create-ailk 0.24.0 → 0.26.0

package/templates/apps/api/src/routes/content/rate-limit.ts

@@ -1,22 +0,0 @@
-/**
- * Rate-limit configuration for the public content API.
- *
- * `CONTENT_RATE_LIMIT_UNAUTH` (60 req/min/IP) is the GLOBAL ceiling
- * `server.ts` registers — agents reading the public API generally don't
- * authenticate.
- *
- * `CONTENT_RATE_LIMIT_AUTH` (600 req/min) is the SCOPE-LOCAL ceiling raised on
- * the tenant-guarded content-write scope (#5853 D12,
- * `routes/workspaces/content.ts`), which is the first scope in this app with an
- * authenticated identity to hang it on. Sixty saves a minute is below what a
- * real editing session generates, so an autosaving editor under the global
- * ceiling would rate-limit its own user.
- *
- * Both limiters are in-memory and per-process (`server.ts`'s own comment), so
- * neither is keyed on the tenant: a per-workspace key would be a fiction on a
- * multi-instance deployment. The store swap is the change that makes one
- * possible.
- */
-export const CONTENT_RATE_LIMIT_UNAUTH = 60;
-export const CONTENT_RATE_LIMIT_AUTH = 600;
-export const CONTENT_RATE_LIMIT_WINDOW = "1 minute";

package/templates/apps/api/src/routes/content/search.ts

@@ -1,100 +0,0 @@
-/**
- * GET /v1/content/search
- *
- * Keyword search across published pages (#5831), scored by the adapter on
- * title / description / body. The HTTP twin of the `search_content` MCP tool:
- * same arguments, same adapter call, same result set — which is the API ↔ MCP
- * parity contract in the root CLAUDE.md. Until this route existed the parity
- * was one-sided, the tool having no endpoint to map to.
- *
- * Query — parsed with `contentSearchQuerySchema` (`@working-theory/validation`),
- * the export the `search_content` MCP tool parses with too, so the pair
- * accepts and rejects the same inputs (#7167):
- *   q        required, 1..200 chars — the search string. The ceiling bounds
- *            the work an unauthenticated caller can ask of the scorer per
- *            request.
- *   type     optional — a schema.org page type
- *   category optional — a LEAF slug from the site-category registry. Outside
- *            the registry is a 400, not an empty result: the registry is
- *            closed, so a bad slug is a caller mistake worth surfacing.
- *   limit    optional, 1..50, default 10
- *   locale   optional — BCP-47; invalid or unknown values silently fall back
- *            to the project's default locale (AC-i18n-07), matching every
- *            other content read.
- *
- * Registered BEFORE `/v1/content/:type` in `index.ts`. Fastify's radix router
- * prefers a static segment over a parametric one regardless of order — the
- * ordering is belt-and-braces, and `/v1/content/types` is the same shape that
- * already proves it.
- *
- * The response is an `ItemList` JSON-LD document, built by
- * `searchContentItemList` in `@working-theory/content-adapters` — the shared
- * seam the MCP tool answers through, so the pair cannot diverge. `items` is
- * the adapter's own `SearchResult[]`, unreshaped.
- *
- * Rate limiting is inherited: `server.ts` registers the limiter GLOBALLY with
- * the content ceiling (`rate-limit.ts`'s `CONTENT_RATE_LIMIT_UNAUTH` /
- * `_WINDOW`), so this route is covered without registering one of its own.
- *
- * Which site this read serves is resolved BEFORE any content query (#5852,
- * #5910), through the SAME `resolvePublicContentAdapter(request)` seam
- * `get-page.ts` and `list-pages.ts` already use — not the bare
- * `getContentAdapter()` this route called until #5910, which threw under
- * `CONTENT_ADAPTER=database` (no `workspaceId`) and answered every request
- * with a 500. An unresolved site 404s rather than an empty `ItemList` — each
- * route keeps its own 404 shape (D8), but shares the SAME `error: "Page not
- * found"` string a missing/foreign slug gets elsewhere: a resolution failure
- * carries no detail an unauthenticated caller could use to tell it apart
- * from "nothing matched" (AC-WCE-05).
