create-ailk 0.24.0 → 0.25.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (599) hide show
  1. package/README.md +42 -20
  2. package/component-catalog.json +3 -3
  3. package/component-catalog.md +3 -3
  4. package/dist/add-module.js +4 -2
  5. package/dist/add-route.d.ts +12 -1
  6. package/dist/add-route.js +31 -3
  7. package/dist/cli.js +12 -7
  8. package/dist/derive-architecture.d.ts +3 -4
  9. package/dist/derive-architecture.js +65 -29
  10. package/dist/lib/design-checks.d.ts +9 -4
  11. package/dist/lib/design-checks.js +13 -7
  12. package/dist/lib/extract-module-bundle.js +29 -2
  13. package/dist/lib/fetch-template-snapshot.d.ts +1 -1
  14. package/dist/lib/fetch-template-snapshot.js +7 -3
  15. package/dist/lib/import-graph.d.ts +1 -1
  16. package/dist/lib/import-graph.js +4 -4
  17. package/dist/lib/module-license-gate.d.ts +12 -1
  18. package/dist/lib/module-license-gate.js +34 -12
  19. package/dist/module-architecture.d.ts +20 -3
  20. package/dist/module-architecture.js +117 -550
  21. package/dist/paid-sections.d.ts +25 -1
  22. package/dist/paid-sections.js +88 -3
  23. package/dist/surfaces.js +10 -2
  24. package/dist/template-record.d.ts +14 -4
  25. package/dist/template-record.js +23 -5
  26. package/dist/topology.d.ts +16 -3
  27. package/dist/topology.js +31 -19
  28. package/dist/update.d.ts +10 -1
  29. package/dist/update.js +540 -16
  30. package/package.json +3 -3
  31. package/release-scope.json +1 -1
  32. package/templates/.claude/cloudparity-repo-hooks.json +5 -0
  33. package/templates/.claude/hooks/template-guard.sh +137 -0
  34. package/templates/.claude/rules/extending.md +106 -0
  35. package/templates/.claude/rules/loop-contract.md +2 -2
  36. package/templates/.claude/settings.json +11 -0
  37. package/templates/.env.example +5 -5
  38. package/templates/.github/workflows/ci.yml +7 -4
  39. package/templates/CLAUDE.md +11 -1
  40. package/templates/CONVENTIONS.md +8 -10
  41. package/templates/README.md +14 -13
  42. package/templates/apps/api/.env.example +2 -2
  43. package/templates/apps/api/CLAUDE.md +102 -76
  44. package/templates/apps/api/jest.config.cjs +15 -5
  45. package/templates/apps/api/package.json +16 -20
  46. package/templates/apps/api/src/__tests__/trusted-origins.server.test.ts +2 -2
  47. package/templates/apps/api/src/__tests__/vercel-handler.test.ts +4 -4
  48. package/templates/apps/api/src/index.ts +1 -1
  49. package/templates/apps/api/src/lib/__mocks__/prisma.ts +3 -3
  50. package/templates/apps/api/src/modules/commerce.ts +10 -0
  51. package/templates/apps/api/src/modules/content-write.ts +10 -0
  52. package/templates/apps/api/src/modules/multi-tenant.ts +10 -0
  53. package/templates/apps/api/src/modules/scheduling.ts +10 -0
  54. package/templates/apps/api/src/modules/signal-collectors.ts +10 -0
  55. package/templates/apps/api/src/modules/workspace.ts +10 -0
  56. package/templates/apps/api/src/server.ts +117 -1882
  57. package/templates/apps/api/vercel.json +2 -2
  58. package/templates/apps/mcp/CLAUDE.md +67 -20
  59. package/templates/apps/mcp/__tests__/app-entry.test.ts +4 -254
  60. package/templates/apps/mcp/__tests__/boot-file.test.ts +92 -0
  61. package/templates/apps/mcp/jest.config.cjs +6 -1
  62. package/templates/apps/mcp/package.json +5 -13
  63. package/templates/apps/mcp/src/app.ts +8 -7
  64. package/templates/apps/mcp/src/index.ts +6 -34
  65. package/templates/apps/mcp/src/lib/paid-tools.generated.ts +10 -0
  66. package/templates/apps/mcp/src/lib/topology.generated.ts +2 -2
  67. package/templates/apps/mcp/src/site.ts +12 -0
  68. package/templates/apps/web/.env.example +1 -1
  69. package/templates/apps/web/CLAUDE.md +10 -3
  70. package/templates/apps/web/app/.well-known/mcp.json/route.ts +9 -3
  71. package/templates/apps/web/app/[locale]/contact/intake-analytics.ts +1 -1
  72. package/templates/apps/web/app/[locale]/flows/[slug]/__tests__/magnet-page.test.tsx +22 -1
  73. package/templates/apps/web/app/[locale]/flows/[slug]/magnet-page.tsx +7 -3
  74. package/templates/apps/web/app/[locale]/pricing/__tests__/unconnected.test.tsx +43 -0
  75. package/templates/apps/web/app/[locale]/pricing/page.tsx +7 -3
  76. package/templates/apps/web/app/api/offerings/checkout/[lookupKey]/__tests__/route.test.ts +222 -0
  77. package/templates/apps/web/app/api/offerings/checkout/[lookupKey]/route.ts +10 -3
  78. package/templates/apps/web/app/api/revalidate/route.ts +3 -3
  79. package/templates/apps/web/auth.ts +2 -2
  80. package/templates/apps/web/jest.config.cjs +1 -0
  81. package/templates/apps/web/lib/auth-email.ts +1 -1
  82. package/templates/apps/web/lib/relay.ts +2 -2
  83. package/templates/apps/web/lib/release-scope.ts +47 -0
  84. package/templates/apps/web/lib/server-api.ts +1 -1
  85. package/templates/apps/web/src/lib/commerce-claim.ts +1 -1
  86. package/templates/customizations.yaml +37 -0
  87. package/templates/database/prisma.config.ts +10 -14
  88. package/templates/database/seed-test.ts +2 -2
  89. package/templates/database/seed.ts +5 -5
  90. package/templates/package.json +12 -6
  91. package/templates/pnpm-workspace.yaml +0 -1
  92. package/templates/project.yaml +16 -8
  93. package/templates/tools/jest/reporters.cjs +65 -0
  94. package/templates/tools/lint-architecture.ts +553 -7
  95. package/templates/tsconfig.json +1 -2
  96. package/versions.json +48 -35
  97. package/templates/apps/api/src/__tests__/commerce-claim-registration.test.ts +0 -409
  98. package/templates/apps/api/src/__tests__/factories/agent-caller.ts +0 -102
  99. package/templates/apps/api/src/__tests__/factories/content-fixture.ts +0 -138
  100. package/templates/apps/api/src/__tests__/factories/in-memory-prisma.ts +0 -441
  101. package/templates/apps/api/src/__tests__/factories/index.ts +0 -70
  102. package/templates/apps/api/src/__tests__/factories/lead-fixture.ts +0 -82
  103. package/templates/apps/api/src/__tests__/leads-forwarded-rate-limit.test.ts +0 -135
  104. package/templates/apps/api/src/__tests__/services/enrichment-shim.test.ts +0 -126
  105. package/templates/apps/api/src/__tests__/stripe-boot.test.ts +0 -132
  106. package/templates/apps/api/src/__tests__/support/hub-sign-in-fake-db.ts +0 -362
  107. package/templates/apps/api/src/bin/__tests__/rate-limit-probe.test.ts +0 -184
  108. package/templates/apps/api/src/bin/abandon-sweep.ts +0 -42
  109. package/templates/apps/api/src/bin/rate-limit-probe.ts +0 -53
  110. package/templates/apps/api/src/bin/spokes.ts +0 -198
  111. package/templates/apps/api/src/bin/stripe-connections-rekey.ts +0 -45
  112. package/templates/apps/api/src/config/__tests__/hub-require-spoke-key.test.ts +0 -196
  113. package/templates/apps/api/src/config/__tests__/index.test.ts +0 -233
  114. package/templates/apps/api/src/config/__tests__/modules.test.ts +0 -76
  115. package/templates/apps/api/src/config/__tests__/stripe-connection-key.test.ts +0 -185
  116. package/templates/apps/api/src/config/__tests__/trusted-origins.test.ts +0 -238
  117. package/templates/apps/api/src/config/index.ts +0 -596
  118. package/templates/apps/api/src/config/modules.ts +0 -83
  119. package/templates/apps/api/src/lib/__tests__/agent-store.test.ts +0 -581
  120. package/templates/apps/api/src/lib/__tests__/auth-email-budget.test.ts +0 -143
  121. package/templates/apps/api/src/lib/__tests__/consent-ledger-double.ts +0 -237
  122. package/templates/apps/api/src/lib/__tests__/consent-store.test.ts +0 -353
  123. package/templates/apps/api/src/lib/__tests__/content-adapter.test.ts +0 -201
  124. package/templates/apps/api/src/lib/__tests__/deliverable-asset-store.test.ts +0 -224
  125. package/templates/apps/api/src/lib/__tests__/error-serializer.test.ts +0 -120
  126. package/templates/apps/api/src/lib/__tests__/errors.test.ts +0 -94
  127. package/templates/apps/api/src/lib/__tests__/file-fallback.test.ts +0 -144
  128. package/templates/apps/api/src/lib/__tests__/fixtures/HomePage/home.mdx +0 -8
  129. package/templates/apps/api/src/lib/__tests__/flow-completion-store.test.ts +0 -149
  130. package/templates/apps/api/src/lib/__tests__/flow-rename-race.db.test.ts +0 -116
  131. package/templates/apps/api/src/lib/__tests__/hub-sign-in-store.test.ts +0 -209
  132. package/templates/apps/api/src/lib/__tests__/lead-capture-store.test.ts +0 -257
  133. package/templates/apps/api/src/lib/__tests__/lead-delivery.test.ts +0 -96
  134. package/templates/apps/api/src/lib/__tests__/outbound-http.test.ts +0 -125
  135. package/templates/apps/api/src/lib/__tests__/prisma.test.ts +0 -165
  136. package/templates/apps/api/src/lib/__tests__/require-commerce-claim.test.ts +0 -317
  137. package/templates/apps/api/src/lib/__tests__/require-paid-tier.test.ts +0 -129
  138. package/templates/apps/api/src/lib/__tests__/site.test.ts +0 -308
  139. package/templates/apps/api/src/lib/__tests__/slice-load.test.ts +0 -89
  140. package/templates/apps/api/src/lib/__tests__/spoke-store.test.ts +0 -202
  141. package/templates/apps/api/src/lib/__tests__/stripe-admission.test.ts +0 -217
  142. package/templates/apps/api/src/lib/__tests__/stripe.test.ts +0 -82
  143. package/templates/apps/api/src/lib/agent-store.ts +0 -613
  144. package/templates/apps/api/src/lib/auth-email-budget.ts +0 -161
  145. package/templates/apps/api/src/lib/consent-store.ts +0 -363
  146. package/templates/apps/api/src/lib/content-adapter.ts +0 -112
