create-ailk 0.24.0 → 0.26.0

package/templates/apps/api/src/routes/webhooks/__tests__/stripe-flow-checkout.test.ts

@@ -1,449 +0,0 @@
-/**
- * POST /api/webhooks/stripe — the recommender FlowCheckout stamp (#4838).
- *
- * The stripe.test.ts mock shape: `@working-theory/analytics/server` `track`,
- * the prisma auto-mock, `@working-theory/stripe-client`'s
- * `verifyWebhookSignature` at the package boundary. AC-1 … AC-5. The four
- * pre-existing webhook suites are the regression floor and are not edited.
- * AC-6 (#4862) adds the `no_payment_required` (zero-due) case.
- */
-import type { FastifyInstance } from "fastify";
-import Fastify from "fastify";
-
-const mockTrack = jest.fn().mockResolvedValue(undefined);
-// Commerce claim (D-64, #5796): the receiver is a base-tree primitive gated on
-// the JWT `commerce` claim, so every case in this file is a COMMERCE-CLAIMED
-// deployment — which is what each one was already asserting before the gate
-// existed. The unclaimed matrix lives in
-// `src/__tests__/commerce-claim-registration.test.ts`.
-jest.mock("@working-theory/license", () => ({
-  checkLicense: jest.fn().mockResolvedValue({
-    tier: "pro",
-    plan: "pro-monthly",
-    features: ["commerce"],
-    expiresAt: null,
-    revoked: false,
-  }),
-}));
-
-jest.mock("@working-theory/analytics/server", () => ({
-  track: (...args: unknown[]) => mockTrack(...args),
-}));
-
-// eslint-disable-next-line no-restricted-syntax -- lib/prisma.ts wraps the external DB boundary (PrismaClient requires a live connection); __mocks__/prisma.ts is the repo-standard test double for this boundary.
-jest.mock("../../../lib/prisma.js");
-
-const mockVerifyWebhookSignature = jest.fn();
-class MockStripeWebhookSignatureError extends Error {
-  constructor(message: string) {
-    super(message);
-    this.name = "StripeWebhookSignatureError";
-  }
-}
-jest.mock("@working-theory/stripe-client", () => ({
-  verifyWebhookSignature: (...args: unknown[]) => mockVerifyWebhookSignature(...args),
-  StripeWebhookSignatureError: MockStripeWebhookSignatureError,
-  assertSandboxKey: jest.fn(),
-  createCheckoutSession: jest.fn(),
-  getStripeClient: jest.fn(),
-  STRIPE_API_VERSION: "2024-06-20",
-  StripeConfigError: class StripeConfigError extends Error {},
-  UnknownProductCodeError: class UnknownProductCodeError extends Error {},
-  WEBHOOK_TOLERANCE_SECONDS: 300,
-}));
-
-// #8450 D10 — the handler drops an event whose livemode is not the process's,
-// so the Person cases below run the process in their event's own mode.
