create-ailk 0.23.0 → 0.25.1

package/templates/apps/api/src/bin/spokes.ts

@@ -1,198 +0,0 @@
-#!/usr/bin/env node
-/* istanbul ignore file -- CLI bootstrap; mirrors deliverable-resend.ts's
-   coverage-ignore rationale — the register/revoke/list logic is unit-tested at
-   the boundary it calls (lib/__tests__/spoke-store.test.ts). This file is a
-   thin entry: parse args, dispatch, print, set exit code. */
-/**
- * The hub's spoke registry CLI (#7532, spec
- * docs/specs/7532-a-spoke-s-public-reads-spec.md D7).
- *
- * Dev:        `pnpm --filter @working-theory/api spokes <command> [flags]`
- * Production: `node dist/bin/spokes.js <command> [flags]`
- *
- *   register --workspace <wksp_id> --name <label>
- *       Bind a new spoke to one existing workspace and print its key ONCE.
- *       The hub stores only the key's digest; the key cannot be shown again.
- *       Do not run this where stdout is captured (CI logs, a shared terminal
- *       recording) — set the printed key as the spoke's `AILK_SPOKE_KEY`.
- *   revoke --id <spoke_id>
- *       Stop that one spoke's key on its next request. Other spokes of the
- *       same workspace keep working.
- *   list
- *       Every spoke: id, name, workspace, key prefix, created, revoked. Never
- *       the digest.
- *   sign-in-client --id <spoke_id> --redirect-uri <url>
- *       Register (or rotate) the spoke's sign-in client (#7894 D3): the hub
- *       signs that spoke's visitors in, and the callback is the ONE registered
- *       URL — `https:` (or `http:` on a loopback host), path exactly
- *       `/api/hub-session/callback`, no query, fragment or userinfo. Prints the
- *       client id and secret ONCE; re-running rotates the secret. Refuses an
- *       unknown or revoked spoke.
- *   sign-in-client --id <spoke_id> --disable
- *       Switch that spoke's sign-in client off: its codes and credentials stop
- *       at once.
- *
- * A key rotates by registering a second spoke for the workspace, deploying
- * its key, then revoking the first. There is no HTTP route for any of this.
- */
-import {
-  disableSignInClient,
-  registerSignInClient,
-} from "../lib/hub-sign-in-store.js";
-import { prisma } from "../lib/prisma.js";
-import {
-  listSpokes,
-  registerSpoke,
-  revokeSpoke,
-} from "../lib/spoke-store.js";
-
-const USAGE = [
-  "usage: spokes register --workspace <wksp_id> --name <label>",
-  "       spokes revoke --id <spoke_id>",
-  "       spokes list",
-  "       spokes sign-in-client --id <spoke_id> --redirect-uri <url> | --disable",
-].join("\n");
-
-type Flags = {
-  workspace?: string | undefined;
-  name?: string | undefined;
-  id?: string | undefined;
-  redirectUri?: string | undefined;
-  disable?: boolean | undefined;
-};
-
-/** Minimal `--flag value` parser — no external dependency for a 3-flag CLI. */
-function parseFlags(argv: string[]): Flags {
-  const out: Flags = {};
-  for (let i = 0; i < argv.length; i += 1) {
-    const flag = argv[i];
-    const value = argv[i + 1];
-    if (flag === "--workspace") out.workspace = value;
-    else if (flag === "--name") out.name = value;
-    else if (flag === "--id") out.id = value;
-    else if (flag === "--redirect-uri") out.redirectUri = value;
-    else if (flag === "--disable") {
-      out.disable = true;
-      continue; // a bare flag: it takes no value
-    } else continue;
-    i += 1;
-  }
-  return out;
-}
-
-async function runRegister(flags: Flags): Promise<void> {
-  const name = flags.name?.trim();
-  if (!flags.workspace || !name || name.length > 120) {
-    console.error(`[spokes] ${USAGE}\n(--name is 1–120 characters)`);
-    process.exitCode = 1;
-    return;
-  }
-  const result = await registerSpoke({ workspaceId: flags.workspace, name });
-  if (!result.ok) {
-    console.error(`[spokes] ${result.reason}: no workspace "${flags.workspace}"`);
