create-ailk 0.6.1 → 0.8.0

package/templates/apps/api/src/openapi/spec.ts

@@ -747,9 +747,11 @@ export function buildOpenApiSpec(
             "form fields — for the given siteId. `source` is a free-form tag the caller " +
             "sets to identify the channel (for example `agent`); it is stored as-is and " +
             "not checked against a fixed vocabulary. A 201 response means the lead " +
-            "landed, in the database or (if the database is unavailable) a file " +
-            "fallback; the response's `email` field reports, best-effort, whether the " +
-            "site operator was notified.",
+            "landed — in the database, a local file fallback (outside production " +
+            "only), or, on a deployment with no database, the site operator's inbox " +
+            "by email (`persisted: \"email\"`); with a database, the response's " +
+            "`email` field reports, best-effort, whether the operator was notified. " +
+            "A lead is never reported captured when nothing stored or delivered it.",
           requestBody: {
             required: true,
             content: {
@@ -777,8 +779,8 @@ export function buildOpenApiSpec(
             },
             "503": {
               description:
-                "Lead capture unavailable — persistence failed, or neither file " +
-                "capture nor a database is configured",
+                "Lead capture unavailable — persistence failed, delivery failed, or " +
+                "this deployment has nowhere to put the lead",
               content: {
                 "application/json": {
                   schema: {
@@ -787,6 +789,7 @@ export function buildOpenApiSpec(
                       {
                         $ref: "#/components/schemas/LeadCaptureNotConfiguredResponse",
                       },
+                      { $ref: "#/components/schemas/DeliveryFailedResponse" },
                     ],
                   },
                 },
@@ -795,6 +798,36 @@ export function buildOpenApiSpec(
           },
         },
       },
+      "/v1/leads/capture": {
+        get: {
+          operationId: "getLeadCaptureStatus",
+          summary: "Whether this site accepts a contact message or a signup",
+          description:
+            "Two booleans: `contact` — a `POST /v1/leads/submit` would be accepted; " +
+            "`newsletter` — a `POST /v1/leads/subscribe` would be. A web page reads " +
+            "it to show the contact form or the site's contact email. It never says " +
+            "how a lead is delivered. No MCP twin (recorded parity exception): the " +
+            "three lead-write tools already answer the same question with a 503.",
+          responses: {
+            "200": {
+              description: "Lead-capture status",
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object",
+                    required: ["ok", "data"],
+                    properties: {
+                      ok: { type: "boolean", enum: [true] },
+                      data: { $ref: "#/components/schemas/LeadCaptureStatus" },
+                    },
+                  },
+                },
+              },
+            },
+            "429": { $ref: "#/components/responses/RateLimited" },
+          },
+        },
+      },
       "/v1/leads/subscribe": {
         post: {
           operationId: "subscribeLead",
@@ -833,8 +866,8 @@ export function buildOpenApiSpec(
             },
             "503": {
               description:
-                "Lead capture unavailable — persistence failed, or neither file " +
-                "capture nor a database is configured",
+                "Lead capture unavailable — persistence failed, delivery failed, or " +
+                "this deployment has nowhere to put the lead",
               content: {
                 "application/json": {
                   schema: {
@@ -1033,8 +1066,8 @@ export function buildOpenApiSpec(
             },
             "503": {
               description:
-                "Lead capture unavailable — persistence failed, or neither file " +
-                "capture nor a database is configured",
+                "Lead capture unavailable — persistence failed, delivery failed, or " +
+                "this deployment has nowhere to put the lead",
               content: {
                 "application/json": {
                   schema: {
@@ -1043,6 +1076,7 @@ export function buildOpenApiSpec(
                       {
                         $ref: "#/components/schemas/LeadCaptureNotConfiguredResponse",
                       },
+                      { $ref: "#/components/schemas/DeliveryFailedResponse" },
                     ],
                   },
                 },
@@ -1489,10 +1523,11 @@ export function buildOpenApiSpec(
               type: "string",
               description:
                 "Server-assigned record id — a DB-prefixed entity id when " +
-                'persisted is "db", or a `fallback-<ts>-<rand>` file id when ' +
-                'persisted is "file"',
+                'persisted is "db", a `fallback-<ts>-<rand>` file id when ' +
+                'persisted is "file", or an `email-<ts>-<rand>` id when persisted ' +
+                'is "email" (no database; the operator email was the delivery)',
             },
-            persisted: { type: "string", enum: ["db", "file"] },
+            persisted: { type: "string", enum: ["db", "file", "email"] },
             email: { $ref: "#/components/schemas/LeadEmailResult" },
           },
         },
@@ -1511,6 +1546,22 @@ export function buildOpenApiSpec(
             error: { type: "string", enum: ["persist_failed"] },
           },
         },
+        DeliveryFailedResponse: {
+          type: "object",
+          required: ["error", "message"],
+          properties: {
+            error: { type: "string", enum: ["delivery_failed"] },
+            message: { type: "string" },
+          },
+        },
+        LeadCaptureStatus: {
+          type: "object",
+          required: ["contact", "newsletter"],
+          properties: {
+            contact: { type: "boolean" },
+            newsletter: { type: "boolean" },
+          },
+        },
         LeadCaptureNotConfiguredResponse: {
           type: "object",
           required: ["error", "message"],

