create-ailk 0.21.0 → 0.23.0

package/templates/apps/web/lib/__tests__/structured-data.test.tsx

@@ -45,6 +45,7 @@ import {
 import {
   getPageSections,
   pageToJsonLd,
+  siteOrigin,
   type JsonLdObject,
 } from "@working-theory/page-renderer";
 import {
@@ -110,6 +111,13 @@ if (process.env.AILK_CONTENT_ROOT === undefined) {
   process.env.AILK_CONTENT_ROOT = CONTENT_ROOT;
 }
 
+// A page that checks its own locale (`lib/locale-guard`, the meeting page)
+// reads the enabled list next.config.mjs bakes in; pin it to the locale this
+// file renders, as a built app would carry it.
+if (process.env.NEXT_PUBLIC_ENABLED_LOCALES === undefined) {
+  process.env.NEXT_PUBLIC_ENABLED_LOCALES = DEFAULT_LOCALE;
+}
+
 // Mirrors the locale-directory rule in tools/content-compile and the adapter.
 const LOCALE_RE = /^[a-z]{2}(-[A-Z]{2})?$/;
 
@@ -194,11 +202,8 @@ function extractJsonLdBlocks(container: HTMLElement): JsonLdObject[] {
 }
 
 const SITE_IDENTITY = readSiteIdentity(CONTENT_ROOT);
-const SITE_ORIGIN = (
-  process.env.NEXT_PUBLIC_SITE_URL ??
-  process.env.MARKETING_WEB_BASE_URL ??
-  "http://localhost:3000"
-).replace(/\/+$/, "");
+// The resolver's own origin chain (#8797 D5), so this check cannot drift from it.
+const SITE_ORIGIN = siteOrigin(SITE_IDENTITY);
 
 /**
  * The sitewide identity trio every rendered page carries when the site's own
@@ -297,12 +302,24 @@ describe("structured data — every content page builds valid JSON-LD", () => {
  * exempt route whose page.tsx does render through `renderPage` fails too,
  * because the reason given for it is false.
  */
-// Literal, not imported: apps/web does not depend on create-ailk (the import
-// boundary). Mirrors packages/create-ailk/src/spoke-checkout.ts's
-// SPOKE_CHECKOUT_PAGE_MARKER; packages/create-ailk/__tests__/
-// spoke-checkout.test.ts pins the two in sync (#8513 AC-5).
-const CHECKOUT_PAGE_MARKER = "GENERATED by create-ailk (#7838)";
+// The marker both standard spoke checkout pages carry in their header comment
+// (apps/web/app/[locale]/checkout/{thank-you,unavailable}/page.tsx, #8748 D5).
+const CHECKOUT_PAGE_MARKER = "Standard spoke checkout page (#8748)";
+// The marker create-ailk rendered before #8748. A spoke scaffolded then keeps
+// its rendered pages through `create-ailk update` (they are not in its
+// record), so its updated copy of this test must still exempt them.
+const LEGACY_CHECKOUT_PAGE_MARKER = "GENERATED by create-ailk (#7838)";
 const CHECKOUT_PAGE_NOINDEX_LINE = "robots: { index: false, follow: false }";
+// #8840 D13 — the marker every standard magnet page carries in its header
+// comment (`apps/web/app/[locale]/flows/[slug]/magnet-page.tsx`), and the
+// renderer it must import. A magnet page renders no `renderPage` call this
+// harness can read, and its landing's JSON-LD comes from the hub's record, so
+// a page carrying both is exempt at ANY route: `create-ailk add-route magnet`
+// writes a pair at a path the site picks. Keyed on the file, as #8513 is.
+const MAGNET_PAGE_MARKER = "Standard magnet page (#8840)";
+const MAGNET_RENDERER_IMPORT = "flows/[slug]/magnet-page";
+const MAGNET_PAGE_REASON =
+  "standard magnet page (#8840) — rendered by flows/[slug]/magnet-page; its landing's JSON-LD comes from the hub's flow record";
 