-    process.exitCode = 1;
-    return;
-  }
-  console.log(
-    `[spokes] registered spoke="${result.spoke.id}" workspace="${result.spoke.workspaceId}" name="${result.spoke.name}"`,
-  );
-  console.log(`AILK_SPOKE_KEY=${result.key}`);
-  console.log(
-    "[spokes] This key will not be shown again. Set it as the spoke's AILK_SPOKE_KEY now.",
-  );
-}
-
-async function runRevoke(flags: Flags): Promise<void> {
-  if (!flags.id) {
-    console.error(`[spokes] ${USAGE}`);
-    process.exitCode = 1;
-    return;
-  }
-  const revoked = await revokeSpoke(flags.id);
-  if (!revoked) {
-    console.error(`[spokes] no unrevoked spoke "${flags.id}"`);
-    process.exitCode = 1;
-    return;
-  }
-  console.log(`[spokes] revoked spoke="${flags.id}"`);
-}
-
-async function runSignInClient(flags: Flags): Promise<void> {
-  if (!flags.id || (!flags.disable && !flags.redirectUri)) {
-    console.error(`[spokes] ${USAGE}`);
-    process.exitCode = 1;
-    return;
-  }
-  if (flags.disable) {
-    const disabled = await disableSignInClient(flags.id);
-    if (!disabled) {
-      console.error(`[spokes] no sign-in client for spoke "${flags.id}"`);
-      process.exitCode = 1;
-      return;
-    }
-    console.log(`[spokes] disabled the sign-in client of spoke="${flags.id}"`);
-    return;
-  }
-  const result = await registerSignInClient({
-    spokeId: flags.id,
-    redirectUri: flags.redirectUri ?? "",
-  });
-  if (!result.ok) {
-    const why = {
-      "invalid-redirect-uri":
-        "the redirect URI must be https (or http on localhost / 127.0.0.1), its path exactly /api/hub-session/callback, with no query, fragment or userinfo",
-      "spoke-not-found": `no spoke "${flags.id}"`,
-      "spoke-revoked": `spoke "${flags.id}" is revoked`,
-    }[result.reason];
-    console.error(`[spokes] ${result.reason}: ${why}`);
-    process.exitCode = 1;
-    return;
-  }
-  console.log(`[spokes] sign-in client ready for spoke="${result.spokeId}"`);
-  console.log(`AILK_HUB_CLIENT_ID=${result.spokeId}`);
-  console.log(`AILK_HUB_CLIENT_SECRET=${result.secret}`);
-  console.log(
-    "[spokes] This secret will not be shown again. Set both as the spoke's AILK_HUB_CLIENT_ID / AILK_HUB_CLIENT_SECRET now. Re-running rotates the secret.",
-  );
-}
-
-async function runList(): Promise<void> {
-  const spokes = await listSpokes();
-  if (spokes.length === 0) {
-    console.log("[spokes] no spokes registered");
-    return;
-  }
-  for (const spoke of spokes) {
-    console.log(
-      [
-        spoke.id,
-        `name="${spoke.name}"`,
-        `workspace=${spoke.workspaceId}`,
-        `prefix=${spoke.credentialPrefix}`,
-        `created=${spoke.createdAt.toISOString()}`,
-        `revoked=${spoke.revokedAt ? spoke.revokedAt.toISOString() : "-"}`,
-      ].join(" "),
-    );
-  }
-}
-
-async function main(): Promise<void> {
-  const [command, ...rest] = process.argv.slice(2);
-  const flags = parseFlags(rest);
-  if (command === "register") return runRegister(flags);
-  if (command === "revoke") return runRevoke(flags);
-  if (command === "list") return runList();
-  if (command === "sign-in-client") return runSignInClient(flags);
-  console.error(`[spokes] ${USAGE}`);
-  process.exitCode = 1;
-}
-
-main()
-  .catch((err: unknown) => {
-    console.error(
-      "[spokes] failed:",
-      err instanceof Error ? err.message : String(err),
-    );
-    process.exitCode = 1;
-  })
-  .finally(() => prisma.$disconnect());

package/templates/apps/api/src/bin/stripe-connections-rekey.ts

@@ -1,45 +0,0 @@
-#!/usr/bin/env node
-/* istanbul ignore file -- CLI bootstrap; rekeyStripeConnections and
-   formatRekeyReport are unit-tested in
-   services/offerings/__tests__/connection.test.ts. */
-/**
- * Re-encrypt every Organization Stripe connection under the current
- * STRIPE_CONNECTION_KEY (#8907 D13, contract C10).
