create-ailk 0.24.0 → 0.26.0

package/templates/apps/api/src/routes/leads/list.ts

@@ -1,104 +0,0 @@
-/**
- * The leads INBOX read (#5678).
- *
- * Routes:
- *   GET /v1/leads?cursor=&limit=  — the caller's own sites' leads, newest first
- *
- * Registered INSIDE `server.ts`'s `authScope` (auth only — NOT the inner
- * `tenantScope`, which the multi-tenant module owns), beside
- * `/v1/waitlist-signups/me` and `/v1/project-listings/me`. Lead capture is a
- * never-gate surface at every level, so reading a lead back must be too: this
- * route is registered unconditionally, not behind an `isModuleEnabled()` gate.
- * Registering everywhere is not the same as RETURNING a row everywhere —
- * `services/leads-inbox.ts` § "What it takes for this to return anything"
- * names the two deployment preconditions, both of which fail empty, never
- * wide.
- *
- * Identity is `request.userId` ONLY. There is no site, org or workspace
- * parameter — the query schema declares `cursor` and `limit` and nothing else
- * — so the scope cannot be widened from the wire. `services/leads-inbox.ts`
- * resolves it from the caller's own memberships through
- * `services/owner-workspaces.ts`'s `resolveOwnerWorkspaces` and filters every
- * read on `siteId ∈ workspaceIds`.
- *
- * Envelope per apps/api/CLAUDE.md: `{ ok: true, data }` /
- * `{ ok: false, error: { code, message } }`, real HTTP status codes:
- *   400 validation_failed · 401 unauthorized · 500 internal_error.
- *
- * No response-contract re-parse (the `waitlist-experiments/respond.ts`
- * `sendValidated` net): the five fields of a row are assembled one by one in
- * `leads-inbox.ts` from five explicitly selected columns, with no
- * pass-through of a stored value that could carry an unexpected shape — so
- * there is no drift for that net to catch.
- *
- * API↔MCP parity: identity-bound (the session IS the scope; the OSS MCP
- * surface is identity-blind) — no MCP twin (#3591 exception, the same shape as
- * `/v1/workspaces/*`, `/v1/billing/*` and `/v1/waitlist-experiments/*`).
- */
-import { zLeadId } from "@working-theory/ids";
-import type { FastifyPluginAsync, FastifyReply } from "fastify";
-import { z } from "zod";
-
-import { listOwnedLeads } from "../../services/leads-inbox.js";
-
-const DEFAULT_LIMIT = 50;
-const MAX_LIMIT = 200;
-
-const emptyToUndefined = (val: unknown) => (val === "" ? undefined : val);
-
-/** Boundary validation, mirroring `waitlist-experiments/signups.ts`'s query schema. */
-const listQuerySchema = z.object({
-  cursor: z.preprocess(emptyToUndefined, zLeadId.optional()),
-  limit: z.preprocess(
-    emptyToUndefined,
-    z.coerce.number().int().min(1).max(MAX_LIMIT).optional(),
-  ),
-});
-
-function unauthorized(reply: FastifyReply) {
-  return reply.status(401).send({
-    ok: false,
-    error: { code: "unauthorized", message: "Authentication required" },
-  });
-}
-
-function invalidQuery(reply: FastifyReply, message: string) {
-  return reply.status(400).send({
-    ok: false,
-    error: { code: "validation_failed", message },
-  });
-}
-
-export const leadListRoute: FastifyPluginAsync = async (fastify) => {
-  fastify.get("/v1/leads", async (request, reply) => {
-    const userId = request.userId;
-    if (!userId) return unauthorized(reply);
-
-    const query = listQuerySchema.safeParse(request.query);
-    if (!query.success) return invalidQuery(reply, "Invalid query parameters");
-
-    const result = await listOwnedLeads({
-      userId,
-      cursor: query.data.cursor,
-      limit: query.data.limit ?? DEFAULT_LIMIT,
-    });
-
-    if (!result.ok) {
-      if (result.error.kind === "invalid_cursor") {
-        return invalidQuery(reply, result.error.message);
-      }
-      // Do not surface internal error detail — log it server-side only, and
-      // with no lead field in the log line (the leads PII boundary).
-      request.log.error(
-        { route: "leads/list", error: result.error.message },
-        "leads list failed",
-      );
-      return reply.status(500).send({
-        ok: false,
-        error: { code: "internal_error", message: "Failed to read leads" },
-      });
-    }
-
-    return reply.status(200).send({ ok: true, data: result.value });
-  });
-};