-let mockKeyMode: "test" | "live" = "test";
-// eslint-disable-next-line no-restricted-syntax -- jest mock factory must be hoisted
-jest.mock("../../../lib/stripe.js", () => ({
-  ...jest.requireActual("../../../lib/stripe.js"),
-  stripeKeyMode: () => mockKeyMode,
-}));
-
-import * as configModule from "../../../config/index.js";
-import { stripeWebhookHandler } from "../stripe.js";
-import { __resetIdempotencyStore } from "../../../lib/webhook-idempotency.js";
-import { prisma } from "../../../lib/prisma.js";
-
-// ── Helpers ──────────────────────────────────────────────────────────────────
-
-const FLOW_CHECKOUT_ID = "flchk_test_1";
-const SESSION_ID = "cs_test_session_12345678901234567890";
-const CUSTOMER_ID = "cus_test_12345678901234567890";
-const EMAIL = "alice@example.com";
-const PERMALINK = "eyJ2ZXJzaW9uIjoxLCJmbG93U2x1ZyI6ImFpbGstcmVjbyJ9";
-
-function sessionEvent(type: "checkout.session.completed" | "checkout.session.expired", object: Record<string, unknown> = {}) {
-  return {
-    id: "evt_test_12345678abcdef",
-    type,
-    data: {
-      object: {
-        id: SESSION_ID,
-        payment_status: "paid",
-        amount_total: 24900,
-        currency: "usd",
-        customer: CUSTOMER_ID,
-        customer_details: { email: EMAIL },
-        metadata: { flowCheckoutId: FLOW_CHECKOUT_ID, flowSlug: "ailk-reco", offerKey: "pro", permalink: PERMALINK },
-        ...object,
-      },
-    },
-  };
-}
-
-type LogCall = [unknown, string?];
-const logCalls: LogCall[] = [];
-
-async function buildTestServer(): Promise<FastifyInstance> {
-  const server = Fastify({ logger: false });
-  await server.register(async (webhooksScope) => {
-    webhooksScope.addContentTypeParser("application/json", { parseAs: "buffer" }, (_req, body, done) => {
-      done(null, body);
-    });
-    webhooksScope.addHook("onRequest", async (request) => {
-      for (const level of ["info", "warn", "error"] as const) {
-        const original = request.log[level].bind(request.log);
-        request.log[level] = ((...args: unknown[]) => {
-          logCalls.push(args as LogCall);
-          return (original as (...a: unknown[]) => void)(...args);
-        }) as typeof request.log.info;
-      }
-    });
-    webhooksScope.post("/v1/webhooks/stripe", stripeWebhookHandler);
-  });
-  await server.ready();
-  return server;
-}
-
-const VALID_BODY = Buffer.from(JSON.stringify({ type: "test" }));
-const HEADERS = { "content-type": "application/json", "stripe-signature": "t=1234,v1=abc" };
-
-let server: FastifyInstance;
-
-beforeEach(async () => {
-  jest.clearAllMocks();
-  mockKeyMode = "test";
-  logCalls.length = 0;
-  __resetIdempotencyStore();
-  jest.replaceProperty(configModule, "config", {
-    ...configModule.config,
-    STRIPE_WEBHOOK_SECRET: "whsec_test_secret",
-  });
-  (prisma.flowCheckout.findUnique as jest.Mock).mockResolvedValue({ amountMinor: 24900 });
-  (prisma.flowCheckout.updateMany as jest.Mock).mockResolvedValue({ count: 1 });
-  (prisma.user.findFirst as jest.Mock).mockResolvedValue(null);
-  (prisma.user.findUnique as jest.Mock).mockResolvedValue(null);
-  server = await buildTestServer();
-});
-
-afterEach(async () => {
-  await server.close();
-  jest.restoreAllMocks();
-});
-
-async function post() {
-  return server.inject({ method: "POST", url: "/v1/webhooks/stripe", payload: VALID_BODY, headers: HEADERS });
-}
-
-function stampCall() {
-  expect(prisma.flowCheckout.updateMany).toHaveBeenCalledTimes(1);
-  return (prisma.flowCheckout.updateMany as jest.Mock).mock.calls[0][0];
-}
-
-// ── AC-1 — completed stamps the row once, guarded, beside the legacy tasks ──
-
-describe("AC-1 — completed stamps the row once, guarded, beside the legacy tasks", () => {
-  it("stamps completed with the guard, the session id and the customer; telemetry + billing still run", async () => {
-    mockVerifyWebhookSignature.mockReturnValue(sessionEvent("checkout.session.completed"));
-    const res = await post();
-    expect(res.statusCode).toBe(200);
-    expect(JSON.parse(res.body)).toEqual({ received: true });
-
-    const call = stampCall();
-    expect(call.where).toEqual({ id: FLOW_CHECKOUT_ID, status: "created" });
-    expect(call.data.status).toBe("completed");
-    expect(call.data.completedAt).toBeInstanceOf(Date);
-    expect(call.data.stripeSessionId).toBe(SESSION_ID);
-    expect(call.data.stripeCustomerId).toBe(CUSTOMER_ID);
-
-    // The legacy tasks, exactly as stripe.test.ts asserts them.
