create-ailk 0.18.0 → 0.19.1

package/templates/database/migrations/20261014120000_person_contact/migration.sql

@@ -0,0 +1,231 @@
+-- #8435 — contact details on the client record (spec
+-- docs/specs/8435-contact-details-on-the-client-spec.md D1, D2).
+--
+--   people (13 columns) — given name, family name, an E.164 telephone, the
+--                    magnet's six-part address, a company name, a job title,
+--                    and the confirmation pair (who last saved the contact by
+--                    hand, and when). Every column is nullable and has no
+--                    default, so Postgres changes only the catalog.
+--   callbacks.person_id, subscribers.person_id — the Person a request or a
+--                    subscription belongs to: a composite foreign key onto
+--                    people(id, workspace_id), the #7877 shape, so "a Person
+--                    of the row's own workspace" is a database fact. NULL is
+--                    not checked (MATCH SIMPLE).
+--
+-- PURELY ADDITIVE, DDL ONLY. No existing row's values change here: the
+-- backfill is the next migration, 20261014121000_person_contact_backfill,
+-- split out so its row updates never run under the exclusive locks these
+-- ALTER TABLEs take. Prisma runs this file as one transaction, so each ALTER
+-- TABLE's ACCESS EXCLUSIVE lock on "people", "callbacks" and "subscribers"
+-- is held until the file commits. Every CHECK and foreign key below is added
+-- NOT VALID and then VALIDATEd over an all-NULL column or a table with no
+-- person_id yet, and none of the three is the large "leads" table; the window
+-- is accepted, as #852 accepted the same on "leads" (SEC-852-E, SEC-8435-C).
+--
+-- Rollout: deploy this migration BEFORE the API code that writes the columns;
+-- code without them fails every callback and subscription write.
+--
+-- Rollback: ALTER TABLE "callbacks" DROP CONSTRAINT "callbacks_person_fk",
+-- DROP COLUMN "person_id"; ALTER TABLE "subscribers" DROP CONSTRAINT
+-- "subscribers_person_fk", DROP COLUMN "person_id"; ALTER TABLE "people"
+-- DROP COLUMN "given_name", DROP COLUMN "family_name", DROP COLUMN
+-- "telephone", DROP COLUMN "address_line1", DROP COLUMN "address_line2",
+-- DROP COLUMN "address_city", DROP COLUMN "address_region", DROP COLUMN
+-- "address_postal_code", DROP COLUMN "address_country", DROP COLUMN
+-- "company_name", DROP COLUMN "job_title", DROP COLUMN "contact_confirmed_at",
+-- DROP COLUMN "contact_confirmed_by"; (the indexes and CHECKs go with them).
+
+-- AlterTable
+ALTER TABLE "people" ADD COLUMN     "address_city" VARCHAR(60),
+ADD COLUMN     "address_country" CHAR(2),
+ADD COLUMN     "address_line1" VARCHAR(100),
+ADD COLUMN     "address_line2" VARCHAR(60),
+ADD COLUMN     "address_postal_code" VARCHAR(20),
+ADD COLUMN     "address_region" VARCHAR(40),
+ADD COLUMN     "company_name" VARCHAR(200),
+ADD COLUMN     "contact_confirmed_at" TIMESTAMP(3),
+ADD COLUMN     "contact_confirmed_by" VARCHAR(16),
+ADD COLUMN     "family_name" VARCHAR(100),
+ADD COLUMN     "given_name" VARCHAR(100),
+ADD COLUMN     "job_title" VARCHAR(100),
+ADD COLUMN     "telephone" VARCHAR(16);
+
+-- AlterTable
+ALTER TABLE "callbacks" ADD COLUMN     "person_id" TEXT;
+
+-- AlterTable
+ALTER TABLE "subscribers" ADD COLUMN     "person_id" TEXT;
+
+-- CreateIndex
+CREATE INDEX "callbacks_person_id_idx" ON "callbacks"("person_id");
+
+-- CreateIndex
+CREATE INDEX "subscribers_person_id_idx" ON "subscribers"("person_id");
+
+-- A stored telephone is E.164 (the form the phone field posts) or NULL.
+ALTER TABLE "people" ADD CONSTRAINT "people_telephone_e164"
+  CHECK ("telephone" IS NULL OR "telephone" ~ '^\+[1-9][0-9]{6,14}$') NOT VALID;
+ALTER TABLE "people" VALIDATE CONSTRAINT "people_telephone_e164";
+
+-- The country is the upper-case ISO 3166-1 alpha-2 code.
+ALTER TABLE "people" ADD CONSTRAINT "people_address_country_format"
+  CHECK ("address_country" IS NULL OR "address_country" ~ '^[A-Z]{2}$') NOT VALID;
+ALTER TABLE "people" VALIDATE CONSTRAINT "people_address_country_format";
+
+-- An address is stored whole or not at all: all six parts NULL, or every