- */
-import { searchContentItemList } from "@working-theory/content-adapters";
-import { contentSearchQuerySchema } from "@working-theory/validation";
-import type { FastifyPluginAsync } from "fastify";
-
-import { resolveLocale } from "../../lib/locales.js";
-import { resolvePublicContentAdapter } from "../../services/public-site-resolver.js";
-
-export const searchContentRoute: FastifyPluginAsync = async (fastify) => {
-  fastify.get<{
-    Querystring: {
-      q?: string;
-      type?: string;
-      category?: string;
-      limit?: string;
-      locale?: string;
-    };
-  }>("/v1/content/search", async (request, reply) => {
-    const query = contentSearchQuerySchema.safeParse(request.query);
-    if (!query.success) {
-      return reply.status(400).send({
-        error: "Invalid query parameters",
-        details: query.error.issues,
-      });
-    }
-
-    const { q, type, category, limit } = query.data;
-    const locale = resolveLocale(query.data.locale);
-
-    try {
-      // Site resolution precedes any content query (#5852, #5910). A refusal
-      // is a 404 sharing the same "Page not found" error string a
-      // missing/foreign slug gets on the other content routes (each keeps
-      // its own body shape — D8), not an empty `ItemList`: a 200 with zero
-      // items would assert that this site exists and simply matched
-      // nothing, which is false when no site resolved.
-      const adapter = await resolvePublicContentAdapter(request);
-      if (adapter === null) {
-        return reply.status(404).send({
-          error: "Page not found",
-        });
-      }
-
-      return reply.send(
-        await searchContentItemList(adapter, { q, type, category, limit, locale }),
-      );
-    } catch (error) {
-      request.log.error({ err: error }, "[Content] searchPages failed");
-      return reply.status(500).send({ error: "Internal server error" });
-    }
-  });
-};

package/templates/apps/api/src/routes/content/shown-offerings.ts

@@ -1,229 +0,0 @@
-/**
- * GET /v1/content/shown-offerings
- *
- * The `/pricing` page's Offerings read (#8924, spec
- * docs/specs/8924-the-anonymous-pricing-read-the-spec.md): the resolved
- * workspace's shown set, read from its persisted Stripe snapshot through
- * #8876's `getWorkspaceShownSet`. No argument — no path parameter, query or
- * body, and a query string is ignored.
- *
- * Answers (D2), each in the `{ ok, data }` envelope, never a JSON-LD root:
- *   `{ status: "shown", shownSet }` — a resolved, connected workspace with
- *       the `commerce` claim. `shownSet` is the service's parsed result less
- *       `workspaceId` and `organizationId`: `productIds`, `recommended`,
- *       `offerings`, `state` and `snapshotAt`, as the service answered them.
- *   `{ status: "unconnected" }` — render the page content as today: the
- *       content adapter is not `database` (the resolver's `not-required`),
- *       the licence lacks the claim, or the workspace has no connection or
- *       no `WorkspaceOfferings` row.
- *   `{ status: "empty" }` — fail closed, show no prices at all: the resolver
- *       answered `unresolved` (a refused spoke key, an ambiguous or unmatched
- *       host), or the licence is configured but cannot be read.
- *   `500 internal_error` — the resolver, the claim read or the first read
- *       threw. A refresh never turns an answer into a 500.
- *
- * T7 — an anonymous read never reaches Stripe per request (D6). A snapshot
- * that is not `current`, or is at least `SHOWN_OFFERINGS_REFRESH_AFTER_MS`
- * old, triggers `refreshWorkspaceSnapshot` on its bounded path only: the
- * service joins the Organization's read in flight, reuses a read under a
- * minute old and holds a failed one for a minute. This route never passes
- * the owner's override, keeps no state of its own, and waits at most
- * `SHOWN_OFFERINGS_REFRESH_BUDGET_MS`; a refresh that fails, stalls or
- * throws leaves the first read served. `server.ts` registers it with the
- * Organization's Stripe catalog source (#8922, #9124); registered with no
- * `sourceFor` (D7) it serves the persisted snapshot and never refreshes.
- *
- * The workspace comes only from `resolvePublicWorkspace(request)`, whose one
- * request input is a hub spoke's `x-ailk-spoke-key`; so every answer, the
- * 500 included, appends that header to `Vary`. No `Cache-Control` is set.
- * The claim is read in the handler, not by the `requireCommerceClaim`
- * preHandler, so a refused spoke key answers `empty` rather than a 404 (D4),
- * and the services are imported only after it reads `claimed` (D5).