-    expect(mockTrack).toHaveBeenCalledTimes(1);
-    expect(mockTrack).toHaveBeenCalledWith("purchase-completed", {
-      amount: 24900,
-      currency: "usd",
-      productId: undefined,
-      eventType: "checkout.session.completed",
-      eventIdPrefix: "evt_test",
-    });
-    expect(prisma.user.findFirst).toHaveBeenCalledWith({
-      where: { billingProvider: "stripe", billingCustomerId: CUSTOMER_ID },
-      select: { id: true },
-    });
-    expect(prisma.user.findUnique).not.toHaveBeenCalled();
-  });
-});
-
-// ── AC-2 — expired stamps expired ───────────────────────────────────────────
-
-describe("AC-2 — expired stamps expired", () => {
-  it("stamps status expired under the same guard, with no completedAt", async () => {
-    mockVerifyWebhookSignature.mockReturnValue(sessionEvent("checkout.session.expired"));
-    const res = await post();
-    expect(res.statusCode).toBe(200);
-    const call = stampCall();
-    expect(call.where.status).toBe("created");
-    expect(call.where.id).toBe(FLOW_CHECKOUT_ID);
-    expect(call.data).toEqual({ status: "expired" });
-    expect(call.data).not.toHaveProperty("completedAt");
-    expect(prisma.flowCheckout.findUnique).not.toHaveBeenCalled();
-    expect(mockTrack).not.toHaveBeenCalled();
-  });
-});
-
-// ── AC-3 — the legacy paths are byte-unchanged ──────────────────────────────
-
-describe("AC-3 — the legacy paths are byte-unchanged", () => {
-  it("an event without flowCheckoutId never touches prisma.flowCheckout", async () => {
-    mockVerifyWebhookSignature.mockReturnValue(
-      sessionEvent("checkout.session.completed", { metadata: { productId: "starter" } }),
-    );
-    const res = await post();
-    expect(res.statusCode).toBe(200);
-    expect(prisma.flowCheckout.findUnique).not.toHaveBeenCalled();
-    expect(prisma.flowCheckout.updateMany).not.toHaveBeenCalled();
-    expect(mockTrack).toHaveBeenCalledTimes(1);
-  });
-
-  it("an expired event without the key is a no-op 200 that logs the unhandled-event line", async () => {
-    mockVerifyWebhookSignature.mockReturnValue(sessionEvent("checkout.session.expired", { metadata: null }));
-    expect((await post()).statusCode).toBe(200);
-    expect(prisma.flowCheckout.updateMany).not.toHaveBeenCalled();
-    const unhandled = logCalls.find((c) => c[1] === "unhandled webhook event");
-    expect(unhandled?.[0]).toEqual({ eventType: "checkout.session.expired", eventIdPrefix: "evt_test" });
-  });
-
-  it("a completed session that is not paid logs `unpaid` and does NOT stamp — the row stays created", async () => {
-    mockVerifyWebhookSignature.mockReturnValue(
-      sessionEvent("checkout.session.completed", { payment_status: "unpaid" }),
-    );
-    expect((await post()).statusCode).toBe(200);
-    expect(prisma.flowCheckout.findUnique).not.toHaveBeenCalled();
-    expect(prisma.flowCheckout.updateMany).not.toHaveBeenCalled();
-    const unpaid = logCalls.find((c) => (c[0] as { outcome?: string })?.outcome === "unpaid");
-    expect(unpaid?.[0]).toEqual({
-      eventIdPrefix: "evt_test",
-      flowCheckoutIdPrefix: FLOW_CHECKOUT_ID.substring(0, 8),
-      outcome: "unpaid",
-    });
-    // The legacy tasks still ran for the event.
