create-ailk 0.21.0 → 0.23.0

package/templates/apps/web/app/[locale]/newsletter/newsletter.actions.ts

@@ -1,93 +0,0 @@
-"use server";
-
-/**
- * subscribeNewsletterAction — Server Action paired with the
- * `ailkSubscribeNewsletter` MCP tool (#6730 D9).
- *
- * `/newsletter` renders the shared `LeadCaptureForm` bound to this action
- * when the API accepts a subscription (a database is set up) and the page's
- * content declares no signup section of its own. Validates the address with
- * the tool's own input schema, calls `POST /v1/leads/subscribe` through
- * `@working-theory/api-client`, and maps the outcome the same way
- * `captureLeadAction` does: the API's 503 `lead_capture_not_configured` →
- * `unavailable`; any other non-2xx or thrown error → the generic `error`;
- * only a 2xx is `success`.
- *
- * Visitor forwarding (#7394): forwards the visitor exactly as
- * `captureLeadAction` does, through `visitorForwardHeaders` and the
- * server-only `AILK_VISITOR_FORWARD_KEY`; without them the call is made
- * with one argument, as before.
- */
-
-import { leads, visitorForwardHeaders } from "@working-theory/api-client";
-import { LEAD_CAPTURE_HONEYPOT, type LeadCaptureFormState } from "@working-theory/ui";
-import { subscribeNewsletterInputSchema } from "@working-theory/validation";
-import { cookies, headers } from "next/headers";
-
-import { consentVisitorHeader, readConsentVisitor } from "../../../lib/consent-visitor";
-
-const GENERIC_ERROR = "Something went wrong, please try again.";
-
-export async function subscribeNewsletterAction(
-  _prevState: LeadCaptureFormState,
-  formData: FormData,
-): Promise<LeadCaptureFormState> {
-  // Honeypot: a bot that fills the hidden field gets a person's answer, and
-  // nothing is sent.
-  const honeypot = formData.get(LEAD_CAPTURE_HONEYPOT);
-  if (typeof honeypot === "string" && honeypot !== "") return { kind: "success" };
-
-  const parsed = subscribeNewsletterInputSchema.safeParse({
-    email: formData.get("email"),
-  });
-  if (!parsed.success) {
-    return {
-      kind: "error",
-      fieldErrors: { email: parsed.error.issues[0]?.message ?? "Invalid email" },
-    };
-  }
-
-  const siteId = process.env.AILK_SITE_ID ?? "default";
-  const body = { siteId, source: "newsletter", email: parsed.data.email };
-  let init: { headers: Record<string, string> } | undefined;
-  try {
-    const forwarded = visitorForwardHeaders(
-      await headers(),
-      process.env.AILK_VISITOR_FORWARD_KEY,
-    );
-    if (forwarded) init = { headers: forwarded };
-  } catch {
-    // No request scope to read — subscribe without forwarding.
-  }
-
-  // #8438 D12 — the banner's visitor id, so a later subscribe links its
-  // cookie choices to the client record. Absent or invalid → no header.
-  try {
-    const visitorId = readConsentVisitor(await cookies());
-    if (visitorId) init = { headers: { ...(init?.headers ?? {}), ...consentVisitorHeader(visitorId) } };
-  } catch {
-    // No request scope to read — subscribe with no visitor-link header.
-  }
-
-  try {
-    const res = init
-      ? await leads.subscribe(body, init)
-      : await leads.subscribe(body);
-    if (!res.ok) {
-      const error =
-        typeof res.body === "object" && res.body !== null
-          ? (res.body as { error?: unknown }).error
-          : undefined;
-      if (res.status === 503 && error === "lead_capture_not_configured") {
-        return { kind: "unavailable" };
-      }
-      return { kind: "error", message: GENERIC_ERROR };
-    }
-    return { kind: "success" };
-  } catch (err) {
-    // The api-client never attaches the request payload to a thrown error,
-    // so logging `err` carries no subscriber address.
-    console.error("[subscribeNewsletterAction]", err);
-    return { kind: "error", message: GENERIC_ERROR };
-  }
-}

