create-ailk 0.23.0 → 0.25.1

package/templates/apps/api/src/lib/__tests__/stripe-admission.test.ts

@@ -1,217 +0,0 @@
-// oss: false
-/**
- * apps/api's live-key admission (#8450 D2, D3) over the REAL
- * `@working-theory/stripe-client` — no mock, so the process-wide flag the
- * package keeps is the one these cases arm or leave alone.
- *
- * Admission is one-way per module registry, so every case loads
- * `lib/stripe.ts` inside its own `jest.isolateModules` with `process.env`
- * set before the `require` and restored after.
- *
- * Every live-shaped key is composed at runtime from fragments, so this file
- * never spells a live prefix (architecture.yaml's `(sk|pk|rk)_live_` pattern)
- * and never names the SDK's admission call.
- */
-import { execFileSync } from "node:child_process";
-import path from "node:path";
-
-type Shim = typeof import("../stripe");
-
-const RESTRICTED_LIVE = ["rk", "live", ""].join("_");
-const SECRET_LIVE = ["sk", "live", ""].join("_");
-const PUBLISHABLE_LIVE = ["pk", "live", ""].join("_");
-// A distinctive tail: no refusal message may carry any of it.
-const TAIL = "FixtureOnlyQv7Zq9X";
-
-const restrictedLiveKey = RESTRICTED_LIVE + TAIL;
-const secretLiveKey = SECRET_LIVE + TAIL;
-const publishableLiveKey = PUBLISHABLE_LIVE + TAIL;
-const testKey = "sk_test_" + TAIL;
-
-const ENV_KEYS = ["STRIPE_SECRET_KEY", "STRIPE_MODE", "VERCEL_ENV", "VERCEL", "NODE_ENV"] as const;
-type EnvKey = (typeof ENV_KEYS)[number];
-
-/** Load a fresh `lib/stripe.ts` under `env`, run `fn`, then restore the four variables. */
-function withShim(env: Partial<Record<EnvKey, string>>, fn: (shim: Shim) => void): void {
-  const saved = Object.fromEntries(ENV_KEYS.map((k) => [k, process.env[k]]));
-  try {
-    for (const k of ENV_KEYS) {
-      if (env[k] === undefined) delete process.env[k];
-      else process.env[k] = env[k];
-    }
-    jest.isolateModules(() => {
-      fn(require("../stripe") as Shim);
-    });
-  } finally {
-    for (const k of ENV_KEYS) {
-      if (saved[k] === undefined) delete process.env[k];
-      else process.env[k] = saved[k];
-    }
-  }
-}
-
-/** The thrown error, asserted to be the shim's `StripeConfigError` and to carry no key material. */
-function refusal(shim: Shim, fn: () => unknown): Error {
-  let caught: unknown;
-  try {
-    fn();
-  } catch (err) {
-    caught = err;
-  }
-  expect(caught).toBeInstanceOf(shim.StripeConfigError);
-  const message = (caught as Error).message;
-  expect(message).not.toContain(TAIL);
-  expect(message).not.toContain(TAIL.slice(-4));
-  return caught as Error;
-}
-
-const LIVE_PRODUCTION = {
-  STRIPE_SECRET_KEY: restrictedLiveKey,
-  STRIPE_MODE: "live",
-  VERCEL_ENV: "production",
-} as const;
-
-describe("admitApiStripeKey — D2's table", () => {
-  it("takes no parameter, so nothing can arm it from a synthetic object", () => {
-    withShim({ STRIPE_SECRET_KEY: testKey }, (shim) => {
-      expect(shim.admitApiStripeKey.length).toBe(0);
-    });
-  });
-
-  it("admits a restricted live key beside STRIPE_MODE=live on a Vercel production build", () => {
-    withShim(LIVE_PRODUCTION, (shim) => {
-      expect(shim.stripeKeyMode()).toBe("test");
-      expect(shim.admitApiStripeKey()).toBe("live");
-      expect(shim.stripeKeyMode()).toBe("live");
-
-      // F2/F3 — the admitted class passes; the other two live classes do not.
-      expect(() => shim.assertAdmittedStripeKey(restrictedLiveKey)).not.toThrow();
-      refusal(shim, () => shim.assertAdmittedStripeKey(secretLiveKey));
-      refusal(shim, () => shim.assertAdmittedStripeKey(publishableLiveKey));
-      // A test key still passes after admission.
-      expect(() => shim.assertAdmittedStripeKey(testKey)).not.toThrow();
-
-      // The client the route then calls accepts the same key.
-      expect(shim.getStripeClient()).toBeDefined();
-    });
-  });
-
-  it("off Vercel, reads NODE_ENV=production as the production build", () => {
-    withShim(
-      { STRIPE_SECRET_KEY: restrictedLiveKey, STRIPE_MODE: "live", NODE_ENV: "production" },
-      (shim) => {
-        expect(shim.admitApiStripeKey()).toBe("live");
-        expect(shim.stripeKeyMode()).toBe("live");
-      },
-    );
-  });
-
-  it.each([
-    ["a Vercel preview build", { VERCEL_ENV: "preview", NODE_ENV: "production" }],
-    ["a non-production build off Vercel", { NODE_ENV: "test" }],
-    // vercel.json sets NODE_ENV=production everywhere, Preview included.
