create-ailk 0.23.0 → 0.25.1

package/templates/apps/api/src/routes/webhooks/__tests__/stripe-idempotency.test.ts

@@ -1,264 +0,0 @@
-/**
- * Stripe webhook idempotency — replay protection at the AILK layer.
- *
- * Stripe guarantees at-least-once delivery; an `event.id` can arrive multiple
- * times (network retries, dashboard manual replay). The handler MUST be
- * idempotent: a second arrival with the same `event.id` returns 200 without
- * re-firing telemetry or any side effect.
- *
- * Implementation: module-scoped store with TTL — see
- * `apps/api/src/lib/webhook-idempotency.ts` for the deliberate single-replica
- * trade-off vs. a durable table.
- */
-import type { FastifyInstance } from "fastify";
-import Fastify from "fastify";
-
-// ── Mocks ────────────────────────────────────────────────────────────────────
-
-const mockConfig: { STRIPE_WEBHOOK_SECRET: string | undefined } = {
-  STRIPE_WEBHOOK_SECRET: "whsec_test_secret",
-};
-// eslint-disable-next-line no-restricted-syntax -- mirrors stripe.test.ts mock pattern
-jest.mock("../../../config/index.js", () => ({
-  get config() {
-    return mockConfig;
-  },
-}));
-
-const mockTrack = jest.fn().mockResolvedValue(undefined);
-// Commerce claim (D-64, #5796): the receiver is a base-tree primitive gated on
-// the JWT `commerce` claim, so every case in this file is a COMMERCE-CLAIMED
-// deployment — which is what each one was already asserting before the gate
-// existed. The unclaimed matrix lives in
-// `src/__tests__/commerce-claim-registration.test.ts`.
-jest.mock("@working-theory/license", () => ({
-  checkLicense: jest.fn().mockResolvedValue({
-    tier: "pro",
-    plan: "pro-monthly",
-    features: ["commerce"],
-    expiresAt: null,
-    revoked: false,
-  }),
-}));
-
-jest.mock("@working-theory/analytics/server", () => ({
-  track: (...args: unknown[]) => mockTrack(...args),
-}));
-
-const mockVerifyWebhookSignature = jest.fn();
-class MockStripeWebhookSignatureError extends Error {
-  constructor(message: string) {
-    super(message);
-    this.name = "StripeWebhookSignatureError";
-  }
-}
-// eslint-disable-next-line no-restricted-syntax -- mirrors stripe.test.ts mock pattern
-jest.mock("../../../lib/stripe.js", () => ({
-  verifyWebhookSignature: (...args: unknown[]) =>
-    mockVerifyWebhookSignature(...args),
-  StripeWebhookSignatureError: MockStripeWebhookSignatureError,
-  // #8450 D10 — the handler compares each event's livemode with this.
-  stripeKeyMode: () => "test",
-}));
-
-import { stripeWebhookHandler } from "../stripe.js";
-import { __resetIdempotencyStore } from "../../../lib/webhook-idempotency.js";
-
-// ── Helpers ──────────────────────────────────────────────────────────────────
-
-function buildFakeEvent(id: string, overrides: Record<string, unknown> = {}) {
-  return {
-    id,
-    type: "checkout.session.completed",
-    data: {
-      object: {
-        amount_total: 4999,
-        currency: "usd",
-        metadata: { productId: "starter" },
-      },
-    },
-    ...overrides,
-  };
-}
-
-async function buildTestServer(): Promise<FastifyInstance> {
-  const server = Fastify({ logger: false });
-
-  await server.register(async (webhooksScope) => {
-    webhooksScope.addContentTypeParser(
-      "application/json",
-      { parseAs: "buffer" },
-      (_req, body, done) => {
-        done(null, body);
-      },
-    );
-    webhooksScope.post("/v1/webhooks/stripe", stripeWebhookHandler);
-  });
-
-  await server.ready();
-  return server;
-}
-
-const VALID_BODY = Buffer.from(JSON.stringify({ type: "test" }));
-const VALID_SIGNATURE = "t=1234,v1=abc";
-
-// ── Tests ────────────────────────────────────────────────────────────────────
-
-describe("POST /api/webhooks/stripe — idempotency", () => {
-  let server: FastifyInstance;
-
-  beforeEach(async () => {
-    jest.clearAllMocks();
-    __resetIdempotencyStore();
-    mockConfig.STRIPE_WEBHOOK_SECRET = "whsec_test_secret";
-    server = await buildTestServer();
-  });
-
-  afterEach(async () => {
-    await server.close();
-  });
-
-  it("processes a first-time event normally (200 + track called)", async () => {
-    const event = buildFakeEvent("evt_first_time_aaaa");
-    mockVerifyWebhookSignature.mockReturnValue(event);
-
-    const response = await server.inject({
-      method: "POST",