- *
- * T6 — a log line carries only the resolver's `reason`, a fixed `outcome`,
- * `workspaceId` and an error's class name: never a product or price id, a
- * name, any Stripe text or an error message (D9).
- *
- * Rate limiting is inherited from the server's global content ceiling. No
- * MCP twin, by decision (`tests/parity/README.md`, D8): agents read offerings
- * through `get_pricing` and `get_offerings`, whose HTTP twins answer through
- * this file's `readShownOfferings` (#8933 D1) — the one read of the snapshot
- * every agent surface shares.
- *
- * Anonymous and identity-blind: no `Authorization`, cookie, session or user
- * id is read.
- */
-import type { ShownOfferingsAnswer } from "@working-theory/validation";
-import type {
-  FastifyPluginAsync,
-  FastifyReply,
-  FastifyRequest,
-} from "fastify";
-
-import { resolveCommerceClaim } from "../../lib/require-commerce-claim.js";
-import type { OfferingsSourceFor } from "../../services/offerings/index.js";
-import { resolvePublicWorkspace } from "../../services/public-site-resolver.js";
-
-/** A snapshot at least this old is refreshed, on the service's own bound. */
-export const SHOWN_OFFERINGS_REFRESH_AFTER_MS = 60_000;
-/** The longest one request waits on a refresh before serving its first read. */
-export const SHOWN_OFFERINGS_REFRESH_BUDGET_MS = 3000;
-
-export interface ShownOfferingsRouteOptions {
-  /** The Stripe-backed catalog source; without it the route never refreshes. */
-  sourceFor?: OfferingsSourceFor;
-  now?: () => Date;
-}
-
-/** The request header the resolver picks the site's workspace from. */
-const SPOKE_KEY_HEADER = "x-ailk-spoke-key";
-
-/** Adds the spoke-key header to `Vary`, keeping every value already there. */
-function varyOnSpokeKey(reply: FastifyReply): void {
-  const existing = reply.getHeader("vary");
-  const values = (
-    Array.isArray(existing) ? existing.join(",") : String(existing ?? "")
-  )
-    .split(",")
-    .map((value) => value.trim())
-    .filter((value) => value !== "");
-  if (!values.some((value) => value.toLowerCase() === SPOKE_KEY_HEADER)) {
-    values.push(SPOKE_KEY_HEADER);
-  }
-  reply.header("Vary", values.join(", "));
-}
-
-/** An error's class name only — never its message, which may carry Stripe text. */
-function errName(err: unknown): string {
-  return err instanceof Error ? err.constructor.name : typeof err;
-}
-
-const OVER_BUDGET = Symbol("over-budget");
-
-/**
- * The read itself (#8933 D1), shared by this route and the two agent twins
- * (`GET /v1/content/pricing` and `GET /v1/content/offerings`): the
- * resolver's arms, the claim gate, the late import and the bounded refresh,
- * answering one of the three answers. It sets no header and writes no reply;
- * a resolver, claim or first-read error rejects. Its log lines go through
- * `request.log`, so a twin's request emits them too.
- */
-export async function readShownOfferings(
-  request: FastifyRequest,
-  { sourceFor, now: clock = () => new Date() }: ShownOfferingsRouteOptions,
-): Promise<ShownOfferingsAnswer> {
-  const now = clock();
-
-  const resolution = await resolvePublicWorkspace(request);
-  if (resolution.kind === "unresolved") {
-    request.log.warn(
-      { reason: resolution.reason },
-      "[content] shown-offerings: workspace unresolved",
-    );
-    return { status: "empty" };
-  }
-  if (resolution.kind === "not-required") {
-    return { status: "unconnected" };
-  }
-
-  const claim = await resolveCommerceClaim();
-  if (claim === "unclaimed") {
-    return { status: "unconnected" };
-  }
-  if (claim === "undetermined") {
-    request.log.warn(
-      { outcome: "license_undetermined" },
-      "[content] shown-offerings: licence unreadable",
-    );
-    return { status: "empty" };
-  }
-
-  const { workspaceId } = resolution;
-  const { getWorkspaceShownSet, refreshWorkspaceSnapshot } =
-    await import("../../services/offerings/index.js");
-  let shown = await getWorkspaceShownSet(workspaceId, { now });
-  if (shown === null) {
-    return { status: "unconnected" };
-  }
-
-  const stale =
-    shown.state !== "current" ||
-    shown.snapshotAt === null ||
-    now.getTime() - Date.parse(shown.snapshotAt) >=
-      SHOWN_OFFERINGS_REFRESH_AFTER_MS;
-  if (sourceFor && stale) {
-    // Caught before the race, so a rejection after the budget is logged
-    // the same way and is never unhandled.