- *
- * Dev: `pnpm --filter @working-theory/api stripe-connections:rekey` (tsx,
- * this file). Production: `node dist/bin/stripe-connections-rekey.js`.
- *
- * The rotation: set STRIPE_CONNECTION_KEY_PREVIOUS to the old key and the new
- * key as STRIPE_CONNECTION_KEY, redeploy, run this, and unset _PREVIOUS once
- * it prints `remaining=0`. A row counted `unreadable` decrypts under neither
- * key; its owner reconnects or disconnects. A second run rekeys nothing.
- *
- * Run it with the production environment — `VERCEL_ENV=production`, or
- * `NODE_ENV=production` off Vercel — the same predicate the API goes live on;
- * anywhere else it prints `not_production`, reads nothing and exits 1.
- *
- * Prints one line of counts only — never a key, a value or a row id — and
- * exits 1 when the key is not configured, off production, or the walk fails.
- */
-import {
-  formatRekeyReport,
-  rekeyStripeConnections,
-} from "../services/offerings/connection.js";
-
-async function main(): Promise<void> {
-  const result = await rekeyStripeConnections();
-  if (!result.ok) {
-    console.error(formatRekeyReport(result));
-    process.exitCode = 1;
-    return;
-  }
-  console.log(formatRekeyReport(result));
-}
-
-main().catch((err: unknown) => {
-  // The class name only: a store error's message is fixed, but nothing else
-  // a failure carries is printed.
-  const name = err instanceof Error ? err.name : "unknown";
-  console.error(`[stripe-connections-rekey] failed: ${name}`);
-  process.exitCode = 1;
-});

package/templates/apps/api/src/config/__tests__/hub-require-spoke-key.test.ts

@@ -1,196 +0,0 @@
-/**
- * @file hub-require-spoke-key.test.ts
- * @description `AILK_HUB_REQUIRE_SPOKE_KEY` — the hub's spoke-key mode
- * (#7532 D7; three-state since #7633, spec
- * docs/specs/7633-expected-a-keyless-public-read-spec.md D2, AC-5).
- *
- * Unset, empty or blank is `"auto"` (refuse a keyless call once the registry
- * holds a row); `true`/`1` is `"on"`; `false`/`0` is `"off"`, the emergency
- * opt-out, which warns at boot — case-insensitively, after trimming. Any other
- * value refuses the boot with a message naming the variable, never the value.
- * `"on"` with no `DATABASE_URL` refuses the boot too: it would refuse every
- * call. `"auto"` and `"off"` boot without a database.
- */
-
-// Mock dotenv so a developer's local .env never leaks into the config module.