+-- part but the optional second line present.
+ALTER TABLE "people" ADD CONSTRAINT "people_address_complete"
+  CHECK (
+    ("address_line1" IS NULL AND "address_line2" IS NULL AND "address_city" IS NULL AND "address_region" IS NULL AND "address_postal_code" IS NULL AND "address_country" IS NULL)
+    OR
+    ("address_line1" IS NOT NULL AND "address_city" IS NOT NULL AND "address_region" IS NOT NULL AND "address_postal_code" IS NOT NULL AND "address_country" IS NOT NULL)
+  ) NOT VALID;
+ALTER TABLE "people" VALIDATE CONSTRAINT "people_address_complete";
+
+-- The confirmation pair is written together, and the actor is one of two.
+ALTER TABLE "people" ADD CONSTRAINT "people_contact_confirmed"
+  CHECK (
+    ("contact_confirmed_at" IS NULL AND "contact_confirmed_by" IS NULL)
+    OR
+    ("contact_confirmed_at" IS NOT NULL AND "contact_confirmed_by" IS NOT NULL AND "contact_confirmed_by" IN ('operator', 'client'))
+  ) NOT VALID;
+ALTER TABLE "people" VALIDATE CONSTRAINT "people_contact_confirmed";
+
+-- The two new reference columns carry the person_ format CHECK (the #852
+-- shape), added NOT VALID and then validated over an all-NULL column.
+ALTER TABLE "callbacks" ADD CONSTRAINT "callbacks_person_id_format" CHECK ("person_id" ~ '^person_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$') NOT VALID;
+ALTER TABLE "callbacks" VALIDATE CONSTRAINT "callbacks_person_id_format";
+ALTER TABLE "subscribers" ADD CONSTRAINT "subscribers_person_id_format" CHECK ("person_id" ~ '^person_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$') NOT VALID;
+ALTER TABLE "subscribers" VALIDATE CONSTRAINT "subscribers_person_id_format";
+
+-- AddForeignKey
+-- A callback / subscriber names a Person of ITS OWN workspace; deleting a
+-- Person with one is refused (the pieces_person_fk shape, #7877).
+ALTER TABLE "callbacks" ADD CONSTRAINT "callbacks_person_fk" FOREIGN KEY ("person_id", "workspace_id") REFERENCES "people"("id", "workspace_id") ON DELETE RESTRICT ON UPDATE CASCADE NOT VALID;
+ALTER TABLE "callbacks" VALIDATE CONSTRAINT "callbacks_person_fk";
+ALTER TABLE "subscribers" ADD CONSTRAINT "subscribers_person_fk" FOREIGN KEY ("person_id", "workspace_id") REFERENCES "people"("id", "workspace_id") ON DELETE RESTRICT ON UPDATE CASCADE NOT VALID;
+ALTER TABLE "subscribers" VALIDATE CONSTRAINT "subscribers_person_fk";
+
+-- ===== #8435 contact backfill (idempotent; runs after the DDL above) =====
+-- #8435 — the contact backfill (spec
+-- docs/specs/8435-contact-details-on-the-client-spec.md D2).
+--
+-- Gives every newsletter subscriber and every callback that carries a
+-- storable email a Person, stamps subscribers.person_id and
+-- callbacks.person_id, and fills a Person's blank telephone from the oldest
+-- callback phone that is already E.164 once spaces and punctuation are
+-- removed. Set-based and idempotent: every insert is ON CONFLICT DO NOTHING
+-- and every update is guarded by IS NULL, so running this text twice changes
+-- nothing the first run wrote.
+--
+--
+-- Normalization — the SQL twin of apps/api/src/services/person.ts's
+-- normalizePersonEmail / isStorablePersonEmail (#852's expressions verbatim):
+--   N(x)     = lower(btrim(x, E' \t\n\r\f\x0B') COLLATE "C")
+--              (\x0B is vertical tab; an E-string has no \v escape — E'\v'
+--              is the letter v, which would strip the v of every .dev)
+--   VALID(e) = e ~ '^[!-?A-~]+@[!-?A-~]+$' AND length(e) <= 254
+--   NAME(x)  = C0/C1 controls and bidi controls removed, trimmed, cut to
+--              200 characters; empty → NULL
+-- A row whose email is not VALID makes no Person and keeps person_id NULL.
+--
+-- A callback's email is its payload.email when that is a JSON string and
+-- VALID, else its buyer_email when VALID — the order the live code links in
+-- (capture first, the confirm step only when capture left it NULL;
+-- SEC-8435-G).
+--
+-- Rollback: nothing to undo on its own — dropping 20261014120000_person_contact's
+-- columns removes the stamps and the telephones this wrote; the Persons it