-    const refresh = refreshWorkspaceSnapshot(workspaceId, sourceFor, {
-      now,
-    }).catch((err: unknown) => {
-      request.log.warn(
-        { workspaceId, outcome: "refresh_failed", errName: errName(err) },
-        "[content] shown-offerings: refresh failed",
-      );
-      return null;
-    });
-    let timer: NodeJS.Timeout | undefined;
-    const budget = new Promise<typeof OVER_BUDGET>((resolve) => {
-      timer = setTimeout(
-        () => resolve(OVER_BUDGET),
-        SHOWN_OFFERINGS_REFRESH_BUDGET_MS,
-      );
-    });
-    let outcome: Awaited<typeof refresh> | typeof OVER_BUDGET;
-    try {
-      outcome = await Promise.race([refresh, budget]);
-    } finally {
-      clearTimeout(timer);
-    }
-
-    if (outcome === OVER_BUDGET) {
-      request.log.warn(
-        { workspaceId, outcome: "refresh_over_budget" },
-        "[content] shown-offerings: refresh over budget",
-      );
-    } else if (outcome === "refreshed") {
-      try {
-        const reread = await getWorkspaceShownSet(workspaceId, { now });
-        if (reread === null) {
-          return { status: "unconnected" };
-        }
-        shown = reread;
-      } catch (err) {
-        request.log.warn(
-          { workspaceId, outcome: "reread_failed", errName: errName(err) },
-          "[content] shown-offerings: re-read failed",
-        );
-      }
-    }
-  }
-
-  const {
-    workspaceId: _workspaceId,
-    organizationId: _organizationId,
-    ...shownSet
-  } = shown;
-  return { status: "shown", shownSet };
-}
-
-export const shownOfferingsRoute: FastifyPluginAsync<
-  ShownOfferingsRouteOptions
-> = async (fastify, options) => {
-  fastify.get("/v1/content/shown-offerings", async (request, reply) => {
-    varyOnSpokeKey(reply);
-
-    try {
-      const data = await readShownOfferings(request, options);
-      return reply.send({ ok: true, data });
-    } catch (err) {
-      request.log.error(
-        { errName: errName(err) },
-        "[content] shown-offerings read failed",
-      );
-      return reply.status(500).send({
-        ok: false,
-        error: { code: "internal_error", message: "Internal server error" },
-      });
-    }
-  });
-};

package/templates/apps/api/src/routes/leads/__tests__/capture.test.ts

@@ -1,88 +0,0 @@
-/**
- * @file capture.test.ts
- * `GET /v1/leads/capture` (#6730 D4) — the four D1 environments, and the
- * body's exact shape: two booleans, never the mode or an env name.
- */
-
-import type { FastifyInstance } from "fastify";
-
-// The route module also carries the write routes; their dependencies are
-// external boundaries this read never reaches.
