create-ailk 0.5.0 → 0.6.0

package/templates/apps/api/src/routes/content/__tests__/delete.test.ts

@@ -1,215 +0,0 @@
-/**
- * @file delete.test.ts
- * DELETE /api/content/:type/:slug — D14a Stage 1 Unit B.
- *
- * Covers: Pro-tier gating (402), missing/stale If-Match (409), happy path
- * (204 no body), not-found (404), unknown :type (400).
- *
- * Issue #398 follow-up: bespoke version-probe + getPageBySlug pre-check
- * removed; the adapter throws `AdapterWriteError("not_found" | "conflict")`
- * and the hoisted `mapAdapterError` translates it.
- *
- * Uses the real content adapter backed by a per-test temp dir (Issue #507).
- * @working-theory/license stays mocked — it is an external package boundary.
- */
-
-import type { FastifyInstance } from "fastify";
-
-const mockCheckLicense = jest.fn();
-
-// @working-theory/license is an external package boundary — stays mocked.
-jest.mock("@working-theory/license", () => ({
-  checkLicense: (...args: unknown[]) => mockCheckLicense(...args),
-}));
-
-import { setupContentFixture } from "../../../__tests__/factories/content-fixture";
-import { contentRoutes } from "../index";
-
-const fixture = setupContentFixture();
-
-function proLicense() {
-  return {
-    tier: "pro",
-    plan: "pro",
-    features: [],
-    expiresAt: null,
-    revoked: false,
-  };
-}
-
-function freeLicense() {
-  return {
-    tier: "free",
-    plan: null,
-    features: [],
-    expiresAt: null,
-    revoked: false,
-  };
-}
-
-describe("DELETE /api/content/:type/:slug", () => {
-  let app: FastifyInstance;
-  // The write handlers only register when content-write is enabled
-  // (routes/content/index.ts's isModuleEnabled('content-write') gate); an
-  // unset AILK_ENABLED_MODULES no longer defaults to every module on
-  // (D-44, #5368), so this suite enables it explicitly.
-  const priorEnabledModules = process.env.AILK_ENABLED_MODULES;
-
-  beforeEach(async () => {
-    process.env.AILK_ENABLED_MODULES = "content-write";
-    app = require("fastify")();
-    await app.register(contentRoutes);
-    jest.clearAllMocks();
-    mockCheckLicense.mockReset();
-  });
-
-  afterAll(() => {
-    if (priorEnabledModules === undefined) {
-      delete process.env.AILK_ENABLED_MODULES;
-    } else {
-      process.env.AILK_ENABLED_MODULES = priorEnabledModules;
-    }
-  });
-
-  afterEach(async () => {
-    await app.close();
-  });
-
-  it("returns 204 with no body on success", async () => {
-    mockCheckLicense.mockResolvedValue(proLicense());
-
-    // First create the page, get its version, then delete it.
