create-ailk 0.2.0 → 0.4.0

package/templates/apps/api/src/services/__tests__/project-listing-decision.test.ts

@@ -1,736 +0,0 @@
-/**
- * @file project-listing-decision.test.ts
- * @description Unit tests for `decideListing` + `sendListingDecisionEmail`
- * (#4999) — the one Approve/Reject transition shared by the PATCH route and
- * the Slack action handler.
- *
- * External dependency boundaries mocked:
- *   - @working-theory/database (via moduleNameMapper -> prisma-client.js mock; prisma singleton via __mocks__/prisma.ts)
- *   - @working-theory/email (sendListingApprovedEmail / sendListingRejectedEmail)
- */
-
-// eslint-disable-next-line no-restricted-syntax -- lib/prisma.ts wraps the external DB boundary (PrismaClient requires a live connection); __mocks__/prisma.ts is the repo-standard test double for this boundary.
-jest.mock("../../lib/prisma.js");
-
-const mockSendApproved = jest.fn();
-const mockSendRejected = jest.fn();
-jest.mock("@working-theory/email", () => ({
-  sendListingApprovedEmail: (...args: unknown[]) => mockSendApproved(...args),
-  sendListingRejectedEmail: (...args: unknown[]) => mockSendRejected(...args),
-  // #5001's projection module (project-listing-flow.ts → flow-engine.ts) reaches these two.
-  sendLeadNotification: jest.fn().mockResolvedValue({ ok: true, messageId: "msg-test" }),
-  sendDeliverableEmail: jest.fn().mockResolvedValue({ ok: true, messageId: "msg-deliverable-test" }),
-}));
-
-// The REAL `generateListingFlow` runs in the #5001 suite below — only the
-// license + crawler boundaries it reaches are mocked (CONTRIBUTING.md § Test
-// code quality: mock a real boundary, never an internal module).
-jest.mock("@working-theory/license", () => ({
-  checkLicense: jest.fn().mockResolvedValue({
-    tier: "free",
-    plan: null,
-    features: [],
-    expiresAt: null,
-    revoked: false,
-  }),
-}));
-
-// eslint-disable-next-line no-restricted-syntax -- aeo-score.ts is a network boundary (external crawl), same class as the DB mock above
-jest.mock("../aeo-score.js", () => ({
-  scoreUrl: jest.fn(),
-  loadExampleScore: jest.fn(),
-  resolveScoreBudgetMs: () => 6000,
-}));
-
-import { projectListingQuestionsSchema } from "@working-theory/validation";
-
-import * as configModule from "../../config/index.js";
-import { prisma } from "../../lib/prisma.js";
-
-import { decideListing, onListingDecided, sendListingDecisionEmail } from "../project-listing-decision";
-// `computeListingStatus` lives in project-listings.ts but is the rule this
-// module's own read applies (`toListing`), so its #5036 D6b featured-exemption
-// cases are covered here alongside the decision that stamps the window.
-import { computeListingStatus } from "../project-listings";
-
-const opt = (value: string, label: string) => ({ value, label });
-const QUESTIONS = {
-  q2: { prompt: "x", options: [opt("scale", "Scale"), opt("just-curious", "Just curious")] },
-  q3: { prompt: "x", options: [opt("a", "A"), opt("b", "B"), opt("c", "C")] },
-  q4: { prompt: "x", options: [opt("a", "A"), opt("b", "B"), opt("c", "C")] },
-  q5: { prompt: "x", options: [opt("urgent", "Now"), opt("planning", "Soon"), opt("exploring", "Someday")] },
-  q6: {
-    prompt: "x",
-    options: [opt("low", "Low"), opt("medium", "Medium"), opt("high", "High"), opt("critical", "Critical")],
-  },
-  q7: { prompt: "x" },
-  extras: [],
-};
-
-const LISTING_ID = "prjl_00000000-0000-7000-8000-000000000001";
-const SITE_ID = "wksp_00000000-0000-7000-8000-000000000001";
-
-function makeRow(overrides: Partial<Record<string, unknown>> = {}) {
-  return {
-    id: LISTING_ID,
-    siteId: SITE_ID,
-    leadId: "lead_00000000-0000-7000-8000-000000000001",
-    slug: "my-project",
-    name: "My Project",
-    oneLiner: "A one-liner",
-    problem: "The problem",
-    url: null,
-    // #5036 D2/D5: `audience` is gone and `stage` is the six-rung `product`
-    // ladder; `commitment`/`teamComposition`/`faqs`/`anythingElse`/`address`
-    // are the new columns the page and tile render from.