 const NO_STRUCTURED_DATA_ROUTES: ReadonlyArray<{
   route: string;
@@ -313,21 +330,22 @@ const NO_STRUCTURED_DATA_ROUTES: ReadonlyArray<{
    * entry naming no strings applies to its route unconditionally, as every
    * entry did before. Keys the exemption on the file, not the topology seam:
    * a spoke can carry a hand-written page at this route, and a site can
-   * edit the generated one — either is checked like any other route.
+   * edit the generated one — either is checked like any other route. A
+   * nested list is any one of its strings.
    */
-  requires?: readonly string[];
+  requires?: ReadonlyArray<string | readonly string[]>;
 }> = [
   // Fumadocs routes: JSON-LD is emitted by @working-theory/fumadocs-schema
   // from the fumadocs `.source` collection, which is not built in this
   // harness. Not checked here.
   {
     route: "blog",
-    reason: "fumadocs route — emits via @working-theory/fumadocs-schema",
+    reason: "fumadocs route — its .source collection is not built in this harness",
     subtree: true,
   },
   {
     route: "docs",
-    reason: "fumadocs route — emits via @working-theory/fumadocs-schema",
+    reason: "fumadocs route — its .source collection is not built in this harness",
     subtree: true,
   },
   // Hub routes that enumerate a detail type with no list page type of their
@@ -337,6 +355,10 @@ const NO_STRUCTURED_DATA_ROUTES: ReadonlyArray<{
     route: "how-to",
     reason: "hand-composed listing; no HowTo list type exists",
   },
+  {
+    route: "careers/[slug]/[action]",
+    reason: "the Free apply form for a posting; noindex, no JSON-LD (#8849 D7)",
+  },
   {
     route: "software",
     reason: "hand-composed listing; no SoftwareProduct list type exists",
@@ -365,11 +387,23 @@ const NO_STRUCTURED_DATA_ROUTES: ReadonlyArray<{
     reason: "interactive flow engine, API-backed",
     subtree: true,
   },
-  { route: "meet", reason: "booking surface, API-backed", subtree: true },
+  // #8843 D7 — the meeting page `meet/[slug]` composes its own body from a
+  // `BookCall` seed (`getMdxSource` + `pageToJsonLd`), so it is checked like
+  // any route; the two indexes and the confirmation page are not pages.
+  { route: "meet", reason: "booking index, API-backed (#8843 D8)" },
+  { route: "meet/confirmed", reason: "booking confirmation, API-backed" },
+  { route: "private", reason: "private booking index, API-backed and noindex (#8843 D8)" },
   {
     route: "unsubscribe",
     reason: "app-shaped landing, API-backed; no content page behind it",
   },
+  // #8848 D12 — `/downloads` and `/downloads/<slug>` are permanent redirects
+  // into `/reports`; a redirect renders no page.
+  {
+    route: "downloads",
+    reason: "permanent redirect into /reports (#8848 D12); renders no page",
+    subtree: true,
+  },
   // #6084 — both purchase return pages read a Checkout Session (or read
   // nothing, for cancel) and render via SectionRenderer directly; neither
   // is a content-adapter page, and the paid render's own schema.org node
@@ -388,22 +422,28 @@ const NO_STRUCTURED_DATA_ROUTES: ReadonlyArray<{
     reason: "auth surfaces, not content pages",
     subtree: true,
   },
-  // #8513 — a spoke carrying commerce gets two generated checkout return
-  // pages (create-ailk #7838): noindex, rendered through SectionRenderer
-  // directly, no JSON-LD. Exempt only when the page on disk still carries
-  // both the generated marker and the noindex line (see `requires` above) —
-  // a hand-written or edited page at either route is checked like any other.
+  // #8513 — the two standard spoke checkout return pages (#8748 D5):
+  // noindex, rendered through SectionRenderer directly, no JSON-LD. Exempt
+  // only when the page on disk still carries both the standard's marker and
+  // the noindex line (see `requires` above) — a hand-written or edited page
+  // at either route is checked like any other.
   {
     route: "checkout/thank-you",
     reason:
-      "spoke checkout return page (create-ailk #7838) — noindex, renders sections only, no JSON-LD",
-    requires: [CHECKOUT_PAGE_MARKER, CHECKOUT_PAGE_NOINDEX_LINE],
+      "spoke checkout return page (#8748) — noindex, renders sections only, no JSON-LD",
+    requires: [
+      [CHECKOUT_PAGE_MARKER, LEGACY_CHECKOUT_PAGE_MARKER],
+      CHECKOUT_PAGE_NOINDEX_LINE,
+    ],
   },
   {
     route: "checkout/unavailable",
     reason:
-      "spoke checkout return page (create-ailk #7838) — noindex, renders sections only, no JSON-LD",
-    requires: [CHECKOUT_PAGE_MARKER, CHECKOUT_PAGE_NOINDEX_LINE],
+      "spoke checkout return page (#8748) — noindex, renders sections only, no JSON-LD",
+    requires: [
+      [CHECKOUT_PAGE_MARKER, LEGACY_CHECKOUT_PAGE_MARKER],
+      CHECKOUT_PAGE_NOINDEX_LINE,
+    ],
   },
 ];
 