+-- created are ordinary Persons and are left in place.
+
+-- 1. Subscribers, oldest first: one Person per (workspace, normalized email).
+INSERT INTO "people" ("workspace_id", "email", "created_at", "updated_at")
+SELECT DISTINCT ON (s."workspace_id", lower(btrim(s."email", E' \t\n\r\f\x0B') COLLATE "C"))
+       s."workspace_id",
+       lower(btrim(s."email", E' \t\n\r\f\x0B') COLLATE "C"),
+       s."created_at",
+       now()
+FROM "subscribers" s
+WHERE lower(btrim(s."email", E' \t\n\r\f\x0B') COLLATE "C") ~ '^[!-?A-~]+@[!-?A-~]+$'
+  AND length(lower(btrim(s."email", E' \t\n\r\f\x0B') COLLATE "C")) <= 254
+ORDER BY s."workspace_id", lower(btrim(s."email", E' \t\n\r\f\x0B') COLLATE "C"), s."created_at" ASC, s."id" ASC
+ON CONFLICT ("workspace_id", "email") DO NOTHING;
+
+-- 2. Callbacks, oldest first: one Person per (workspace, normalized email),
+--    named from the callback's own name. A Person a lead or a subscriber
+--    already made keeps its name and created_at (ON CONFLICT DO NOTHING).
+INSERT INTO "people" ("workspace_id", "email", "name", "created_at", "updated_at")
+SELECT DISTINCT ON (ce."workspace_id", ce."email_n")
+       ce."workspace_id",
+       ce."email_n",
+       NULLIF(left(btrim(regexp_replace(ce."name", '[\x01-\x1F\x7F-\x9F‎‏‪-‮⁦-⁩]', '', 'g')), 200), ''),
+       ce."created_at",
+       now()
+FROM (
+  SELECT c."id", c."workspace_id", c."name", c."phone", c."created_at",
+         (
+           SELECT v."e"
+           FROM (VALUES
+             (1, lower(btrim(CASE WHEN jsonb_typeof(c."payload" -> 'email') = 'string' THEN c."payload" ->> 'email' END, E' \t\n\r\f\x0B') COLLATE "C")),
+             (2, lower(btrim(c."buyer_email", E' \t\n\r\f\x0B') COLLATE "C"))
+           ) v("ord", "e")
+           WHERE v."e" ~ '^[!-?A-~]+@[!-?A-~]+$' AND length(v."e") <= 254
+           ORDER BY v."ord"
+           LIMIT 1
+         ) AS "email_n"
+  FROM "callbacks" c
+) ce
+WHERE ce."email_n" IS NOT NULL
+ORDER BY ce."workspace_id", ce."email_n", ce."created_at" ASC, ce."id" ASC
+ON CONFLICT ("workspace_id", "email") DO NOTHING;
+
+-- 3. Stamps: every subscriber and callback with a storable email points at
+--    its workspace's Person; a row already stamped is left alone.
+UPDATE "subscribers"
+SET "person_id" = p."id"
+FROM "people" p
+WHERE "subscribers"."person_id" IS NULL
+  AND p."workspace_id" = "subscribers"."workspace_id"
+  AND p."email" = lower(btrim("subscribers"."email", E' \t\n\r\f\x0B') COLLATE "C");
+
+UPDATE "callbacks"
+SET "person_id" = p."id"
+FROM (
+  SELECT c."id" AS "callback_id", c."workspace_id",
+         (
+           SELECT v."e"
+           FROM (VALUES
+             (1, lower(btrim(CASE WHEN jsonb_typeof(c."payload" -> 'email') = 'string' THEN c."payload" ->> 'email' END, E' \t\n\r\f\x0B') COLLATE "C")),
+             (2, lower(btrim(c."buyer_email", E' \t\n\r\f\x0B') COLLATE "C"))
+           ) v("ord", "e")
+           WHERE v."e" ~ '^[!-?A-~]+@[!-?A-~]+$' AND length(v."e") <= 254
+           ORDER BY v."ord"
+           LIMIT 1
+         ) AS "email_n"
+  FROM "callbacks" c
+  WHERE c."person_id" IS NULL
+) ce
+JOIN "people" p ON p."workspace_id" = ce."workspace_id" AND p."email" = ce."email_n"
+WHERE "callbacks"."id" = ce."callback_id"
+  AND "callbacks"."person_id" IS NULL;
+
+-- 4. Telephone: for an uncurated Person (no linked user, never confirmed by
+--    hand — the rule a capture obeys, D4) with no telephone, the oldest
+--    stamped callback's phone with spaces and punctuation removed, when that
+--    is E.164. A national-format phone fills nothing.
+UPDATE "people" p
+SET "telephone" = c."tel",
+    "updated_at" = now()
+FROM (
+  SELECT DISTINCT ON (cb."person_id")
+         cb."person_id",
+         regexp_replace(cb."phone", '[ ().-]', '', 'g') AS "tel"
+  FROM "callbacks" cb
+  WHERE cb."person_id" IS NOT NULL
+    AND regexp_replace(cb."phone", '[ ().-]', '', 'g') ~ '^\+[1-9][0-9]{6,14}$'
+  ORDER BY cb."person_id", cb."created_at" ASC, cb."id" ASC
+) c
+WHERE p."id" = c."person_id"
+  AND p."telephone" IS NULL
+  AND p."user_id" IS NULL
+  AND p."contact_confirmed_at" IS NULL;