-    product: "working-prototype",
-    commitment: "part-time",
-    teamComposition: "just-me",
-    faqs: null,
-    anythingElse: null,
-    address: "1 Example Street, Exampleton, EX1 2AM",
-    questions: QUESTIONS,
-    founderName: "Ada Founder",
-    founderEmail: "ada@example.com",
-    founderCompany: null,
-    headline: null,
-    logoMarkUrl: null,
-    logoWordmarkUrl: null,
-    featured: false,
-    status: "requested",
-    // Stamped at `start` and never null (#5036 D1) — the paired control for
-    // publishing the founder's name and address.
-    consentAt: new Date("2026-09-01T00:00:00.000Z"),
-    decidedAt: null,
-    decidedBy: null,
-    issueUrl: null,
-    experimentKey: null,
-    windowDays: 21,
-    windowEndsAt: null,
-    slackChannel: null,
-    slackTs: null,
-    createdAt: new Date("2026-09-01T00:00:00.000Z"),
-    updatedAt: new Date("2026-09-01T00:00:00.000Z"),
-    ...overrides,
-  };
-}
-
-function installMocks(row: ReturnType<typeof makeRow> | null): void {
-  (prisma.projectListing.findFirst as jest.Mock).mockImplementation(
-    ({ where }: { where: { id?: string; siteId?: string } }) => {
-      if (!row) return Promise.resolve(null);
-      if (row.id !== where.id) return Promise.resolve(null);
-      if (where.siteId !== undefined && row.siteId !== where.siteId) return Promise.resolve(null);
-      return Promise.resolve(row);
-    },
-  );
-  // The guarded compare-and-swap write (#4999 security review): only
-  // mutates `row` when every `where` key matches — a `status: "requested"`
-  // mismatch (already decided, or still `draft`) returns `{ count: 0 }`
-  // without touching the row, exactly like Postgres would under the guard.
-  (prisma.projectListing.updateMany as jest.Mock).mockImplementation(
-    ({
-      where,
-      data,
-    }: {
-      where: { id: string; siteId?: string; status?: string };
-      data: Record<string, unknown>;
-    }) => {
-      if (!row || row.id !== where.id) return Promise.resolve({ count: 0 });
-      if (where.siteId !== undefined && row.siteId !== where.siteId) return Promise.resolve({ count: 0 });
-      if (where.status !== undefined && row.status !== where.status) return Promise.resolve({ count: 0 });
-      Object.assign(row, data);
-      return Promise.resolve({ count: 1 });
-    },
-  );
-  (prisma.waitlistExperiment.findMany as jest.Mock).mockResolvedValue([]);
-  (prisma.waitlistScore.count as jest.Mock).mockResolvedValue(0);
-  // The #5001 projection `decideListing` fires on a changed approve (fail-soft).