@@ -431,6 +471,9 @@ function walkRoutes(dir: string, out: RouteEntry[] = []): RouteEntry[] {
 }
 
 function exemption(route: string, src: string): string | undefined {
+  if (src.includes(MAGNET_PAGE_MARKER) && src.includes(MAGNET_RENDERER_IMPORT)) {
+    return MAGNET_PAGE_REASON;
+  }
   const entry = NO_STRUCTURED_DATA_ROUTES.find(
     (e) =>
       route === e.route ||
@@ -439,7 +482,9 @@ function exemption(route: string, src: string): string | undefined {
   if (entry === undefined) return undefined;
   if (
     entry.requires !== undefined &&
-    !entry.requires.every((s) => src.includes(s))
+    !entry.requires.every((s) =>
+      typeof s === "string" ? src.includes(s) : s.some((any) => src.includes(any)),
+    )
   ) {
     return undefined;
   }
@@ -645,6 +690,12 @@ describe("structured data — exemption(route, src) keys the generated checkout
     expect(exemption("checkout/unavailable", NO_NOINDEX_SRC)).toBeUndefined();
   });
 
+  it("still exempts a page create-ailk rendered before #8748, which update leaves in place", () => {
+    const legacy = `// The checkout thank-you page — ${LEGACY_CHECKOUT_PAGE_MARKER}.\nexport async function generateMetadata() {\n  return { ${CHECKOUT_PAGE_NOINDEX_LINE} };\n}\n`;
+    expect(exemption("checkout/thank-you", legacy)).toContain("noindex");
+    expect(exemption("checkout/unavailable", legacy)).toContain("noindex");
+  });
+
   it("does not exempt a neighboring checkout route or an unrelated route", () => {
     expect(exemption("checkout/other", GENERATED_SRC)).toBeUndefined();
     expect(exemption("about", GENERATED_SRC)).toBeUndefined();
@@ -661,6 +712,31 @@ describe("structured data — exemption(route, src) keys the generated checkout
   });
 });
 
+// ── 2b. exemption(route, src) — the standard magnet pages (#8840 D13) ────
+
+describe("structured data — exemption(route, src) keys a standard magnet page on the file (#8840)", () => {
+  // The import line is assembled, not written out, so this file's own text
+  // carries no import of a path a scaffold's copy of it may not ship.
+  const IMPORT_LINE = ["import { magnetLanding } from ", JSON.stringify(`../${MAGNET_RENDERER_IMPORT}`), ";"].join("");
+  const PAIR_SRC = `// Generated by create-ailk add-route magnet.\n// ${MAGNET_PAGE_MARKER} — the landing of the /diagnostic magnet pair.\n${IMPORT_LINE}\n`;
+
+  it("exempts a page carrying the marker and the renderer import, at any route", () => {
+    expect(exemption("diagnostic", PAIR_SRC)).toBe(MAGNET_PAGE_REASON);
+    expect(exemption("diagnostic/start", PAIR_SRC)).toBe(MAGNET_PAGE_REASON);
+    expect(exemption("careers/writer", PAIR_SRC)).toBe(MAGNET_PAGE_REASON);
+  });
+
+  it("checks a page carrying the marker but no import of the renderer like any other", () => {
+    const noImport = `// ${MAGNET_PAGE_MARKER}\nexport default function Page() { return null; }\n`;
+    expect(exemption("diagnostic", noImport)).toBeUndefined();
+  });
+
+  it("checks a page importing the renderer without the marker like any other", () => {
+    const noMarker = `${IMPORT_LINE}\n`;
+    expect(exemption("diagnostic", noMarker)).toBeUndefined();
+  });
+});
+
 // ── 3. The two defect shapes that shipped, pinned ───────────────────────────
 //
 // These prove the checks above reach the validator rule that rejects each

