create-ailk 0.23.0 → 0.25.1

package/templates/apps/api/src/__tests__/factories/lead-fixture.ts

@@ -1,82 +0,0 @@
-/**
- * @file lead-fixture.ts
- * Filesystem fixture helpers for leads route tests.
- *
- * Sets up per-test temp paths for the real lead-capture-store and
- * file-fallback modules, so tests can assert on actual file writes
- * without mocking those internal modules.
- *
- * Issue #507: replaces jest.mock("../../../lib/lead-capture-store.js") and
- * jest.mock("../../../lib/file-fallback.js") in leads route tests.
- */
-
-import * as fs from "fs/promises";
-import * as os from "os";
-import * as path from "path";
-
-export interface LeadFileFixture {
-  /** Path to the per-test JSONL capture file (LEAD_CAPTURE_FILE). */
-  getCaptureFilePath: () => string;
-  /** Path to the per-test fallback dir (AILK_INBOX_FALLBACK_DIR). */
-  getFallbackDir: () => string;
-  /**
-   * Read and parse the last line written to the capture file.
-   * Throws if the file does not exist or is empty.
-   */
-  readLastCaptureRecord: () => Promise<Record<string, unknown>>;
-}
-
-/**
- * Register beforeEach/afterEach hooks that create a fresh LEAD_CAPTURE_FILE
- * path and AILK_INBOX_FALLBACK_DIR per test, then clean up afterward.
- *
- * Call at describe-scope. Returns a handle for asserting on file contents.
- */
-export function setupLeadFileEnv(label = "leads"): LeadFileFixture {
-  let captureFilePath = "";
-  let fallbackDir = "";
-
-  beforeEach(async () => {
-    captureFilePath = path.join(
-      os.tmpdir(),
-      `ailk-test-${label}-${Date.now()}.jsonl`,
-    );
-    process.env.LEAD_CAPTURE_FILE = captureFilePath;
-
-    fallbackDir = await fs.mkdtemp(
-      path.join(os.tmpdir(), `ailk-test-fallback-${label}-`),
-    );
-    process.env.AILK_INBOX_FALLBACK_DIR = fallbackDir;
-  });
-
-  afterEach(async () => {
-    delete process.env.LEAD_CAPTURE_FILE;
-    delete process.env.AILK_INBOX_FALLBACK_DIR;
-
-    // Best-effort cleanup — never fail the test on cleanup errors.
-    try {
-      await fs.unlink(captureFilePath);
-    } catch {
-      // file may not exist if appendLeadRecord was skipped
-    }
-    try {
-      await fs.rm(fallbackDir, { recursive: true, force: true });
-    } catch {
-      // ignore
-    }
-
-    captureFilePath = "";
-    fallbackDir = "";
-  });
-
-  return {
-    getCaptureFilePath: () => captureFilePath,
-    getFallbackDir: () => fallbackDir,
-    readLastCaptureRecord: async () => {
-      const content = await fs.readFile(captureFilePath, "utf8");
-      const lines = content.trim().split("\n").filter(Boolean);
-      if (lines.length === 0) throw new Error("Capture file is empty");
-      return JSON.parse(lines[lines.length - 1]) as Record<string, unknown>;
-    },
-  };
-}

package/templates/apps/api/src/__tests__/leads-forwarded-rate-limit.test.ts

@@ -1,135 +0,0 @@
-/**
- * @file leads-forwarded-rate-limit.test.ts
- * @description #7394 AC-7 — a keyed spoke's lead writes are limited per
- * visitor end to end, through the real `build()` and the REAL
- * `@fastify/rate-limit` global ceiling.
- *
- * `server.test.ts` (and ten other `apps/api` files) replace
- * `@fastify/rate-limit` with a no-op for the whole file, so none of them can
- * observe the global ceiling. This file does not mock it. It mocks only the
- * two boundaries `server.test.ts` mocks for infrastructure reasons:
- * `@fastify/cors` and `@working-theory/email` (an ESM-only transitive dep).