package/templates/database/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@working-theory/database",
-  "version": "0.38.0",
+  "version": "0.40.0",
   "license": "Apache-2.0",
   "publishConfig": {
     "access": "public"
@@ -16,7 +16,8 @@
     "inbox",
     "ops",
     "tenancy.ts",
-    "prisma.config.ts"
+    "prisma.config.ts",
+    "NOTICE"
   ],
   "description": "AI Launch Kit database schema (single-tenant Prisma)",
   "type": "module",

package/templates/database/seed.ts

@@ -25,6 +25,12 @@ import "dotenv/config";
 
 import { basename } from "node:path";
 
+import {
+  REQUEST_QUOTE_FLOW_SLUG,
+  REQUEST_QUOTE_FLOW_TITLE,
+  requestQuoteFlowConfig,
+} from "@working-theory/validation";
+
 import type { PrismaClient } from "./generated/client/client.js";
 import {
   DEFAULT_ORG_ID,
@@ -47,14 +53,14 @@ export {
 };
 
 /**
- * The DI surface `provisionDefaultWorkspace` needs — just the two Prisma
+ * The DI surface `provisionDefaultWorkspace` needs — just the three Prisma
  * delegates it touches. A `Pick` off the real `PrismaClient` type (not a
  * hand-rolled shape), so a real client satisfies it by construction and the
  * DB-free unit test can pass a lightweight stub with no live Postgres.
  */
 export type DefaultWorkspacePrismaClient = Pick<
   PrismaClient,
-  "organization" | "workspace"
+  "organization" | "workspace" | "flowDefinition"
 >;
 
 /**
@@ -62,6 +68,12 @@ export type DefaultWorkspacePrismaClient = Pick<
  * yet; no-op (no create/upsert calls) once any Workspace is present — covering
  * both single-tenant re-run idempotency and a multi-tenant deployment that
  * already has real Workspaces.
+ *
+ * #8168 D8 (C4) — the default workspace also gets its `request-quote` magnet.
+ * A fresh install runs `migrate deploy` BEFORE this seed, so the migration's
+ * backfill finds no workspace and seeds nothing; this is where the default
+ * workspace's magnet comes from. Insert-if-absent: an `upsert` with an empty
+ * `update`, so an existing `(site_id, slug)` row is never overwritten.
  */
 export async function provisionDefaultWorkspace(
   prisma: DefaultWorkspacePrismaClient,
@@ -97,6 +109,26 @@ export async function provisionDefaultWorkspace(
     update: {},
   });
 
