CCM-11889: merge

Author: mark-r-bjss

.github/CODEOWNERS

@@ -7,6 +7,9 @@
 /docs/                      @NHSDigital/nhs-notify-web-template-management
 /infrastructure/terraform/  @NHSDigital/nhs-notify-platform
 
+# Root level AGENTS.md owned by platform.
+AGENTS.md                   @NHSDigital/nhs-notify-platform
+
 # Codeowners must be final check
 /.github/CODEOWNERS         @NHSDigital/nhs-notify-code-owners
 /CODEOWNERS                 @NHSDigital/nhs-notify-code-owners

AGENTS.md

@@ -0,0 +1,95 @@
+# AGENTS.md
+<!-- vale off -->
+
+## Scope
+
+This file is for **AI agents** working within NHS Notify repositories.
+Humans should read `README.md` and the docs for how we actually work day to day.
+Keep anything language or tool-specific in nested `AGENTS.md` files (for example under `infrastructure/terraform` or `lambdas`).
+
+## Repository Layout (high level)
+
+At a glance, the main areas are:
+
+- `infrastructure/terraform/` – Terraform components, and shared modules for AWS accounts and environments.
+- `lambdas/` – TypeScript lambda projects (each with their own `package.json`, Jest config, etc.). Root level packages.json defines workspaces and scripts. Tests for the lambda are stored in `lambdas/{name}/src/__test`.
+- `src/` and `utils/` – Shared code and utilities (for example `utils/logger`).
+- `docs/` – Documentation site, ADRs, RFCS, and other long‑form docs.
+- `.github/workflows/` and `.github/actions/` – GitHub Actions workflows and composite actions.
+- `scripts/` – Helper scripts and tooling used by humans and workflows.
+- `tests/` – Cross‑cutting tests and harnesses for the repo.
+
+Agents should look for a nested `AGENTS.md` in or near these areas before making non‑trivial changes.
+
+## Root package.json – role and usage
+
+The root `package.json` is the orchestration manifestgit co for this repo. It does not ship application code; it wires up shared dev tooling and delegates to workspace-level projects.
+
+- Workspaces: Declares the set of npm workspaces (e.g. under `lambdas/`, `utils/`, `tests/`, `scripts/`). Agents should add a new workspace path here when introducing a new npm project.
+- Scripts: Provides top-level commands that fan out across workspaces using `--workspaces` (lint, typecheck, unit tests) and project-specific runners (e.g. `lambda-build`).
+- Dev tool dependencies: Centralises Jest, TypeScript, ESLint configurations and plugins to keep versions consistent across workspaces. Workspace projects should rely on these unless a local override is strictly needed.
+- Overrides/resolutions: Pins transitive dependencies (e.g. Jest/react-is) to avoid ecosystem conflicts. Agents must not remove overrides without verifying tests across all workspaces.
+
+Agent guidance:
+
+- Before adding or removing a workspace, update the root `workspaces` array and ensure CI scripts still succeed with `npm run lint`, `npm run typecheck`, and `npm run test:unit` at the repo root.
+- When adding repo-wide scripts, keep names consistent with existing patterns (e.g. `lint`, `lint:fix`, `typecheck`, `test:unit`, `lambda-build`) and prefer `--workspaces` fan-out.
+- Do not publish from the root. If adding a new workspace intended for publication, mark that workspace package as `private: false` and keep the root as private.
+- Validate changes by running the repo pre-commit hooks: `make githooks-run`.
+
+Success criteria for changes affecting the root `package.json`:
+
+- `npm run lint`, `npm run typecheck`, and `npm run test:unit` pass at the repo root.
+- Workspace discovery is correct (new projects appear under `npm run typecheck --workspaces`).
+- No regression in lambda build tooling (`npm run lambda-build`).
+
+## What Agents Can / Can’t Do
+
+Agents **can**:
+
+- Propose changes to code, tests, GitHub workflows, Terraform, and docs.
+- Suggest new scripts, Make targets, or composite actions by copying existing patterns.
+- Run tests to validate proposed solutions.
+
+Agents **must not**:
+
+- Create, push, or merge branches or PRs.
+- Introduce new technologies, providers, or big architectural patterns without clearly calling out that an ADR is needed.
+- Invent secrets or hard‑code real credentials anywhere.
+
+## Working With This Repo
+
+- All dependencies can be setup using the command `make config` from the repository root.
+- **Don’t guess commands.** Derive them from what’s already here or ask for guidance form the human user:
+  - Prefer `Makefile` targets, `scripts/`, `.github/workflows/`, and `.github/actions/`.
+- For Terraform, follow `infrastructure/terraform/{components,modules}` and respect `versions.tf`.
+- Keep diffs small and focused. Avoid mixing refactors with behaviour changes unless you explain why.
+
+## Quality Expectations
+
+When proposing a change, agents should:
+
+- Keep code formatted and idiomatic (Terraform, TypeScript, Bash, YAML).
+- Stick to existing patterns where available (for example `utils/logger`, composite actions under `.github/actions`).
+- Use available information on best practices within the specific area of the codebase.
+- **Always** run local pre-commit hooks from the repo root with:
+
+  ```sh
+    pre-commit run \
+    --config scripts/config/pre-commit.yaml
+  ```
+
+  to catch formatting and basic lint issues. Domain specific checks will be defined in appropriate nested AGENTS.md files.
+
+- Suggest at least one extra validation step (for example `npm test` in a lambda, or triggering a specific workflow).
+- Any required follow up activites which fall outside of the current task's scope should be clearly marked with a 'TODO: CCM-12345' comment. The human user should be prompted to create and provide a JIRA ticket ID to be added to the comment.
+
+## Security & Safety
+
+- All agent-generated changes **must** be reviewed and merged by a human.
+- Provide a concise, clear summary of the proposed changes to make human review easier (what changed, why (refer directly to the guidance in relevant Agents.MD files when applicable), and how it was validated). It should be directly pastable into the PR description and make it clear that AI assistance was used.
+- Never output real secrets or tokens. Use placeholders and rely on the GitHub/AWS secrets already wired into workflows.
+
+## Escalation / Blockers
+
+If you are blocked by an unavailable secret, unclear architectural constraint, missing upstream module, or failing tooling you cannot safely fix, stop and ask a single clear clarifying question rather than guessing.