- *
- * `DATABASE_URL` is unset for the file's duration, so a lead write takes the
- * zero-config path, where the route refuses the empty body `{}` with a 400
- * before any write. With the setup file's placeholder `DATABASE_URL`, the
- * route would first try to resolve the site's workspace against a database
- * this test does not have. The limiter runs on `onRequest`, before either.
- *
- * Every request comes from one `x-forwarded-for` — the spoke host. Each
- * sub-case gets a fresh `build()` after `__resetBuckets()`, so neither the
- * in-house buckets nor the plugin's own in-memory store carry over.
- *
- * Spec: docs/specs/7394-the-leads-rate-limit-scope-spec.md §5.1 AC-7.
- */
-
-import { __resetBuckets } from "../middleware/rate-limit";
-import { build } from "../server";
-
-jest.mock("@fastify/cors", () => {
-  return jest.fn().mockResolvedValue(undefined);
-});
-
-jest.mock("@working-theory/email", () => ({
-  sendLeadNotification: jest.fn().mockResolvedValue({ ok: true }),
-}));
-
-const KEY = "0123456789abcdef".repeat(4); // gitleaks:allow — test fixture, not a credential (#7394)
-const SPOKE_HOST = "198.51.100.7";
-
-/** A distinct, valid visitor IP per index. */
-function visitor(i: number): string {
-  return `203.0.${Math.floor(i / 250)}.${(i % 250) + 1}`;
-}
-
-function headersFor(
-  visitorIp: string,
-  withKey: boolean,
-): Record<string, string> {
-  return {
-    "x-forwarded-for": SPOKE_HOST,
-    "x-ailk-visitor-ip": visitorIp,
-    ...(withKey && { "x-ailk-visitor-forward-key": KEY }),
-  };
-}
-
-describe("leads rate limit for a keyed spoke, against the real global ceiling (#7394 AC-7)", () => {
-  // eslint-disable-next-line @typescript-eslint/no-explicit-any -- server is typed via Fastify generics; explicit any matches server.test.ts
-  let app: any;
-  const prior = process.env.AILK_VISITOR_FORWARD_KEYS;
-  const priorDatabaseUrl = process.env.DATABASE_URL;
-
-  async function statuses(
-    count: number,
-    request: (i: number) => {
-      method: string;
-      url: string;
-      headers: Record<string, string>;
-      payload?: unknown;
-    },
-  ): Promise<number[]> {
-    const codes: number[] = [];
-    for (let i = 0; i < count; i++) {
-      const res = await app.inject(request(i));
-      codes.push(res.statusCode);
-    }
-    return codes;
-  }
-
-  function leadWrite(visitorIp: string, withKey: boolean) {
-    return {
-      method: "POST",
-      url: "/v1/leads/submit",
-      headers: headersFor(visitorIp, withKey),
-      payload: {},
-    };
-  }
-
-  beforeEach(async () => {
-    __resetBuckets();
-    process.env.AILK_VISITOR_FORWARD_KEYS = KEY;
-    delete process.env.DATABASE_URL;
-    app = await build();
-    await app.ready();
-  });
-
-  afterEach(async () => {
-    if (app) await app.close();
-    app = undefined;
-  });
-
-  afterAll(() => {
-    if (prior === undefined) delete process.env.AILK_VISITOR_FORWARD_KEYS;
-    else process.env.AILK_VISITOR_FORWARD_KEYS = prior;
-    if (priorDatabaseUrl !== undefined)
-      process.env.DATABASE_URL = priorDatabaseUrl;
-  });
-
-  it("(a) 61 keyed lead writes from distinct visitors behind one spoke host: none is 429", async () => {
-    const codes = await statuses(61, (i) => leadWrite(visitor(i), true));
-    // The route refuses `{}` before any write, so every answer is that 400.