package/templates/apps/api/src/routes/content/__tests__/get-page.test.ts

@@ -6,6 +6,9 @@
  * No internal module mocks — the route exercises the real adapter stack.
  */
 
+import { writeFileSync } from "node:fs";
+import { join } from "node:path";
+
 import type { FastifyInstance } from "fastify";
 
 import { setupContentFixture } from "../../../__tests__/factories/content-fixture";
@@ -17,6 +20,30 @@ import { contentRoutes } from "../index";
 
 const fixture = setupContentFixture();
 
+/**
+ * A `_site.mdx` in the fixture's content root — an Organization identity at
+ * `https://example.com` (#6597). `logo` adds an identity-declared logo.
+ */
+function writeSiteMdx(root: string, opts: { logo?: string } = {}): void {
+  writeFileSync(
+    join(root, "_site.mdx"),
+    [
+      "---",
+      'version: "1"',
+      "siteName: Fixture Site",
+      "baseUrl: https://example.com",
+      "defaultLocale: en",
+      "siteIdentity:",
+      "  kind: Organization",
+      "  name: Fixture Co",
+      "  url: https://example.com",
+      ...(opts.logo !== undefined ? [`  logo: ${opts.logo}`] : []),
+      "---",
+      "",
+    ].join("\n"),
+  );
+}
+
 describe("GET /api/content/:type/:slug", () => {
   let app: FastifyInstance;
 
@@ -31,6 +58,7 @@ describe("GET /api/content/:type/:slug", () => {
 
   it("returns the page with resolved JSON-LD at the document root", async () => {
     // The fixture writes "home" HomePage in beforeEach by default.
+    writeSiteMdx(fixture.getContentRoot());
     const res = await app.inject({
       method: "GET",
       url: "/v1/content/HomePage/home",
@@ -39,8 +67,8 @@ describe("GET /api/content/:type/:slug", () => {
     expect(res.statusCode).toBe(200);
     const body = JSON.parse(res.body);
     expect(body["@context"]).toBe("https://schema.org");
-    // HomePage composes a Home/Landing @graph (WebPage spine + Organization +
-    // WebSite siblings) — #2618. The page-level fields live on the spine.
+    // A HomePage body keeps its @graph envelope: the WebPage spine plus the
+    // sitewide identity from _site.mdx (#6597). Page fields live on the spine.
     const graph = body["@graph"] as Array<Record<string, unknown>>;
     expect(graph.map((n) => n["@type"])).toEqual([
       "WebPage",
@@ -405,9 +433,8 @@ describe("GET /v1/content/:type/:slug under CONTENT_ADAPTER=database (#5852)", (
 // route's capability branch is exercised through the real resolver — the file
 // header's "no internal module mocks" (#507) holds for these cases too.
 