-  (prisma.flowDefinition.upsert as jest.Mock).mockResolvedValue({ id: "flow_1" });
-  (prisma.waitlistExperiment.upsert as jest.Mock).mockResolvedValue({ id: "wlexp_1" });
-  (prisma.projectListing.update as jest.Mock).mockResolvedValue({ id: LISTING_ID });
-}
-
-describe("decideListing", () => {
-  beforeEach(() => {
-    jest.clearAllMocks();
-  });
-
-  it("requested -> active: stamps decidedAt/decidedBy, sets windowEndsAt = decidedAt + the ROW's windowDays, changed: true", async () => {
-    installMocks(makeRow({ windowDays: 21 }));
-    const before = Date.now();
-
-    const result = await decideListing({ id: LISTING_ID, decision: "active", decidedBy: "U123" });
-
-    expect(result.ok).toBe(true);
-    if (!result.ok) return;
-    expect(result.changed).toBe(true);
-    expect(result.value.status).toBe("active");
-    expect(result.value.decidedBy).toBe("U123");
-    expect(result.value.decidedAt).not.toBeNull();
-    expect(result.value.windowEndsAt).not.toBeNull();
-
-    const decidedAtMs = new Date(result.value.decidedAt as string).getTime();
-    const windowEndMs = new Date(result.value.windowEndsAt as string).getTime();
-    expect(windowEndMs - decidedAtMs).toBe(21 * 24 * 60 * 60 * 1000);
-    expect(decidedAtMs).toBeGreaterThanOrEqual(before);
-  });
-
-  it("stamps the window from the ROW's own clamped windowDays, not a constant — a 5-day row gets 5 days", async () => {
-    installMocks(makeRow({ windowDays: 5 }));
-
-    const result = await decideListing({ id: LISTING_ID, decision: "active", decidedBy: "U123" });
-
-    expect(result.ok).toBe(true);
-    if (!result.ok) return;
-    const decidedAtMs = new Date(result.value.decidedAt as string).getTime();
-    const windowEndMs = new Date(result.value.windowEndsAt as string).getTime();
-    expect(windowEndMs - decidedAtMs).toBe(5 * 24 * 60 * 60 * 1000);
-  });
-
-  it("falls back to the site's configured default for a row that predates the windowDays column", async () => {
-    installMocks(makeRow({ windowDays: null }));
-    (prisma.siteListingConfig.findUnique as jest.Mock).mockResolvedValue({
-      data: { maxWindowDays: 30, defaultWindowDays: 14, featuredEnabled: false },
-    });
-
-    const result = await decideListing({ id: LISTING_ID, decision: "active", decidedBy: "U123" });
-
-    expect(result.ok).toBe(true);
-    if (!result.ok) return;
-    const decidedAtMs = new Date(result.value.decidedAt as string).getTime();
-    const windowEndMs = new Date(result.value.windowEndsAt as string).getTime();
-    expect(windowEndMs - decidedAtMs).toBe(14 * 24 * 60 * 60 * 1000);
-  });
-
-  it("requested -> rejected: stamps decidedAt/decidedBy, leaves windowEndsAt null, changed: true", async () => {
-    installMocks(makeRow());
-
-    const result = await decideListing({ id: LISTING_ID, decision: "rejected", decidedBy: "U123" });
-
-    expect(result.ok).toBe(true);
-    if (!result.ok) return;
-    expect(result.changed).toBe(true);
-    expect(result.value.status).toBe("rejected");
-    expect(result.value.decidedBy).toBe("U123");
-    expect(result.value.decidedAt).not.toBeNull();
-    expect(result.value.windowEndsAt).toBeNull();
-  });
-
-  it("second click (already active, decision active again): ok: true, changed: false, row untouched, no email/update trigger from decideListing itself", async () => {
-    // An already-approved row carries the window `decideListing` stamped on
-    // it. It has to be a LIVE one here: since #5036 D6b a non-featured active
-    // row with no window in force reads `closed`, so leaving `windowEndsAt`
-    // null would test the fail-closed branch rather than idempotency.
-    installMocks(
-      makeRow({
-        status: "active",
-        decidedAt: new Date("2026-08-01T00:00:00.000Z"),
-        decidedBy: "U000",
-        windowEndsAt: new Date(Date.now() + 30 * 24 * 60 * 60 * 1000),
-      }),
-    );
-
-    const result = await decideListing({ id: LISTING_ID, decision: "active", decidedBy: "U999" });
-
-    expect(result.ok).toBe(true);
-    if (!result.ok) return;
-    expect(result.changed).toBe(false);
-    expect(result.value.status).toBe("active");
-    expect(result.value.decidedBy).toBe("U000"); // unchanged — the ORIGINAL decider, not U999
-  });
-
-  it("second click (already rejected, decision active this time): still idempotent — ok: true, changed: false, status stays rejected", async () => {
-    installMocks(makeRow({ status: "rejected", decidedAt: new Date("2026-08-01T00:00:00.000Z"), decidedBy: "U000" }));
-
-    const result = await decideListing({ id: LISTING_ID, decision: "active", decidedBy: "U999" });
-
-    expect(result.ok).toBe(true);
-    if (!result.ok) return;
-    expect(result.changed).toBe(false);
-    expect(result.value.status).toBe("rejected");
-  });
-
-  it("draft -> active: invalid_transition, row untouched", async () => {
-    installMocks(makeRow({ status: "draft" }));
-
-    const result = await decideListing({ id: LISTING_ID, decision: "active", decidedBy: "U123" });
-
-    expect(result.ok).toBe(false);
-    if (result.ok) return;
-    expect(result.error.kind).toBe("invalid_transition");
-  });
-
-  it("security review (PR #4999, Finding 2): the write is a GUARDED updateMany (status: 'requested' in `where`), not a plain update — a concurrent racer that already flipped the row to a decided status makes THIS call's guard match 0 rows, landing it in the idempotent branch instead of double-writing", async () => {
-    const row = makeRow();
-    installMocks(row);
-    (prisma.projectListing.updateMany as jest.Mock).mockImplementation(async () => {
-      // Simulate a concurrent racer deciding the row between this call's
-      // updateMany guard check and its own — the guard sees "requested" is
-      // gone and correctly matches 0 rows, exactly as Postgres would under
-      // row-level locking with a `status: "requested"` WHERE guard.