-    expect(codes.every((code) => code === 400)).toBe(true);
-  });
-
-  it("(b) 11 keyed lead writes from one visitor: the eleventh is 429", async () => {
-    const codes = await statuses(11, () => leadWrite("203.0.113.1", true));
-    expect(codes.slice(0, 10).every((code) => code === 400)).toBe(true);
-    expect(codes[10]).toBe(429);
-  });
-
-  it("(c) 11 unkeyed lead writes from distinct visitors: the eleventh is 429", async () => {
-    const codes = await statuses(11, (i) => leadWrite(visitor(i), false));
-    expect(codes.slice(0, 10).every((code) => code === 400)).toBe(true);
-    expect(codes[10]).toBe(429);
-  });
-
-  it("(d) 61 keyed GET /health from distinct visitors: the global ceiling still keys on the spoke host", async () => {
-    const codes = await statuses(61, (i) => ({
-      method: "GET",
-      url: "/health",
-      headers: headersFor(visitor(i), true),
-    }));
-    expect(codes[59]).toBe(200);
-    expect(codes[60]).toBe(429);
-  });
-});

package/templates/apps/api/src/__tests__/services/enrichment-shim.test.ts

@@ -1,126 +0,0 @@
-/**
- * @file enrichment-shim.test.ts
- * @description Unit tests for enrichment-shim — license-gated lead enrichment stub.
- *
- * Module-state hygiene: proSentinelLogged is module-scoped and persists across calls
- * within the same module instance. Each test uses jest.isolateModules() to load a
- * fresh copy of the shim (resetting proSentinelLogged) while keeping the jest.mock
- * factory active so @working-theory/license is always intercepted.
- */
-
-import { createHash } from "crypto";
-
-// Stable mock function reference — survives resetModules because it lives in this
-// module's scope, not in the module registry.
-const mockCheckLicense = jest.fn();
-const mockLoggerInfo = jest.fn();
-
-jest.mock("@working-theory/license", () => ({
-  checkLicense: (...args: unknown[]) => mockCheckLicense(...args),
-}));
-
-jest.mock("@working-theory/observability", () => ({
-  logger: {
-    info: (...args: unknown[]) => mockLoggerInfo(...args),
-    warn: jest.fn(),
-    error: jest.fn(),
-    debug: jest.fn(),
-  },
-}));
-
-describe("enrichLead", () => {
-  let enrichLead: (lead: unknown) => Promise<unknown>;
-  const consoleInfoSpy = mockLoggerInfo;
-
-  beforeEach(() => {
-    mockCheckLicense.mockReset();
-    mockLoggerInfo.mockClear();
-
-    // Load a fresh shim module instance per test to reset proSentinelLogged.
-    jest.isolateModules(() => {
-       
-      const shim = require("../../services/enrichment-shim.js") as {
-        enrichLead: (lead: unknown) => Promise<unknown>;
-      };
-      enrichLead = shim.enrichLead;
-    });
-  });
-
-  afterEach(() => {
-    jest.restoreAllMocks();
-    delete process.env["AILK_LICENSE_KEY"];
-  });
-
-  it("free tier — returns lead unchanged, no sentinel log", async () => {
-    mockCheckLicense.mockResolvedValue({
-      tier: "free",
-      plan: null,
-      features: [],
-      expiresAt: null,
-      revoked: false,
-    });
-    const lead = { email: "test@example.com", name: "Test User" };
-
-    const result = await enrichLead(lead);
-
-    expect(result).toBe(lead);
-    expect(consoleInfoSpy).not.toHaveBeenCalled();
-  });
-
-  it("pro tier (first call) — returns lead unchanged, sentinel logged once with key hash prefix", async () => {
-    mockCheckLicense.mockResolvedValue({
-      tier: "pro",
-      plan: "pro",
-      features: [],
-      expiresAt: null,
-      revoked: false,
-    });
-    process.env["AILK_LICENSE_KEY"] = "test-key-123";
-
-    const expectedPrefix = createHash("sha256")
-      .update("test-key-123")
-      .digest("hex")
-      .substring(0, 8);
-
-    const lead = { email: "test@example.com", name: "Test User" };
-
-    const result = await enrichLead(lead);
-
-    expect(result).toBe(lead);
-    expect(consoleInfoSpy).toHaveBeenCalledTimes(1);
-    // pino convention: logger.info(structuredPayload, message).