-import { mkdtempSync, writeFileSync } from "node:fs";
+import { mkdtempSync } from "node:fs";
 import { tmpdir } from "node:os";
-import { join } from "node:path";
 
 import * as contentAdapterModule from "../../../lib/content-adapter.js";
 import { resetContentAdapter } from "../../../lib/content-adapter.js";
@@ -453,7 +480,12 @@ describe("GET /v1/content/:type/:slug?include=body (#5890)", () => {
   });
 
   // AC-1, the floor half — the unparameterised read is unchanged to the byte.
+  // #6597 rewrote this pin by hand: the HomePage @graph is now composed from
+  // the fixture's _site.mdx rather than the page title (AC-9 checks every
+  // field of the pre-#6597 body is still present). The #5890 claim it guards
+  // — no `body` key without the parameter — is unchanged.
   it("serves a response byte-identical to the pre-change handler when the parameter is absent", async () => {
+    writeSiteMdx(fixture.getContentRoot());
     const res = await app.inject({
       method: "GET",
       url: "/v1/content/HomePage/home",
@@ -461,7 +493,7 @@ describe("GET /v1/content/:type/:slug?include=body (#5890)", () => {
 
     expect(res.statusCode).toBe(200);
     expect(res.body).toMatchInlineSnapshot(
-      `"{"@context":"https://schema.org","@graph":[{"@context":"https://schema.org","@type":"WebPage","inLanguage":"en","name":"HomePage home title","description":"HomePage home description"},{"@context":"https://schema.org","@type":"Organization","name":"HomePage home title"},{"@context":"https://schema.org","@type":"WebSite","name":"HomePage home title","inLanguage":"en"}],"page":{"type":"HomePage","slug":"home","title":"HomePage home title","description":"HomePage home description"}}"`,
+      `"{"@context":"https://schema.org","@graph":[{"@context":"https://schema.org","@type":"WebPage","inLanguage":"en","name":"HomePage home title","description":"HomePage home description","mainEntity":{"@id":"https://example.com/#organization"},"isPartOf":{"@id":"https://example.com/#website"}},{"@context":"https://schema.org","@type":"Organization","@id":"https://example.com/#organization","name":"Fixture Co","url":"https://example.com"},{"@context":"https://schema.org","@type":"WebSite","@id":"https://example.com/#website","name":"Fixture Site","url":"https://example.com","inLanguage":"en","publisher":{"@id":"https://example.com/#organization"}}],"page":{"type":"HomePage","slug":"home","title":"HomePage home title","description":"HomePage home description"}}"`,
     );
     expect(JSON.parse(res.body)).not.toHaveProperty("body");
   });
@@ -693,3 +725,93 @@ describe("GET /v1/content/:type/:slug?include=body under CONTENT_ADAPTER=databas
     expect(prisma.artifactVersion.findFirst).not.toHaveBeenCalled();
   });
 });
+
+// ─── #6597 AC-9 — the /v1 HomePage response keeps its @graph envelope ─────────
+
+describe("GET /v1/content/HomePage/home — sitewide identity envelope (#6597)", () => {
+  let app: FastifyInstance;
+
+  beforeEach(async () => {
+    app = require("fastify")();
+    await app.register(contentRoutes);
+    await fixture.writeFixturePage("HomePage", "home", {
+      type: "HomePage",
+      slug: "home",
+      title: "HomePage home title",
+      description: "HomePage home description",
+      image: "https://example.com/home.png",
+    });
+  });
+
+  afterEach(async () => {
+    await app.close();
+  });
+
+  async function homeBody(query = ""): Promise<{
+    body: Record<string, unknown>;
+    graph: Array<Record<string, unknown>>;
+  }> {
+    const res = await app.inject({ method: "GET", url: `/v1/content/HomePage/home${query}` });
+    expect(res.statusCode).toBe(200);
+    const body = JSON.parse(res.body) as Record<string, unknown>;
+    return { body, graph: body["@graph"] as Array<Record<string, unknown>> };
+  }
+  const byType = (graph: Array<Record<string, unknown>>, type: string) =>
+    graph.find((n) => n["@type"] === type)!;
+
+  it("composes WebPage + Organization + WebSite from _site.mdx, keeping every pre-#6597 field", async () => {