  147. package/templates/apps/api/src/lib/deliverable-asset-store.ts +0 -96
  148. package/templates/apps/api/src/lib/error-serializer.ts +0 -164
  149. package/templates/apps/api/src/lib/errors.ts +0 -95
  150. package/templates/apps/api/src/lib/file-fallback.ts +0 -87
  151. package/templates/apps/api/src/lib/flow-completion-store.ts +0 -136
  152. package/templates/apps/api/src/lib/hub-sign-in-store.ts +0 -455
  153. package/templates/apps/api/src/lib/lead-capture-store.ts +0 -122
  154. package/templates/apps/api/src/lib/lead-delivery.ts +0 -52
  155. package/templates/apps/api/src/lib/license-key-store.ts +0 -45
  156. package/templates/apps/api/src/lib/locales.ts +0 -201
  157. package/templates/apps/api/src/lib/outbound-http.ts +0 -127
  158. package/templates/apps/api/src/lib/prisma.ts +0 -21
  159. package/templates/apps/api/src/lib/proposal-paid-store.ts +0 -66
  160. package/templates/apps/api/src/lib/rate-limit-probe.ts +0 -165
  161. package/templates/apps/api/src/lib/rate-limit-store.ts +0 -142
  162. package/templates/apps/api/src/lib/require-commerce-claim.ts +0 -250
  163. package/templates/apps/api/src/lib/require-paid-tier.ts +0 -53
  164. package/templates/apps/api/src/lib/site.ts +0 -257
  165. package/templates/apps/api/src/lib/slice-load.ts +0 -90
  166. package/templates/apps/api/src/lib/spoke-store.ts +0 -180
  167. package/templates/apps/api/src/lib/stripe.ts +0 -321
  168. package/templates/apps/api/src/lib/webhook-idempotency.ts +0 -156
  169. package/templates/apps/api/src/middleware/__tests__/adversarial/bearer-token-format.test.ts +0 -111
  170. package/templates/apps/api/src/middleware/__tests__/adversarial/cookie-or-bearer-precedence.test.ts +0 -172
  171. package/templates/apps/api/src/middleware/__tests__/adversarial/csrf-bearer-skip.test.ts +0 -119
  172. package/templates/apps/api/src/middleware/__tests__/adversarial/csrf-cookie-path.test.ts +0 -138
  173. package/templates/apps/api/src/middleware/__tests__/adversarial/csrf-trusted-origins.test.ts +0 -142
  174. package/templates/apps/api/src/middleware/__tests__/adversarial/session-fixation.test.ts +0 -155
  175. package/templates/apps/api/src/middleware/__tests__/adversarial/session-timeout.test.ts +0 -139
  176. package/templates/apps/api/src/middleware/__tests__/auth.bearer-path.test.ts +0 -562
  177. package/templates/apps/api/src/middleware/__tests__/auth.both-present-precedence.test.ts +0 -76
  178. package/templates/apps/api/src/middleware/__tests__/auth.cookie-path.test.ts +0 -220
  179. package/templates/apps/api/src/middleware/__tests__/auth.database-not-configured.test.ts +0 -97
  180. package/templates/apps/api/src/middleware/__tests__/auth.hub-session-path.test.ts +0 -557
  181. package/templates/apps/api/src/middleware/__tests__/auth.neither-present.test.ts +0 -72
  182. package/templates/apps/api/src/middleware/__tests__/auth.optional-cookie.test.ts +0 -140
  183. package/templates/apps/api/src/middleware/__tests__/default-tenant.test.ts +0 -721
  184. package/templates/apps/api/src/middleware/__tests__/rate-limit-cross-isolate.db.test.ts +0 -220
  185. package/templates/apps/api/src/middleware/__tests__/rate-limit-store.test.ts +0 -430
  186. package/templates/apps/api/src/middleware/__tests__/rate-limit.test.ts +0 -1409
  187. package/templates/apps/api/src/middleware/__tests__/write-budget.test.ts +0 -174
  188. package/templates/apps/api/src/middleware/auth.ts +0 -864
  189. package/templates/apps/api/src/middleware/default-tenant.ts +0 -166
  190. package/templates/apps/api/src/middleware/rate-limit.ts +0 -983
  191. package/templates/apps/api/src/openapi/__tests__/openapi.test.ts +0 -391
  192. package/templates/apps/api/src/openapi/__tests__/spec-identity.test.ts +0 -182
  193. package/templates/apps/api/src/openapi/index.ts +0 -18
  194. package/templates/apps/api/src/openapi/spec.ts +0 -2148
  195. package/templates/apps/api/src/openapi/surface-drift.ts +0 -195
  196. package/templates/apps/api/src/routes/aeo/__tests__/index.test.ts +0 -175
  197. package/templates/apps/api/src/routes/aeo/index.ts +0 -107
  198. package/templates/apps/api/src/routes/auth/__tests__/auth-tokens.functional.test.ts +0 -196
  199. package/templates/apps/api/src/routes/auth/__tests__/auth-user.functional.test.ts +0 -249
  200. package/templates/apps/api/src/routes/auth/__tests__/hub-sign-in.test.ts +0 -532
  201. package/templates/apps/api/src/routes/auth/__tests__/tokens.test.ts +0 -313
  202. package/templates/apps/api/src/routes/auth/__tests__/transactional-email.test.ts +0 -413
  203. package/templates/apps/api/src/routes/auth/__tests__/user.test.ts +0 -609
  204. package/templates/apps/api/src/routes/auth/hub-sign-in.ts +0 -242
  205. package/templates/apps/api/src/routes/auth/tokens.ts +0 -211
  206. package/templates/apps/api/src/routes/auth/transactional-email.ts +0 -301
  207. package/templates/apps/api/src/routes/auth/user.ts +0 -305
  208. package/templates/apps/api/src/routes/billing/plan-checkout.ts +0 -332
  209. package/templates/apps/api/src/routes/checkout/__tests__/live-key.test.ts +0 -178
  210. package/templates/apps/api/src/routes/checkout/__tests__/offerings-authorization.test.ts +0 -1426
  211. package/templates/apps/api/src/routes/checkout/__tests__/session.test.ts +0 -448
  212. package/templates/apps/api/src/routes/checkout/__tests__/sessions.test.ts +0 -1742
  213. package/templates/apps/api/src/routes/checkout/index.ts +0 -34
  214. package/templates/apps/api/src/routes/checkout/session.ts +0 -171
  215. package/templates/apps/api/src/routes/checkout/sessions.ts +0 -540
  216. package/templates/apps/api/src/routes/consent/__tests__/account.test.ts +0 -386
  217. package/templates/apps/api/src/routes/consent/__tests__/sign-up-rate-limit.test.ts +0 -160
  218. package/templates/apps/api/src/routes/consent/account.ts +0 -268
  219. package/templates/apps/api/src/routes/consent/cookie.ts +0 -90
  220. package/templates/apps/api/src/routes/consent/index.ts +0 -26
  221. package/templates/apps/api/src/routes/consent/unsubscribe.ts +0 -127
  222. package/templates/apps/api/src/routes/content/__tests__/get-page.test.ts +0 -853
  223. package/templates/apps/api/src/routes/content/__tests__/list-pages.test.ts +0 -230
  224. package/templates/apps/api/src/routes/content/__tests__/list-types.test.ts +0 -44
  225. package/templates/apps/api/src/routes/content/__tests__/locale.test.ts +0 -118
  226. package/templates/apps/api/src/routes/content/__tests__/offerings.test.ts +0 -731
  227. package/templates/apps/api/src/routes/content/__tests__/pricing.test.ts +0 -753
  228. package/templates/apps/api/src/routes/content/__tests__/rate-limit.test.ts +0 -51
  229. package/templates/apps/api/src/routes/content/__tests__/search.test.ts +0 -450
  230. package/templates/apps/api/src/routes/content/__tests__/shown-offerings.test.ts +0 -762
  231. package/templates/apps/api/src/routes/content/get-page.ts +0 -183
  232. package/templates/apps/api/src/routes/content/index.ts +0 -49
  233. package/templates/apps/api/src/routes/content/list-pages.ts +0 -74
  234. package/templates/apps/api/src/routes/content/list-types.ts +0 -19
  235. package/templates/apps/api/src/routes/content/offerings.ts +0 -184
  236. package/templates/apps/api/src/routes/content/pricing.ts +0 -176
  237. package/templates/apps/api/src/routes/content/rate-limit.ts +0 -22
  238. package/templates/apps/api/src/routes/content/search.ts +0 -100
  239. package/templates/apps/api/src/routes/content/shown-offerings.ts +0 -229
  240. package/templates/apps/api/src/routes/leads/__tests__/capture.test.ts +0 -88
  241. package/templates/apps/api/src/routes/leads/__tests__/list.test.ts +0 -171
  242. package/templates/apps/api/src/routes/leads/__tests__/magnet-completion.test.ts +0 -515
  243. package/templates/apps/api/src/routes/leads/__tests__/spoke.test.ts +0 -392
  244. package/templates/apps/api/src/routes/leads/__tests__/track.test.ts +0 -165
  245. package/templates/apps/api/src/routes/leads/index.ts +0 -639
  246. package/templates/apps/api/src/routes/leads/list.ts +0 -104
  247. package/templates/apps/api/src/routes/project-listings/__tests__/configured-application.test.ts +0 -626
  248. package/templates/apps/api/src/routes/project-listings/__tests__/drafts.test.ts +0 -1268
  249. package/templates/apps/api/src/routes/project-listings/__tests__/founder-identity.test.ts +0 -847
  250. package/templates/apps/api/src/routes/project-listings/__tests__/me.test.ts +0 -491
  251. package/templates/apps/api/src/routes/project-listings/__tests__/public.test.ts +0 -476
  252. package/templates/apps/api/src/routes/project-listings/__tests__/resume-email.test.ts +0 -872
  253. package/templates/apps/api/src/routes/project-listings/__tests__/site-answers.test.ts +0 -1022
  254. package/templates/apps/api/src/routes/project-listings/__tests__/site-key.test.ts +0 -484
  255. package/templates/apps/api/src/routes/project-listings/__tests__/structured-address.test.ts +0 -535
  256. package/templates/apps/api/src/routes/project-listings/index.ts +0 -164
  257. package/templates/apps/api/src/routes/project-listings/me.ts +0 -87
  258. package/templates/apps/api/src/routes/project-listings/patch-copy.ts +0 -224
  259. package/templates/apps/api/src/routes/project-listings/patch-draft.ts +0 -102
  260. package/templates/apps/api/src/routes/project-listings/public.ts +0 -98
  261. package/templates/apps/api/src/routes/project-listings/respond.ts +0 -48