-    expect(mockTrack).toHaveBeenCalledTimes(1);
-  });
-});
-
-// ── AC-6 — a zero-due (no_payment_required) session stamps completed ───────
-
-describe("AC-6 — no_payment_required stamps completed exactly as paid (#4862)", () => {
-  it("stamps completed with the guard, the session id and the customer; telemetry + billing still run", async () => {
-    mockVerifyWebhookSignature.mockReturnValue(
-      sessionEvent("checkout.session.completed", { payment_status: "no_payment_required" }),
-    );
-    const res = await post();
-    expect(res.statusCode).toBe(200);
-    expect(JSON.parse(res.body)).toEqual({ received: true });
-
-    const call = stampCall();
-    expect(call.where).toEqual({ id: FLOW_CHECKOUT_ID, status: "created" });
-    expect(call.data.status).toBe("completed");
-    expect(call.data.completedAt).toBeInstanceOf(Date);
-    expect(call.data.stripeSessionId).toBe(SESSION_ID);
-    expect(call.data.stripeCustomerId).toBe(CUSTOMER_ID);
-
-    expect(mockTrack).toHaveBeenCalledTimes(1);
-    const unpaid = logCalls.find((c) => (c[0] as { outcome?: string })?.outcome === "unpaid");
-    expect(unpaid).toBeUndefined();
-  });
-});
-
-// ── AC-4 — never a retry storm ──────────────────────────────────────────────
-
-describe("AC-4 — never a retry storm", () => {
-  it("count 0 logs stale_or_unknown and still 200s", async () => {
-    (prisma.flowCheckout.updateMany as jest.Mock).mockResolvedValue({ count: 0 });
-    mockVerifyWebhookSignature.mockReturnValue(sessionEvent("checkout.session.completed"));
-    expect((await post()).statusCode).toBe(200);
-    const stale = logCalls.find((c) => (c[0] as { outcome?: string })?.outcome === "stale_or_unknown");
-    expect(stale).toBeDefined();
-  });
-
-  it("an updateMany rejection logs an error and still 200s", async () => {
-    (prisma.flowCheckout.updateMany as jest.Mock).mockRejectedValue(new Error("db down"));
-    mockVerifyWebhookSignature.mockReturnValue(sessionEvent("checkout.session.completed"));
-    expect((await post()).statusCode).toBe(200);
-    const failed = logCalls.find((c) => (c[0] as { outcome?: string })?.outcome === "stamp_failed");
-    expect(failed).toBeDefined();
-  });
-
-  it("a charged amount that differs from the quote logs both integers and STILL stamps completed", async () => {
-    mockVerifyWebhookSignature.mockReturnValue(sessionEvent("checkout.session.completed", { amount_total: 25000 }));
-    expect((await post()).statusCode).toBe(200);
-    const mismatch = logCalls.find((c) => (c[0] as { outcome?: string })?.outcome === "amount_mismatch");
-    expect(mismatch?.[0]).toEqual({
-      eventIdPrefix: "evt_test",
-      flowCheckoutIdPrefix: FLOW_CHECKOUT_ID.substring(0, 8),
-      outcome: "amount_mismatch",
-      expected: 24900,
-      received: 25000,
-    });
-    expect(stampCall().data.status).toBe("completed");
-  });
-});
-
-// ── AC-5 — PII boundary ─────────────────────────────────────────────────────
-
-describe("AC-5 — PII boundary", () => {
-  it.each([
-    ["the AC-1 event", sessionEvent("checkout.session.completed"), null],
-    ["the AC-4 mismatch event", sessionEvent("checkout.session.completed", { amount_total: 25000 }), null],
-    [
-      "the stamp_failed branch",
-      sessionEvent("checkout.session.completed"),
-      new Error(`connection refused for ${EMAIL} at ${CUSTOMER_ID}`),
-    ],
-  ])("every log line for %s carries no email, customer_details, permalink, or a full cus_/cs_ id", async (_name, event, rejection) => {
-    if (rejection) (prisma.flowCheckout.updateMany as jest.Mock).mockRejectedValue(rejection);
-    mockVerifyWebhookSignature.mockReturnValue(event);
-    expect((await post()).statusCode).toBe(200);