+    writeSiteMdx(fixture.getContentRoot());
+    const { body, graph } = await homeBody();
+    expect(body["@context"]).toBe("https://schema.org");
+    expect(graph.map((n) => n["@type"])).toEqual(["WebPage", "Organization", "WebSite"]);
+
+    const org = byType(graph, "Organization");
+    expect(org["@id"]).toBe("https://example.com/#organization");
+    expect(org["name"]).toBe("Fixture Co");
+    // The pre-#6597 Organization took `logo` from the page image; kept as the
+    // fallback when the identity declares none.
+    expect(org["logo"]).toBe("https://example.com/home.png");
+
+    // Every key of every node of the pre-#6597 pinned body survives.
+    const pinned: Record<string, string[]> = {
+      WebPage: ["@context", "@type", "inLanguage", "name", "description"],
+      Organization: ["@context", "@type", "name"],
+      WebSite: ["@context", "@type", "name", "inLanguage"],
+    };
+    for (const [type, keys] of Object.entries(pinned)) {
+      for (const key of keys) expect(byType(graph, type)).toHaveProperty([key]);
+    }
+
+    const webPage = byType(graph, "WebPage");
+    expect(byType(graph, "WebSite")["inLanguage"]).toBe(webPage["inLanguage"]);
+    expect(webPage["inLanguage"]).toBe("en");
+    expect(graph.filter((n) => n["name"] === "HomePage home title")).toEqual([webPage]);
+  });
+
+  it("the WebSite and WebPage inLanguage stay one value under ?locale=<second locale>", async () => {
+    writeSiteMdx(fixture.getContentRoot());
+    const { graph } = await homeBody("?locale=pt-BR");
+    expect(byType(graph, "WebSite")["inLanguage"]).toBe(byType(graph, "WebPage")["inLanguage"]);
+  });
+
+  it("an identity-declared logo wins over the page image", async () => {
+    writeSiteMdx(fixture.getContentRoot(), { logo: "https://example.com/logo.png" });
+    const { graph } = await homeBody();
+    expect(byType(graph, "Organization")["logo"]).toBe("https://example.com/logo.png");
+  });
+
+  it("with no _site.mdx the body still has @context and a one-node @graph", async () => {
+    const { body, graph } = await homeBody();
+    expect(body["@context"]).toBe("https://schema.org");
+    expect(graph.map((n) => n["@type"])).toEqual(["WebPage"]);
+  });
+
+  it("other types keep their bare JSON-LD — no @graph key", async () => {
+    writeSiteMdx(fixture.getContentRoot());
+    const res = await app.inject({ method: "GET", url: "/v1/content/AboutPage/about" });
+    expect(res.statusCode).toBe(200);
+    const body = JSON.parse(res.body) as Record<string, unknown>;
+    expect(body).not.toHaveProperty("@graph");
+    expect(body["@type"]).toBe("AboutPage");
+  });
+});

package/templates/apps/api/src/routes/content/get-page.ts

@@ -23,7 +23,15 @@
  * independent `getPageSource` call. Two independent adapter reads can
  * straddle a publish that lands between them (frontmatter from revision N,
  * body from revision N+1); one read cannot.
+ *
+ * #6597: a `HomePage` body keeps its `@context` + `@graph` envelope, now
+ * composed from the deployment's `_site.mdx` identity (identity node, optional
+ * secondary, WebSite) rather than the page title. Every other type's body is
+ * the page's own JSON-LD, spread at the root, as before.
  */
+import { readFileSync } from "node:fs";
+import { join } from "node:path";
+
 import {
   SCHEMA_ORG_TYPES,
   type ContentAdapter,
@@ -32,10 +40,23 @@ import {
   type MdxPageSource,
   type SchemaOrgType,
 } from "@working-theory/content-adapters";
-import { buildJsonLd, type ContentPageInput } from "@working-theory/schema";
+import {
+  buildJsonLd,
+  composeGraph,
+  graphNodes,
+  type ContentPageInput,
+  type JsonLdObject,
+  type SitewideIdentityInput,
+} from "@working-theory/schema";
+import {
+  SiteConfigSchema,
+  type SiteConfig,
+} from "@working-theory/site-config/schema";
 import type { FastifyPluginAsync } from "fastify";
+import { parse as parseYaml } from "yaml";
 import { z } from "zod";
 