-    const createRes = await app.inject({
-      method: "POST",
-      url: "/v1/content/HomePage",
-      payload: {
-        type: "HomePage",
-        slug: "page-to-delete",
-        title: "Page To Delete",
-        description: "This page will be deleted",
-        body: "Goodbye",
-      },
-    });
-    expect(createRes.statusCode).toBe(201);
-    const { version } = JSON.parse(createRes.body);
-
-    const res = await app.inject({
-      method: "DELETE",
-      url: "/v1/content/HomePage/page-to-delete",
-      headers: { "if-match": version },
-    });
-
-    expect(res.statusCode).toBe(204);
-    expect(res.body).toBe("");
-  });
-
-  it("returns 402 payment_required on free tier", async () => {
-    mockCheckLicense.mockResolvedValue(freeLicense());
-
-    const res = await app.inject({
-      method: "DELETE",
-      url: "/v1/content/HomePage/home",
-      headers: { "if-match": "v1" },
-    });
-
-    expect(res.statusCode).toBe(402);
-  });
-
-  it("returns 402 payment_required when license is revoked even at pro tier", async () => {
-    mockCheckLicense.mockResolvedValue({
-      tier: "pro",
-      plan: "pro",
-      features: [],
-      expiresAt: null,
-      revoked: true,
-    });
-
-    const res = await app.inject({
-      method: "DELETE",
-      url: "/v1/content/HomePage/home",
-      headers: { "if-match": "v1" },
-    });
-
-    expect(res.statusCode).toBe(402);
-    expect(JSON.parse(res.body)).toMatchObject({ error: "payment_required" });
-  });
-
-  it("returns 409 conflict when If-Match header is missing", async () => {
-    mockCheckLicense.mockResolvedValue(proLicense());
-
-    const res = await app.inject({
-      method: "DELETE",
-      url: "/v1/content/HomePage/home",
-    });
-
-    expect(res.statusCode).toBe(409);
-    expect(JSON.parse(res.body)).toMatchObject({ error: "conflict" });
-  });
-
-  it("returns 409 conflict when If-Match is empty string", async () => {
-    mockCheckLicense.mockResolvedValue(proLicense());
-
-    const res = await app.inject({
-      method: "DELETE",
-      url: "/v1/content/HomePage/home",
-      headers: { "if-match": "" },
-    });
-
-    expect(res.statusCode).toBe(409);
-  });
-
-  it("returns 409 conflict with currentVersion echoed when adapter signals stale If-Match", async () => {
-    mockCheckLicense.mockResolvedValue(proLicense());
-
-    // Pass a stale version — the real adapter will reject it with conflict.
-    const res = await app.inject({
-      method: "DELETE",
-      url: "/v1/content/HomePage/home",
-      headers: { "if-match": "stale-version-that-does-not-match" },
-    });
-
-    expect(res.statusCode).toBe(409);
-    const body = JSON.parse(res.body);
-    expect(body).toMatchObject({ error: "conflict" });
-    if (body.details) {
-      expect(body.details).toHaveProperty("currentVersion");
-    }
-  });
-
-  it("returns 404 not_found when adapter signals page missing", async () => {
-    mockCheckLicense.mockResolvedValue(proLicense());
-
-    const res = await app.inject({
-      method: "DELETE",
-      url: "/v1/content/HomePage/slug-that-does-not-exist",
-      headers: { "if-match": "any-version" },
-    });
-
-    expect(res.statusCode).toBe(404);
-    expect(JSON.parse(res.body)).toMatchObject({ error: "not_found" });
-  });
-
-  it("returns 400 validation_failed on unknown :type", async () => {
-    mockCheckLicense.mockResolvedValue(proLicense());
-
-    const res = await app.inject({
-      method: "DELETE",
-      url: "/v1/content/Bogus/home",
-      headers: { "if-match": "v1" },
-    });
-
-    expect(res.statusCode).toBe(400);
-  });
-
-  it("returns 400 validation_failed on disallowed slug shape", async () => {
-    mockCheckLicense.mockResolvedValue(proLicense());
-
-    const res = await app.inject({
-      method: "DELETE",
-      url: "/v1/content/HomePage/..%2Fetc%2Fpasswd",
-      headers: { "if-match": "v1" },
-    });
-
-    expect(res.statusCode).toBe(400);
-  });
-});

package/templates/apps/api/src/routes/content/__tests__/update.test.ts

@@ -1,266 +0,0 @@
-/**
- * @file update.test.ts
- * PATCH /api/content/:type/:slug — D14a Stage 1 Unit B.
- *
- * Covers: Pro-tier gating (402), missing If-Match (409), stale If-Match (409
- * with current version echoed), validation (400), happy path (200 with
- * {page, version}), not-found (404), unknown :type (400).
- *
- * Issue #398 follow-up: bespoke version-probe + getPageBySlug pre-check
- * removed; the adapter throws `AdapterWriteError("not_found" | "conflict")`
- * and the hoisted `mapAdapterError` translates it.