-    const ALLOWED = new Set(["eventIdPrefix", "flowCheckoutIdPrefix", "outcome", "expected", "received", "errName"]);
-    const stampLines = logCalls.filter((c) => typeof c[0] === "object" && c[0] !== null && "flowCheckoutIdPrefix" in c[0]);
-    expect(stampLines.length).toBeGreaterThan(0);
-    for (const line of stampLines) {
-      for (const key of Object.keys(line[0] as object)) expect(ALLOWED.has(key)).toBe(true);
-    }
-    if (rejection) {
-      const failed = stampLines.find((c) => (c[0] as { outcome?: string }).outcome === "stamp_failed");
-      expect(failed?.[0]).toEqual({
-        eventIdPrefix: "evt_test",
-        flowCheckoutIdPrefix: FLOW_CHECKOUT_ID.substring(0, 8),
-        outcome: "stamp_failed",
-        errName: "Error",
-      });
-    }
-    for (const line of logCalls) {
-      const text = JSON.stringify(line);
-      expect(text).not.toContain(EMAIL);
-      expect(text).not.toContain("customer_details");
-      expect(text).not.toContain(PERMALINK);
-      for (const token of text.match(/\b(?:cus|cs)_[A-Za-z0-9_]+/g) ?? []) expect(token.length).toBeLessThanOrEqual(8);
-    }
-  });
-});
-
-// ── #852 D6 — the hub checkout's Person (AC-3) ──────────────────────────────
-//
-// After the stamp, `recordCheckoutPerson` reads the checkout row THIS session
-// completed, then its lead, then finds or creates the Person — with
-// `session.customer` as the customer id only on a live-mode event. Observed
-// through the shared mock's delegates: the `person.findFirst` keyed on a
-// customer id is the customer-id step, so its absence means no id was passed.
-describe("the hub checkout's Person (#852 D6, AC-3)", () => {
-  const WORKSPACE = "wksp_00000000-0000-7000-8000-000000000852";
-  const LEAD = "lead_00000000-0000-7000-8000-000000000852";
-  const personFindFirst = () => jest.mocked(prisma.person.findFirst);
-  const personCalls = () =>
-    [prisma.person.findFirst, prisma.person.createMany, prisma.person.updateMany].reduce(
-      (n, fn) => n + jest.mocked(fn).mock.calls.length,
-      0,
-    );
-  const personLines = () =>
-    logCalls.filter(
-      (c) => typeof c[0] === "object" && c[0] !== null && String((c[0] as { outcome?: string }).outcome).startsWith("person_"),
-    );
-  const liveEvent = (livemode: boolean, object: Record<string, unknown> = {}) => {
-    mockKeyMode = livemode ? "live" : "test";
-    return {
-      ...sessionEvent("checkout.session.completed", { customer: "cus_9", ...object }),
-      livemode,
-    };
-  };
-
-  beforeEach(() => {
-    (prisma.flowCheckout.findFirst as jest.Mock).mockResolvedValue({ leadId: LEAD, workspaceId: WORKSPACE });
-    (prisma.lead.findFirst as jest.Mock).mockResolvedValue({ email: EMAIL });
-  });
-
-  it("a paid live-mode hub session finds the Person of its checkout's lead with session.customer", async () => {
-    personFindFirst().mockResolvedValueOnce(null); // no Person carries cus_9 yet
-    mockVerifyWebhookSignature.mockReturnValue(liveEvent(true));
-    expect((await post()).statusCode).toBe(200);
-
-    expect(prisma.flowCheckout.findFirst).toHaveBeenCalledWith({
-      where: { id: FLOW_CHECKOUT_ID, stripeSessionId: SESSION_ID, status: "completed" },
-      select: { leadId: true, workspaceId: true },
-    });
-    expect(prisma.lead.findFirst).toHaveBeenCalledWith({
-      where: { id: LEAD, workspaceId: WORKSPACE },
-      select: { email: true },
-    });
-    expect(personFindFirst()).toHaveBeenCalledWith(
-      expect.objectContaining({ where: { workspaceId: WORKSPACE, billingCustomerId: "cus_9" } }),
-    );
-    expect(personFindFirst()).toHaveBeenCalledWith(
-      expect.objectContaining({ where: { workspaceId: WORKSPACE, email: EMAIL } }),
-    );
-    // The stamp settles before the Person step reads the row it completed.