+import { getContentRoot } from "../../lib/content-adapter.js";
 import { resolveLocale } from "../../lib/locales.js";
 import { resolvePublicContentAdapter } from "../../services/public-site-resolver.js";
 
@@ -64,6 +85,67 @@ function hasPageSource(
   );
 }
 
+const FRONTMATTER_RE = /^---\r?\n([\s\S]*?)\r?\n---/;
+
+/** `_site.mdx` per content root, read once; `null` when it does not load. */
+const siteConfigByRoot = new Map<string, SiteConfig | null>();
+
+/**
+ * The deployment's `_site.mdx`, validated against `SiteConfigSchema`, or
+ * `undefined` on any failure (absent, unreadable, invalid). A local read with
+ * the client-safe `/schema` entry: `@working-theory/site-config/server` imports
+ * `server-only`, which throws outside a React Server Components runtime.
+ */
+function readSiteConfig(contentRoot: string): SiteConfig | undefined {
+  if (!siteConfigByRoot.has(contentRoot)) {
+    let config: SiteConfig | null = null;
+    try {
+      const raw = readFileSync(join(contentRoot, "_site.mdx"), "utf8");
+      const match = FRONTMATTER_RE.exec(raw);
+      if (match) {
+        const parsed = SiteConfigSchema.safeParse(parseYaml(match[1] ?? ""));
+        if (parsed.success) config = parsed.data;
+      }
+    } catch {
+      // Absent or unreadable — no site.
+    }
+    siteConfigByRoot.set(contentRoot, config);
+  }
+  return siteConfigByRoot.get(contentRoot) ?? undefined;
+}
+
+/**
+ * The `HomePage` body's `@graph` (#6597, spec D11): the spine plus the site's
+ * sitewide identity nodes. The WebSite's `inLanguage` is the spine's own, so
+ * both carry one value; the Organization falls back to the page's `image` as
+ * its `logo` when the identity declares none, as the title-derived node did.
+ */
+function homePageGraph(
+  primary: JsonLdObject,
+  image: string | undefined,
+): { "@context": "https://schema.org"; "@graph": JsonLdObject[] } {
+  const config = readSiteConfig(getContentRoot());
+  let site: SitewideIdentityInput | undefined;
+  if (config !== undefined) {
+    const identity = config.siteIdentity;
+    site = {
+      origin: config.baseUrl.replace(/\/+$/, ""),
+      siteName: config.siteName,
+      baseUrl: config.baseUrl,
+      inLanguage:
+        typeof primary["inLanguage"] === "string" ? primary["inLanguage"] : undefined,
+      identity:
+        identity.kind !== "Person" && identity.logo === undefined && image !== undefined
+          ? { ...identity, logo: image }
+          : identity,
+    };
+  }
+  return {
+    "@context": "https://schema.org",
+    "@graph": graphNodes(composeGraph({ primary, site, isHomePage: true })),
+  };
+}
+
 export const getPageRoute: FastifyPluginAsync = async (fastify) => {
   fastify.get<{
     Params: { type: string; slug: string };
@@ -165,7 +247,9 @@ export const getPageRoute: FastifyPluginAsync = async (fastify) => {
           // now preserves `sections`; before, it was stripped at validation.
           ...(page.sections !== undefined && { sections: page.sections }),
         };
-        const jsonLd = buildJsonLd(input);
+        const primary = buildJsonLd(input);
+        const jsonLd =
+          page.type === "HomePage" ? homePageGraph(primary, page.image) : primary;
         return reply.send({
           ...jsonLd,
           page,