-      row.status = "rejected";
-      row.decidedBy = "U-concurrent-winner";
-      return { count: 0 };
-    });
-
-    const result = await decideListing({ id: LISTING_ID, decision: "active", decidedBy: "U-this-call" });
-
-    expect(result.ok).toBe(true);
-    if (!result.ok) return;
-    expect(result.changed).toBe(false); // never claims it won the race
-    expect(result.value.status).toBe("rejected"); // the actual winner's outcome, not this call's
-    expect(result.value.decidedBy).toBe("U-concurrent-winner");
-    expect(prisma.projectListing.updateMany).toHaveBeenCalledWith(
-      expect.objectContaining({ where: expect.objectContaining({ status: "requested" }) }),
-    );
-  });
-
-  it("unknown id: not_found", async () => {
-    installMocks(null);
-
-    const result = await decideListing({ id: LISTING_ID, decision: "active", decidedBy: "U123" });
-
-    expect(result.ok).toBe(false);
-    if (result.ok) return;
-    expect(result.error.kind).toBe("not_found");
-  });
-
-  it("siteId scoping: a foreign siteId 404s (not_found) even though the id exists", async () => {
-    installMocks(makeRow({ siteId: "wksp_owner" }));
-
-    const result = await decideListing({
-      id: LISTING_ID,
-      decision: "active",
-      decidedBy: "U123",
-      siteId: "wksp_other",
-    });
-
-    expect(result.ok).toBe(false);
-    if (result.ok) return;
-    expect(result.error.kind).toBe("not_found");
-  });
-
-  it("no siteId (the Slack path): resolves by id alone, regardless of the row's siteId", async () => {
-    installMocks(makeRow({ siteId: "wksp_whatever" }));
-
-    const result = await decideListing({ id: LISTING_ID, decision: "active", decidedBy: "U123" });
-
-    expect(result.ok).toBe(true);
-    if (!result.ok) return;
-    expect(result.changed).toBe(true);
-  });
-
-  it("returns the row's slackChannel/slackTs coordinates alongside value, never inside it", async () => {
-    installMocks(makeRow({ slackChannel: "C123", slackTs: "1234.5678" }));
-
-    const result = await decideListing({ id: LISTING_ID, decision: "active", decidedBy: "U123" });
-
-    expect(result.ok).toBe(true);
-    if (!result.ok) return;
-    expect(result.slack).toEqual({ channel: "C123", ts: "1234.5678" });
-    expect(result.value).not.toHaveProperty("slackChannel");
-    expect(result.value).not.toHaveProperty("slackTs");
-  });
-
-  // #5036 D6d: the listing stores the experiment's KEY, which is the same
-  // string `WaitlistScore.experimentKey` holds — so the `WaitlistExperiment`
-  // read that existed only to translate an id into that key is gone, and the
-  // count is a single scoped read.