package/templates/apps/web/lib/account-invite.ts

@@ -0,0 +1,37 @@
+/**
+ * account-invite.ts — the /contact thank-you's account link (#8757 D8): the
+ * path that starts sign-in on this site with the submitter's email prefilled
+ * and lands on their account. It signs no one in; the email is only the
+ * sign-in form's starting value (NFR2).
+ *
+ * Built from the generated sign-in provider (`SIGN_IN_PROVIDER`):
+ *   - `site` — this site's own `/sign-in`, locale-prefixed like every page
+ *     (`localeHref`), with `next` = the locale's `/account` and `email`;
+ *   - `hub`  — a hub-sign-in spoke starts at `/api/hub-session/sign-in`
+ *     (`accountInvitePath("hub", …)`), which hands the hint to the hub;
+ *   - `none` — no sign-in, so no link.
+ * An email the hint schema refuses (`accountEmailHintSchema`) gives no link.
+ * The query is built with `URLSearchParams` (SEC-8757-L).
+ */
+import { localeHref } from "@working-theory/ui";
+import { accountEmailHintSchema, accountInvitePath } from "@working-theory/validation";
+
+import { SIGN_IN_PROVIDER } from "./topology.generated";
+
+export function accountInviteHref(locale: string, email: string): string | null {
+  const hint = accountEmailHintSchema.safeParse(email);
+  if (!hint.success) return null;
+  switch (SIGN_IN_PROVIDER) {
+    case "site": {
+      const query = new URLSearchParams({
+        next: localeHref(locale, "/account"),
+        email: hint.data,
+      });
+      return `${localeHref(locale, "/sign-in")}?${query.toString()}`;
+    }
+    case "hub":
+      return accountInvitePath("hub", hint.data);
+    default:
+      return null;
+  }
+}

package/templates/apps/web/lib/auth-routes.ts

@@ -12,6 +12,12 @@
  * signed-in account area — `/account` and everything under it — which the
  * layout also renders without the marketing chrome.
  *
+ * `isBookingPath()` (#8843 D10) is the same predicate for the scheduling
+ * module's booking pages — `/meet`, `/meet/<slug>` and `/private`, never
+ * `/meet/confirmed` — which the layout renders chrome-free only where the
+ * module is installed (`lib/modules.generated.ts`). This module imports
+ * nothing, so edge code can import it too.
+ *
  * No Next.js import — pure functions, asserted directly by their own suite.
  */
 
@@ -62,6 +68,21 @@ export function isAccountPath(
   return firstSegment(pathname, locales) === "account";
 }
 
+/**
+ * Whether `pathname` addresses a booking page: `/private`, `/meet`, or
+ * `/meet/<slug>` for any slug but `confirmed` (the booker's confirmation
+ * page, which keeps the marketing chrome). The same prefix rule and the same
+ * fail-safe direction as `isAuthPath()`.
+ */
+export function isBookingPath(
+  pathname: string | undefined | null,
+  locales: readonly string[],
+): boolean {
+  const [first, second] = segments(pathname, locales);
+  if (first === "private") return true;
+  return first === "meet" && second !== "confirmed";
+}
+
 /**
  * The first path segment after an enabled-locale prefix, or `undefined` for
  * an absent or empty pathname.
@@ -70,7 +91,18 @@ function firstSegment(
   pathname: string | undefined | null,
   locales: readonly string[],
 ): string | undefined {
-  if (!pathname) return undefined;
+  return segments(pathname, locales)[0];
+}
+
+/**
+ * The path's segments after an enabled-locale prefix (empty for an absent or
+ * empty pathname). A trailing slash adds no segment.
+ */
+function segments(
+  pathname: string | undefined | null,
+  locales: readonly string[],
+): string[] {
+  if (!pathname) return [];
 
   // Drop a query string / fragment — `x-pathname` carries the path, but a
   // caller passing a full request path should get the same verdict.
@@ -80,5 +112,7 @@ function firstSegment(
       ? path.replace(new RegExp(`^/(${locales.join("|")})(?=/|$)`), "")
       : path;
 