- *
- * Uses the real content adapter backed by a per-test temp dir (Issue #507).
- * @working-theory/license stays mocked — it is an external package boundary.
- */
-
-import type { FastifyInstance } from "fastify";
-
-const mockCheckLicense = jest.fn();
-
-// @working-theory/license is an external package boundary — stays mocked.
-jest.mock("@working-theory/license", () => ({
-  checkLicense: (...args: unknown[]) => mockCheckLicense(...args),
-}));
-
-import { AdapterWriteError } from "@working-theory/content-adapters";
-
-import { setupContentFixture } from "../../../__tests__/factories/content-fixture";
-import { contentRoutes } from "../index";
-
-const fixture = setupContentFixture();
-
-function proLicense() {
-  return {
-    tier: "pro",
-    plan: "pro",
-    features: [],
-    expiresAt: null,
-    revoked: false,
-  };
-}
-
-function freeLicense() {
-  return {
-    tier: "free",
-    plan: null,
-    features: [],
-    expiresAt: null,
-    revoked: false,
-  };
-}
-
-// Update body must match the slug from the URL.
-const validBody = {
-  type: "HomePage",
-  slug: "home",
-  title: "Welcome (updated)",
-  description: "Updated description",
-  body: "Updated body content",
-};
-
-describe("PATCH /api/content/:type/:slug", () => {
-  let app: FastifyInstance;
-  // The write handlers only register when content-write is enabled
-  // (routes/content/index.ts's isModuleEnabled('content-write') gate); an
-  // unset AILK_ENABLED_MODULES no longer defaults to every module on
-  // (D-44, #5368), so this suite enables it explicitly.
-  const priorEnabledModules = process.env.AILK_ENABLED_MODULES;
-
-  beforeEach(async () => {
-    process.env.AILK_ENABLED_MODULES = "content-write";
-    app = require("fastify")();
-    await app.register(contentRoutes);
-    jest.clearAllMocks();
-    mockCheckLicense.mockReset();
-  });
-
-  afterAll(() => {
-    if (priorEnabledModules === undefined) {
-      delete process.env.AILK_ENABLED_MODULES;
-    } else {
-      process.env.AILK_ENABLED_MODULES = priorEnabledModules;
-    }
-  });
-
-  afterEach(async () => {
-    await app.close();
-  });
-
-  it("returns 200 with {page, version} on success", async () => {
-    mockCheckLicense.mockResolvedValue(proLicense());
-
-    // The fixture writes "home" in beforeEach; PATCH it with If-Match.
-    // First POST to get the version header, then PATCH.
-    // For simplicity: the real MDX adapter returns a version on create/update.
-    // We pass a version token that matches — the adapter uses content hash.