package/templates/apps/web/lib/__tests__/meeting-slugs.test.ts

@@ -1,120 +0,0 @@
-// oss: false
-/**
- * Tests for enabledMeetingSlugs (#6183 S9b D5) — the D4-resolving read both
- * /meet pages share — and its spoke branch (#7872 D4).
- *
- * The topology seam is mocked: its hub render imports `../auth`, which this
- * suite has no reason to load (`app/openapi.json/__tests__/route.test.ts`'s
- * pattern).
- */
-const mockMeetingTypes = jest.fn();
-jest.mock("@working-theory/api-client", () => ({
-  __esModule: true,
-  schedule: { meetingTypes: (...args: unknown[]) => mockMeetingTypes(...args) },
-}));
-
-const mockTopology: { value: "hub" | "spoke" } = { value: "hub" };
-// eslint-disable-next-line no-restricted-syntax -- #507: the topology is a generated constant (#7426 D5), not a runtime input; the seam IS the boundary between a hub and a spoke build, and there is no env or HTTP surface that selects it.
-jest.mock("../topology.generated", () => ({
-  get TOPOLOGY() {
-    return mockTopology.value;
-  },
-}));
-
-import { enabledMeetingSlugs } from "../meeting-slugs";
-
-describe("enabledMeetingSlugs", () => {
-  const originalEnv = process.env["SCHEDULING_CAL_LINK"];
-
-  beforeEach(() => {
-    mockMeetingTypes.mockReset();
-    mockTopology.value = "hub";
-  });
-
-  afterEach(() => {
-    if (originalEnv === undefined) delete process.env["SCHEDULING_CAL_LINK"];
-    else process.env["SCHEDULING_CAL_LINK"] = originalEnv;
-  });
-
-  it("passes a real, populated array through unchanged", async () => {
-    mockMeetingTypes.mockResolvedValue({
-      ok: true,
-      body: { slugs: ["intro", "demo"] },
-    });
-
-    await expect(enabledMeetingSlugs()).resolves.toEqual(["intro", "demo"]);
-  });
-
-  it("passes a real, intentionally empty array through unchanged (D4 row 2 — never the fallback)", async () => {
-    process.env["SCHEDULING_CAL_LINK"] = "acme/intro-call";
-    mockMeetingTypes.mockResolvedValue({ ok: true, body: { slugs: [] } });
-
-    await expect(enabledMeetingSlugs()).resolves.toEqual([]);
-  });
-
-  it("null + SCHEDULING_CAL_LINK set → the derived singleton (D4 row 1)", async () => {
-    process.env["SCHEDULING_CAL_LINK"] = "acme/intro-call";
-    mockMeetingTypes.mockResolvedValue({ ok: true, body: { slugs: null } });
-
-    await expect(enabledMeetingSlugs()).resolves.toEqual(["intro-call"]);
-  });
-
-  it("null + SCHEDULING_CAL_LINK unset → [] (no shipped page to protect)", async () => {
-    delete process.env["SCHEDULING_CAL_LINK"];
-    mockMeetingTypes.mockResolvedValue({ ok: true, body: { slugs: null } });
-
-    await expect(enabledMeetingSlugs()).resolves.toEqual([]);
-  });
-
-  it("a non-ok API result → [], fail closed — an outage must not open the gate", async () => {
-    process.env["SCHEDULING_CAL_LINK"] = "acme/intro-call";
-    mockMeetingTypes.mockResolvedValue({ ok: false, status: 500, body: null });
-
-    await expect(enabledMeetingSlugs()).resolves.toEqual([]);
-  });
-
-  it("null + a MALFORMED SCHEDULING_CAL_LINK slug → [], never a corrupt fallback (D14 parity, security review 2026-09-19)", async () => {
-    // A comma in the derived slug would corrupt the batched event-meta
-    // `calLinks` join downstream (it splits on comma), misattributing the
-    // rest of the list to a foreign owner — MeetingSlugSchema rejects it.
-    process.env["SCHEDULING_CAL_LINK"] = "acme/intro,evil";
-    mockMeetingTypes.mockResolvedValue({ ok: true, body: { slugs: null } });
-
-    await expect(enabledMeetingSlugs()).resolves.toEqual([]);
-  });
-});
-
-describe("enabledMeetingSlugs on a spoke (#7872 D4)", () => {
-  const originalEnv = process.env["SCHEDULING_CAL_LINK"];
-
-  beforeEach(() => {
-    mockMeetingTypes.mockReset();
-    mockTopology.value = "spoke";
-  });
-
-  afterEach(() => {
-    mockTopology.value = "hub";
-    if (originalEnv === undefined) delete process.env["SCHEDULING_CAL_LINK"];
-    else process.env["SCHEDULING_CAL_LINK"] = originalEnv;
-  });
-
-  it("null + SCHEDULING_CAL_LINK set → [], never the fallback: the hub books only a stored slug", async () => {
-    process.env["SCHEDULING_CAL_LINK"] = "acme/intro-call";
-    mockMeetingTypes.mockResolvedValue({ ok: true, body: { slugs: null } });
-
-    await expect(enabledMeetingSlugs()).resolves.toEqual([]);
-  });
-
-  it("passes the workspace's stored list through unchanged", async () => {
-    mockMeetingTypes.mockResolvedValue({ ok: true, body: { slugs: ["intro"] } });
-
-    await expect(enabledMeetingSlugs()).resolves.toEqual(["intro"]);
-  });
-
-  it("a non-ok API result → [], fail closed", async () => {
-    process.env["SCHEDULING_CAL_LINK"] = "acme/intro-call";
-    mockMeetingTypes.mockResolvedValue({ ok: false, status: 401, body: null });
-
-    await expect(enabledMeetingSlugs()).resolves.toEqual([]);
-  });
-});