frontend/package.json

@@ -10,7 +10,7 @@
     "jwt-decode": "^4.0.0",
     "markdown-it": "^13.0.2",
     "markdown-to-jsx": "^7.7.10",
-    "next": "^15.2.3",
+    "next": "^15.5.7",
     "next-client-cookies": "^2.0.1",
     "nhs-notify-backend-client": "^0.0.1",
     "nhs-notify-web-template-management-utils": "^0.0.1",

frontend/src/__tests__/app/choose-templates/__snapshots__/page.test.tsx.snap

@@ -674,7 +674,7 @@ exports[`ChooseTemplatesPage renders correctly for a message plan with multiple
             class="nhsuk-button"
             data-testid="move-to-production-cta"
             draggable="false"
-            href="/message-plans/move-to-production/fbb81055-79b9-4759-ac07-d191ae57be34"
+            href="/message-plans/get-ready-to-move/fbb81055-79b9-4759-ac07-d191ae57be34"
             role="button"
           >
             Move to production

frontend/src/__tests__/app/message-plans/create-message-plan/server-action.test.ts

@@ -4,14 +4,14 @@ import type { CascadeItem, RoutingConfig } from 'nhs-notify-backend-client';
 import type { MessageOrder } from 'nhs-notify-web-template-management-utils';
 import { createMessagePlanServerAction } from '@app/message-plans/create-message-plan/server-action';
 import { NextRedirectError } from '@testhelpers/next-redirect';
-import { createRoutingConfig } from '@utils/form-actions';
+import { createRoutingConfig } from '@utils/message-plans';
 
 jest.mock('next/navigation');
 jest.mocked(redirect).mockImplementation((url, type) => {
   throw new NextRedirectError(url, type);
 });
 
-jest.mock('@utils/form-actions');
+jest.mock('@utils/message-plans');
 jest.mocked(createRoutingConfig).mockResolvedValue(
   mock<RoutingConfig>({
     id: 'mock-routing-config-id',

frontend/src/__tests__/app/message-plans/get-ready-to-move/__snapshots__/page.test.tsx.snap