-jest.mock('dotenv', () => ({
-  config: jest.fn(),
-}));
-
-const mockLoggerError = jest.fn();
-const mockLoggerWarn = jest.fn();
-jest.mock('@working-theory/observability', () => ({
-  logger: {
-    error: (...args: unknown[]) => mockLoggerError(...args),
-    warn: (...args: unknown[]) => mockLoggerWarn(...args),
-    info: jest.fn(),
-    debug: jest.fn(),
-  },
-}));
-
-describe('AILK_HUB_REQUIRE_SPOKE_KEY (#7532 D7, #7633 D2)', () => {
-  const originalEnv = process.env;
-
-  beforeEach(() => {
-    jest.resetModules();
-    process.env = { ...originalEnv };
-    delete process.env.AILK_HUB_REQUIRE_SPOKE_KEY;
-    process.env.DATABASE_URL = 'postgresql://test:test@localhost/test';
-    jest.clearAllMocks();
-  });
-
-  afterEach(() => {
-    process.env = originalEnv;
-    jest.restoreAllMocks();
-  });
-
-  /** The boot warnings that name this variable. */
-  function hubWarnings(): unknown[][] {
-    return mockLoggerWarn.mock.calls.filter((call) =>
-      JSON.stringify(call).includes('AILK_HUB_REQUIRE_SPOKE_KEY'),
-    );
-  }
-
-  it.each([undefined, '', '  '])('%j parses "auto" — the default — and warns nothing', (raw) => {
-    if (raw !== undefined) process.env.AILK_HUB_REQUIRE_SPOKE_KEY = raw;
-    const { config } = require('../index');
-    expect(config).toMatchObject({ AILK_HUB_REQUIRE_SPOKE_KEY: 'auto' });
-    expect(hubWarnings()).toHaveLength(0);
-  });
-
-  it.each(['true', 'TRUE', '1', ' True '])('%j parses "on" and warns nothing', (raw) => {
-    process.env.AILK_HUB_REQUIRE_SPOKE_KEY = raw;
-    const { config } = require('../index');
-    expect(config).toMatchObject({ AILK_HUB_REQUIRE_SPOKE_KEY: 'on' });
-    expect(hubWarnings()).toHaveLength(0);
-  });
-
-  it.each(['false', 'FALSE', '0'])('%j parses "off" — the emergency opt-out — and warns once at boot', (raw) => {
-    process.env.AILK_HUB_REQUIRE_SPOKE_KEY = raw;
-    const { config } = require('../index');
-    expect(config).toMatchObject({ AILK_HUB_REQUIRE_SPOKE_KEY: 'off' });
-    const warnings = hubWarnings();
-    expect(warnings).toHaveLength(1);
-    expect(JSON.stringify(warnings)).toContain('AILK_HUB_REQUIRE_SPOKE_KEY=false');
-  });
-
-  it('any other value refuses the boot, naming the variable and never the value', () => {
-    process.env.AILK_HUB_REQUIRE_SPOKE_KEY = 'yes-sentinel-value';
-    const exitSpy = jest.spyOn(process, 'exit').mockImplementation(() => {
-      throw new Error('Process exit called');
-    });
-    const consoleSpy = jest.spyOn(console, 'error').mockImplementation(() => undefined);
-
-    expect(() => require('../index')).toThrow('Process exit called');
-    expect(exitSpy).toHaveBeenCalledWith(1);
-
-    const logged = JSON.stringify([mockLoggerError.mock.calls, consoleSpy.mock.calls]);
-    expect(logged).toContain('AILK_HUB_REQUIRE_SPOKE_KEY');
-    expect(logged).not.toContain('yes-sentinel-value');
-  });
-
-  it('on with DATABASE_URL unset refuses the boot', () => {
-    process.env.AILK_HUB_REQUIRE_SPOKE_KEY = 'true';
-    delete process.env.DATABASE_URL;
-    const exitSpy = jest.spyOn(process, 'exit').mockImplementation(() => {
-      throw new Error('Process exit called');
-    });
-    jest.spyOn(console, 'error').mockImplementation(() => undefined);
-
-    expect(() => require('../index')).toThrow('Process exit called');
-    expect(exitSpy).toHaveBeenCalledWith(1);
-    expect(JSON.stringify(mockLoggerError.mock.calls)).toContain(
-      'AILK_HUB_REQUIRE_SPOKE_KEY',
-    );
-  });
-
-  it.each([
-    ['auto', undefined],
-    ['off', 'false'],
-  ])('"%s" with DATABASE_URL unset still boots database-less', (mode, raw) => {
-    if (raw !== undefined) process.env.AILK_HUB_REQUIRE_SPOKE_KEY = raw;
-    delete process.env.DATABASE_URL;
-    const exitSpy = jest.spyOn(process, 'exit').mockImplementation(() => {
-      throw new Error('Process exit called');
-    });
-
-    const { config } = require('../index');
-    expect(exitSpy).not.toHaveBeenCalled();
-    expect(config).toMatchObject({ AILK_HUB_REQUIRE_SPOKE_KEY: mode });
-  });
-});
-
-/**
- * `AILK_SPOKE_FLOW_SEED` — whether a hub lets a spoke key write its own
- * workspace's flow definitions (#7876 D3, AC-3). Off unless set: unset, empty
- * or blank is `false`; `true`/`1` is `true`; `false`/`0` is `false` —
- * case-insensitively, after trimming. Any other value refuses the boot with a
- * message naming the variable, never the value. `true` warns once at boot.