-  it("joins waitlistCount through experimentKey in ONE hop, like project-listings.ts", async () => {
-    installMocks(makeRow({ status: "active", experimentKey: "exp-a" }));
-    (prisma.waitlistScore.count as jest.Mock).mockResolvedValue(9);
-
-    const result = await decideListing({ id: LISTING_ID, decision: "rejected", decidedBy: "U123" });
-
-    expect(result.ok).toBe(true);
-    if (!result.ok) return;
-    expect(result.changed).toBe(false); // already decided
-    expect(result.value.waitlistCount).toBe(9);
-    expect(prisma.waitlistScore.count).toHaveBeenCalledWith({
-      where: { siteId: SITE_ID, experimentKey: "exp-a" },
-    });
-    expect(prisma.waitlistExperiment.findMany).not.toHaveBeenCalled();
-  });
-
-  // ── #5036 D6b — a featured listing never expires ────────────────────────
-  //
-  // `closed` is COMPUTED on every read from the window end, so an expired
-  // listing cannot linger publicly open because a scheduled job failed. The
-  // operator's own products are listing rows carrying `featured: true`
-  // (samhenry#316 D4), and such a row is not a time-boxed validation
-  // experiment: it has no meaningful window and must not vanish from the shelf
-  // because a date passed. `computeListingStatus` therefore takes the row's
-  // `featured` flag as a fourth argument and exempts it.
-
-  it("a featured row with a NULL window reads active, not closed", () => {
-    expect(computeListingStatus("active", null, new Date("2026-09-09T00:00:00.000Z"), true)).toBe(
-      "active",
-    );
-  });
-
-  it("a featured row whose window has ELAPSED still reads active", () => {
-    expect(
-      computeListingStatus(
-        "active",
-        new Date("2026-01-01T00:00:00.000Z"),
-        new Date("2026-09-09T00:00:00.000Z"),
-        true,
-      ),
-    ).toBe("active");
-  });
-
-  // The fail-closed branch. A null window on a NON-featured active row is a
-  // data error, not a licence to stay open forever: every real listing is
-  // time-boxed by design, and the whole point of computing `closed` rather
-  // than storing it is that an expired listing cannot linger. It reads
-  // `closed` — failing toward the closed shelf rather than toward a publicly
-  // open listing nothing bounds.
-  it("a NON-featured active row with a null window reads closed — the fail-closed error branch", () => {
-    expect(computeListingStatus("active", null, new Date("2026-09-09T00:00:00.000Z"), false)).toBe(
-      "closed",
-    );
-  });
-
-  it("a non-featured active row still closes on an elapsed window and stays active before it", () => {
-    const now = new Date("2026-09-09T00:00:00.000Z");
-    expect(computeListingStatus("active", new Date("2026-09-08T00:00:00.000Z"), now, false)).toBe(
-      "closed",
-    );
-    expect(computeListingStatus("active", new Date("2026-09-10T00:00:00.000Z"), now, false)).toBe(
-      "active",
-    );
-  });
-
-  // `featured` only ever exempts an `active` row; the non-active stored
-  // statuses legitimately carry no window and are handed back untouched.
-  it.each(["draft", "requested", "rejected"])(
-    "passes the stored status %s through untouched, featured or not",
-    (stored) => {
-      const now = new Date("2026-09-09T00:00:00.000Z");
-      expect(computeListingStatus(stored, null, now, false)).toBe(stored);
-      expect(computeListingStatus(stored, null, now, true)).toBe(stored);
-    },
-  );
-});
-
-describe("sendListingDecisionEmail", () => {
-  const originalEnv = process.env;
-
-  beforeEach(() => {
-    jest.clearAllMocks();
-    process.env = { ...originalEnv };
-    mockSendApproved.mockResolvedValue({ ok: true, messageId: "msg-1" });
-    mockSendRejected.mockResolvedValue({ ok: true, messageId: "msg-2" });
-  });
-
-  afterEach(() => {
-    process.env = originalEnv;
-  });
-
-  const listing = {
-    id: LISTING_ID,
-    siteId: SITE_ID,
-    leadId: "lead_1",
-    slug: "my-project",
-    name: "My Project",
-    headline: null,
-    oneLiner: "A one-liner",
-    problem: "The problem",
-    url: null,
-    product: "working-prototype" as const,
-    commitment: "part-time" as const,
-    teamComposition: "just-me" as const,
-    faqs: null,
-    anythingElse: null,
-    address: "1 Example Street, Exampleton, EX1 2AM",
-    founderName: "Ada Founder",
-    founderEmail: "ada@example.com",
-    founderCompany: null,
-    questions: projectListingQuestionsSchema.parse(QUESTIONS),
-    logoMarkUrl: null,
-    logoWordmarkUrl: null,
-    featured: false,
-    // `approved` left the vocabulary with #5033's five-state lifecycle; an
-    // approved listing is `active`.
