"),
-  routeKey("GET", "/v1/project-listings"),
-  routeKey("GET", "/v1/workspaces/:workspaceId/messages"),
-  routeKey("GET", "/v1/workspaces/:workspaceId/magnets"),
-  routeKey("GET", "/v1/workspaces/:workspaceId/assets"),
-  routeKey("GET", "/v1/workspaces/:workspaceId/sessions"),
-  routeKey("GET", "/v1/sessions/:sessionId/artifacts"),
-];
-
-const CONFIGS: Array<[string, string | undefined, string[]]> = [
-  ["unset", undefined, []],
-  ["multi-tenant", "multi-tenant", ["multi-tenant"]],
-  [
-    "scheduling, content-write,multi-tenant",
-    "scheduling, content-write,multi-tenant",
-    ["content-write", "multi-tenant", "scheduling"],
-  ],
-  ["content-write alone", "content-write", []],
-  [
-    "multi-tenant,bogus,signal-collectors",
-    "multi-tenant,bogus,signal-collectors",
-    ["multi-tenant", "signal-collectors"],
-  ],
-  // `docs` registers no apps/api route, so it is never reported as served.
-  ["docs,multi-tenant", "docs,multi-tenant", ["multi-tenant"]],
-];
-
-function setEnv(value: string | undefined): string | undefined {
-  const prior = process.env.AILK_ENABLED_MODULES;
-  if (value === undefined) {
-    delete process.env.AILK_ENABLED_MODULES;
-  } else {
-    process.env.AILK_ENABLED_MODULES = value;
-  }
-  return prior;
-}
-
-describe("GET / modules (#7501)", () => {
-  let prior: string | undefined;
-
-  beforeEach(() => {
-    prior = process.env.AILK_ENABLED_MODULES;
-  });
-
-  afterEach(() => {
-    setEnv(prior);
-  });
-
-  describe.each(CONFIGS)("AILK_ENABLED_MODULES = %s", (_label, env, expected) => {
-    let modules: unknown;
-    let routes: Set<string>;
-
-    beforeAll(async () => {
-      const before = setEnv(env);
-      try {
-        const app = await build();
-        await app.ready();
-        const res = await app.inject({ method: "GET", url: "/" });
-        routes = new Set(
-          readRegisteredRoutes(app).map((r) => routeKey(r.method, r.url)),
-        );
-        await app.close();
-        expect(res.statusCode).toBe(200);
-        modules = JSON.parse(res.body).modules;
-      } finally {
-        setEnv(before);
-      }
-    }, 60000);
-
-    it("AC-1: lists exactly the served optional modules, sorted", () => {
-      expect(modules).toEqual(expected);
-    });
-
-    it("AC-2: content-write is listed exactly when the content read registered", () => {
-      expect((modules as string[]).includes("content-write")).toBe(
-        routes.has(CONTENT_READ),
-      );
-    });
-
-    it("AC-2: scheduling is listed exactly when the meetings read registered", () => {
-      expect((modules as string[]).includes("scheduling")).toBe(
-        routes.has(MEETINGS_READ),
-      );
-    });
-  });
-
-  it("AC-1: a built server keeps its module list after the env changes", async () => {
-    const before = setEnv("multi-tenant,content-write");
-    let app: Awaited<ReturnType<typeof build>>;
-    try {
-      app = await build();
-      await app.ready();
-    } finally {
-      setEnv(before);
-    }
-    process.env.AILK_ENABLED_MODULES = "";
-    try {
-      const res = await app.inject({ method: "GET", url: "/" });
-      expect(JSON.parse(res.body).modules).toEqual([
-        "content-write",
-        "multi-tenant",
-      ]);
-    } finally {
-      await app.close();
-    }
-  }, 60000);
-
-  it("AC-2: multi-tenant alone registers every route the Admin reads, bar content and meetings", async () => {
-    const before = setEnv("multi-tenant");
-    try {
-      const app = await build();
-      await app.ready();
-      const routes = new Set(
-        readRegisteredRoutes(app).map((r) => routeKey(r.method, r.url)),
-      );
-      await app.close();
-      for (const read of ADMIN_MULTI_TENANT_READS) {
-        expect(routes).toContain(read);
-      }
-      expect(routes).not.toContain(CONTENT_READ);
-      expect(routes).not.toContain(MEETINGS_READ);
-    } finally {
-      setEnv(before);
-    }
-  }, 60000);
-
-  it("AC-2: pnpm lint:slice-registration exits 0", () => {
-    const repoRoot = path.resolve(__dirname, "../../../..");
-    expect(() =>
-      execFileSync("pnpm", ["lint:slice-registration"], {
-        cwd: repoRoot,
-        stdio: "pipe",
-      }),
-    ).not.toThrow();
-  }, 120000);
-});

package/templates/apps/api/src/__tests__/schedule-forwarded-rate-limit.test.ts

@@ -1,117 +0,0 @@
-/**
- * @file schedule-forwarded-rate-limit.test.ts
- * @description #7633 (conductor amendment, the relay's security review) — a
- * site's relayed schedule calls are limited per visitor end to end, through
- * the real `build()`, the schedule scope's own limiter and the REAL
- * `@fastify/rate-limit` global ceiling: the schedule scope's twin of
- * `leads-forwarded-rate-limit.test.ts` (#7394 AC-7).