- */
-describe('AILK_SPOKE_FLOW_SEED (#7876 D3)', () => {
-  const originalEnv = process.env;
-
-  beforeEach(() => {
-    jest.resetModules();
-    process.env = { ...originalEnv };
-    delete process.env.AILK_SPOKE_FLOW_SEED;
-    delete process.env.AILK_HUB_REQUIRE_SPOKE_KEY;
-    process.env.DATABASE_URL = 'postgresql://test:test@localhost/test';
-    jest.clearAllMocks();
-  });
-
-  afterEach(() => {
-    process.env = originalEnv;
-    jest.restoreAllMocks();
-  });
-
-  function seedWarnings(): unknown[][] {
-    return mockLoggerWarn.mock.calls.filter((call) =>
-      JSON.stringify(call).includes('AILK_SPOKE_FLOW_SEED'),
-    );
-  }
-
-  it.each([
-    [undefined, false],
-    ['', false],
-    ['  ', false],
-    ['false', false],
-    ['0', false],
-    ['true', true],
-    ['TRUE', true],
-    ['1', true],
-    [' True ', true],
-    ['yes', null],
-  ])('parseSpokeFlowSeed(%j) is %j', (raw, expected) => {
-    const { parseSpokeFlowSeed } = require('../index');
-    expect(parseSpokeFlowSeed(raw)).toBe(expected);
-  });
-
-  it('is off by default and warns nothing', () => {
-    const { config } = require('../index');
-    expect(config).toMatchObject({ AILK_SPOKE_FLOW_SEED: false });
-    expect(seedWarnings()).toHaveLength(0);
-  });
-
-  it('on warns once at boot', () => {
-    process.env.AILK_SPOKE_FLOW_SEED = 'true';
-    const { config } = require('../index');
-    expect(config).toMatchObject({ AILK_SPOKE_FLOW_SEED: true });
-    expect(seedWarnings()).toHaveLength(1);
-  });
-
-  it('"yes" refuses the boot, naming the variable and never the value', () => {
-    process.env.AILK_SPOKE_FLOW_SEED = 'yes';
-    const exitSpy = jest.spyOn(process, 'exit').mockImplementation(() => {
-      throw new Error('Process exit called');
-    });
-    const consoleSpy = jest.spyOn(console, 'error').mockImplementation(() => undefined);
-
-    expect(() => require('../index')).toThrow('Process exit called');
-    expect(exitSpy).toHaveBeenCalledWith(1);
-
-    const logged = JSON.stringify([mockLoggerError.mock.calls, consoleSpy.mock.calls]);
-    expect(logged).toContain('AILK_SPOKE_FLOW_SEED must be true, 1, false, 0 or unset');
-    expect(logged).not.toContain('yes');
-  });
-});

package/templates/apps/api/src/config/__tests__/index.test.ts

@@ -1,233 +0,0 @@
-// Mock dotenv
-jest.mock('dotenv', () => ({
-  config: jest.fn(),
-}));
-
-// Mock the observability logger so assertions don't depend on pino's stdout serialization.
-const mockLoggerError = jest.fn();
-const mockLoggerWarn = jest.fn();
-jest.mock('@working-theory/observability', () => ({
-  logger: {
-    error: (...args: unknown[]) => mockLoggerError(...args),
-    warn: (...args: unknown[]) => mockLoggerWarn(...args),
-    info: jest.fn(),
-    debug: jest.fn(),
-  },
-}));
-
-describe('Config', () => {
-  const originalEnv = process.env;
-
-  beforeEach(() => {
-    jest.resetModules();
-    process.env = { ...originalEnv };
-    jest.clearAllMocks();
-  });
-
-  afterEach(() => {
-    process.env = originalEnv;
-  });
-
-  it('should load environment variables', () => {
-    // ARRANGE
-    process.env.DATABASE_URL = 'postgresql://test:test@localhost/test';
-
-    // ACT — require dotenv after resetModules so we observe the same mock
-    // instance the freshly-required config module will use.