  262. package/templates/apps/api/src/routes/project-listings/resume-token.ts +0 -27
  263. package/templates/apps/api/src/routes/project-listings/start.ts +0 -140
  264. package/templates/apps/api/src/routes/project-listings/submit.ts +0 -130
  265. package/templates/apps/api/src/routes/project-listings/verify-email.ts +0 -150
  266. package/templates/apps/api/src/routes/requests/__tests__/confirm.test.ts +0 -686
  267. package/templates/apps/api/src/routes/requests/confirm.ts +0 -601
  268. package/templates/apps/api/src/routes/requests/index.ts +0 -54
  269. package/templates/apps/api/src/routes/test/auth/__tests__/session.test.ts +0 -306
  270. package/templates/apps/api/src/routes/test/auth/session.ts +0 -143
  271. package/templates/apps/api/src/routes/webhooks/README.md +0 -398
  272. package/templates/apps/api/src/routes/webhooks/__tests__/stripe-checkout-consent.test.ts +0 -649
  273. package/templates/apps/api/src/routes/webhooks/__tests__/stripe-dunning.test.ts +0 -749
  274. package/templates/apps/api/src/routes/webhooks/__tests__/stripe-flow-checkout.test.ts +0 -449
  275. package/templates/apps/api/src/routes/webhooks/__tests__/stripe-idempotency.test.ts +0 -264
  276. package/templates/apps/api/src/routes/webhooks/__tests__/stripe-livemode-live.test.ts +0 -159
  277. package/templates/apps/api/src/routes/webhooks/__tests__/stripe-livemode.test.ts +0 -158
  278. package/templates/apps/api/src/routes/webhooks/__tests__/stripe-offerings.test.ts +0 -814
  279. package/templates/apps/api/src/routes/webhooks/__tests__/stripe-org-billing.test.ts +0 -301
  280. package/templates/apps/api/src/routes/webhooks/__tests__/stripe-proposal-paid.test.ts +0 -369
  281. package/templates/apps/api/src/routes/webhooks/__tests__/stripe-rate-limit.test.ts +0 -215
  282. package/templates/apps/api/src/routes/webhooks/__tests__/stripe-request-paid.test.ts +0 -301
  283. package/templates/apps/api/src/routes/webhooks/__tests__/stripe-site-filter.test.ts +0 -809
  284. package/templates/apps/api/src/routes/webhooks/__tests__/stripe.test.ts +0 -1155
  285. package/templates/apps/api/src/routes/webhooks/index.ts +0 -141
  286. package/templates/apps/api/src/routes/webhooks/stripe-offerings.ts +0 -384
  287. package/templates/apps/api/src/routes/webhooks/stripe.ts +0 -2028
  288. package/templates/apps/api/src/services/__tests__/abandon-email.test.ts +0 -645
  289. package/templates/apps/api/src/services/__tests__/answer-distributions.test.ts +0 -132
  290. package/templates/apps/api/src/services/__tests__/audit-log.test.ts +0 -1028
  291. package/templates/apps/api/src/services/__tests__/checkout-plan.test.ts +0 -313
  292. package/templates/apps/api/src/services/__tests__/consent-ledger.test.ts +0 -503
  293. package/templates/apps/api/src/services/__tests__/consent-migration.test.ts +0 -65
  294. package/templates/apps/api/src/services/__tests__/consent.test.ts +0 -299
  295. package/templates/apps/api/src/services/__tests__/default-tenant.test.ts +0 -147
  296. package/templates/apps/api/src/services/__tests__/deliverable-fulfillment.test.ts +0 -877
  297. package/templates/apps/api/src/services/__tests__/deliverable-resend.test.ts +0 -379
  298. package/templates/apps/api/src/services/__tests__/dunning-policy.test.ts +0 -368
  299. package/templates/apps/api/src/services/__tests__/entitlements.test.ts +0 -142
  300. package/templates/apps/api/src/services/__tests__/hub-sign-in.test.ts +0 -854
  301. package/templates/apps/api/src/services/__tests__/keyless-workspace-predicate.test.ts +0 -234
  302. package/templates/apps/api/src/services/__tests__/lead-accept-user.test.ts +0 -251
  303. package/templates/apps/api/src/services/__tests__/lead-routing.test.ts +0 -2660
  304. package/templates/apps/api/src/services/__tests__/listing-config.test.ts +0 -166
  305. package/templates/apps/api/src/services/__tests__/magnet-completion.test.ts +0 -389
  306. package/templates/apps/api/src/services/__tests__/person.test.ts +0 -1204
  307. package/templates/apps/api/src/services/__tests__/plan-offerings.test.ts +0 -450
  308. package/templates/apps/api/src/services/__tests__/project-listings.counts.test.ts +0 -202
  309. package/templates/apps/api/src/services/__tests__/project-listings.fence.test.ts +0 -151
  310. package/templates/apps/api/src/services/__tests__/public-site-resolver.test.ts +0 -137
  311. package/templates/apps/api/src/services/__tests__/request-confirm.test.ts +0 -531
  312. package/templates/apps/api/src/services/__tests__/revalidation.test.ts +0 -372
  313. package/templates/apps/api/src/services/__tests__/slack-notify.test.ts +0 -348
  314. package/templates/apps/api/src/services/__tests__/spoke-resolution.test.ts +0 -660
  315. package/templates/apps/api/src/services/__tests__/usage-aggregation.test.ts +0 -941
  316. package/templates/apps/api/src/services/__tests__/usage-credits.test.ts +0 -588
  317. package/templates/apps/api/src/services/__tests__/verified-email.test.ts +0 -78
  318. package/templates/apps/api/src/services/abandon-email.ts +0 -336
  319. package/templates/apps/api/src/services/aeo-score.ts +0 -325
  320. package/templates/apps/api/src/services/answer-distributions.ts +0 -138
  321. package/templates/apps/api/src/services/audit-log.ts +0 -961
  322. package/templates/apps/api/src/services/checkout-buyer.ts +0 -168
  323. package/templates/apps/api/src/services/consent.ts +0 -834
  324. package/templates/apps/api/src/services/default-tenant.ts +0 -416
  325. package/templates/apps/api/src/services/deliverable-fulfillment.ts +0 -750
  326. package/templates/apps/api/src/services/dunning-policy.ts +0 -294
  327. package/templates/apps/api/src/services/enrichment-shim.ts +0 -53
  328. package/templates/apps/api/src/services/entitlements.ts +0 -338
  329. package/templates/apps/api/src/services/hub-sign-in.ts +0 -472
  330. package/templates/apps/api/src/services/lead-accept-user.ts +0 -126
  331. package/templates/apps/api/src/services/lead-promotion.ts +0 -160
  332. package/templates/apps/api/src/services/lead-routing.ts +0 -1372
  333. package/templates/apps/api/src/services/leads-inbox.ts +0 -312
  334. package/templates/apps/api/src/services/listing-config.ts +0 -178
  335. package/templates/apps/api/src/services/magnet-completion.ts +0 -242
  336. package/templates/apps/api/src/services/offerings/__tests__/catalog.test.ts +0 -348
  337. package/templates/apps/api/src/services/offerings/__tests__/checkout-session-record.test.ts +0 -268
  338. package/templates/apps/api/src/services/offerings/__tests__/connection.test.ts +0 -975
  339. package/templates/apps/api/src/services/offerings/__tests__/fixtures.ts +0 -416
  340. package/templates/apps/api/src/services/offerings/__tests__/org-products.test.ts +0 -400
  341. package/templates/apps/api/src/services/offerings/__tests__/readers.test.ts +0 -685
  342. package/templates/apps/api/src/services/offerings/__tests__/source.test.ts +0 -231
  343. package/templates/apps/api/src/services/offerings/catalog.ts +0 -318
  344. package/templates/apps/api/src/services/offerings/checkout-authorization.ts +0 -403
  345. package/templates/apps/api/src/services/offerings/checkout-session-record.ts +0 -192
  346. package/templates/apps/api/src/services/offerings/connection.ts +0 -1083
  347. package/templates/apps/api/src/services/offerings/index.ts +0 -614
  348. package/templates/apps/api/src/services/offerings/source.ts +0 -140
  349. package/templates/apps/api/src/services/offerings/store.ts +0 -150
  350. package/templates/apps/api/src/services/owner-workspaces.ts +0 -132
  351. package/templates/apps/api/src/services/person.ts +0 -1211
  352. package/templates/apps/api/src/services/plan-offerings.ts +0 -125
  353. package/templates/apps/api/src/services/project-listing-resume-email.ts +0 -326
  354. package/templates/apps/api/src/services/project-listings.ts +0 -2085
  355. package/templates/apps/api/src/services/public-site-resolver.ts +0 -396
  356. package/templates/apps/api/src/services/request-confirm.ts +0 -698
  357. package/templates/apps/api/src/services/revalidation.ts +0 -235
  358. package/templates/apps/api/src/services/slack-notify.ts +0 -291
  359. package/templates/apps/api/src/services/usage-aggregation.ts +0 -516
  360. package/templates/apps/api/src/services/usage-credits.ts +0 -340
  361. package/templates/apps/api/src/services/verified-email.ts +0 -71
  362. package/templates/apps/mcp/__tests__/abuse/daily-cap.test.ts +0 -52
  363. package/templates/apps/mcp/__tests__/abuse/email-validator.test.ts +0 -46
  364. package/templates/apps/mcp/__tests__/abuse/guard.test.ts +0 -198
  365. package/templates/apps/mcp/__tests__/abuse/honeypot.test.ts +0 -36
  366. package/templates/apps/mcp/__tests__/abuse/user-agent-deny.test.ts +0 -54
  367. package/templates/apps/mcp/__tests__/aeo-cli-parity.test.ts +0 -116
  368. package/templates/apps/mcp/__tests__/audit-single-page.test.ts +0 -299
  369. package/templates/apps/mcp/__tests__/boot.test.ts +0 -280
  370. package/templates/apps/mcp/__tests__/catalog-drift.test.ts +0 -359
  371. package/templates/apps/mcp/__tests__/config/modules.test.ts +0 -78
  372. package/templates/apps/mcp/__tests__/get_business_hours.test.ts +0 -82
  373. package/templates/apps/mcp/__tests__/get_faq.test.ts +0 -80
  374. package/templates/apps/mcp/__tests__/get_locations.test.ts +0 -65
  375. package/templates/apps/mcp/__tests__/get_offerings.test.ts +0 -557