-      url: "/v1/webhooks/stripe",
-      payload: VALID_BODY,
-      headers: {
-        "content-type": "application/json",
-        "stripe-signature": VALID_SIGNATURE,
-      },
-    });
-
-    expect(response.statusCode).toBe(200);
-    expect(JSON.parse(response.body)).toEqual({ received: true });
-    expect(mockTrack).toHaveBeenCalledTimes(1);
-  });
-
-  it("returns 200 on replay of same event.id without re-firing telemetry", async () => {
-    const event = buildFakeEvent("evt_replay_same_id_bbbb");
-    mockVerifyWebhookSignature.mockReturnValue(event);
-
-    // First delivery — processed normally
-    const first = await server.inject({
-      method: "POST",
-      url: "/v1/webhooks/stripe",
-      payload: VALID_BODY,
-      headers: {
-        "content-type": "application/json",
-        "stripe-signature": VALID_SIGNATURE,
-      },
-    });
-
-    expect(first.statusCode).toBe(200);
-    expect(mockTrack).toHaveBeenCalledTimes(1);
-
-    // Second delivery — same event.id, should be treated as duplicate
-    const second = await server.inject({
-      method: "POST",
-      url: "/v1/webhooks/stripe",
-      payload: VALID_BODY,
-      headers: {
-        "content-type": "application/json",
-        "stripe-signature": VALID_SIGNATURE,
-      },
-    });
-
-    expect(second.statusCode).toBe(200);
-    expect(JSON.parse(second.body)).toEqual({ received: true });
-    // Telemetry must NOT have fired again
-    expect(mockTrack).toHaveBeenCalledTimes(1);
-  });
-
-  it("processes distinct event.ids independently", async () => {
-    const eventA = buildFakeEvent("evt_distinct_aaaa");
-    const eventB = buildFakeEvent("evt_distinct_bbbb");
-
-    mockVerifyWebhookSignature.mockReturnValueOnce(eventA);
-    await server.inject({
-      method: "POST",
-      url: "/v1/webhooks/stripe",
-      payload: VALID_BODY,
-      headers: {
-        "content-type": "application/json",
-        "stripe-signature": VALID_SIGNATURE,
-      },
-    });
-
-    mockVerifyWebhookSignature.mockReturnValueOnce(eventB);
-    await server.inject({
-      method: "POST",
-      url: "/v1/webhooks/stripe",
-      payload: VALID_BODY,
-      headers: {
-        "content-type": "application/json",
-        "stripe-signature": VALID_SIGNATURE,
-      },
-    });
-
-    expect(mockTrack).toHaveBeenCalledTimes(2);
-  });
-
-  it("logs duplicate detection at info level on replay", async () => {
-    const event = buildFakeEvent("evt_logs_duplicate_cccc");
-    mockVerifyWebhookSignature.mockReturnValue(event);
-
-    const logLines: Array<Record<string, unknown>> = [];
-    const logCapture = Fastify({
-      logger: {
-        level: "info",
-        stream: {
-          write(msg: string) {
-            logLines.push(JSON.parse(msg) as Record<string, unknown>);
-          },
-        },
-      },
-    });
-
-    await logCapture.register(async (scope) => {
-      scope.addContentTypeParser(
-        "application/json",
-        { parseAs: "buffer" },
-        (_req, body, done) => {
-          done(null, body);
-        },
-      );
-      scope.post("/v1/webhooks/stripe", stripeWebhookHandler);
-    });
-    await logCapture.ready();
-
-    try {
-      // First delivery
-      await logCapture.inject({
-        method: "POST",
-        url: "/v1/webhooks/stripe",
-        payload: VALID_BODY,
-        headers: {
-          "content-type": "application/json",
-          "stripe-signature": VALID_SIGNATURE,
-        },
-      });
-      // Replay
-      logLines.length = 0;
-      await logCapture.inject({
-        method: "POST",
-        url: "/v1/webhooks/stripe",
-        payload: VALID_BODY,
-        headers: {
-          "content-type": "application/json",
-          "stripe-signature": VALID_SIGNATURE,
-        },
-      });
-
-      const matched = logLines.some((line) => {
-        const msg = String(line["msg"] ?? "");
-        return msg.includes("duplicate") || msg.includes("idempotent");
-      });
-      expect(matched).toBe(true);
-    } finally {
-      await logCapture.close();
-    }
-  });
-});

package/templates/apps/api/src/routes/webhooks/__tests__/stripe-livemode-live.test.ts

@@ -1,159 +0,0 @@
-/**
- * POST /api/webhooks/stripe — the livemode guard, live-mode process (#8450
- * D10; #6852 SEC-03). The mirror of `stripe-livemode.test.ts`.