-    ["Vercel with VERCEL_ENV missing, even beside NODE_ENV=production", { VERCEL: "1", NODE_ENV: "production" }],
-  ])("refuses a restricted live key with STRIPE_MODE=live on %s", (_label, build) => {
-    withShim({ STRIPE_SECRET_KEY: restrictedLiveKey, STRIPE_MODE: "live", ...build }, (shim) => {
-      const err = refusal(shim, () => shim.admitApiStripeKey());
-      expect(err.message).toMatch(/production/);
-      expect(shim.stripeKeyMode()).toBe("test");
-      refusal(shim, () => shim.assertAdmittedStripeKey(restrictedLiveKey));
-      refusal(shim, () => shim.getStripeClient());
-    });
-  });
-
-  it.each([
-    ["an unrestricted live key", secretLiveKey],
-    ["a publishable live key", publishableLiveKey],
-    ["a test key", testKey],
-  ])("refuses STRIPE_MODE=live beside %s", (_label, key) => {
-    withShim({ STRIPE_SECRET_KEY: key, STRIPE_MODE: "live", VERCEL_ENV: "production" }, (shim) => {
-      const err = refusal(shim, () => shim.admitApiStripeKey());
-      expect(err.message).toMatch(/STRIPE_MODE=live/);
-      expect(shim.stripeKeyMode()).toBe("test");
-      refusal(shim, () => shim.assertAdmittedStripeKey(restrictedLiveKey));
-    });
-  });
-
-  it.each(["production", "LIVE", ""])("refuses STRIPE_MODE=%j, whatever the key", (mode) => {
-    withShim({ ...LIVE_PRODUCTION, STRIPE_MODE: mode }, (shim) => {
-      const err = refusal(shim, () => shim.admitApiStripeKey());
-      expect(err.message).toMatch(/STRIPE_MODE must be "test" or "live"/);
-      expect(shim.stripeKeyMode()).toBe("test");
-      refusal(shim, () => shim.assertAdmittedStripeKey(restrictedLiveKey));
-      refusal(shim, () => shim.getStripeClient());
-    });
-  });
-
-  it.each([undefined, "test"])("with STRIPE_MODE=%s, runs today's sandbox check on a test key", (mode) => {
-    withShim({ STRIPE_SECRET_KEY: testKey, STRIPE_MODE: mode }, (shim) => {
-      expect(shim.admitApiStripeKey()).toBe("test");
-      expect(shim.stripeKeyMode()).toBe("test");
-      expect(() => shim.assertAdmittedStripeKey(testKey)).not.toThrow();
-    });
-  });
-
-  it.each([undefined, "test"])(
-    "with STRIPE_MODE=%s, refuses a restricted live key with today's sandbox message, even on production",
-    (mode) => {
-      withShim({ ...LIVE_PRODUCTION, STRIPE_MODE: mode }, (shim) => {
-        const err = refusal(shim, () => shim.admitApiStripeKey());
-        expect(err.message).toMatch(/Stripe live mode is blocked — sandbox only/);
-        expect(shim.stripeKeyMode()).toBe("test");
-        refusal(shim, () => shim.assertAdmittedStripeKey(restrictedLiveKey));
-        refusal(shim, () => shim.getStripeClient());
-      });
-    },
-  );
-});
-
-describe("assertAdmittedStripeKey — without admission", () => {
-  it("is today's sandbox allow-list: every live class refused, a test key accepted", () => {
-    withShim({ STRIPE_SECRET_KEY: testKey }, (shim) => {
-      expect(() => shim.assertAdmittedStripeKey(testKey)).not.toThrow();
-      for (const key of [restrictedLiveKey, secretLiveKey, publishableLiveKey]) {
-        const err = refusal(shim, () => shim.assertAdmittedStripeKey(key));
-        expect(err.message).toMatch(/Stripe live mode is blocked — sandbox only/);
-      }
-    });
-  });
-});
-
-describe("admitApiStripeKey — call sites (#8450 § 9 SEC-5)", () => {
-  // The sweep is a MONOREPO invariant: it reads the whole git tree. A
-  // scaffolded site (`create-ailk` verify-scaffold, which copies apps/api into
-  // a site that is not a git repository) has no tree to sweep and cannot grow
-  // a new call site of its own, so the sweep is skipped there (#8479/#8478).