-    const dotenv = require('dotenv');
-    const { config } = require('../index');
-
-    // ASSERT
-    expect(config.DATABASE_URL).toBe('postgresql://test:test@localhost/test');
-    expect(dotenv.config).toHaveBeenCalled();
-  });
-
-  // #6730 security review (M1): a production build whose enabled modules keep
-  // their state in the database still refuses to boot without DATABASE_URL —
-  // a missing database there is a broken deploy (e.g. a commerce licence read
-  // as absent would ack-and-drop signed Stripe events), not a Free site.
-  it.each(['commerce', 'content-write', 'multi-tenant', 'scheduling', 'signal-collectors', 'workspace'])(
-    'should exit on missing DATABASE_URL in production when the %s module is enabled',
-    (moduleName) => {
-      process.env.NODE_ENV = 'production';
-      process.env.AILK_ENABLED_MODULES = `marketing,${moduleName}`;
-      delete process.env.DATABASE_URL;
-      const exitSpy = jest.spyOn(process, 'exit').mockImplementation(() => {
-        throw new Error('Process exit called');
-      });
-
-      expect(() => require('../index')).toThrow('Process exit called');
-      expect(exitSpy).toHaveBeenCalledWith(1);
-      expect(mockLoggerError).toHaveBeenCalled();
-
-      exitSpy.mockRestore();
-    },
-  );
-
-  it('should start database-less in production with only non-database modules enabled', () => {
-    process.env.NODE_ENV = 'production';
-    process.env.AILK_ENABLED_MODULES = 'marketing,docs-blog';
-    delete process.env.DATABASE_URL;
-    const exitSpy = jest.spyOn(process, 'exit').mockImplementation(() => {
-      throw new Error('Process exit called');
-    });
-
-    const { config } = require('../index');
-
-    expect(exitSpy).not.toHaveBeenCalled();
-    expect(config.DATABASE_URL).toBeUndefined();
-    exitSpy.mockRestore();
-  });
-
-  // #6482 — a missing DATABASE_URL starts the API database-less (one
-  // warning) instead of exiting, so a fresh scaffold's `pnpm dev` keeps its
-  // "no database needed" promise. #6730 (operator decision (a)) extends that
-  // to production: a Free site delivers leads by email with no Postgres.
-  it.each([
-    ['production', 'production'],
-    ['development', 'development'],
-    ['unset', undefined],
-    ['test', 'test'],
-  ])('should start database-less with DATABASE_URL unset when NODE_ENV is %s', (_label, nodeEnv) => {
-    // ARRANGE
-    if (nodeEnv === undefined) {
-      delete process.env.NODE_ENV;
-    } else {
-      process.env.NODE_ENV = nodeEnv;
-    }
-    delete process.env.DATABASE_URL;
-    const exitSpy = jest.spyOn(process, 'exit').mockImplementation(() => {
-      throw new Error('Process exit called');
-    });
-
-    // ACT
-    const { config } = require('../index');
-
-    // ASSERT
-    expect(exitSpy).not.toHaveBeenCalled();
-    expect(config.DATABASE_URL).toBeUndefined();
-    expect(config.NODE_ENV).toBe(nodeEnv ?? 'development');
-    expect(mockLoggerError).not.toHaveBeenCalled();
-    expect(mockLoggerWarn).toHaveBeenCalledTimes(1);
-    expect(mockLoggerWarn.mock.calls[0]?.[1]).toContain('database_not_configured');
-
-    exitSpy.mockRestore();
-  });
-
-  it('should not require any external-platform forwarding env vars', () => {
-    // ARRANGE — only DATABASE_URL set; legacy forwarding vars explicitly absent
-    process.env.DATABASE_URL = 'postgresql://test:test@localhost/test';
-    const legacyVars = ['THEORY' + '_API_URL', 'THEORY' + '_API_KEY'];
-    legacyVars.forEach((k) => {
-      delete process.env[k];
-    });
-
-    // ACT
-    const { config } = require('../index');
-
-    // ASSERT — config loads without error and exposes no legacy forwarding keys
-    expect(config.DATABASE_URL).toBe('postgresql://test:test@localhost/test');
-    legacyVars.forEach((k) => {
-      expect((config as Record<string, unknown>)[k]).toBeUndefined();
-    });
-  });
-
-  it('should set default values for optional config', () => {
-    // ARRANGE
-    process.env.DATABASE_URL = 'postgresql://test:test@localhost/test';
-    delete process.env.NODE_ENV;
-    delete process.env.PORT;
-    delete process.env.FRONTEND_URL;
-
-    // ACT
-    const { config } = require('../index');
-
-    // ASSERT
-    expect(config.NODE_ENV).toBe('development');
-    expect(config.PORT).toBe(3002);
-    expect(config.FRONTEND_URL).toBe('http://localhost:3000');
-  });
-});
-
-// #6730 (operator decision (a)) — the REAL server boots in production with
-// no database: an email-only Free site must be able to run its API, answer
-// `GET /v1/leads/capture`, and refuse authenticated routes with a 503 rather
-// than exit at startup.