- *
- * `lib/stripe.ts` runs as itself except `stripeKeyMode`, which answers
- * `"live"` — the state `build()` leaves a process in after admitting a
- * restricted live key. A signed event whose `livemode` is `false` (a
- * test-mode event, forgeable by anyone holding the test key) is answered
- * 200, writes nothing, is not marked seen and logs one `livemode_mismatch`
- * warn; the same event with `livemode: true` reaches its arm.
- *
- * The stripe-site-filter.test.ts harness: the commerce claim mocked present,
- * the prisma manual mock, the idempotency store reset per test.
- */
-import type { FastifyInstance } from "fastify";
-import Fastify from "fastify";
-
-jest.mock("@working-theory/license", () => ({
-  checkLicense: jest.fn().mockResolvedValue({
-    tier: "pro",
-    plan: "pro-monthly",
-    features: ["commerce"],
-    expiresAt: null,
-    revoked: false,
-  }),
-}));
-
-jest.mock("@working-theory/analytics/server", () => ({
-  track: jest.fn().mockResolvedValue(undefined),
-}));
-
-// eslint-disable-next-line no-restricted-syntax -- lib/prisma.ts wraps the external DB boundary (PrismaClient requires a live connection); __mocks__/prisma.ts is the repo-standard test double for this boundary.
-jest.mock("../../../lib/prisma.js");
-
-const mockVerifyWebhookSignature = jest.fn();
-jest.mock("@working-theory/stripe-client", () => ({
-  ...jest.requireActual("@working-theory/stripe-client"),
-  verifyWebhookSignature: (...args: unknown[]) => mockVerifyWebhookSignature(...args),
-}));
-
-// eslint-disable-next-line no-restricted-syntax -- jest mock factory must be hoisted
-jest.mock("../../../lib/stripe.js", () => ({
-  ...jest.requireActual("../../../lib/stripe.js"),
-  stripeKeyMode: () => "live",
-}));
-
-import * as configModule from "../../../config/index.js";
-import { prisma } from "../../../lib/prisma.js";
-import { __resetIdempotencyStore, hasSeen } from "../../../lib/webhook-idempotency.js";
-import { stripeWebhookHandler } from "../stripe.js";
-
-const EVENT_ID = "evt_livemode_12345678";
-
-function customerCreated(livemode: boolean) {
-  return {
-    id: EVENT_ID,
-    type: "customer.created",
-    livemode,
-    data: {
-      object: {
-        id: "cus_livemode_fixture",
-        email: "client@example.com",
-        metadata: { ailk_user_id: "usr_livemode" },
-      },
-    },
-  };
-}
-
-type LogCall = [unknown, string?];
-const logCalls: LogCall[] = [];
-
-async function buildTestServer(): Promise<FastifyInstance> {
-  const server = Fastify({ logger: false });
-  await server.register(async (webhooksScope) => {
-    webhooksScope.addContentTypeParser("application/json", { parseAs: "buffer" }, (_req, body, done) => {
-      done(null, body);
-    });
-    webhooksScope.addHook("onRequest", async (request) => {
-      for (const level of ["info", "warn", "error"] as const) {
-        const original = request.log[level].bind(request.log);
-        request.log[level] = ((...args: unknown[]) => {
-          logCalls.push(args as LogCall);
-          return (original as (...a: unknown[]) => void)(...args);
-        }) as typeof request.log.info;
-      }
-    });
-    webhooksScope.post("/v1/webhooks/stripe", stripeWebhookHandler);
-  });
-  await server.ready();
-  return server;
-}
-
-function mismatchLogs(): LogCall[] {
-  return logCalls.filter(
-    ([obj]) =>
-      typeof obj === "object" && obj !== null && (obj as Record<string, unknown>)["outcome"] === "livemode_mismatch",