-  return bare.split("/")[1];
+  const parts = bare.split("/").slice(1);
+  if (parts.at(-1) === "") parts.pop();
+  return parts;
 }

package/templates/apps/web/lib/checkout-config.ts

@@ -0,0 +1,16 @@
+// checkout-config.ts — this spoke's checkout stamp, as data (#7838, #8748).
+//
+// Written once by create-ailk and yours from then on: `create-ailk update`
+// never rewrites it. Keep it to data: no import, and no code. A spoke sells
+// through its hub's Offerings buy route, /api/offerings/checkout/<lookup_key>
+// (#9142); the thank-you page and, on a spoke that signs in through its hub,
+// the billing action read `site` from here.
+//
+// site       The paid-session stamp the thank-you page checks
+//            (`metadata.site`) before it prefills "Open your account". Never
+//            "default". The create-ailk writer stamps the line below.
+const SITE = "example-site";
+
+export const checkoutConfig = {
+  site: SITE,
+};

package/templates/apps/web/lib/consent-policies.ts

@@ -0,0 +1,22 @@
+/**
+ * consent-policies.ts — the one policy map an agreement surface links
+ * through (#8765 D9, spec docs/specs/8765-sign-up-refuses-without-the-spec.md).
+ *
+ * A consent statement names its links by key (`[Terms](terms)`); the keys
+ * resolve against the registry's `policies` map. This localizes that map, so
+ * the sign-up page, the account interstitial and the Privacy tab link Terms,
+ * Privacy Policy and Working Agreement to the same three pages `/contact`
+ * builds inline (#8761 decision, C6).
+ */
+import { localeHref } from "@working-theory/ui";
+import { SITE_CONSENT_CONFIG_DEFAULTS } from "@working-theory/validation";
+
+/** The registry's policy map with each path localized for `locale`. */
+export function consentPoliciesFor(locale: string): Record<string, string> {
+  return Object.fromEntries(
+    Object.entries(SITE_CONSENT_CONFIG_DEFAULTS.policies).map(([key, path]) => [
+      key,
+      localeHref(locale, path),
+    ]),
+  );
+}

package/templates/apps/web/lib/deck-page.ts

@@ -37,6 +37,7 @@ import { siteChrome, type SiteChrome } from "./site-chrome";
 export const DECK_ROUTES = [
   "/about",
   "/alternatives",
+  "/careers",
   "/contact",
   "/faq",
   "/launch-service",
@@ -55,6 +56,8 @@ export const DECK_ROUTES = [
 type Chrome = SiteChrome & {
   deckGrounds?: DeckPageInputs["deckGrounds"];
   deckPresentation?: true;
+  /** #8773 — present only when the design chooses bare slide anchors. */
+  deckAnchors?: "bare";
 };
 const chrome: Chrome = siteChrome;
 
@@ -180,6 +183,10 @@ async function inputsFor(ctx: DeckPageContext): Promise<DeckPageInputs | null> {
   return {
     ...(chrome.deckGrounds !== undefined ? { deckGrounds: chrome.deckGrounds } : {}),
     deckPresentation: chrome.deckPresentation === true,
+    // #8773 — a page that presents names its slides as the design chose.
+    ...(chrome.deckPresentation === true && chrome.deckAnchors === "bare"
+      ? { deckAnchorStyle: "bare" as const }
+      : {}),
   };
 }
 

package/templates/apps/web/lib/deliverable-grant.ts

@@ -0,0 +1,18 @@
+/**
+ * The shape a deliverable grant id must match before anything spends a hub
+ * call on it (#9125). One definition, read by the report page
+ * (`app/[locale]/reports/[slug]/page.tsx`, `resolveGrantId`) and its file
+ * route (`app/[locale]/reports/[slug]/file/route.ts`), so the page and the
+ * bytes can never disagree on which ids are worth probing.
+ *
+ * A grant id is minted as `dgrant_<uuidv7>` (database/inbox/schema.prisma).
+ * This is deliberately a charset-and-length check, not a `dgrant_` prefix
+ * match: the API stays the authority on which ids are real, and a future id
+ * scheme should not need an edit here. 128 is a generous ceiling over today's
+ * `dgrant_<uuid>`.
+ *
+ * Deliberately base-tree, not slice-owned: a keyed scaffold's
+ * signal-collectors bundle installs the page and route that import it, so it
+ * must already be in every scaffold.
+ */
+export const GRANT_ID_SHAPE = /^[A-Za-z0-9_-]{1,128}$/;