-    status: "active" as const,
-    consentAt: "2026-09-01T00:00:00.000Z",
-    decidedAt: "2026-09-07T00:00:00.000Z",
-    decidedBy: "U123",
-    issueUrl: null,
-    experimentKey: null,
-    windowEndsAt: "2026-12-06T00:00:00.000Z",
-    waitlistCount: 0,
-    createdAt: "2026-09-01T00:00:00.000Z",
-    updatedAt: "2026-09-07T00:00:00.000Z",
-  };
-
-  it("no-ops (never calls Resend) when AILK_LEAD_NOTIFICATION_FROM is absent", async () => {
-    delete process.env["AILK_LEAD_NOTIFICATION_FROM"];
-    await sendListingDecisionEmail(listing, "active");
-    expect(mockSendApproved).not.toHaveBeenCalled();
-    expect(mockSendRejected).not.toHaveBeenCalled();
-  });
-
-  it("sends the approve email with the founder's address + a working-session link, when configured", async () => {
-    process.env["AILK_LEAD_NOTIFICATION_FROM"] = "noreply@example.com";
-    await sendListingDecisionEmail(listing, "active");
-    expect(mockSendApproved).toHaveBeenCalledTimes(1);
-    expect(mockSendRejected).not.toHaveBeenCalled();
-    const [call] = mockSendApproved.mock.calls;
-    expect(call[0].to).toBe("ada@example.com");
-    expect(call[0].fromAddress).toBe("noreply@example.com");
-    expect(call[0].founderName).toBe("Ada Founder");
-    expect(call[0].projectName).toBe("My Project");
-    expect(call[0].links.workingSession).toEqual(expect.any(String));
-  });
-
-  it("sends the reject email carrying both the working-session AND diagnostic links, when configured", async () => {
-    process.env["AILK_LEAD_NOTIFICATION_FROM"] = "noreply@example.com";
-    await sendListingDecisionEmail(listing, "rejected");
-    expect(mockSendRejected).toHaveBeenCalledTimes(1);
-    expect(mockSendApproved).not.toHaveBeenCalled();
-    const [call] = mockSendRejected.mock.calls;
-    expect(call[0].links.workingSession).toEqual(expect.any(String));
-    expect(call[0].links.diagnostic).toEqual(expect.any(String));
-  });
-
-  it("never throws when the send itself fails", async () => {
-    process.env["AILK_LEAD_NOTIFICATION_FROM"] = "noreply@example.com";
-    mockSendApproved.mockResolvedValue({ ok: false, error: { kind: "send_failed", message: "boom" } });
-    await expect(sendListingDecisionEmail(listing, "active")).resolves.toBeUndefined();
-  });
-
-  // ─── #5000 — the approve-path issue filing, fired after the email ─────────
-  //
-  // These run the REAL `fileListingIssue` (CONTRIBUTING.md § Test code
-  // quality: mock a real boundary, never an internal module) — only
-  // `global.fetch`, the boundary it calls the GitHub REST API through, is
-  // mocked, mirroring the #5001 suite's own treatment of `generateListingFlow`
-  // above.