@@ -0,0 +1,136 @@
+// Jest Snapshot v1, https://goo.gl/fbAQLP
+
+exports[`matches snapshot 1`] = `
+<DocumentFragment>
+  <main
+    class="nhsuk-main-wrapper"
+    id="maincontent"
+    role="main"
+  >
+    <div
+      class="nhsuk-grid-row"
+    >
+      <div
+        class="nhsuk-grid-column-two-thirds"
+      >
+        <span
+          class="nhsuk-caption-xl"
+        >
+          Step 1 of 2
+        </span>
+        <h1
+          class="nhsuk-heading-xl"
+        >
+          Get ready to move message plan to production
+        </h1>
+        <dl
+          class="nhsuk-summary-list"
+        >
+          <div
+            class="nhsuk-summary-list__row"
+          >
+            <dt
+              class="nhsuk-summary-list__key"
+            >
+              Name
+            </dt>
+            <dd
+              class="nhsuk-summary-list__value"
+            >
+              My Routing Config
+            </dd>
+          </div>
+        </dl>
+        <p>
+          Moving message plans from draft to production means they are ready to send.
+        </p>
+        <p>
+          Any templates used in these message plans will be locked.
+        </p>
+        <p>
+          Messages will only be sent to recipients when you make a request with 
+          <a
+            href="https://digital.nhs.uk/developer/api-catalogue/nhs-notify"
+            rel="noopener noreferrer"
+            target="_blank"
+          >
+            NHS Notify API (opens in a new tab)
+          </a>
+           or 
+          <a
+            href="https://digital.nhs.uk/developer/api-catalogue/nhs-notify-mesh"
+            rel="noopener noreferrer"
+            target="_blank"
+          >
+            NHS Notify MESH (opens in a new tab)
+          </a>
+          .
+        </p>
+        <h2
+          class="nhsuk-heading-m"
+          id="before-you-continue"
+        >
+          Before you continue
+        </h2>
+        <p>
+          Make sure:
+        </p>
+        <ul
+          class="nhsuk-list nhsuk-list--bullet"
+        >
+          <li>
+            the relevant stakeholders in your team have approved your templates and message plan
+          </li>
+          <li>
+            your templates have no errors
+          </li>
+        </ul>
+        <div
+          class="nhsuk-warning-callout"
+        >
+          <h3
+            class="nhsuk-warning-callout__label"
+          >
+            Important
+            <span
+              class="nhsuk-u-visually-hidden"
+            >
+              :
+            </span>
+          </h3>
+          <p>
+            You cannot edit anything that is in production.
+          </p>
+          <p>
+            If you need to edit your templates or message plans, you can copy and replace them.
+          </p>
+        </div>
+        <div
+          class="nhsuk-form-group"
+        >
+          <a
+            aria-disabled="false"
+            class="nhsuk-button"
+            data-testid="continue-link"
+            draggable="false"
+            href="/templates/message-plans/review-and-move-to-production/routing-config-id"
+            role="button"
+          >
+            Continue
+          </a>
+          <a
+            aria-disabled="false"
+            class="nhsuk-button nhsuk-button--secondary nhsuk-u-margin-left-3"
+            data-testid="cancel-link"
+            draggable="false"
+            href="/templates/message-plans"
+            role="button"
+          >
+            Keep in draft
+          </a>
+        </div>
+      </div>
+    </div>
+  </main>
+</DocumentFragment>
+`;

frontend/src/__tests__/app/message-plans/get-ready-to-move/page.test.tsx

@@ -0,0 +1,50 @@
+import { render } from '@testing-library/react';
+import { mock } from 'jest-mock-extended';
+import { redirect, RedirectType } from 'next/navigation';
+import { RoutingConfig } from 'nhs-notify-backend-client';
+import { getRoutingConfig } from '@utils/message-plans';
+import Page, {
+  metadata,
+} from '../../../../app/message-plans/get-ready-to-move/[routingConfigId]/page';
+
+jest.mock('next/navigation');
+jest.mock('@utils/message-plans');
+
+const routingConfig = mock<RoutingConfig>({
+  name: 'My Routing Config',
+});
+
+beforeEach(() => {
+  jest.clearAllMocks();
+});
+
+test('metadata', () => {
+  expect(metadata).toEqual({
+    title: 'Get ready to move message plan to production - NHS Notify',
+  });
+});
+
+test('matches snapshot', async () => {
+  jest.mocked(getRoutingConfig).mockResolvedValueOnce(routingConfig);
+
+  const page = await Page({
+    params: Promise.resolve({ routingConfigId: 'routing-config-id' }),
+  });
+
+  const container = render(page);
+
+  expect(container.asFragment()).toMatchSnapshot();
+});
+
+test('redirects if routing config is not found from path parameter', async () => {
+  await Page({
+    params: Promise.resolve({ routingConfigId: 'routing-config-id' }),
+  });
+
+  expect(getRoutingConfig).toHaveBeenCalledWith('routing-config-id');
+
+  expect(redirect).toHaveBeenCalledWith(
+    '/message-plans/invalid',
+    RedirectType.replace
+  );
+});