-    const [payload] = consoleInfoSpy.mock.calls[0];
-    expect(payload).toMatchObject({ licensePrefix: expectedPrefix });
-  });
-
-  it("pro tier (second call, same module) — sentinel logged only once total", async () => {
-    mockCheckLicense.mockResolvedValue({
-      tier: "pro",
-      plan: "pro",
-      features: [],
-      expiresAt: null,
-      revoked: false,
-    });
-    process.env["AILK_LICENSE_KEY"] = "test-key-123";
-
-    const lead1 = { email: "first@example.com", name: "First" };
-    const lead2 = { email: "second@example.com", name: "Second" };
-
-    const result1 = await enrichLead(lead1);
-    const result2 = await enrichLead(lead2);
-
-    expect(result1).toBe(lead1);
-    expect(result2).toBe(lead2);
-    expect(consoleInfoSpy).toHaveBeenCalledTimes(1);
-  });
-
-  it("checkLicense throws — returns lead unchanged, no sentinel, error not propagated", async () => {
-    mockCheckLicense.mockRejectedValue(new Error("network error"));
-    const lead = { email: "test@example.com", name: "Test User" };
-
-    const result = await enrichLead(lead);
-
-    expect(result).toBe(lead);
-    expect(consoleInfoSpy).not.toHaveBeenCalled();
-  });
-});

package/templates/apps/api/src/__tests__/stripe-boot.test.ts

@@ -1,132 +0,0 @@
-// oss: false
-/**
- * @file stripe-boot.test.ts
- *
- * The real `build()` admits apps/api's Stripe key at boot (#8450 D4): an
- * unset `STRIPE_MODE` is today's sandbox-only boot, and only a restricted
- * live key beside `STRIPE_MODE=live` on a production build boots live. Each
- * case runs in its own module registry (`jest.isolateModulesAsync`), because
- * admission is one-way per process. Live-shaped keys are composed at runtime
- * from fragments, never written out.
- *
- * External boundaries are mocked exactly as `server.test.ts` mocks them.
- */
-import type { FastifyInstance } from "fastify";
-
-jest.mock("@fastify/cors", () => {
-  return jest.fn().mockResolvedValue(undefined);
-});
-
-jest.mock("@fastify/rate-limit", () => {
-  return jest.fn().mockResolvedValue(undefined);
-});
-
-jest.mock("@working-theory/email", () => ({
-  sendLeadNotification: jest.fn().mockResolvedValue({ ok: true }),
-}));
-
-type ServerModule = typeof import("../server");
-type StripeShim = typeof import("../lib/stripe");
-
-const restrictedLiveKey = ["rk", "live", ""].join("_") + "FixtureOnlyBoot";
-
-const ENV_KEYS = ["STRIPE_SECRET_KEY", "STRIPE_MODE", "VERCEL_ENV"] as const;
-type EnvKey = (typeof ENV_KEYS)[number];
-
-/** Boot `build()` in a fresh registry under `env`; hand `fn` the app (or the rejection) and the shim. */
-async function boot(
-  env: Partial<Record<EnvKey, string>>,
-  fn: (result: { app?: FastifyInstance; error?: unknown; shim: StripeShim }) => Promise<void>,
-): Promise<void> {
-  const saved = Object.fromEntries(ENV_KEYS.map((k) => [k, process.env[k]]));
-  try {
-    for (const k of ENV_KEYS) {
-      if (env[k] === undefined) delete process.env[k];
-      else process.env[k] = env[k];
-    }
-    await jest.isolateModulesAsync(async () => {
-      const { build } = require("../server") as ServerModule;
-      const shim = require("../lib/stripe") as StripeShim;