+  await prisma.flowDefinition.upsert({
+    where: {
+      siteId_slug: {
+        siteId: DEFAULT_WORKSPACE_ID,
+        slug: REQUEST_QUOTE_FLOW_SLUG,
+      },
+    },
+    create: {
+      siteId: DEFAULT_WORKSPACE_ID,
+      workspaceId: DEFAULT_WORKSPACE_ID,
+      slug: REQUEST_QUOTE_FLOW_SLUG,
+      config: requestQuoteFlowConfig,
+      kind: "contact",
+      title: REQUEST_QUOTE_FLOW_TITLE,
+      status: "draft",
+      customersEnabled: true,
+    },
+    update: {},
+  });
+
   return { created: true };
 }
 

package/versions.json

@@ -1,53 +1,53 @@
 {
-  "@working-theory/admin-ui": "0.38.0",
-  "@working-theory/aeo": "0.38.0",
-  "@working-theory/agent-context": "0.38.0",
+  "@working-theory/admin-ui": "0.40.0",
+  "@working-theory/aeo": "0.40.0",
+  "@working-theory/agent-context": "0.40.0",
   "@working-theory/agent-contract": "0.1.0",
   "@working-theory/agent-memory": "0.0.0",
   "@working-theory/ai": "0.1.0",
-  "@working-theory/analytics": "0.38.0",
-  "@working-theory/api-client": "0.38.0",
+  "@working-theory/analytics": "0.40.0",
+  "@working-theory/api-client": "0.40.0",
   "@working-theory/cda-filesystem": "0.0.0",
-  "@working-theory/cli": "0.38.0",
-  "@working-theory/common": "0.38.0",
+  "@working-theory/cli": "0.40.0",
+  "@working-theory/common": "0.40.0",
   "@working-theory/consent": "0.1.0",
-  "@working-theory/content-adapters": "0.38.0",
-  "@working-theory/content-projection": "0.38.0",
-  "@working-theory/email": "0.38.0",
+  "@working-theory/content-adapters": "0.40.0",
+  "@working-theory/content-projection": "0.40.0",
+  "@working-theory/email": "0.40.0",
   "@working-theory/env": "0.0.0",
-  "@working-theory/eslint-config": "0.38.0",
-  "@working-theory/fumadocs-schema": "0.38.0",
-  "@working-theory/ids": "0.11.0",
-  "@working-theory/jsonld": "0.38.0",
-  "@working-theory/license": "0.38.0",
-  "@working-theory/metadata": "0.38.0",
-  "@working-theory/observability": "0.38.0",
-  "@working-theory/page-renderer": "0.38.0",
-  "@working-theory/plugin-mcp": "0.1.2",
-  "@working-theory/schema": "0.38.0",
-  "@working-theory/schema-pack-registry": "0.38.0",
-  "@working-theory/schema-validator": "0.38.0",
-  "@working-theory/sections-registry": "0.38.0",
-  "@working-theory/site-config": "0.38.0",
-  "@working-theory/spoke-checkout": "0.4.0",
-  "@working-theory/stripe-client": "0.38.0",
-  "@working-theory/templates": "0.38.0",
-  "@working-theory/theme": "0.38.0",
-  "@working-theory/ui": "0.38.0",
-  "@working-theory/validation": "0.38.0",
-  "@working-theory/web-i18n": "0.38.0",
+  "@working-theory/eslint-config": "0.40.0",
+  "@working-theory/fumadocs-schema": "0.40.0",
+  "@working-theory/ids": "0.13.0",
+  "@working-theory/jsonld": "0.40.0",
+  "@working-theory/license": "0.40.0",
+  "@working-theory/metadata": "0.40.0",
+  "@working-theory/observability": "0.40.0",
+  "@working-theory/page-renderer": "0.40.0",
+  "@working-theory/plugin-mcp": "0.1.3",
+  "@working-theory/schema": "0.40.0",
+  "@working-theory/schema-pack-registry": "0.40.0",
+  "@working-theory/schema-validator": "0.40.0",
+  "@working-theory/sections-registry": "0.40.0",
+  "@working-theory/site-config": "0.40.0",
+  "@working-theory/spoke-checkout": "0.5.1",
+  "@working-theory/stripe-client": "0.40.0",
+  "@working-theory/templates": "0.40.0",
+  "@working-theory/theme": "0.40.0",
+  "@working-theory/ui": "0.40.0",
+  "@working-theory/validation": "0.40.0",
+  "@working-theory/web-i18n": "0.40.0",
   "@working-theory/billing-client": "0.0.0",
   "@working-theory/branding": "0.0.0",
   "@working-theory/license-client": "0.0.0",
   "@working-theory/license-manifest": "0.0.0",
   "@working-theory/partner-session": "0.0.0",
   "@working-theory/preview-protocol": "0.0.0",
-  "@working-theory/ui-commerce": "0.23.16",
-  "@working-theory/ui-docs-blog": "0.23.16",
-  "@working-theory/ui-scheduling": "0.23.16",
-  "@working-theory/ui-signal-collectors": "0.25.5",
+  "@working-theory/ui-commerce": "0.23.18",
+  "@working-theory/ui-docs-blog": "0.23.18",
+  "@working-theory/ui-scheduling": "0.23.18",
+  "@working-theory/ui-signal-collectors": "0.25.7",
   "@working-theory/web": "0.0.0",
   "@working-theory/api": "1.0.0",
   "@working-theory/mcp": "0.0.0",
-  "@working-theory/database": "0.38.0"
+  "@working-theory/database": "0.40.0"
 }