-  );
-}
-
-let server: FastifyInstance;
-
-beforeEach(async () => {
-  jest.clearAllMocks();
-  logCalls.length = 0;
-  __resetIdempotencyStore();
-  jest.replaceProperty(configModule, "config", {
-    ...configModule.config,
-    STRIPE_WEBHOOK_SECRET: "whsec_test_secret",
-  });
-  (prisma.user.findFirst as jest.Mock).mockResolvedValue(null);
-  (prisma.user.findUnique as jest.Mock).mockResolvedValue(null);
-  server = await buildTestServer();
-});
-
-afterEach(async () => {
-  await server.close();
-  jest.restoreAllMocks();
-});
-
-async function post() {
-  return server.inject({
-    method: "POST",
-    url: "/v1/webhooks/stripe",
-    payload: Buffer.from(JSON.stringify({ type: "test" })),
-    headers: { "content-type": "application/json", "stripe-signature": "t=1234,v1=abc" },
-  });
-}
-
-describe("stripe webhook — livemode guard in a live-mode process (#8450 D10)", () => {
-  it("drops a test-mode event: 200, no write, not marked seen, one warn", async () => {
-    mockVerifyWebhookSignature.mockReturnValue(customerCreated(false));
-
-    const res = await post();
-
-    expect(res.statusCode).toBe(200);
-    expect(res.json()).toEqual({ received: true });
-    expect(prisma.user.findFirst).not.toHaveBeenCalled();
-    expect(prisma.user.findUnique).not.toHaveBeenCalled();
-    expect(prisma.user.update).not.toHaveBeenCalled();
-    expect(hasSeen(EVENT_ID)).toBe(false);
-    expect(mismatchLogs()).toHaveLength(1);
-    expect(mismatchLogs()[0]?.[0]).toEqual({
-      eventType: "customer.created",
-      eventIdPrefix: EVENT_ID.substring(0, 8),
-      outcome: "livemode_mismatch",
-    });
-  });
-
-  it("handles a live-mode event: it reaches its arm and is marked seen", async () => {
-    mockVerifyWebhookSignature.mockReturnValue(customerCreated(true));
-
-    const res = await post();
-
-    expect(res.statusCode).toBe(200);
-    expect(prisma.user.findFirst).toHaveBeenCalled();
-    expect(hasSeen(EVENT_ID)).toBe(true);
-    expect(mismatchLogs()).toHaveLength(0);
-  });
-});

package/templates/apps/api/src/routes/webhooks/__tests__/stripe-livemode.test.ts

@@ -1,158 +0,0 @@
-/**
- * POST /api/webhooks/stripe — the livemode guard, test-mode process (#8450
- * D10; #6852 SEC-03).
- *
- * The real `lib/stripe.ts` runs over the package mocked for
- * `verifyWebhookSignature` only, and nothing admits a live key, so the
- * process is in test mode: a signed event whose `livemode` is `true` is
- * answered 200, writes nothing, is not marked seen and logs one
- * `livemode_mismatch` warn; the same event with `livemode: false` reaches
- * its arm. The live-mode mirror is `stripe-livemode-live.test.ts`.
- *
- * The stripe-site-filter.test.ts harness: the commerce claim mocked present,
- * the prisma manual mock, the idempotency store reset per test.
- */
-import type { FastifyInstance } from "fastify";
-import Fastify from "fastify";
-
-jest.mock("@working-theory/license", () => ({
-  checkLicense: jest.fn().mockResolvedValue({
-    tier: "pro",
-    plan: "pro-monthly",
-    features: ["commerce"],
-    expiresAt: null,
-    revoked: false,
-  }),
-}));
-
-jest.mock("@working-theory/analytics/server", () => ({
-  track: jest.fn().mockResolvedValue(undefined),
-}));
-
-// eslint-disable-next-line no-restricted-syntax -- lib/prisma.ts wraps the external DB boundary (PrismaClient requires a live connection); __mocks__/prisma.ts is the repo-standard test double for this boundary.