package/templates/apps/api/src/routes/leads/__tests__/capture.test.ts

@@ -0,0 +1,88 @@
+/**
+ * @file capture.test.ts
+ * `GET /v1/leads/capture` (#6730 D4) — the four D1 environments, and the
+ * body's exact shape: two booleans, never the mode or an env name.
+ */
+
+import type { FastifyInstance } from "fastify";
+
+// The route module also carries the write routes; their dependencies are
+// external boundaries this read never reaches.
+// eslint-disable-next-line no-restricted-syntax -- prisma is a DB boundary; __mocks__/prisma.ts is the repo-standard double
+jest.mock("../../../lib/prisma.js");
+jest.mock("@working-theory/email", () => ({
+  sendLeadNotification: jest.fn(),
+  sendRequestConfirmEmail: jest.fn(),
+  sendRequestPaidLinkEmail: jest.fn(),
+}));
+
+import { leadCaptureStatusRoute } from "../index";
+
+const ENV_KEYS = [
+  "DATABASE_URL",
+  "NODE_ENV",
+  "RESEND_API_KEY",
+  "AILK_LEAD_NOTIFICATION_TO",
+  "AILK_LEAD_NOTIFICATION_FROM",
+  "LEAD_CAPTURE_FILE_DISABLED",
+] as const;
+
+const EMAIL_ENV = {
+  RESEND_API_KEY: "re_test",
+  AILK_LEAD_NOTIFICATION_TO: "owner@example.com",
+  AILK_LEAD_NOTIFICATION_FROM: "noreply@example.com",
+};
+
+describe("GET /v1/leads/capture", () => {
+  let app: FastifyInstance;
+  let saved: Partial<Record<(typeof ENV_KEYS)[number], string | undefined>>;
+
+  beforeEach(async () => {
+    saved = {};
+    for (const k of ENV_KEYS) saved[k] = process.env[k];
+    for (const k of ENV_KEYS) delete process.env[k];
+    const fastify = require("fastify")();
+    await fastify.register(leadCaptureStatusRoute);
+    app = fastify;
+  });
+
+  afterEach(async () => {
+    await app.close();
+    for (const k of ENV_KEYS) {
+      if (saved[k] === undefined) delete process.env[k];
+      else process.env[k] = saved[k];
+    }
+  });
+
+  const get = () => app.inject({ method: "GET", url: "/v1/leads/capture" });
+
+  it.each([
+    ["inbox", { DATABASE_URL: "postgres://x", NODE_ENV: "production" }, true, true],
+    ["email", { ...EMAIL_ENV, NODE_ENV: "production" }, true, false],
+    ["local", { NODE_ENV: "development" }, true, true],
+    ["none", { NODE_ENV: "production" }, false, false],
+  ] as const)("%s → contact=%s newsletter=%s", async (_mode, env, contact, newsletter) => {
+    Object.assign(process.env, env);
+
+    const res = await get();
+
+    expect(res.statusCode).toBe(200);
+    expect(res.json()).toEqual({ ok: true, data: { contact, newsletter } });
+  });
+
+  it("the body carries exactly ok + data{contact,newsletter} — no mode, no env names", async () => {
+    Object.assign(process.env, EMAIL_ENV, { NODE_ENV: "production" });
+
+    const res = await get();
+    const body = res.json();
+
+    expect(Object.keys(body).sort()).toEqual(["data", "ok"]);
+    expect(Object.keys(body.data).sort()).toEqual(["contact", "newsletter"]);
+    expect(res.body).not.toMatch(/email|inbox|RESEND|DATABASE|owner@example\.com/);
+  });
+
+  it("is cacheable for a minute", async () => {
+    const res = await get();
+    expect(res.headers["cache-control"]).toBe("public, max-age=60");
+  });
+});