-      let app: FastifyInstance | undefined;
-      let error: unknown;
-      try {
-        app = await build();
-      } catch (err) {
-        error = err;
-      }
-      try {
-        await fn({ app, error, shim });
-      } finally {
-        await app?.close();
-      }
-    });
-  } finally {
-    for (const k of ENV_KEYS) {
-      if (saved[k] === undefined) delete process.env[k];
-      else process.env[k] = saved[k];
-    }
-  }
-}
-
-/** POST the checkout route `n` times from one IP; return the status codes. */
-async function postCheckout(app: FastifyInstance, n: number): Promise<number[]> {
-  const codes: number[] = [];
-  for (let i = 0; i < n; i += 1) {
-    const res = await app.inject({
-      method: "POST",
-      url: "/v1/checkout/sessions",
-      remoteAddress: "203.0.113.7",
-      payload: {},
-    });
-    codes.push(res.statusCode);
-  }
-  return codes;
-}
-
-describe("build() — Stripe key admission at boot (#8450 D4)", () => {
-  it("refuses a restricted live key when STRIPE_MODE is unset (unchanged by default)", async () => {
-    await boot({ STRIPE_SECRET_KEY: restrictedLiveKey, VERCEL_ENV: "production" }, async ({ app, error, shim }) => {
-      expect(app).toBeUndefined();
-      expect(error).toBeInstanceOf(shim.StripeConfigError);
-      expect((error as Error).message).toMatch(/sandbox only/);
-      expect(shim.stripeKeyMode()).toBe("test");
-    });
-  });
-
-  it("boots in test mode on a test key with STRIPE_MODE unset, with no checkout bucket", async () => {
-    await boot({ STRIPE_SECRET_KEY: "sk_test_boot_fixture" }, async ({ app, error, shim }) => {
-      expect(error).toBeUndefined();
-      expect(app).toBeDefined();
-      expect(shim.stripeKeyMode()).toBe("test");
-      // No commerce claim, so every POST is the gate's own answer — never a 429.
-      const codes = await postCheckout(app!, 12);
-      expect(codes).not.toContain(429);
-    });
-  });
-
-  it("boots live on a restricted live key beside STRIPE_MODE=live on a production build", async () => {
-    await boot(
-      { STRIPE_SECRET_KEY: restrictedLiveKey, STRIPE_MODE: "live", VERCEL_ENV: "production" },
-      async ({ app, error, shim }) => {
-        expect(error).toBeUndefined();
-        expect(app).toBeDefined();
-        expect(shim.stripeKeyMode()).toBe("live");
-        expect(() => shim.assertAdmittedStripeKey(restrictedLiveKey)).not.toThrow();
-      },
-    );
-  });
-
-  it("gives a live process's checkout routes their own per-IP bucket (§ 9 SEC-14)", async () => {
-    await boot(
-      { STRIPE_SECRET_KEY: restrictedLiveKey, STRIPE_MODE: "live", VERCEL_ENV: "production" },
-      async ({ app }) => {
-        const { __resetBuckets, DEFAULT_PER_IP_PER_MINUTE_STRICT } =
-          require("../middleware/rate-limit") as typeof import("../middleware/rate-limit");
-        __resetBuckets();
-        const codes = await postCheckout(app!, DEFAULT_PER_IP_PER_MINUTE_STRICT + 1);
-        expect(codes.slice(0, DEFAULT_PER_IP_PER_MINUTE_STRICT)).not.toContain(429);
-        expect(codes[DEFAULT_PER_IP_PER_MINUTE_STRICT]).toBe(429);
-      },
-    );
-  });
-});