package/templates/apps/web/lib/hub-session/__tests__/sign-in-gate.test.tsx

@@ -0,0 +1,111 @@
+/**
+ * HubSignInGate (#7894 D10) as #8790 AC-1/AC-2 shape it: the site's inner-page
+ * header (back arrow + mark), a label-size heading, the one hub sign-in
+ * action, and a prospect line only when the site's messages carry it.
+ */
+import { render, screen } from "@testing-library/react";
+import en from "../../../messages/en.json";
+import { HubSignInGate } from "../sign-in-gate";
+
+type Gate = Record<string, string>;
+let gateMessages: Gate;
+
+jest.mock("next-intl/server", () => ({
+  __esModule: true,
+  getTranslations: jest.fn(async () => {
+    const t = (key: string) => gateMessages[key] ?? `copy:${key}`;
+    t.has = (key: string) => key in gateMessages;
+    return t;
+  }),
+}));
+
+const mockConfig = jest.fn();
+// eslint-disable-next-line no-restricted-syntax -- #507: mock-internal rewrite pending; hubSessionConfig() is a pure env read
+jest.mock("../config", () => ({
+  __esModule: true,
+  hubSessionConfig: () => mockConfig(),
+}));
+
+// eslint-disable-next-line no-restricted-syntax -- #507: mock-internal rewrite pending; siteLogo() reads the site's brand files
+jest.mock("../../site-logo", () => ({
+  __esModule: true,
+  siteLogo: () => (
+    <img src="/logomark.svg" alt="Site" data-testid="site-mark" />
+  ),
+}));
+
+async function renderGate(pathname?: string): Promise<void> {
+  const requestHeaders = new Headers();
+  if (pathname) requestHeaders.set("x-pathname", pathname);
+  render(await HubSignInGate({ locale: "en", requestHeaders }));
+}
+
+beforeEach(() => {
+  gateMessages = { ...(en.account.gate as Gate) };
+  mockConfig.mockReset().mockReturnValue({ clientId: "spoke_1" });
+});
+
+describe("<HubSignInGate/> (#8790 AC-1)", () => {
+  it("wears the site's inner-page header: a back arrow to the home and the mark", async () => {
+    await renderGate("/account");
+    const header = screen.getByTestId("account-sign-in-gate-header");
+    const back = screen.getByTestId("nav-back-link");
+    expect(header).toContainElement(back);
+    expect(back).toHaveAttribute("href", "/");
+    expect(back).toHaveAccessibleName(en.account.gate.homeLink);
+    expect(screen.getByTestId("account-sign-in-gate-mark")).toContainElement(
+      screen.getByTestId("site-mark"),
+    );
+  });
+
+  it("sets the heading at the label size and offers the one sign-in action", async () => {
+    await renderGate("/account/settings");
+    const heading = screen.getByRole("heading", { level: 1 });
+    expect(heading).toHaveTextContent(en.account.gate.hubHeadline);
+    expect(heading).toHaveClass("text-heading-2");
+    expect(screen.getByTestId("account-hub-sign-in")).toHaveAttribute(
+      "href",
+      "/api/hub-session/sign-in?next=%2Faccount%2Fsettings",
+    );
+  });
+
+  it("renders no prospect line by default (the shipped messages carry no prospect keys)", async () => {
+    await renderGate();
+    expect(screen.queryByTestId("account-sign-in-gate-prospect")).toBeNull();
+  });
+});
+
+describe("<HubSignInGate/> prospect line (#8790 AC-2)", () => {
+  it("renders the line and its link when the site fills all three keys", async () => {
+    gateMessages.prospectPrompt = "New here?";
+    gateMessages.prospectLink = "See if we fit";
+    gateMessages.prospectHref = "/fit";
+    await renderGate();
+    const line = screen.getByTestId("account-sign-in-gate-prospect");
+    expect(line).toHaveTextContent("New here? See if we fit.");
+    expect(screen.getByRole("link", { name: "See if we fit" })).toHaveAttribute(
+      "href",
+      "/fit",
+    );
+  });
+
+  it("renders nothing when any of the three keys is absent", async () => {
+    gateMessages.prospectPrompt = "New here?";
+    gateMessages.prospectLink = "See if we fit";
+    await renderGate();
+    expect(screen.queryByTestId("account-sign-in-gate-prospect")).toBeNull();
+  });
+
+  it("keeps the not-configured state when the hub is not configured", async () => {
+    mockConfig.mockReturnValue(null);
+    await renderGate();
+    expect(screen.getByRole("heading", { level: 1 })).toHaveTextContent(
+      en.account.gate.emptyHeadline,
+    );
+    expect(screen.getByTestId("account-sign-in-gate-home")).toHaveAttribute(
+      "href",
+      "/",
+    );
+    expect(screen.queryByTestId("account-hub-sign-in")).toBeNull();
+  });
+});