-    // Get current version first by creating it via POST:
-    const createRes = await app.inject({
-      method: "POST",
-      url: "/v1/content/HomePage",
-      payload: {
-        type: "HomePage",
-        slug: "update-target",
-        title: "Original",
-        description: "Original description",
-        body: "Original body",
-      },
-    });
-    expect(createRes.statusCode).toBe(201);
-    const { version } = JSON.parse(createRes.body);
-
-    const res = await app.inject({
-      method: "PATCH",
-      url: "/v1/content/HomePage/update-target",
-      headers: { "if-match": version },
-      payload: {
-        type: "HomePage",
-        slug: "update-target",
-        title: "Welcome (updated)",
-        description: "Updated description",
-        body: "Updated body",
-      },
-    });
-
-    expect(res.statusCode).toBe(200);
-    const body = JSON.parse(res.body);
-    expect(body).toHaveProperty("page");
-    expect(body).toHaveProperty("version");
-    expect(body.page).toMatchObject({ type: "HomePage", slug: "update-target" });
-  });
-
-  it("returns 402 payment_required on free tier", async () => {
-    mockCheckLicense.mockResolvedValue(freeLicense());
-
-    const res = await app.inject({
-      method: "PATCH",
-      url: "/v1/content/HomePage/home",
-      headers: { "if-match": "v1" },
-      payload: validBody,
-    });
-
-    expect(res.statusCode).toBe(402);
-  });
-
-  it("returns 402 payment_required when license is revoked even at pro tier", async () => {
-    mockCheckLicense.mockResolvedValue({
-      tier: "pro",
-      plan: "pro",
-      features: [],
-      expiresAt: null,
-      revoked: true,
-    });
-
-    const res = await app.inject({
-      method: "PATCH",
-      url: "/v1/content/HomePage/home",
-      headers: { "if-match": "v1" },
-      payload: validBody,
-    });
-
-    expect(res.statusCode).toBe(402);
-    expect(JSON.parse(res.body)).toMatchObject({ error: "payment_required" });
-  });
-
-  it("returns 409 conflict when If-Match header is missing", async () => {
-    mockCheckLicense.mockResolvedValue(proLicense());
-
-    const res = await app.inject({
-      method: "PATCH",
-      url: "/v1/content/HomePage/home",
-      payload: validBody,
-    });
-
-    expect(res.statusCode).toBe(409);
-    expect(JSON.parse(res.body)).toMatchObject({ error: "conflict" });
-  });
-
-  it("returns 409 conflict when If-Match is empty string", async () => {
-    mockCheckLicense.mockResolvedValue(proLicense());
-
-    const res = await app.inject({
-      method: "PATCH",
-      url: "/v1/content/HomePage/home",
-      headers: { "if-match": "" },
-      payload: validBody,
-    });
-
-    expect(res.statusCode).toBe(409);
-    expect(JSON.parse(res.body)).toMatchObject({ error: "conflict" });
-  });
-
-  it("returns 409 conflict with currentVersion echoed when adapter signals stale If-Match", async () => {
-    mockCheckLicense.mockResolvedValue(proLicense());
-
-    // Pass a stale version — the real adapter will reject it with a conflict.
-    const res = await app.inject({
-      method: "PATCH",
-      url: "/v1/content/HomePage/home",
-      headers: { "if-match": "stale-version-that-does-not-match" },
-      payload: validBody,
-    });
-
-    // The real adapter rejects a stale If-Match with 409 + currentVersion.
-    expect(res.statusCode).toBe(409);
-    const body = JSON.parse(res.body);
-    expect(body).toMatchObject({ error: "conflict" });
-    // currentVersion is echoed in details when the adapter provides it.
-    if (body.details) {
-      expect(body.details).toHaveProperty("currentVersion");
-    }
-  });
-
-  it("returns 404 not_found when adapter signals page missing", async () => {
-    mockCheckLicense.mockResolvedValue(proLicense());
-
-    const res = await app.inject({
-      method: "PATCH",
-      url: "/v1/content/HomePage/slug-that-does-not-exist",
-      headers: { "if-match": "any-version" },
-      payload: { ...validBody, slug: "slug-that-does-not-exist" },
-    });
-
-    expect(res.statusCode).toBe(404);
-    expect(JSON.parse(res.body)).toMatchObject({ error: "not_found" });
-  });
-
-  it("returns 400 validation_failed on bad body", async () => {
-    mockCheckLicense.mockResolvedValue(proLicense());
-
-    const res = await app.inject({
-      method: "PATCH",
-      url: "/v1/content/HomePage/home",
-      headers: { "if-match": "v1" },
-      payload: { type: "HomePage", slug: "home" }, // missing required fields
-    });
-
-    expect(res.statusCode).toBe(400);
-    expect(JSON.parse(res.body)).toMatchObject({ error: "validation_failed" });
-  });
-
-  it("returns 400 validation_failed on unknown :type", async () => {
-    mockCheckLicense.mockResolvedValue(proLicense());
-
-    const res = await app.inject({