  376. package/templates/apps/mcp/__tests__/get_pricing.test.ts +0 -524
  377. package/templates/apps/mcp/__tests__/get_site_info.test.ts +0 -81
  378. package/templates/apps/mcp/__tests__/http-transport.test.ts +0 -1232
  379. package/templates/apps/mcp/__tests__/index.test.ts +0 -195
  380. package/templates/apps/mcp/__tests__/lib/audit-single-page-readiness-scan.test.ts +0 -191
  381. package/templates/apps/mcp/__tests__/lib/commerce-claim.test.ts +0 -531
  382. package/templates/apps/mcp/__tests__/lib/content-adapter-parity.test.ts +0 -70
  383. package/templates/apps/mcp/__tests__/lib/content-adapter.test.ts +0 -162
  384. package/templates/apps/mcp/__tests__/lib/content-root.test.ts +0 -93
  385. package/templates/apps/mcp/__tests__/lib/errors.test.ts +0 -75
  386. package/templates/apps/mcp/__tests__/lib/fail-closed-tools.test.ts +0 -180
  387. package/templates/apps/mcp/__tests__/lib/public-workspace.test.ts +0 -124
  388. package/templates/apps/mcp/__tests__/list_pages.test.ts +0 -268
  389. package/templates/apps/mcp/__tests__/locale.test.ts +0 -120
  390. package/templates/apps/mcp/__tests__/module-exclusion.test.ts +0 -175
  391. package/templates/apps/mcp/__tests__/purchase-disabled.test.ts +0 -101
  392. package/templates/apps/mcp/__tests__/rate-limit-write.test.ts +0 -189
  393. package/templates/apps/mcp/__tests__/read_content.test.ts +0 -511
  394. package/templates/apps/mcp/__tests__/request_callback.test.ts +0 -160
  395. package/templates/apps/mcp/__tests__/search_content.test.ts +0 -271
  396. package/templates/apps/mcp/__tests__/server.test.ts +0 -388
  397. package/templates/apps/mcp/__tests__/start_purchase.test.ts +0 -448
  398. package/templates/apps/mcp/__tests__/submit_lead.test.ts +0 -222
  399. package/templates/apps/mcp/__tests__/subscribe_newsletter.test.ts +0 -152
  400. package/templates/apps/mcp/__tests__/tools/create_project.test.ts +0 -243
  401. package/templates/apps/mcp/__tests__/tools/purchase.test.ts +0 -451
  402. package/templates/apps/mcp/src/abuse/daily-cap.ts +0 -47
  403. package/templates/apps/mcp/src/abuse/email-validator.ts +0 -25
  404. package/templates/apps/mcp/src/abuse/honeypot.ts +0 -21
  405. package/templates/apps/mcp/src/abuse/index.ts +0 -349
  406. package/templates/apps/mcp/src/abuse/user-agent-deny.ts +0 -58
  407. package/templates/apps/mcp/src/boot.ts +0 -167
  408. package/templates/apps/mcp/src/config/modules.ts +0 -43
  409. package/templates/apps/mcp/src/http-transport.ts +0 -564
  410. package/templates/apps/mcp/src/lib/audit-single-page.ts +0 -308
  411. package/templates/apps/mcp/src/lib/commerce-claim.ts +0 -263
  412. package/templates/apps/mcp/src/lib/content-adapter.ts +0 -116
  413. package/templates/apps/mcp/src/lib/empty-content-adapter.ts +0 -140
  414. package/templates/apps/mcp/src/lib/errors.ts +0 -61
  415. package/templates/apps/mcp/src/lib/license-key-store.ts +0 -45
  416. package/templates/apps/mcp/src/lib/locales.ts +0 -171
  417. package/templates/apps/mcp/src/lib/prisma.ts +0 -39
  418. package/templates/apps/mcp/src/lib/public-workspace.ts +0 -133
  419. package/templates/apps/mcp/src/lib/resolve-locale.ts +0 -30
  420. package/templates/apps/mcp/src/lib/shown-offerings.ts +0 -105
  421. package/templates/apps/mcp/src/lib/site-config.ts +0 -53
  422. package/templates/apps/mcp/src/lib/stripe-tax-signal.ts +0 -59
  423. package/templates/apps/mcp/src/request-context.ts +0 -52
  424. package/templates/apps/mcp/src/server.ts +0 -343
  425. package/templates/apps/mcp/src/serverless-app.ts +0 -88
  426. package/templates/apps/mcp/src/tools/audit.ts +0 -127
  427. package/templates/apps/mcp/src/tools/capture_lead.ts +0 -66
  428. package/templates/apps/mcp/src/tools/create_project.ts +0 -134
  429. package/templates/apps/mcp/src/tools/get_business_hours.ts +0 -68
  430. package/templates/apps/mcp/src/tools/get_faq.ts +0 -71
  431. package/templates/apps/mcp/src/tools/get_locations.ts +0 -88
  432. package/templates/apps/mcp/src/tools/get_offerings.ts +0 -96
  433. package/templates/apps/mcp/src/tools/get_pricing.ts +0 -94
  434. package/templates/apps/mcp/src/tools/get_site_info.ts +0 -86
  435. package/templates/apps/mcp/src/tools/index.ts +0 -138
  436. package/templates/apps/mcp/src/tools/list_pages.ts +0 -68
  437. package/templates/apps/mcp/src/tools/person_notes.ts +0 -25
  438. package/templates/apps/mcp/src/tools/proposals.ts +0 -27
  439. package/templates/apps/mcp/src/tools/purchase.ts +0 -205
  440. package/templates/apps/mcp/src/tools/read_content.ts +0 -81
  441. package/templates/apps/mcp/src/tools/request_callback.ts +0 -52
  442. package/templates/apps/mcp/src/tools/search_content.ts +0 -63
  443. package/templates/apps/mcp/src/tools/subscribe_newsletter.ts +0 -54
  444. package/templates/apps/mcp/src/workspace-server.ts +0 -224
  445. package/templates/database/CHANGELOG.md +0 -981
  446. package/templates/database/LICENSE +0 -202
  447. package/templates/database/NOTICE +0 -2
  448. package/templates/database/README.md +0 -243
  449. package/templates/database/__tests__/agents.db.test.ts +0 -320
  450. package/templates/database/__tests__/appointment.db.test.ts +0 -106
  451. package/templates/database/__tests__/artifact-content-store.db.test.ts +0 -316
  452. package/templates/database/__tests__/composite-fence.db.test.ts +0 -206
  453. package/templates/database/__tests__/consent-ledger.db.test.ts +0 -345
  454. package/templates/database/__tests__/consent-source-checkout-migration.test.ts +0 -79
  455. package/templates/database/__tests__/fence-fan-out.db.test.ts +0 -715
  456. package/templates/database/__tests__/fixtures/appointment-create-probe.ts +0 -79
  457. package/templates/database/__tests__/fixtures/person-backfill.json +0 -264
  458. package/templates/database/__tests__/fixtures/person-contact-backfill.json +0 -182
  459. package/templates/database/__tests__/fixtures/project-listing-consent-probe.ts +0 -100
  460. package/templates/database/__tests__/flow-completion-migration.test.ts +0 -115
  461. package/templates/database/__tests__/flow-completion.db.test.ts +0 -136
  462. package/templates/database/__tests__/flow-workspace-key.db.test.ts +0 -263
  463. package/templates/database/__tests__/flows-listing-diagnostic.test.ts +0 -392
  464. package/templates/database/__tests__/flows-presets.test.ts +0 -173
  465. package/templates/database/__tests__/in-page-magnets-migration.test.ts +0 -161
  466. package/templates/database/__tests__/lead-idempotency-key.db.test.ts +0 -92
  467. package/templates/database/__tests__/member-area.db.test.ts +0 -257
  468. package/templates/database/__tests__/member-contract-migration.test.ts +0 -85
  469. package/templates/database/__tests__/member-contract.db.test.ts +0 -413
  470. package/templates/database/__tests__/offerings-checkout-session.db.test.ts +0 -270
  471. package/templates/database/__tests__/offerings-migration.test.ts +0 -197
  472. package/templates/database/__tests__/offerings-shown-price-ids-migration.test.ts +0 -86
  473. package/templates/database/__tests__/offerings.db.test.ts +0 -303
  474. package/templates/database/__tests__/outbound-message-action.db.test.ts +0 -80
  475. package/templates/database/__tests__/person-contact.db.test.ts +0 -563
  476. package/templates/database/__tests__/person-notes.db.test.ts +0 -249
  477. package/templates/database/__tests__/person.db.test.ts +0 -586
  478. package/templates/database/__tests__/piece-kind-migration.test.ts +0 -67
  479. package/templates/database/__tests__/piece-kind.db.test.ts +0 -208
  480. package/templates/database/__tests__/prefixed-ids.db.test.ts +0 -222
  481. package/templates/database/__tests__/project-listing-consent-at.db.test.ts +0 -111
  482. package/templates/database/__tests__/seed.test.ts +0 -272
  483. package/templates/database/__tests__/spoke-registry.db.test.ts +0 -191
  484. package/templates/database/__tests__/tenancy.test.ts +0 -141
  485. package/templates/database/__tests__/trial-magnet-migration.test.ts +0 -186
  486. package/templates/database/__tests__/user-cascade.test.ts +0 -140
  487. package/templates/database/_gitignore +0 -8
  488. package/templates/database/auth/.gitkeep +0 -0
  489. package/templates/database/auth/schema.prisma +0 -641
  490. package/templates/database/config/.gitkeep +0 -0
  491. package/templates/database/config/schema.prisma +0 -441
  492. package/templates/database/content/.gitkeep +0 -0
  493. package/templates/database/content/schema.prisma +0 -339
  494. package/templates/database/eslint.config.mjs +0 -69
  495. package/templates/database/flows/listing-diagnostic.ts +0 -182
  496. package/templates/database/flows/presets.ts +0 -315
  497. package/templates/database/inbox/.gitkeep +0 -0
  498. package/templates/database/inbox/README.md +0 -3
  499. package/templates/database/inbox/__tests__/schema.test.ts +0 -44
  500. package/templates/database/inbox/schema.prisma +0 -1447
  501. package/templates/database/jest.config.cjs +0 -36
  502. package/templates/database/migrations/20260508000000_add_inbox_namespace/migration.sql +0 -328
  503. package/templates/database/migrations/20260513000000_better_auth_migration/migration.sql +0 -100
  504. package/templates/database/migrations/20260515000000_add_user_billing_fields/migration.sql +0 -28
  505. package/templates/database/migrations/20260516000000_add_user_tier_care_plan_seat/migration.sql +0 -25