-describe('production boot without a database (#6730)', () => {
-  const originalEnv = process.env;
-  // eslint-disable-next-line @typescript-eslint/no-explicit-any -- the Fastify instance comes from an isolated require; its generics add nothing here
-  let app: any;
-
-  const EMAIL_ENV = {
-    RESEND_API_KEY: 're_test',
-    AILK_LEAD_NOTIFICATION_TO: 'owner@example.com',
-    AILK_LEAD_NOTIFICATION_FROM: 'noreply@example.com',
-  };
-
-  // External boundaries only, as src/__tests__/server.test.ts mocks them.
-  beforeAll(() => {
-    jest.doMock('@fastify/cors', () => jest.fn().mockResolvedValue(undefined));
-    jest.doMock('@fastify/rate-limit', () => jest.fn().mockResolvedValue(undefined));
-    jest.doMock('@working-theory/email', () => ({
-      sendLeadNotification: jest.fn().mockResolvedValue({ ok: true, messageId: 'm' }),
-      sendRequestConfirmEmail: jest.fn(),
-      sendRequestPaidLinkEmail: jest.fn(),
-    }));
-  });
-
-  afterEach(async () => {
-    if (app) await app.close();
-    app = undefined;
-    process.env = originalEnv;
-  });
-
-  async function bootProduction(extra: Record<string, string> = {}) {
-    jest.resetModules();
-    const env: NodeJS.ProcessEnv = { ...originalEnv, NODE_ENV: 'production', ...extra };
-    delete env.DATABASE_URL;
-    delete env.DATABASE_URL_NON_POOLED;
-    delete env.RESEND_API_KEY;
-    delete env.AILK_LEAD_NOTIFICATION_TO;
-    delete env.AILK_LEAD_NOTIFICATION_FROM;
-    Object.assign(env, extra);
-    process.env = env;
-    const exitSpy = jest.spyOn(process, 'exit').mockImplementation(() => {
-      throw new Error('Process exit called');
-    });
-    try {
-      const { build } = require('../../server');
-      app = await build();
-    } finally {
-      expect(exitSpy).not.toHaveBeenCalled();
-      exitSpy.mockRestore();
-    }
-    return app;
-  }
-
-  it('with only the email vars, starts and reports contact accepted, newsletter not', async () => {
-    const server = await bootProduction(EMAIL_ENV);
-
-    const res = await server.inject({ method: 'GET', url: '/v1/leads/capture' });
-
-    expect(res.statusCode).toBe(200);
-    expect(res.json()).toEqual({ ok: true, data: { contact: true, newsletter: false } });
-  });
-
-  it('with nothing configured, starts and reports nothing accepted', async () => {
-    const server = await bootProduction();
-
-    const res = await server.inject({ method: 'GET', url: '/v1/leads/capture' });
-
-    expect(res.statusCode).toBe(200);
-    expect(res.json()).toEqual({ ok: true, data: { contact: false, newsletter: false } });
-  });
-
-  it('refuses an authenticated route with 503 database_not_configured', async () => {
-    const server = await bootProduction(EMAIL_ENV);
-
-    const res = await server.inject({ method: 'GET', url: '/v1/leads' });
-
-    expect(res.statusCode).toBe(503);
-    expect(res.json()).toEqual({ error: 'database_not_configured' });
-  });
-});