-// eslint-disable-next-line no-restricted-syntax -- prisma is a DB boundary; __mocks__/prisma.ts is the repo-standard double
-jest.mock("../../../lib/prisma.js");
-jest.mock("@working-theory/email", () => ({
-  sendLeadNotification: jest.fn(),
-  sendRequestConfirmEmail: jest.fn(),
-  sendRequestPaidLinkEmail: jest.fn(),
-}));
-
-import { leadCaptureStatusRoute } from "../index";
-
-const ENV_KEYS = [
-  "DATABASE_URL",
-  "NODE_ENV",
-  "RESEND_API_KEY",
-  "AILK_LEAD_NOTIFICATION_TO",
-  "AILK_LEAD_NOTIFICATION_FROM",
-  "LEAD_CAPTURE_FILE_DISABLED",
-] as const;
-
-const EMAIL_ENV = {
-  RESEND_API_KEY: "re_test",
-  AILK_LEAD_NOTIFICATION_TO: "owner@example.com",
-  AILK_LEAD_NOTIFICATION_FROM: "noreply@example.com",
-};
-
-describe("GET /v1/leads/capture", () => {
-  let app: FastifyInstance;
-  let saved: Partial<Record<(typeof ENV_KEYS)[number], string | undefined>>;
-
-  beforeEach(async () => {
-    saved = {};
-    for (const k of ENV_KEYS) saved[k] = process.env[k];
-    for (const k of ENV_KEYS) delete process.env[k];
-    const fastify = require("fastify")();
-    await fastify.register(leadCaptureStatusRoute);
-    app = fastify;
-  });
-
-  afterEach(async () => {
-    await app.close();
-    for (const k of ENV_KEYS) {
-      if (saved[k] === undefined) delete process.env[k];
-      else process.env[k] = saved[k];
-    }
-  });
-
-  const get = () => app.inject({ method: "GET", url: "/v1/leads/capture" });
-
-  it.each([
-    ["inbox", { DATABASE_URL: "postgres://x", NODE_ENV: "production" }, true, true],
-    ["email", { ...EMAIL_ENV, NODE_ENV: "production" }, true, false],
-    ["local", { NODE_ENV: "development" }, true, true],
-    ["none", { NODE_ENV: "production" }, false, false],
-  ] as const)("%s → contact=%s newsletter=%s", async (_mode, env, contact, newsletter) => {
-    Object.assign(process.env, env);
-
-    const res = await get();
-
-    expect(res.statusCode).toBe(200);
-    expect(res.json()).toEqual({ ok: true, data: { contact, newsletter } });
-  });
-
-  it("the body carries exactly ok + data{contact,newsletter} — no mode, no env names", async () => {
-    Object.assign(process.env, EMAIL_ENV, { NODE_ENV: "production" });
-
-    const res = await get();
-    const body = res.json();
-
-    expect(Object.keys(body).sort()).toEqual(["data", "ok"]);
-    expect(Object.keys(body.data).sort()).toEqual(["contact", "newsletter"]);
-    expect(res.body).not.toMatch(/email|inbox|RESEND|DATABASE|owner@example\.com/);
-  });
-
-  it("is cacheable for a minute", async () => {
-    const res = await get();
-    expect(res.headers["cache-control"]).toBe("public, max-age=60");
-  });
-});

package/templates/apps/api/src/routes/leads/__tests__/list.test.ts

@@ -1,171 +0,0 @@
-/**
- * @file list.test.ts
- * Route-level inject tests for `GET /v1/leads` (#5678).
- *
- * The scoping proof lives one layer down, in
- * `src/services/__tests__/leads-inbox.test.ts` — it seeds two sites against a
- * realistically filtering prisma mock and asserts a caller for one reads none
- * of the other's. This file covers what only the HTTP boundary can show: that
- * an unauthenticated caller is refused before the service is ever reached,
- * that the scope cannot be widened from the query string, and that the
- * envelope and the 400 mapping are what `apps/api/CLAUDE.md` specifies.
- */
-
-// eslint-disable-next-line no-restricted-syntax -- the service is this route's own collaborator; mocking it keeps these tests on the HTTP boundary (the scoping proof is the service's own test).
-jest.mock("../../../services/leads-inbox.js", () => ({
-  listOwnedLeads: jest.fn(),
-}));
-
-import type { FastifyInstance } from "fastify";
-
-import { listOwnedLeads } from "../../../services/leads-inbox.js";
-import { leadListRoute } from "../list";
-
-const listOwnedLeadsMock = listOwnedLeads as jest.Mock;
-
-const USER_ID = "user_00000000-0000-7000-8000-0000000000a1";
-const PAGE = {
-  items: [
-    {
-      id: "lead_00000000-0000-7000-8000-0000000000d1",
-      name: "Ada Lovelace",
-      email: "ada@example.com",
-      source: "web",
-      createdAt: "2026-09-15T12:00:00.000Z",
-    },
-  ],
-  nextCursor: null,
-};
-
-/**
- * Builds the route with `request.userId` pre-set, standing in for the
- * `authPreHandlerPlugin` that decorates it in `server.ts`'s `authScope`.
- * `userId: undefined` is the anonymous case — the same state the decorator
- * leaves behind when no session resolves.