  506. package/templates/database/migrations/20260518000000_add_telemetry_records/migration.sql +0 -42
  507. package/templates/database/migrations/20260525000000_theme_wiring/migration.sql +0 -67
  508. package/templates/database/migrations/20260710000000_retire_commercial_tier/migration.sql +0 -21
  509. package/templates/database/migrations/20260712215647_add_multi_tenant_tenancy/migration.sql +0 -201
  510. package/templates/database/migrations/20260713143320_reanchor_site_config_to_workspace/migration.sql +0 -67
  511. package/templates/database/migrations/20260713174000_add_audit_logs/migration.sql +0 -46
  512. package/templates/database/migrations/20260713190000_drop_telemetry_records/migration.sql +0 -25
  513. package/templates/database/migrations/20260713192000_add_uuidv7_function/migration.sql +0 -49
  514. package/templates/database/migrations/20260713192429_prefixed_uuid_entity_ids/migration.sql +0 -197
  515. package/templates/database/migrations/20260713200000_add_org_billing/migration.sql +0 -32
  516. package/templates/database/migrations/20260714000000_add_lead_promotion_fields/migration.sql +0 -22
  517. package/templates/database/migrations/20260714010000_add_usage_billing_content_models/migration.sql +0 -151
  518. package/templates/database/migrations/20260714020000_add_usage_billing_auth_config_models/migration.sql +0 -223
  519. package/templates/database/migrations/20260714030000_credit_balance_non_negative/migration.sql +0 -22
  520. package/templates/database/migrations/20260714030000_widen_usage_billing_report_aggregates/migration.sql +0 -32
  521. package/templates/database/migrations/20260810233516_add_flow_engine_models/migration.sql +0 -40
  522. package/templates/database/migrations/20260811020000_add_flow_session_abandon_email_columns/migration.sql +0 -4
  523. package/templates/database/migrations/20260811030000_add_flow_session_abandon_email_index/migration.sql +0 -2
  524. package/templates/database/migrations/20260811040000_add_flow_session_segment/migration.sql +0 -2
  525. package/templates/database/migrations/20260811050000_add_deliverable_models/migration.sql +0 -29
  526. package/templates/database/migrations/20260812000000_add_deliverable_grant_send_columns/migration.sql +0 -6
  527. package/templates/database/migrations/20260902222948_add_waitlist_experiment_models/migration.sql +0 -39
  528. package/templates/database/migrations/20260902224500_add_waitlist_id_format_checks/migration.sql +0 -24
  529. package/templates/database/migrations/20260903004112_add_flow_session_flags_aeo_score/migration.sql +0 -3
  530. package/templates/database/migrations/20260903010000_add_playbook_instance/migration.sql +0 -33
  531. package/templates/database/migrations/20260904000000_add_waitlist_followup_send/migration.sql +0 -30
  532. package/templates/database/migrations/20260905230000_add_flow_checkout/migration.sql +0 -47
  533. package/templates/database/migrations/20260906000000_add_flow_checkout_idempotency/migration.sql +0 -16
  534. package/templates/database/migrations/20260907120000_add_project_listing/migration.sql +0 -47
  535. package/templates/database/migrations/20260907130000_add_project_listing_slack_columns/migration.sql +0 -10
  536. package/templates/database/migrations/20260907180000_add_listing_csv_send/migration.sql +0 -26
  537. package/templates/database/migrations/20260909120000_project_listings_platform/migration.sql +0 -90
  538. package/templates/database/migrations/20260909180000_listing_draft_and_fields/migration.sql +0 -174
  539. package/templates/database/migrations/20260910120000_listing_public_site_key/migration.sql +0 -14
  540. package/templates/database/migrations/20260911120000_listing_copy_edit_audit/migration.sql +0 -25
  541. package/templates/database/migrations/20260911140000_listing_structured_address/migration.sql +0 -32
  542. package/templates/database/migrations/20260911180000_consent_grants/migration.sql +0 -71
  543. package/templates/database/migrations/20260911200000_listing_site_answers/migration.sql +0 -30
  544. package/templates/database/migrations/20260912120000_listing_owner_link/migration.sql +0 -49
  545. package/templates/database/migrations/20260914120000_listing_founder_identity/migration.sql +0 -123
  546. package/templates/database/migrations/20260915120000_project_listing_solution/migration.sql +0 -15
  547. package/templates/database/migrations/20260916120000_artifact_content_store/migration.sql +0 -158
  548. package/templates/database/migrations/20260917120000_callback_request_confirm/migration.sql +0 -40
  549. package/templates/database/migrations/20260918120000_add_appointment/migration.sql +0 -67
  550. package/templates/database/migrations/20260918120000_asset_metadata_columns/migration.sql +0 -70
  551. package/templates/database/migrations/20260919120000_flow_workspace_key/migration.sql +0 -181
  552. package/templates/database/migrations/20260919130000_flow_definition_admin_columns/migration.sql +0 -172
  553. package/templates/database/migrations/20260919130000_workspace_meetings/migration.sql +0 -41
  554. package/templates/database/migrations/20260919140000_inbox_workspace_key/migration.sql +0 -185
  555. package/templates/database/migrations/20260920120000_lead_handled_at/migration.sql +0 -70
  556. package/templates/database/migrations/20260920130000_lead_workspace_source_index/migration.sql +0 -57
  557. package/templates/database/migrations/20260921120000_deliverable_grant_workspace_key/migration.sql +0 -68
  558. package/templates/database/migrations/20260922120000_tenancy_fence/migration.sql +0 -1067
  559. package/templates/database/migrations/20260923120000_listing_capturing_magnet/migration.sql +0 -210
  560. package/templates/database/migrations/20261003120000_spoke_registry/migration.sql +0 -80
  561. package/templates/database/migrations/20261003130000_scheduling_connection/migration.sql +0 -49
  562. package/templates/database/migrations/20261005120000_agents/migration.sql +0 -84
  563. package/templates/database/migrations/20261008120000_user_last_workspace/migration.sql +0 -35
  564. package/templates/database/migrations/20261008130000_lead_idempotency_key/migration.sql +0 -20
  565. package/templates/database/migrations/20261009120000_agent_grants/migration.sql +0 -33
  566. package/templates/database/migrations/20261010120000_person/migration.sql +0 -106
  567. package/templates/database/migrations/20261010121000_person_backfill/migration.sql +0 -132
  568. package/templates/database/migrations/20261010130000_agent_grants_people_read/migration.sql +0 -20
  569. package/templates/database/migrations/20261011120000_member_area/migration.sql +0 -158
  570. package/templates/database/migrations/20261011130000_agent_grants_member_pieces_manage/migration.sql +0 -21
  571. package/templates/database/migrations/20261012120000_member_contract/migration.sql +0 -192
  572. package/templates/database/migrations/20261013120000_lead_spoke_checkout/migration.sql +0 -20
  573. package/templates/database/migrations/20261014120000_consent_ledger/migration.sql +0 -122
  574. package/templates/database/migrations/20261014120000_person_contact/migration.sql +0 -231
  575. package/templates/database/migrations/20261015120000_person_notes/migration.sql +0 -77
  576. package/templates/database/migrations/20261015120000_rate_limit_counters/migration.sql +0 -43
  577. package/templates/database/migrations/20261016120000_piece_kind/migration.sql +0 -95
  578. package/templates/database/migrations/20261017120000_outbound_message_action/migration.sql +0 -30
  579. package/templates/database/migrations/20261018120000_flow_completion/migration.sql +0 -52
  580. package/templates/database/migrations/20261019120000_consent_source_checkout/migration.sql +0 -27
  581. package/templates/database/migrations/20261020120000_offerings_data_model/migration.sql +0 -146
  582. package/templates/database/migrations/20261021120000_offerings_checkout_session/migration.sql +0 -77
  583. package/templates/database/migrations/20261022120000_in_page_magnets/migration.sql +0 -45
  584. package/templates/database/migrations/20261023120000_offerings_shown_price_ids/migration.sql +0 -47
  585. package/templates/database/migrations/20261024120000_organization_plan_checkout_session/migration.sql +0 -16
  586. package/templates/database/migrations/20261025120000_trial_magnet/migration.sql +0 -28
  587. package/templates/database/migrations/20261026120000_trial_magnet_proof_line/migration.sql +0 -23
  588. package/templates/database/migrations/migration_lock.toml +0 -3
  589. package/templates/database/ops/.gitkeep +0 -0
  590. package/templates/database/ops/schema.prisma +0 -43
  591. package/templates/database/package.json +0 -89
  592. package/templates/database/schema.prisma +0 -71
  593. package/templates/database/scripts/db-generate-locked.sh +0 -80
  594. package/templates/database/scripts/person-backfill.sql +0 -132
  595. package/templates/database/tenancy.ts +0 -183
  596. package/templates/database/tsconfig.build.json +0 -16
  597. package/templates/database/tsconfig.flows.json +0 -15
  598. package/templates/database/tsconfig.json +0 -16
  599. package/templates/database/tsconfig.tenancy.json +0 -14
@@ -1,626 +0,0 @@
1
- // Not marked oss: false (D-48/#5366 escalation) — tests the
2
- // always-shipping project-listings anonymous surface; see
3
- // routes/project-listings/me.ts's header comment.