-  const repoRoot = path.resolve(__dirname, "../../../../..");
-  const inGitTree = (() => {
-    try {
-      execFileSync("git", ["rev-parse", "--is-inside-work-tree"], {
-        cwd: repoRoot,
-        stdio: "ignore",
-      });
-      return true;
-    } catch {
-      return false;
-    }
-  })();
-  const itInRepo = inGitTree ? it : it.skip;
-
-  itInRepo("is named only by lib/stripe.ts, server.ts and #8450's own tests", () => {
-    const files = execFileSync("git", ["grep", "-l", "admitApiStripeKey", "--", ":!*.md"], {
-      cwd: repoRoot,
-      encoding: "utf8",
-    })
-      .split("\n")
-      .filter(Boolean)
-      .sort();
-    expect(files).toEqual([
-      "apps/api/src/lib/__tests__/stripe-admission.test.ts",
-      "apps/api/src/lib/__tests__/stripe.test.ts",
-      "apps/api/src/lib/stripe.ts",
-      "apps/api/src/routes/checkout/__tests__/live-key.test.ts",
-      "apps/api/src/routes/subscription/__tests__/portal-live-key.test.ts",
-      "apps/api/src/server.ts",
-    ]);
-  });
-});

package/templates/apps/api/src/lib/__tests__/stripe.test.ts

@@ -1,82 +0,0 @@
-// oss: false
-/**
- * apps/api stripe shim — surface-drift smoke tests.
- *
- * Ensures apps/api/src/lib/stripe.ts re-exports exactly what
- * @working-theory/stripe-client exports, with no surface drift.
- */
-
-jest.mock("@working-theory/stripe-client", () => ({
-  getStripeClient: jest.fn(),
-  assertSandboxKey: jest.fn(),
-  verifyWebhookSignature: jest.fn(),
-  createCheckoutSession: jest.fn(),
-  STRIPE_API_VERSION: "2023-10-16",
-  WEBHOOK_TOLERANCE_SECONDS: 300,
-  StripeConfigError: class StripeConfigError extends Error {},
-  StripeWebhookSignatureError: class StripeWebhookSignatureError extends Error {},
-  UnknownProductCodeError: class UnknownProductCodeError extends Error {},
-}));
-
-// Import the shim (not the wrapper directly)
-import * as stripeShim from "../stripe.js";
-import * as stripeClient from "@working-theory/stripe-client";
-
-describe("apps/api/src/lib/stripe — surface re-exports", () => {
-  it("exports getStripeClient as a function", () => {
-    expect(typeof stripeShim.getStripeClient).toBe("function");
-  });
-
-  it("exports assertSandboxKey as a function", () => {
-    expect(typeof stripeShim.assertSandboxKey).toBe("function");
-  });
-
-  it("exports verifyWebhookSignature as a function", () => {
-    expect(typeof stripeShim.verifyWebhookSignature).toBe("function");
-  });
-
-  it("exports createCheckoutSession as a function", () => {
-    expect(typeof stripeShim.createCheckoutSession).toBe("function");
-  });
-
-  it("exports STRIPE_API_VERSION", () => {
-    expect(stripeShim.STRIPE_API_VERSION).toBe("2023-10-16");
-  });
-
-  it("exports WEBHOOK_TOLERANCE_SECONDS", () => {
-    expect(stripeShim.WEBHOOK_TOLERANCE_SECONDS).toBe(300);
-  });
-
-  it("exports StripeConfigError as a constructor producing Error instances", () => {
-    expect(typeof stripeShim.StripeConfigError).toBe("function");
-    expect(new stripeShim.StripeConfigError()).toBeInstanceOf(Error);
-  });
-
-  it("exports StripeWebhookSignatureError as a constructor producing Error instances", () => {
-    expect(typeof stripeShim.StripeWebhookSignatureError).toBe("function");
-    expect(new stripeShim.StripeWebhookSignatureError()).toBeInstanceOf(Error);
-  });
-
-  it("exports UnknownProductCodeError as a constructor producing Error instances", () => {
-    expect(typeof stripeShim.UnknownProductCodeError).toBe("function");
-    expect(new stripeShim.UnknownProductCodeError()).toBeInstanceOf(Error);
-  });
-
-  // #8450 D2, D3 — apps/api's own live-key admission and its request-time guard.
-  it("exports admitApiStripeKey, assertAdmittedStripeKey and stripeKeyMode as functions", () => {
-    expect(typeof stripeShim.admitApiStripeKey).toBe("function");
-    expect(typeof stripeShim.assertAdmittedStripeKey).toBe("function");
-    expect(typeof stripeShim.stripeKeyMode).toBe("function");
-  });
-
-  it("shim functions are the same references as @working-theory/stripe-client exports", () => {
-    expect(stripeShim.getStripeClient).toBe(stripeClient.getStripeClient);
-    expect(stripeShim.assertSandboxKey).toBe(stripeClient.assertSandboxKey);
-    expect(stripeShim.verifyWebhookSignature).toBe(
-      stripeClient.verifyWebhookSignature,
-    );
-    expect(stripeShim.createCheckoutSession).toBe(
-      stripeClient.createCheckoutSession,
-    );
-  });
-});