-
-  afterEach(() => {
-    jest.replaceProperty(configModule, "config", {
-      ...configModule.config,
-      AILK_GITHUB_REPO: undefined,
-      AILK_GITHUB_TOKEN: undefined,
-    });
-  });
-
-  it("on approve, still emails and resolves even when the GitHub filing call fails (network down)", async () => {
-    process.env["AILK_LEAD_NOTIFICATION_FROM"] = "noreply@example.com";
-    jest.replaceProperty(configModule, "config", {
-      ...configModule.config,
-      AILK_GITHUB_REPO: "acme/site",
-      AILK_GITHUB_TOKEN: "ghp_test",
-    });
-    // eslint-disable-next-line no-restricted-syntax -- test double for the global fetch project-listing-issue.ts calls the GitHub REST API through
-    global.fetch = jest.fn().mockRejectedValue(new Error("network down")) as unknown as typeof fetch;
-
-    await expect(sendListingDecisionEmail(listing, "active")).resolves.toBeUndefined();
-    expect(mockSendApproved).toHaveBeenCalledTimes(1);
-  });
-
-  it("on approve, fires the GitHub filing call (fire-and-forget) when AILK_GITHUB_REPO/TOKEN are configured", async () => {
-    process.env["AILK_LEAD_NOTIFICATION_FROM"] = "noreply@example.com";
-    jest.replaceProperty(configModule, "config", {
-      ...configModule.config,
-      AILK_GITHUB_REPO: "acme/site",
-      AILK_GITHUB_TOKEN: "ghp_test",
-    });
-    const fetchMock = jest.fn().mockResolvedValue({
-      status: 201,
-      json: () => Promise.resolve({ html_url: "https://github.com/acme/site/issues/1" }),
-    });
-    // eslint-disable-next-line no-restricted-syntax -- test double for the global fetch project-listing-issue.ts calls the GitHub REST API through
-    global.fetch = fetchMock as unknown as typeof fetch;
-
-    await sendListingDecisionEmail(listing, "active");
-
-    expect(fetchMock).toHaveBeenCalledWith(
-      "https://api.github.com/repos/acme/site/issues",
-      expect.objectContaining({ method: "POST" }),
-    );
-  });
-
-  it("on reject, never calls the GitHub filing endpoint", async () => {
-    process.env["AILK_LEAD_NOTIFICATION_FROM"] = "noreply@example.com";
-    jest.replaceProperty(configModule, "config", {
-      ...configModule.config,
-      AILK_GITHUB_REPO: "acme/site",
-      AILK_GITHUB_TOKEN: "ghp_test",
-    });
-    const fetchMock = jest.fn();
-    // eslint-disable-next-line no-restricted-syntax -- test double for the global fetch project-listing-issue.ts calls the GitHub REST API through
-    global.fetch = fetchMock as unknown as typeof fetch;
-
-    await sendListingDecisionEmail(listing, "rejected");
-
-    expect(fetchMock).not.toHaveBeenCalled();
-  });
-
-  it("when AILK_LEAD_NOTIFICATION_FROM is absent (email skipped), still fires the GitHub filing call on approve", async () => {
-    delete process.env["AILK_LEAD_NOTIFICATION_FROM"];
-    jest.replaceProperty(configModule, "config", {
-      ...configModule.config,
-      AILK_GITHUB_REPO: "acme/site",
-      AILK_GITHUB_TOKEN: "ghp_test",
-    });
-    const fetchMock = jest.fn().mockResolvedValue({
-      status: 201,
-      json: () => Promise.resolve({ html_url: "https://github.com/acme/site/issues/1" }),
-    });
-    // eslint-disable-next-line no-restricted-syntax -- test double for the global fetch project-listing-issue.ts calls the GitHub REST API through
-    global.fetch = fetchMock as unknown as typeof fetch;
-
-    await sendListingDecisionEmail(listing, "active");
-
-    expect(fetchMock).toHaveBeenCalledTimes(1);
-  });
-});
-
-// ─── #5001 — the approve-path projection (merged from main, PR #5010 resolution) ─────
-
-const FLOW_SITE_ID = "site-abc";
-
-const FLOW_QUESTIONS = projectListingQuestionsSchema.parse({
-  q2: {
-    prompt: "What brings you here?",
-    options: [
-      { value: "shipping-now", label: "Shipping now" },
-      { value: "just-curious", label: "Just curious" },
-    ],
-  },
-  q3: {
-    prompt: "How painful?",
-    options: [
-      { value: "a", label: "Not a problem" },
-      { value: "b", label: "Annoying" },
-      { value: "c", label: "Blocking" },
-    ],
-  },
-  q4: {
-    prompt: "How close?",
-    options: [
-      { value: "a", label: "Off" },
-      { value: "b", label: "Close" },
-      { value: "c", label: "Exact" },