4
- /**
5
- * @file configured-application.test.ts
6
- *
7
- * THE ACCEPTANCE GATE for the two halves of the application the SITE now
8
- * decides (#5048 D5/D6), plus the control that deliberately does not ship
9
- * (D7).
10
- *
11
- * #5036 validated a fixed payload against a fixed schema: ten words of
12
- * headline, twenty-five of one-liner, and every one of eleven fields
13
- * required. Both were one consuming site's editorial decisions compiled into
14
- * the published package, and the second was worse than a preference — steps
15
- * are individually optional, so a field whose step a site never renders
16
- * cannot be supplied, and requiring it refuses a valid application with a
17
- * message naming a question the founder was never shown.
18
- *
19
- * Both now derive from the site's SERVER-side `SiteListingConfig`
20
- * (`wordCaps`, `collectedFields`), and the schemas are compiled per request
21
- * by `buildProjectListingDraftPatchSchema` / `buildProjectListingSubmitSchema`.
22
- *
23
- * The tests that would fail QUIETLY, and are the reason this file exists:
24
- * - a configured cap that is not actually consulted looks identical to one
25
- * that is, until a site sets three and the tenth word still passes — so
26
- * each cap assertion pins the SITE's number and shows the value AT the
27
- * cap is accepted, and a default-config pair proves the previous
28
- * behaviour is unchanged for a site that says nothing;
29
- * - a site that does not collect `address` submitting successfully is the
30
- * core regression guard for D5: the fixed schema #5036 shipped would
31
- * refuse it, with `address` named as missing;
32
- * - no honeypot and no start-to-submit timing check exists anywhere on this
33
- * surface — #316 D6b removed both and #5039 deliberately keeps that
34
- * channel open, so their ABSENCE is worth pinning before someone
35
- * helpfully re-adds one.
36
- *
37
- * Same harness as `drafts.test.ts`: real routes, real services, mocked
38
- * `lib/prisma.js` over a small in-memory row store, `routeLead` running for
39
- * real against a per-test temp path.
40
- */
41
- import { readFileSync } from "node:fs";
42
- import { join } from "node:path";
43
-
44
- // eslint-disable-next-line no-restricted-syntax -- prisma is a DB boundary; __mocks__/prisma.ts activates the auto-mock
45
- jest.mock("../../../lib/prisma.js");
46
-
47
- jest.mock("@working-theory/email", () => ({
48
- sendLeadNotification: jest.fn().mockResolvedValue({ ok: true, messageId: "msg-test" }),
49
- // #5406 — `start` now reaches the resume email. Declared here for the reason
50
- // docs/lessons/project-listings/04 records: a mock factory that omits an
51
- // export the code under test calls leaves it `undefined` at the callsite.
52
- // These suites configure no `resumeEmail`, so the send short-circuits before
53
- // this is reached; it is declared so a future fixture that DOES configure
54
- // one fails on its assertion rather than on a missing mock.
55
- sendListingResumeEmail: jest.fn().mockResolvedValue({ ok: true, messageId: "msg-resume" }),
56
- }));
57
-
58
- jest.mock("@working-theory/license", () => ({
59
- checkLicense: jest.fn().mockResolvedValue({
60
- tier: "free",
61
- plan: null,
62
- features: [],
63
- expiresAt: null,
64
- revoked: false,
65
- }),
66
- }));
67
-
68
- import Fastify from "fastify";
69
- import type { FastifyInstance } from "fastify";
70
- import {
71
- projectListingApplicationFieldsSchema,
72
- projectListingStartSchema,
73
- SITE_LISTING_CONFIG_DEFAULTS,
74
- } from "@working-theory/validation";
75
-
76
- import { setupLeadFileEnv } from "../../../__tests__/factories/lead-fixture";
77
- import {
78
- mockNoWorkspace,
79
- mockWorkspaceExists,
80
- } from "../../../lib/__mocks__/prisma.js";
81
- import { prisma } from "../../../lib/prisma.js";
82
- import { patchProjectListingDraftRoute } from "../patch-draft.js";
83
- import { startProjectListingRoute } from "../start.js";
84
- import { submitProjectListingRoute } from "../submit.js";
85
-
86
- // ─── Fixtures ───────────────────────────────────────────────────────────────
87
-
88
- const SITE_ID = "site-1";
89
- const SITE_KEY = "pk-site-1";
90
-
91
- const opt = (value: string, label: string) => ({ value, label });
92
-
93
- const VALID_QUESTIONS = {
94
- q2: {
95
- prompt: "Why are you here?",
96
- options: [opt("scale", "Scaling my team"), opt("just-curious", "Just curious")],
97
- },
98
- q3: { prompt: "Stage?", options: [opt("a", "A"), opt("b", "B"), opt("c", "C")] },
99
- q4: { prompt: "Team size?", options: [opt("a", "A"), opt("b", "B"), opt("c", "C")] },
100
- q5: {
101
- prompt: "Urgency?",
102
- options: [opt("urgent", "Now"), opt("planning", "Soon"), opt("exploring", "Someday")],
103
- },
104
- q6: {
105
- prompt: "Pain?",
106
- options: [
107
- opt("low", "Low"),
108
- opt("medium", "Medium"),
109
- opt("high", "High"),
110
- opt("critical", "Critical"),
111
- ],
112
- },
113
- q7: { prompt: "Anything else?" },
114
- extras: [],
115
- };
116
-
117
- const START_PAYLOAD = {
118
- siteKey: SITE_KEY,
119
- founderName: "Ada Founder",
120
- founderEmail: "ada@example.com",
121
- consent: true,
122
- };
123
-
124
- /** Everything the ten steps after step one collect. */
125
- const COMPLETE_APPLICATION = {
126
- name: "My Project",
127
- headline: "Ten words or fewer for the tile title here",
128
- oneLiner: "A short sentence describing what the project does for its people.",
129
- problem: "The problem is real and this describes it.",
130
- product: "wireframes",
131
- commitment: "part-time",
132
- teamComposition: "co-founders",
133
- faqs: [
134
- { question: "Q one?", answer: "A one." },
135
- { question: "Q two?", answer: "A two." },
136
- { question: "Q three?", answer: "A three." },
137
- ],
138
- address: "1 Founder Way, Springfield",
139
- questions: VALID_QUESTIONS,
140
- };
141
-
142
- /** The same application with no `address` — the D5 case. */
143
- const { address: _address, ...APPLICATION_WITHOUT_ADDRESS } = COMPLETE_APPLICATION;
144
-
145
- /** Every collected field except `address`, in the shape an operator writes. */
146
- const COLLECTED_WITHOUT_ADDRESS = SITE_LISTING_CONFIG_DEFAULTS.collectedFields.filter(
147
- (field) => field !== "address",
148
- );
149
-
150
- /** `n` whitespace-separated words. */
151
- const words = (n: number) => Array.from({ length: n }, (_, i) => `word${i + 1}`).join(" ");
152
-
153
- // ─── The in-memory row store the Prisma mock is backed by ───────────────────
154
-
155
- type Row = Record<string, unknown>;
156
-
157
- let rows: Row[];
158
- let nextId: number;
159
- /**
160
- * The `SiteListingConfig.data` blob this site is running on, per test. `null`
161
- * means NO ROW — the platform defaults, which is the "site that says nothing"
162
- * half of every pair below.