package/templates/apps/web/lib/meeting-slugs.ts

@@ -1,63 +0,0 @@
-// oss: false
-/**
- * enabledMeetingSlugs — the enabled-meeting-slugs read both `/meet` pages
- * share (#6183 S9b D5).
- *
- * Resolves `GET /v1/schedule/meeting-types`'s three D4 outcomes into ONE
- * array both pages consume identically:
- *
- *   - an array is returned as-is (a real, operator-written enabled list —
- *     D4 rows 2 and 3, INCLUDING an intentionally empty `[]`);
- *   - `null` becomes the D4 row-1 singleton derived from
- *     `SCHEDULING_CAL_LINK` — the ONE slug an unconfigured deployment has
- *     ever advertised — or `[]` when that env var is unset;
- *   - any non-`ok` API result becomes `[]`, fail closed: an API outage
- *     must not open the gate.
- *
- * A duplicated inline call in both pages is how the two would drift, and
- * it is also how one of them would forget the fail-closed arm — this is
- * the ONE place that reasoning lives (D5).
- *
- * ON A SPOKE (#7872 D4), `null` means `[]`: the `SCHEDULING_CAL_LINK`
- * fallback is not consulted. The hub books a spoke's slug only when that
- * spoke's workspace has stored it (`spokeMayBook`), so a fallback slug would
- * advertise a meeting whose every booking fails with `event_not_found`. The
- * other arms are the same on both topologies.
- */
-import { schedule } from "@working-theory/api-client";
-import { MeetingSlugSchema } from "@working-theory/site-config/schema";
-
-import { TOPOLOGY } from "./topology.generated";
-
-/**
- * The D4 row-1 fallback: the slug half of the env-configured booker's own
- * calLink (`"<owner>/<slug>"`), or `[]` when the env var is unset. This is
- * deliberately the ONLY reader of `SCHEDULING_CAL_LINK`'s SECOND segment —
- * `meet/[slug]/page.tsx`'s own `composedCalLink` reads the FIRST segment
- * (the owner) for an unrelated purpose and is not touched by this file.
- *
- * Re-validated against `MeetingSlugSchema` (D14 parity with the operator-
- * written path — `meeting-types.ts`'s own per-entry `safeParse` filter):
- * `SCHEDULING_CAL_LINK` is operator-set env config, not a schema-validated
- * write, so a malformed value (a stray comma, an empty second segment) could
- * otherwise yield a slug that corrupts the batched `event-meta` `calLinks`
- * join downstream — which splits on comma and would misattribute the rest
- * of the list to a foreign owner (security review, 2026-09-19).
- */
-function derivedFallbackSlugs(): string[] {
-  const configured = process.env["SCHEDULING_CAL_LINK"];
-  if (!configured) return [];
-  const slug = configured.split("/")[1];
-  if (!slug) return [];
-  const parsed = MeetingSlugSchema.safeParse(slug);
-  return parsed.success ? [parsed.data] : [];
-}
-
-/** The enabled meeting-type slug set for this deployment, D4-resolved. */
-export async function enabledMeetingSlugs(): Promise<string[]> {
-  const res = await schedule.meetingTypes();
-  if (!res.ok) return [];
-  const { slugs } = res.body;
-  if (slugs) return slugs;
-  return TOPOLOGY === "spoke" ? [] : derivedFallbackSlugs();
-}