package/templates/apps/api/src/routes/leads/__tests__/index.test.ts

@@ -1236,3 +1236,103 @@ describe("#6335 — the shared prisma mock declares no workspace default", () =>
     });
   });
 });
+
+// ─── #6730 D2/D5 — email delivery and the production refusal, over HTTP ─────
+
+describe("POST /v1/leads/submit — #6730 delivery modes", () => {
+  let app: FastifyInstance;
+  const ENV_KEYS = [
+    "DATABASE_URL",
+    "NODE_ENV",
+    "RESEND_API_KEY",
+    "AILK_LEAD_NOTIFICATION_TO",
+    "AILK_LEAD_NOTIFICATION_FROM",
+    "LEAD_CAPTURE_FILE",
+    "AILK_INBOX_FALLBACK_DIR",
+  ] as const;
+  let saved: Partial<Record<(typeof ENV_KEYS)[number], string | undefined>>;
+  const sendLeadNotification = jest.requireMock("@working-theory/email")
+    .sendLeadNotification as jest.Mock;
+  const writeLeadFallbackSpy = jest.spyOn(
+    jest.requireActual("../../../lib/file-fallback.js"),
+    "writeLeadFallback",
+  );
+
+  const submit = () =>
+    app.inject({
+      method: "POST",
+      url: "/v1/leads/submit",
+      payload: {
+        kind: "submit",
+        source: "contact",
+        email: "visitor@example.com",
+        payload: { message: "hello" },
+      },
+    });
+
+  beforeEach(async () => {
+    jest.clearAllMocks();
+    saved = {};
+    for (const k of ENV_KEYS) saved[k] = process.env[k];
+    for (const k of ENV_KEYS) delete process.env[k];
+    process.env.NODE_ENV = "production";
+    const fastify = require("fastify")();
+    await fastify.register(leadSubmitRoute);
+    app = fastify;
+  });
+
+  afterEach(async () => {
+    await app.close();
+    for (const k of ENV_KEYS) {
+      if (saved[k] === undefined) delete process.env[k];
+      else process.env[k] = saved[k];
+    }
+  });
+
+  describe("email delivery (no DATABASE_URL, the three email vars)", () => {
+    beforeEach(() => {
+      process.env.RESEND_API_KEY = "re_test";
+      process.env.AILK_LEAD_NOTIFICATION_TO = "owner@example.com";
+      process.env.AILK_LEAD_NOTIFICATION_FROM = "noreply@example.com";
+    });
+
+    it("an accepted email → 201 persisted:email; no Prisma write", async () => {
+      sendLeadNotification.mockResolvedValueOnce({ ok: true, messageId: "msg-e" });
+
+      const res = await submit();
+
+      expect(res.statusCode).toBe(201);
+      expect(res.json()).toMatchObject({ persisted: "email" });
+      expect(res.json().id).toMatch(/^email-/);
+      expect(prisma.lead.create).not.toHaveBeenCalled();
+      expect(sendLeadNotification).toHaveBeenCalledTimes(1);
+      expect(sendLeadNotification.mock.calls[0][0].recipientEmail).toBe("owner@example.com");
+    });
+
+    it("a refused email → 503 delivery_failed, never 201", async () => {
+      sendLeadNotification.mockResolvedValueOnce({
+        ok: false,
+        error: { kind: "provider_error", message: "rejected" },
+      });
+
+      const res = await submit();
+
+      expect(res.statusCode).toBe(503);
+      expect(res.json()).toEqual({
+        error: "delivery_failed",
+        message: "The message could not be delivered.",
+      });
+    });
+  });
+
+  it("production with neither → 503 lead_capture_not_configured; no Prisma, no file, no email", async () => {
+    const res = await submit();
+
+    expect(res.statusCode).toBe(503);
+    expect(res.json().error).toBe("lead_capture_not_configured");
+    expect(prisma.lead.create).not.toHaveBeenCalled();
+    expect(writeLeadFallbackSpy).not.toHaveBeenCalled();
+    expect(sendLeadNotification).not.toHaveBeenCalled();
+    await expect(fs.access(fileEnv.getCaptureFilePath())).rejects.toThrow();
+  });
+});