163
- */
164
- let configData: Record<string, unknown> | null;
165
-
166
- function matches(row: Row, where: Record<string, unknown>): boolean {
167
- return Object.entries(where).every(([key, value]) => {
168
- if (key === "OR") {
169
- return (value as Record<string, unknown>[]).some((clause) => matches(row, clause));
170
- }
171
- if (value !== null && typeof value === "object" && !(value instanceof Date)) {
172
- const clause = value as Record<string, unknown>;
173
- if ("in" in clause) return (clause["in"] as unknown[]).includes(row[key]);
174
- if ("not" in clause) return row[key] !== clause["not"];
175
- if ("gt" in clause) return (row[key] as Date) > (clause["gt"] as Date);
176
- if ("startsWith" in clause) {
177
- return (
178
- typeof row[key] === "string" &&
179
- (row[key] as string).startsWith(clause["startsWith"] as string)
180
- );
181
- }
182
- }
183
- return row[key] === value;
184
- });
185
- }
186
-
187
- function installStore(): void {
188
- // #6335 — the shared prisma mock no longer resolves ANY requested
189
- // workspace id. `startProjectListingDraft` stamps the row's `workspaceId`
190
- // by resolving the site it was filed against (`resolveWorkspaceIdForSite`,
191
- // services/project-listings.ts), so this suite states the ONE site it is
192
- // built around. Keyed on the requested id — nothing else resolves.
193
- mockWorkspaceExists(prisma, SITE_ID);
194
-
195
- rows = [];
196
- nextId = 1;
197
- configData = null;
198
-
199
- (prisma.lead.create as jest.Mock).mockImplementation(() =>
200
- Promise.resolve({ id: `lead_00000000-0000-7000-8000-00000000000${nextId}` }),
201
- );
202
-
203
- // One delegate, two lookups (#5048 D2/D6): `where.publicKey` resolves the
204
- // site key, `where.siteId` reads the config the schemas are compiled from.
205
- (prisma.siteListingConfig.findUnique as jest.Mock).mockImplementation(
206
- ({ where }: { where: { siteId?: string; publicKey?: string } }) => {
207
- if (where.publicKey !== undefined) {
208
- return Promise.resolve(where.publicKey === SITE_KEY ? { siteId: SITE_ID } : null);
209
- }
210
- return Promise.resolve(configData === null ? null : { data: configData });
211
- },
212
- );
213
-
214
- // #5275 — the grant write `start` makes after the row. Append-only; it only
215
- // needs to resolve here (drafts.test.ts asserts on what it is called with).
216
- (prisma.consentGrant.createMany as jest.Mock).mockImplementation(
217
- ({ data }: { data: Row[] }) => Promise.resolve({ count: data.length }),
218
- );
219
-
220
- // #5275 — `start` writes the row and its grant in one interactive
221
- // transaction; the mock hands the same store-backed client through.
222
- (prisma.$transaction as jest.Mock).mockImplementation(
223
- async (fn: (tx: typeof prisma) => Promise<unknown>) => fn(prisma),
224
- );
225
- (prisma.projectListing.create as jest.Mock).mockImplementation(({ data }: { data: Row }) => {
226
- const now = new Date();
227
- const row: Row = {
228
- id: `prjl_00000000-0000-7000-8000-00000000000${nextId++}`,
229
- slug: null,
230
- name: null,
231
- oneLiner: null,
232
- problem: null,
233
- url: null,
234
- product: null,
235
- commitment: null,
236
- teamComposition: null,
237
- faqs: null,
238
- anythingElse: null,
239
- address: null,
240
- questions: null,
241
- // #5407 — a row written before the columns existed, and a freshly
242
- // started draft on a site that asks for one name line: parts null,
243
- // no phone, no verification stamp.
244
- founderFirstName: null,
245
- founderLastName: null,
246
- founderPhone: null,
247
- emailVerifiedAt: null,
248
- founderCompany: null,
249
- leadId: null,
250
- headline: null,
251
- logoMarkUrl: null,
252
- logoWordmarkUrl: null,
253
- solution: null,
254
- featured: false,
255
- decidedAt: null,
256
- decidedBy: null,
257
- issueUrl: null,
258
- experimentKey: null,
259
- windowEndsAt: null,
260
- createdAt: now,
261
- updatedAt: now,
262
- ...data,
263
- };
264
- rows.push(row);
265
- return Promise.resolve(row);
266
- });
267
-
268
- (prisma.projectListing.findFirst as jest.Mock).mockImplementation(
269
- ({ where }: { where: Record<string, unknown> }) =>
270
- Promise.resolve(rows.find((row) => matches(row, where)) ?? null),
271
- );
272
-
273
- (prisma.projectListing.findMany as jest.Mock).mockImplementation(
274
- ({ where }: { where: Record<string, unknown> }) =>
275
- Promise.resolve(rows.filter((row) => matches(row, where))),
276
- );
277
-
278
- (prisma.projectListing.update as jest.Mock).mockImplementation(
279
- ({ where, data }: { where: Record<string, unknown>; data: Row }) => {
280
- const row = rows.find((r) => matches(r, where));
281
- Object.assign(row!, data, { updatedAt: new Date() });
282
- return Promise.resolve(row);
283
- },
284
- );
285
-
286
- (prisma.projectListing.updateMany as jest.Mock).mockImplementation(
287
- ({ where, data }: { where: Record<string, unknown>; data: Row }) => {
288
- const matched = rows.filter((r) => matches(r, where));
289
- matched.forEach((r) => Object.assign(r, data, { updatedAt: new Date() }));
290
- return Promise.resolve({ count: matched.length });
291
- },
292
- );
293
- }
294
-
295
- // ─── Helpers ────────────────────────────────────────────────────────────────
296
-
297
- const bearer = (token: string) => ({ authorization: `Bearer ${token}` });
298
-
299
- async function buildApp(): Promise<FastifyInstance> {
300
- const app = Fastify();
301
- await app.register(startProjectListingRoute);
302
- await app.register(patchProjectListingDraftRoute);
303
- await app.register(submitProjectListingRoute);
304
- await app.ready();
305
- return app;
306
- }
307
-
308
- async function startDraft(
309
- app: FastifyInstance,
310
- ): Promise<{ id: string; resumeToken: string }> {
311
- const res = await app.inject({
312
- method: "POST",
313
- url: "/v1/project-listings",
314
- payload: START_PAYLOAD,
315
- });
316
- expect(res.statusCode).toBe(201);
317
- return (res.json() as { data: { id: string; resumeToken: string } }).data;
318
- }
319
-
320
- const patch = (
321
- app: FastifyInstance,
322
- draft: { id: string; resumeToken: string },
323
- payload: Record<string, unknown>,
324
- ) =>
325
- app.inject({
326
- method: "PATCH",
327
- url: `/v1/project-listings/drafts/${draft.id}`,
328
- headers: bearer(draft.resumeToken),
329
- payload,
330
- });
331
-
332
- const submit = (app: FastifyInstance, draft: { id: string; resumeToken: string }) =>
333
- app.inject({
334
- method: "POST",
335
- url: `/v1/project-listings/drafts/${draft.id}/submit`,
336
- headers: bearer(draft.resumeToken),
337
- });
338
-
339
- const messageOf = (res: { json: () => unknown }) =>
340
- (res.json() as { error: { message: string } }).error.message;
341
-
342
- // ─── Tests ──────────────────────────────────────────────────────────────────
343
-
344
- describe("the site's own application config (#5048 D5/D6)", () => {
345
- setupLeadFileEnv("project-listing-configured");
346
- let app: FastifyInstance;
347
-
348
- beforeEach(async () => {
349
- jest.clearAllMocks();
350
- installStore();
351
- app = await buildApp();
352
- });
353
-
354
- afterEach(async () => {
355
- await app.close();
356
- });
357
-
358
- // ── D6 — the word caps are the site's numbers ──
359
-
360
- describe("configured word caps (D6)", () => {
361
- /** Three words of headline, five of one-liner — nobody's platform default. */
362
- const TIGHT_CAPS = { wordCaps: { headline: 3, oneLiner: 5 } };
363
-
364
- it("patch: refuses a headline over THIS SITE's cap, naming the site's number", async () => {
365
- configData = TIGHT_CAPS;
366
- const draft = await startDraft(app);
367
-
368
- const res = await patch(app, draft, { headline: words(4) });
369
-
370
- expect(res.statusCode).toBe(400);
371
- // Pinned to the CONFIGURED number, not to a constant: a message naming
372
- // ten here would mean the cap came from the package, and the four-word
373
- // refusal would be a coincidence of the platform default rather than
374
- // this site's terms being enforced.
375
- expect(messageOf(res)).toBe("headline must be 3 words or fewer");
376
- expect(messageOf(res)).not.toContain("10");
377
- expect(rows[0]!["headline"]).toBeNull();
378
- });
379
-
380
- it("patch: ACCEPTS a headline at exactly the site's cap", async () => {
381
- // The other half of the pair. Without it the test above passes just as
382
- // well against a surface that refuses every headline it is given.
383
- configData = TIGHT_CAPS;
384
- const draft = await startDraft(app);
385
-
386
- const res = await patch(app, draft, { headline: words(3) });
387
-
388
- expect(res.statusCode).toBe(200);
389
- expect(rows[0]!["headline"]).toBe(words(3));
390
- });
391
-
392
- it("patch: enforces the site's oneLiner cap too, at its own number", async () => {
393
- configData = TIGHT_CAPS;
394
- const draft = await startDraft(app);
395
-
396
- const over = await patch(app, draft, { oneLiner: words(6) });
397
- const at = await patch(app, draft, { oneLiner: words(5) });
398
-
399
- expect(over.statusCode).toBe(400);
400
- expect(messageOf(over)).toBe("oneLiner must be 5 words or fewer");
401
- expect(at.statusCode).toBe(200);
402
- expect(rows[0]!["oneLiner"]).toBe(words(5));
403
- });
404
-
405
- it("patch: a site with NO config row keeps the previous ten-word headline behaviour", async () => {
406
- // The defaults reproduce #5036's constants exactly, so a site that says
407
- // nothing sees no change — which is the whole claim D6 makes about
408
- // turning a constant into configuration.