- */
-async function buildApp(userId: string | undefined): Promise<FastifyInstance> {
-  const fastify = require("fastify")();
-  fastify.decorateRequest("userId", undefined);
-  fastify.addHook("onRequest", (request: { userId?: string }, _reply: unknown, done: () => void) => {
-    request.userId = userId;
-    done();
-  });
-  await fastify.register(leadListRoute);
-  return fastify;
-}
-
-describe("GET /v1/leads", () => {
-  let app: FastifyInstance;
-
-  beforeEach(() => {
-    jest.clearAllMocks();
-    listOwnedLeadsMock.mockResolvedValue({ ok: true, value: PAGE });
-  });
-
-  afterEach(async () => {
-    await app.close();
-  });
-
-  it("401s an unauthenticated caller without touching the read service", async () => {
-    app = await buildApp(undefined);
-
-    const res = await app.inject({ method: "GET", url: "/v1/leads" });
-
-    expect(res.statusCode).toBe(401);
-    expect(res.json()).toEqual({
-      ok: false,
-      error: { code: "unauthorized", message: "Authentication required" },
-    });
-    expect(listOwnedLeadsMock).not.toHaveBeenCalled();
-  });
-
-  it("returns the page in the { ok: true, data } envelope", async () => {
-    app = await buildApp(USER_ID);
-
-    const res = await app.inject({ method: "GET", url: "/v1/leads" });
-
-    expect(res.statusCode).toBe(200);
-    expect(res.json()).toEqual({ ok: true, data: PAGE });
-    expect(listOwnedLeadsMock).toHaveBeenCalledWith({
-      userId: USER_ID,
-      cursor: undefined,
-      limit: 50,
-    });
-  });
-
-  it("ignores a caller-supplied siteId — the scope cannot be widened from the wire", async () => {
-    app = await buildApp(USER_ID);
-
-    const res = await app.inject({
-      method: "GET",
-      url: "/v1/leads?siteId=someone-elses-site&workspaceId=another",
-    });
-
-    expect(res.statusCode).toBe(200);
-    // The service is called with the caller's identity and the paging
-    // parameters only — no site, org or workspace value reaches it.
-    expect(listOwnedLeadsMock).toHaveBeenCalledWith({
-      userId: USER_ID,
-      cursor: undefined,
-      limit: 50,
-    });
-  });
-
-  it("400s a malformed cursor before any read", async () => {
-    app = await buildApp(USER_ID);
-
-    const res = await app.inject({ method: "GET", url: "/v1/leads?cursor=not-a-lead-id" });
-
-    expect(res.statusCode).toBe(400);
-    expect(res.json().error.code).toBe("validation_failed");
-    expect(listOwnedLeadsMock).not.toHaveBeenCalled();
-  });
-
-  it("400s a limit above the 200 ceiling", async () => {
-    app = await buildApp(USER_ID);
-
-    const res = await app.inject({ method: "GET", url: "/v1/leads?limit=1000" });
-
-    expect(res.statusCode).toBe(400);
-    expect(listOwnedLeadsMock).not.toHaveBeenCalled();
-  });
-
-  it("maps the service's invalid_cursor to a 400, not a 404 or a silent page 1", async () => {
-    app = await buildApp(USER_ID);
-    listOwnedLeadsMock.mockResolvedValue({
-      ok: false,
-      error: { kind: "invalid_cursor", message: "cursor does not resolve within this scope" },
-    });
-
-    const res = await app.inject({
-      method: "GET",
-      url: "/v1/leads?cursor=lead_00000000-0000-7000-8000-0000000000d9",
-    });
-
-    expect(res.statusCode).toBe(400);
-    expect(res.json()).toEqual({
-      ok: false,
-      error: {
-        code: "validation_failed",
-        message: "cursor does not resolve within this scope",
-      },
-    });
-  });
-
-  it("500s an internal error without surfacing its detail", async () => {
-    app = await buildApp(USER_ID);
-    listOwnedLeadsMock.mockResolvedValue({
-      ok: false,
-      error: { kind: "internal_error", message: "connect ECONNREFUSED 127.0.0.1:5432" },
-    });
-
-    const res = await app.inject({ method: "GET", url: "/v1/leads" });
-
-    expect(res.statusCode).toBe(500);
-    expect(res.json()).toEqual({
-      ok: false,
-      error: { code: "internal_error", message: "Failed to read leads" },
-    });
-    expect(res.body).not.toContain("ECONNREFUSED");
-  });
-});