-      method: "PATCH",
-      url: "/v1/content/Bogus/home",
-      headers: { "if-match": "v1" },
-      payload: validBody,
-    });
-
-    expect(res.statusCode).toBe(400);
-  });
-
-  it("returns 400 when path :type/:slug does not match body type/slug", async () => {
-    mockCheckLicense.mockResolvedValue(proLicense());
-
-    const res = await app.inject({
-      method: "PATCH",
-      url: "/v1/content/HomePage/home",
-      headers: { "if-match": "v1" },
-      payload: { ...validBody, slug: "different-slug" },
-    });
-
-    expect(res.statusCode).toBe(400);
-  });
-});

package/templates/apps/api/src/routes/content/create.ts

@@ -1,115 +0,0 @@
-// oss: false
-/**
- * POST /v1/content/:type
- *
- * Creates a new page of `:type` from a JSON body matching `FrontmatterSchema`
- * (from `@working-theory/content-adapters`, the SSOT for content shape) plus a non-empty
- * `body` string. Paid-licensed deploys only — free tier returns 402 via the
- * `requirePaidTier` preHandler from Stage 0.
- *
- * Conflict semantics: if a page with this slug already exists, returns 409
- * with the existing page's `version` echoed in `details` so the caller can
- * pivot to PATCH without a re-read. The conflict signal is delivered by the
- * adapter via `AdapterWriteError("conflict", ..., { version })` and translated
- * by the hoisted `mapAdapterError` (issue #398) — the route no longer
- * pre-checks slug existence (closes the V2-H2 TOCTOU window between the
- * read and the write).
- *
- * Errors all use the canonical `{error, message, details?}` shape from
- * `apps/api/src/lib/errors.ts`.
- */
-import {
-  FrontmatterSchema,
-  SCHEMA_ORG_TYPES,
-  type SchemaOrgType,
-} from "@working-theory/content-adapters";
-import type { FastifyPluginAsync, FastifyReply } from "fastify";
-import { z } from "zod";
-
-import { getContentAdapter } from "../../lib/content-adapter.js";
-import {
-  adapterErrorResponse,
-  validationError,
-  type ErrorBody,
-} from "../../lib/errors.js";
-import { requirePaidTier } from "../../lib/require-paid-tier.js";
-
-import { SLUG_PATTERN } from "./slug.js";
-
-const paramsSchema = z.object({
-  type: z.enum(SCHEMA_ORG_TYPES),
-});
-
-const writeBodySchema = FrontmatterSchema.extend({ body: z.string().min(1) });
-
-function send(reply: FastifyReply, status: number, body: ErrorBody) {
-  return reply.status(status).send(body);
-}
-
-export const createPageRoute: FastifyPluginAsync = async (fastify) => {
-  fastify.post<{
-    Params: { type: string };
-    Body: unknown;
-  }>(
-    "/v1/content/:type",
-     
-    { preHandler: requirePaidTier },
-    async (request, reply) => {
-      const params = paramsSchema.safeParse(request.params);
-      if (!params.success) {
-        const err = validationError("Invalid type", {
-          issues: params.error.issues,
-        });
-        return send(reply, err.status, err.body);
-      }
-
-      const parsed = writeBodySchema.safeParse(request.body);
-      if (!parsed.success) {
-        const err = validationError("Invalid request body", {
-          issues: parsed.error.issues,
-        });
-        return send(reply, err.status, err.body);
-      }
-
-      const { body: pageBody, ...page } = parsed.data;
-
-      if (!SLUG_PATTERN.test(page.slug)) {
-        const err = validationError("Invalid request body", {
-          issues: [
-            {
-              path: ["slug"],
-              message:
-                "slug must match /^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/ (lowercase, digits, hyphens; no leading/trailing hyphen)",
-            },
-          ],
-        });
-        return send(reply, err.status, err.body);
-      }
-
-      if (page.type !== params.data.type) {
-        const err = validationError(
-          "Body `type` must match URL :type parameter",
-          { urlType: params.data.type, bodyType: page.type },
-        );
-        return send(reply, err.status, err.body);
-      }
-
-      const { type } = params.data;
-
-      try {
-        const adapter = getContentAdapter();
-        const result = await adapter.createPage(
-          type as SchemaOrgType,
-          page.slug,
-          { ...page, body: pageBody },
-        );
-        return reply.status(201).send(result);
-      } catch (error) {
-        const err = adapterErrorResponse(error, { type, slug: page.slug });
-        if (err) return send(reply, err.status, err.body);
-        request.log.error({ err: error }, "[Content] createPage failed");
-        return reply.status(500).send({ error: "Internal server error" });
-      }
-    },
-  );
-};

package/templates/apps/api/src/routes/content/delete.ts

@@ -1,82 +0,0 @@
-// oss: false
-/**
- * DELETE /v1/content/:type/:slug
- *
- * Removes the page of `:type` at `:slug`. Paid-licensed deploys only.