409
- configData = null;
410
- const draft = await startDraft(app);
411
-
412
- const ten = await patch(app, draft, { headline: words(10) });
413
- const eleven = await patch(app, draft, { headline: words(11) });
414
-
415
- expect(ten.statusCode).toBe(200);
416
- expect(eleven.statusCode).toBe(400);
417
- expect(messageOf(eleven)).toBe("headline must be 10 words or fewer");
418
- // The eleventh word never landed on the row.
419
- expect(rows[0]!["headline"]).toBe(words(10));
420
- });
421
-
422
- it("patch: a site with NO config row keeps the previous twenty-five-word oneLiner behaviour", async () => {
423
- configData = null;
424
- const draft = await startDraft(app);
425
-
426
- const twentyFive = await patch(app, draft, { oneLiner: words(25) });
427
- const twentySix = await patch(app, draft, { oneLiner: words(26) });
428
-
429
- expect(twentyFive.statusCode).toBe(200);
430
- expect(twentySix.statusCode).toBe(400);
431
- expect(messageOf(twentySix)).toBe("oneLiner must be 25 words or fewer");
432
- });
433
- });
434
-
435
- // ── D5 — completeness derives from the collected-field set ──
436
-
437
- describe("derived completeness (D5)", () => {
438
- it("submit: a site that does not collect `address` accepts a draft that has none", async () => {
439
- // THE regression guard. #5036's fixed schema required `address` of every
440
- // site; a site whose step set never asks for one would have its founders
441
- // refused at submit, naming a question they were never shown.
442
- configData = { collectedFields: COLLECTED_WITHOUT_ADDRESS };
443
- const draft = await startDraft(app);
444
- await patch(app, draft, APPLICATION_WITHOUT_ADDRESS);
445
-
446
- const res = await submit(app, draft);
447
-
448
- expect(res.statusCode).toBe(200);
449
- expect(res.json()).toEqual({ ok: true, data: { id: draft.id, slug: "my-project" } });
450
- expect(rows[0]!["status"]).toBe("requested");
451
- // Never collected, so never stored — not silently defaulted to something.
452
- expect(rows[0]!["address"]).toBeNull();
453
- });
454
-
455
- it("submit: the DEFAULT config still refuses that same draft, naming `address`", async () => {
456
- // The other half: the field is only optional because THIS SITE said so.
457
- configData = null;
458
- const draft = await startDraft(app);
459
- await patch(app, draft, APPLICATION_WITHOUT_ADDRESS);
460
-
461
- const res = await submit(app, draft);
462
-
463
- expect(res.statusCode).toBe(422);
464
- const body = res.json() as { error: { code: string; missingFields: string[] } };
465
- expect(body.error.code).toBe("incomplete_application");
466
- expect(body.error.missingFields).toEqual(["address"]);
467
- expect(rows[0]!["status"]).toBe("draft");
468
- });
469
-
470
- it("patch: REFUSES a write to a field the site does not collect", async () => {
471
- // The collected set is a WRITE gate, not only a completeness floor.
472
- // `address` rides the public read by design (#5036 D6), so a site whose
473
- // step set omits the address step must not have one written into a draft
474
- // by an anonymous caller who knows the field name — and then published on
475
- // its listing page. Narrowing `submit` alone left that open, because a
476
- // value already on the row is simply carried.
477
- configData = { collectedFields: COLLECTED_WITHOUT_ADDRESS };
478
- const draft = await startDraft(app);
479
-
480
- const res = await patch(app, draft, { address: COMPLETE_APPLICATION.address });
481
-
482
- expect(res.statusCode).toBe(400);
483
- expect(rows[0]!["address"]).toBeNull();
484
- });
485
-
486
- it("submit: a value ALREADY on the row for an uncollected field does not block submit", async () => {
487
- // The other direction, and the reason `buildProjectListingSubmitSchema`
488
- // DROPS an uncollected field rather than making it optional: a site that
489
- // narrows its step set after a draft was opened must not strand that
490
- // draft. The write gate above stops NEW writes; this stops an existing
491
- // value from failing `.strict()`.
492
- configData = null;
493
- const draft = await startDraft(app);
494
- await patch(app, draft, COMPLETE_APPLICATION); // address included
495
-
496
- configData = { collectedFields: COLLECTED_WITHOUT_ADDRESS };
497
- const res = await submit(app, draft);
498
-
499
- expect(res.statusCode).toBe(200);
500
- expect(rows[0]!["status"]).toBe("requested");
501
- expect(rows[0]!["address"]).toBe(COMPLETE_APPLICATION.address);
502
- });
503
-
504
- it("submit: a collected-but-OPTIONAL field does not block submit when absent", async () => {
505
- configData = null;
506
- // These three are collected by default and still optional — the
507
- // distinction the missing-field list turns on.
508
- for (const field of ["url", "anythingElse", "founderCompany"]) {
509
- expect(SITE_LISTING_CONFIG_DEFAULTS.collectedFields).toContain(field);
510
- }
511
-
512
- const draft = await startDraft(app);
513
- await patch(app, draft, COMPLETE_APPLICATION); // carries none of the three
514
-
515
- const res = await submit(app, draft);
516
-
517
- expect(res.statusCode).toBe(200);
518
- expect(rows[0]!["url"]).toBeNull();
519
- expect(rows[0]!["anythingElse"]).toBeNull();
520
- expect(rows[0]!["founderCompany"]).toBeNull();
521
- });
522
- });
523
-
524
- // ── D7 — the controls that deliberately do not ship ──
525
-
526
- describe("no anti-automation control ships (D7)", () => {
527
- const read = (relative: string) =>
528
- readFileSync(join(__dirname, "..", "..", "..", relative), "utf8");
529
-
530
- const SURFACE_FILES = [
531
- "routes/project-listings/start.ts",
532
- "routes/project-listings/patch-draft.ts",
533
- "routes/project-listings/public.ts",
534
- "routes/project-listings/submit.ts",
535
- "services/project-listings.ts",
536
- ];
537
-
538
- it("no honeypot field exists in the payload the surface accepts", async () => {
539
- // Asserted on the SCHEMAS, not on the prose: a decoy field would have to
540
- // be accepted somewhere to be a honeypot at all.
541
- const fields = [
542
- ...Object.keys(projectListingStartSchema.shape),
543
- ...Object.keys(projectListingApplicationFieldsSchema.shape),
544
- ];
545
- for (const field of fields) {
546
- expect(field).not.toMatch(/honey|_?trap|decoy|confirmEmail|website2/i);
547
- }
548
- // And nothing on the surface names one.
549
- for (const file of SURFACE_FILES) {
550
- expect(read(file)).not.toMatch(/honeypot/i);
551
- }
552
- });
553
-
554
- it("no timing heuristic gates the start-to-submit interval", async () => {
555
- // #5039 deliberately opens the agent channel a "too fast to be human"
556
- // check would close, and an agent completes a ten-step form in
557
- // milliseconds. A named heuristic anywhere on the surface is the
558
- // regression; so is `submit` reaching for a clock to compare the draft's
559
- // own `createdAt` against.
560
- for (const file of SURFACE_FILES) {
561
- expect(read(file)).not.toMatch(
562
- /tooFast|too_fast|minElapsed|minSeconds|minDuration|dwellTime|timeOnPage|humanTiming/i,
563
- );
564
- }
565
-
566
- const service = read("services/project-listings.ts");
567
- const submitBody = service.slice(
568
- service.indexOf("export async function submitProjectListingDraft"),
569
- );
570
- const submitOnly = submitBody.slice(0, submitBody.indexOf("\nfunction isUniqueViolation"));
571
- expect(submitOnly).not.toContain("createdAt");
572
- expect(submitOnly).not.toContain("Date.now(");
573
- });
574
-
575
- it("an application completed in the same millisecond as its draft still submits", async () => {
576
- // The behavioural half: nothing about how fast the eleven fields arrived
577
- // is consulted. This whole test runs inside one tick.
578
- configData = null;
579
- const draft = await startDraft(app);
580
- await patch(app, draft, COMPLETE_APPLICATION);
581
-
582
- const res = await submit(app, draft);
583
-
584
- expect(res.statusCode).toBe(200);
585
- });
586
- });
587
- });
588
-
589
- // ── #6335 — the explicit workspace setup above is load-bearing ────────────
590
- //
591
- // Every case in this file states that this suite's site has a workspace.
592
- // This one takes that away, and proves the statement was doing work rather
593
- // than decorating the setup: `startProjectListingDraft` resolves the site it
594
- // is filing against (`resolveWorkspaceIdForSite`, services/project-listings.ts)
595
- // and refuses BEFORE any row is written. With the shared prisma mock's old
596
- // permissive default in place this case could not be written at all — every
597
- // id resolved, so the fail-closed path was unreachable from a route test.
598
- describe("#6335 — start fails closed when the site names no workspace", () => {
599
- let app: FastifyInstance;
600
-
601
- beforeEach(async () => {
602
- jest.clearAllMocks();
603
- installStore();
604
- mockNoWorkspace(prisma);
605
- app = await buildApp();
606
- });
607
-
608
- afterEach(async () => {
609
- await app.close();
610
- });
611
-
612
- it("answers 503 tenant_unresolved and creates no ProjectListing", async () => {
613
- const res = await app.inject({
614
- method: "POST",
615
- url: "/v1/project-listings",
616
- payload: START_PAYLOAD,
617
- });
618
-
619
- expect(res.statusCode).toBe(503);
620
- expect((res.json() as { error: { code: string } }).error.code).toBe(
621
- "tenant_unresolved",
622
- );
623
- expect(prisma.projectListing.create).not.toHaveBeenCalled();
624
- expect(rows).toHaveLength(0);
625
- });
626
- });