-jest.mock("../../../lib/prisma.js");
-
-const mockVerifyWebhookSignature = jest.fn();
-jest.mock("@working-theory/stripe-client", () => ({
-  ...jest.requireActual("@working-theory/stripe-client"),
-  verifyWebhookSignature: (...args: unknown[]) => mockVerifyWebhookSignature(...args),
-}));
-
-import * as configModule from "../../../config/index.js";
-import { prisma } from "../../../lib/prisma.js";
-import { stripeKeyMode } from "../../../lib/stripe.js";
-import { __resetIdempotencyStore, hasSeen } from "../../../lib/webhook-idempotency.js";
-import { stripeWebhookHandler } from "../stripe.js";
-
-const EVENT_ID = "evt_livemode_12345678";
-
-function customerCreated(livemode: boolean) {
-  return {
-    id: EVENT_ID,
-    type: "customer.created",
-    livemode,
-    data: {
-      object: {
-        id: "cus_livemode_fixture",
-        email: "client@example.com",
-        metadata: { ailk_user_id: "usr_livemode" },
-      },
-    },
-  };
-}
-
-type LogCall = [unknown, string?];
-const logCalls: LogCall[] = [];
-
-async function buildTestServer(): Promise<FastifyInstance> {
-  const server = Fastify({ logger: false });
-  await server.register(async (webhooksScope) => {
-    webhooksScope.addContentTypeParser("application/json", { parseAs: "buffer" }, (_req, body, done) => {
-      done(null, body);
-    });
-    webhooksScope.addHook("onRequest", async (request) => {
-      for (const level of ["info", "warn", "error"] as const) {
-        const original = request.log[level].bind(request.log);
-        request.log[level] = ((...args: unknown[]) => {
-          logCalls.push(args as LogCall);
-          return (original as (...a: unknown[]) => void)(...args);
-        }) as typeof request.log.info;
-      }
-    });
-    webhooksScope.post("/v1/webhooks/stripe", stripeWebhookHandler);
-  });
-  await server.ready();
-  return server;
-}
-
-function mismatchLogs(): LogCall[] {
-  return logCalls.filter(
-    ([obj]) =>
-      typeof obj === "object" && obj !== null && (obj as Record<string, unknown>)["outcome"] === "livemode_mismatch",
-  );
-}
-
-let server: FastifyInstance;
-
-beforeEach(async () => {
-  jest.clearAllMocks();
-  logCalls.length = 0;
-  __resetIdempotencyStore();
-  jest.replaceProperty(configModule, "config", {
-    ...configModule.config,
-    STRIPE_WEBHOOK_SECRET: "whsec_test_secret",
-  });
-  (prisma.user.findFirst as jest.Mock).mockResolvedValue(null);
-  (prisma.user.findUnique as jest.Mock).mockResolvedValue(null);
-  server = await buildTestServer();
-});
-
-afterEach(async () => {
-  await server.close();
-  jest.restoreAllMocks();
-});
-
-async function post() {
-  return server.inject({
-    method: "POST",
-    url: "/v1/webhooks/stripe",
-    payload: Buffer.from(JSON.stringify({ type: "test" })),
-    headers: { "content-type": "application/json", "stripe-signature": "t=1234,v1=abc" },
-  });
-}
-
-describe("stripe webhook — livemode guard in a test-mode process (#8450 D10)", () => {
-  it("the process is in test mode", () => {
-    expect(stripeKeyMode()).toBe("test");
-  });
-
-  it("drops a live-mode event: 200, no write, not marked seen, one warn", async () => {
-    mockVerifyWebhookSignature.mockReturnValue(customerCreated(true));
-
-    const res = await post();
-
-    expect(res.statusCode).toBe(200);
-    expect(res.json()).toEqual({ received: true });
-    expect(prisma.user.findFirst).not.toHaveBeenCalled();
-    expect(prisma.user.findUnique).not.toHaveBeenCalled();
-    expect(prisma.user.update).not.toHaveBeenCalled();
-    expect(hasSeen(EVENT_ID)).toBe(false);
-    expect(mismatchLogs()).toHaveLength(1);
-    expect(mismatchLogs()[0]?.[0]).toEqual({
-      eventType: "customer.created",
-      eventIdPrefix: EVENT_ID.substring(0, 8),
-      outcome: "livemode_mismatch",
-    });
-  });
-
-  it("handles a test-mode event as before: it reaches its arm and is marked seen", async () => {
-    mockVerifyWebhookSignature.mockReturnValue(customerCreated(false));
-
-    const res = await post();
-
-    expect(res.statusCode).toBe(200);
-    expect(prisma.user.findFirst).toHaveBeenCalled();
-    expect(hasSeen(EVENT_ID)).toBe(true);
-    expect(mismatchLogs()).toHaveLength(0);
-  });
-});