- *
- * Optimistic locking is mandatory: the request MUST carry an `If-Match`
- * header containing the `version` token from a prior read. Missing/empty →
- * 409. Stale → 409 with `details.currentVersion` echoed.
- *
- * 404 when the page does not exist. Success responds 204 No Content.
- *
- * Adapter errors (`AdapterWriteError("not_found" | "conflict" | …)`) are
- * translated by the hoisted `mapAdapterError` from `@working-theory/content-adapters`
- * (issue #398) — single source of truth across the API + MCP surfaces.
- */
-import {
-  SCHEMA_ORG_TYPES,
-  type SchemaOrgType,
-} from "@working-theory/content-adapters";
-import type { FastifyPluginAsync, FastifyReply } from "fastify";
-import { z } from "zod";
-
-import { getContentAdapter } from "../../lib/content-adapter.js";
-import {
-  adapterErrorResponse,
-  conflictError,
-  validationError,
-  type ErrorBody,
-} from "../../lib/errors.js";
-import { requirePaidTier } from "../../lib/require-paid-tier.js";
-
-import { SLUG_PATTERN } from "./slug.js";
-
-const paramsSchema = z.object({
-  type: z.enum(SCHEMA_ORG_TYPES),
-  slug: z.string().regex(SLUG_PATTERN),
-});
-
-function send(reply: FastifyReply, status: number, body: ErrorBody) {
-  return reply.status(status).send(body);
-}
-
-export const deletePageRoute: FastifyPluginAsync = async (fastify) => {
-  fastify.delete<{
-    Params: { type: string; slug: string };
-  }>(
-    "/v1/content/:type/:slug",
-     
-    { preHandler: requirePaidTier },
-    async (request, reply) => {
-      const params = paramsSchema.safeParse(request.params);
-      if (!params.success) {
-        const err = validationError("Invalid type or slug", {
-          issues: params.error.issues,
-        });
-        return send(reply, err.status, err.body);
-      }
-
-      const ifMatch = request.headers["if-match"];
-      if (typeof ifMatch !== "string" || ifMatch.length === 0) {
-        const err = conflictError(
-          "Missing required If-Match header (version token)",
-        );
-        return send(reply, err.status, err.body);
-      }
-
-      const { type, slug } = params.data;
-
-      try {
-        const adapter = getContentAdapter();
-        await adapter.deletePage(type as SchemaOrgType, slug, { ifMatch });
-        return reply.status(204).send();
-      } catch (error) {
-        const err = adapterErrorResponse(error, { type, slug });
-        if (err) return send(reply, err.status, err.body);
-        request.log.error({ err: error }, "[Content] deletePage failed");
-        return reply.status(500).send({ error: "Internal server error" });
-      }
-    },
-  );
-};