package/templates/apps/api/src/__tests__/content-write-production-boot.test.ts

@@ -1,104 +0,0 @@
-/**
- * @file content-write-production-boot.test.ts
- * @description A production build with `content-write` enabled boots without
- * pino-pretty (#7502).
- *
- * `services/revalidation.ts` is loaded only by the content-write routes, and it
- * used to build its logger with `createLogger({ service })` alone. The
- * observability package read a missing `environment` as development and asked
- * pino for a `pino-pretty` transport, which a production install does not carry:
- * pino threw `unable to determine transport target for "pino-pretty"` at module
- * load, `build()` rejected, and every route — `/health` included — answered 500.
- *
- * "Without pino-pretty installed" is simulated at the pino boundary: the mock
- * below throws pino's own error whenever a `pino-pretty` transport is requested,
- * and passes every other call through to the real pino. pino is mocked by its
- * resolved path because `apps/api` does not depend on it directly — only
- * `@working-theory/observability` does.
- *
- * Mirrors `module-exclusion.test.ts`'s external-boundary mocks (CORS,
- * rate-limit, email).
- */
-
-import type { FastifyInstance } from "fastify";
-
-jest.mock(
-  require.resolve("pino", {
-    paths: [`${__dirname}/../../../../packages/observability`],
-  }),
-  () => {
-    const realPino = jest.requireActual(
-      require.resolve("pino", {
-        paths: [`${__dirname}/../../../../packages/observability`],
-      }),
-    );
-    const withoutPinoPretty = (
-      options?: { transport?: { target?: string } },
-      ...rest: unknown[]
-    ) => {
-      if (options?.transport?.target === "pino-pretty") {
-        throw new Error(
-          'unable to determine transport target for "pino-pretty"',
-        );
-      }
-      return realPino(options, ...rest);
-    };
-    // pino exports itself as `default` and as `pino` too; both are replaced.
-    return Object.assign(withoutPinoPretty, realPino, {
-      default: withoutPinoPretty,
-      pino: withoutPinoPretty,
-    });
-  },
-);
-
-jest.mock("@fastify/cors", () => {
-  return jest.fn().mockResolvedValue(undefined);
-});
-
-jest.mock("@fastify/rate-limit", () => {
-  return jest.fn().mockResolvedValue(undefined);
-});
-
-jest.mock("@working-theory/email", () => ({
-  sendLeadNotification: jest.fn().mockResolvedValue({ ok: true }),
-}));
-
-describe("production boot with content-write enabled (#7502)", () => {
-  const prior = {
-    NODE_ENV: process.env.NODE_ENV,
-    AILK_ENABLED_MODULES: process.env.AILK_ENABLED_MODULES,
-  };
-  let app: FastifyInstance;
-
-  beforeAll(async () => {
-    process.env.NODE_ENV = "production";
-    // content-write registers only alongside a tenancy module (server.ts).
-    process.env.AILK_ENABLED_MODULES = "multi-tenant,content-write";
-    // The config and the observability singleton read NODE_ENV at import, so
-    // the server is loaded only after the environment is set.
-    const { build } = await import("../server");
-    app = await build();
-  });
-
-  afterAll(async () => {
-    await app?.close();
-    for (const [key, value] of Object.entries(prior)) {
-      if (value === undefined) delete process.env[key];
-      else process.env[key] = value;
-    }
-  });
-
-  it("answers /health with 200", async () => {
-    const res = await app.inject({ method: "GET", url: "/health" });
-    expect(res.statusCode).toBe(200);
-  });
-
-  it("registers the content-write routes, so revalidation.ts was loaded", async () => {
-    // Registered and session-less: 401, where an unregistered route is a 404.
-    const res = await app.inject({
-      method: "POST",
-      url: "/v1/workspaces/wksp_00000000-0000-7000-8000-0000000000aa/content",
-    });
-    expect(res.statusCode).toBe(401);
-  });
-});