-    expect((prisma.flowCheckout.updateMany as jest.Mock).mock.invocationCallOrder[0]!).toBeLessThan(
-      (prisma.flowCheckout.findFirst as jest.Mock).mock.invocationCallOrder[0]!,
-    );
-  });
-
-  it("the same session in test mode passes no customer id", async () => {
-    mockVerifyWebhookSignature.mockReturnValue(liveEvent(false));
-    expect((await post()).statusCode).toBe(200);
-
-    expect(personFindFirst()).toHaveBeenCalledWith(
-      expect.objectContaining({ where: { workspaceId: WORKSPACE, email: EMAIL } }),
-    );
-    for (const [args] of personFindFirst().mock.calls) {
-      expect((args as { where: Record<string, unknown> }).where).not.toHaveProperty("billingCustomerId");
-    }
-  });
-
-  it("a session naming a checkout another session completed makes no person call and logs person_skipped", async () => {
-    // The read is keyed on THIS session's id, so another session's row is no row.
-    (prisma.flowCheckout.findFirst as jest.Mock).mockResolvedValue(null);
-    mockVerifyWebhookSignature.mockReturnValue(liveEvent(true));
-    expect((await post()).statusCode).toBe(200);
-
-    expect(personCalls()).toBe(0);
-    expect(personLines().map((c) => (c[0] as { outcome: string }).outcome)).toEqual(["person_skipped"]);
-  });
-
-  it.each([
-    ["a foreign-site session", { metadata: { flowCheckoutId: FLOW_CHECKOUT_ID, site: "wksp_other-spoke" } }],
-    ["an unpaid session", { payment_status: "unpaid" }],
-    ["a session with no flowCheckoutId", { metadata: { flowSlug: "ailk-reco" } }],
-  ])("%s makes no person call", async (_label, object) => {
-    mockVerifyWebhookSignature.mockReturnValue(liveEvent(true, object));
-    expect((await post()).statusCode).toBe(200);
-    expect(prisma.flowCheckout.findFirst).not.toHaveBeenCalled();
-    expect(personCalls()).toBe(0);
-  });
-
-  it("a Person step that throws still answers 200 and logs person_failed with no email or customer id", async () => {
-    personFindFirst().mockRejectedValueOnce(new Error(`relation people down for ${EMAIL} cus_9`));
-    mockVerifyWebhookSignature.mockReturnValue(liveEvent(true));
-    expect((await post()).statusCode).toBe(200);
-
-    const lines = personLines();
-    expect(lines.map((c) => c[0])).toEqual([
-      { eventIdPrefix: "evt_test", flowCheckoutIdPrefix: FLOW_CHECKOUT_ID.substring(0, 8), outcome: "person_failed" },
-    ]);
-    for (const line of logCalls) {
-      const text = JSON.stringify(line);
-      expect(text).not.toContain(EMAIL);
-      expect(text).not.toContain("cus_9");
-    }
-  });
-});