-    ],
-  },
-  q5: {
-    prompt: "When?",
-    options: [
-      { value: "urgent", label: "Now" },
-      { value: "planning", label: "Soon" },
-      { value: "exploring", label: "Looking" },
-    ],
-  },
-  q6: {
-    prompt: "Pay?",
-    options: [
-      { value: "low", label: "Nothing" },
-      { value: "medium", label: "A little" },
-      { value: "high", label: "A budget" },
-      { value: "critical", label: "Anything" },
-    ],
-  },
-  q7: { prompt: "Anything else?" },
-  extras: [],
-});
-
-const FLOW_ROW = {
-  id: "prjl_1",
-  siteId: FLOW_SITE_ID,
-  slug: "orbit-notes",
-  name: "Orbit Notes",
-  oneLiner: "Meeting notes that file themselves.",
-  questions: FLOW_QUESTIONS,
-};
-
-describe("onListingDecided (#5001 — the approve-path projection)", () => {
-beforeEach(() => {
-  jest.clearAllMocks();
-  process.env.DATABASE_URL = "postgres://test";
-  (prisma.projectListing.findFirst as jest.Mock).mockResolvedValue(FLOW_ROW);
-  (prisma.flowDefinition.upsert as jest.Mock).mockResolvedValue({ id: "flow_1" });
-  (prisma.waitlistExperiment.upsert as jest.Mock).mockResolvedValue({ id: "wlexp_1" });
-  (prisma.projectListing.update as jest.Mock).mockResolvedValue({ id: "prjl_1" });
-});
-
-  it("projects the row on an approve", async () => {
-    await onListingDecided(FLOW_SITE_ID, "prjl_1", "active");
-
-    expect(prisma.projectListing.findFirst).toHaveBeenCalledWith({
-      where: { id: "prjl_1", siteId: FLOW_SITE_ID },
-      select: {
-        id: true,
-        siteId: true,
-        slug: true,
-        name: true,
-        oneLiner: true,
-        questions: true,
-      },
-    });
-    expect(prisma.flowDefinition.upsert).toHaveBeenCalledWith(
-      expect.objectContaining({
-        where: { siteId_slug: { siteId: FLOW_SITE_ID, slug: "orbit-notes" } },
-      }),
-    );
-    expect(prisma.waitlistExperiment.upsert).toHaveBeenCalledWith(
-      expect.objectContaining({
-        where: { siteId_key: { siteId: FLOW_SITE_ID, key: "orbit-notes" } },
-      }),
-    );
-    // #5036 D6d: the write-back is the experiment's KEY (which IS the
-    // listing's slug), not the id the upsert returned — the same string
-    // `WaitlistScore.experimentKey` holds on the other side of the join.
-    expect(prisma.projectListing.update).toHaveBeenCalledWith({
-      where: { id: "prjl_1" },
-      data: { experimentKey: "orbit-notes" },
-    });
-  });
-
-  it.each(["rejected", "draft", "requested"])("does nothing on a %s transition", async (status) => {
-    await onListingDecided(FLOW_SITE_ID, "prjl_1", status);
-
-    expect(prisma.projectListing.findFirst).not.toHaveBeenCalled();
-    expect(prisma.flowDefinition.upsert).not.toHaveBeenCalled();
-  });
-
-  it("does nothing when the row is not visible to this site", async () => {
-    (prisma.projectListing.findFirst as jest.Mock).mockResolvedValue(null);
-
-    await onListingDecided(FLOW_SITE_ID, "prjl_1", "active");
-
-    expect(prisma.flowDefinition.upsert).not.toHaveBeenCalled();
-  });
-
-  it("skips a row whose stored questions no longer match the template", async () => {
-    (prisma.projectListing.findFirst as jest.Mock).mockResolvedValue({
-      ...FLOW_ROW,
-      questions: { q2: { prompt: "?", options: [] } },
-    });
-
-    await onListingDecided(FLOW_SITE_ID, "prjl_1", "active");
-
-    expect(prisma.flowDefinition.upsert).not.toHaveBeenCalled();
-  });
-
-  it("swallows a projection failure — the transition already committed", async () => {
-    // A doubled hyphen is a legal listing slug and an illegal flow slug, so
-    // the projection refuses before any write.
-    (prisma.projectListing.findFirst as jest.Mock).mockResolvedValue({
-      ...FLOW_ROW,
-      slug: "orbit--notes",
-    });
-
-    await expect(onListingDecided(FLOW_SITE_ID, "prjl_1", "active")).resolves.toBeUndefined();
-    expect(prisma.projectListing.update).not.toHaveBeenCalled();
-  });
-
-  it("swallows a thrown error rather than failing the committed transition", async () => {
-    (prisma.projectListing.findFirst as jest.Mock).mockRejectedValue(new Error("db down"));
-
-    await expect(onListingDecided(FLOW_SITE_ID, "prjl_1", "active")).resolves.toBeUndefined();
-  });
-});