- *
- * Once browsers post through a site's same-origin relay (#7644), every
- * visitor's `GET /v1/schedule/availability` and `POST /v1/schedule/book`
- * reaches the hub from the site's server. With the hub-issued forwarding key,
- * each visitor gets the scope's own per-visitor budget, and the key as a
- * whole a ceiling of 60 a minute — well below the lead routes' 300, because a
- * booking is a real booking.
- *
- * `DATABASE_URL` is unset and the `scheduling` module is enabled for the
- * file's duration. Whatever each route answers past the limiter (a 400 or a
- * 503) is not this file's subject: the limiter runs on `onRequest`, before
- * any handler.
- */
-
-import { __resetBuckets } from "../middleware/rate-limit";
-import { build } from "../server";
-
-jest.mock("@fastify/cors", () => {
-  return jest.fn().mockResolvedValue(undefined);
-});
-
-jest.mock("@working-theory/email", () => ({
-  sendLeadNotification: jest.fn().mockResolvedValue({ ok: true }),
-}));
-
-const KEY = "0123456789abcdef".repeat(4); // gitleaks:allow — test fixture, not a credential (#7394)
-const SPOKE_HOST = "198.51.100.7";
-
-/** A distinct, valid visitor IP per index. */
-function visitor(i: number): string {
-  return `203.0.${Math.floor(i / 250)}.${(i % 250) + 1}`;
-}
-
-function headersFor(visitorIp: string, withKey: boolean): Record<string, string> {
-  return {
-    "x-forwarded-for": SPOKE_HOST,
-    "x-ailk-visitor-ip": visitorIp,
-    ...(withKey && { "x-ailk-visitor-forward-key": KEY }),
-  };
-}
-
-const ROUTES = [
-  { method: "GET", url: "/v1/schedule/availability?calLink=acme%2Fintro" },
-  { method: "POST", url: "/v1/schedule/book", payload: {} },
-] as const;
-
-describe.each(ROUTES)("$method $url for a keyed site, against the real limiters (#7633)", (route) => {
-  // eslint-disable-next-line @typescript-eslint/no-explicit-any -- server is typed via Fastify generics; explicit any matches server.test.ts
-  let app: any;
-  const prior = {
-    keys: process.env.AILK_VISITOR_FORWARD_KEYS,
-    modules: process.env.AILK_ENABLED_MODULES,
-    databaseUrl: process.env.DATABASE_URL,
-  };
-
-  async function statuses(count: number, visitorFor: (i: number) => string, withKey: boolean): Promise<number[]> {
-    const codes: number[] = [];
-    for (let i = 0; i < count; i++) {
-      const res = await app.inject({ ...route, headers: headersFor(visitorFor(i), withKey) });
-      codes.push(res.statusCode);
-    }
-    return codes;
-  }
-
-  beforeEach(async () => {
-    __resetBuckets();
-    process.env.AILK_VISITOR_FORWARD_KEYS = KEY;
-    process.env.AILK_ENABLED_MODULES = "scheduling";
-    delete process.env.DATABASE_URL;
-    app = await build();
-    await app.ready();
-  });
-
-  afterEach(async () => {
-    if (app) await app.close();
-    app = undefined;
-  });
-
-  afterAll(() => {
-    for (const [name, value] of [
-      ["AILK_VISITOR_FORWARD_KEYS", prior.keys],
-      ["AILK_ENABLED_MODULES", prior.modules],
-      ["DATABASE_URL", prior.databaseUrl],
-    ] as const) {
-      if (value === undefined) delete process.env[name];
-      else process.env[name] = value;
-    }
-  });
-
-  it("two visitors behind one forwarding key are counted separately: the first's eleventh call is 429, the second's first is not", async () => {
-    const first = await statuses(11, () => "203.0.113.1", true);
-    expect(first.slice(0, 10).every((code) => code !== 429)).toBe(true);
-    expect(first[10]).toBe(429);
-
-    const second = await statuses(1, () => "203.0.113.2", true);
-    expect(second[0]).not.toBe(429);
-  });
-
-  it("without the key, distinct visitors behind one host share the host's budget: the eleventh call is 429", async () => {
-    const codes = await statuses(11, visitor, false);
-    expect(codes.slice(0, 10).every((code) => code !== 429)).toBe(true);
-    expect(codes[10]).toBe(429);
-  });
-
-  it("the key's own ceiling is 60 a minute across all of its visitors: the sixty-first is 429", async () => {
-    const codes = await statuses(61, visitor, true);
-    expect(codes.slice(0, 60).every((code) => code !== 429)).toBe(true);
-    expect(codes[60]).toBe(429);
-  });
-});