Remove in-app email opt-in; automate list sync outside the repo

.github/workflows/_deploy-environment.yml

@@ -85,7 +85,6 @@ jobs:
           COMPASS_SYNC_TOKEN: ${{ secrets.COMPASS_SYNC_TOKEN }}
           GCAL_NOTIFICATION_TOKEN: ${{ secrets.GCAL_NOTIFICATION_TOKEN }}
           GOOGLE_CLIENT_SECRET: ${{ secrets.GOOGLE_CLIENT_SECRET }}
-          KIT_API_SECRET: ${{ secrets.KIT_API_SECRET }}
           MONGO_PASSWORD: ${{ secrets.MONGO_PASSWORD }}
           MONGO_REPLICA_SET_KEY: ${{ secrets.MONGO_REPLICA_SET_KEY }}
           MONGO_URI: ${{ secrets.MONGO_URI }}
@@ -105,10 +104,6 @@ jobs:
           # (2026-08-01).
           if [ "${{ inputs.environment }}" = "production" ]; then
             NODE_ENV="production"
-            if [ -z "$KIT_API_SECRET" ]; then
-              echo "Production deploy requires KIT_API_SECRET." >&2
-              exit 1
-            fi
           else
             NODE_ENV="staging"
           fi
@@ -186,11 +181,6 @@ jobs:
                 "  key: \"${POSTHOG_KEY}\"" \
                 "  host: \"${POSTHOG_HOST}\""
             fi
-            if [ -n "$KIT_API_SECRET" ]; then
-              printf '%s\n' \
-                'email:' \
-                "  kitApiSecret: \"${KIT_API_SECRET}\""
-            fi
             printf '%s\n' \
               'sync:' \
               "  mongoUri: \"${SYNC_MONGO_URI}\"" \

compass.example.yaml

@@ -37,9 +37,6 @@ supertokens:
 #   clientId: REPLACE_WITH_GOOGLE_CLIENT_ID # e.g. your-id.apps.googleusercontent.com
 #   clientSecret: REPLACE_WITH_GOOGLE_CLIENT_SECRET
 
-# email:
-#   kitApiSecret: REPLACE_WITH_KIT_API_SECRET
-
 # posthog:
 #   key: REPLACE_WITH_POSTHOG_KEY
 #   host: REPLACE_WITH_POSTHOG_HOST

docs/Config/README.md

@@ -96,6 +96,5 @@ database and must not share the backend's database user/data.
 
 | key | Required | Description |
 |---|---|---|
-| `email.kitApiSecret` | No | Kit.com API secret key. |
 | `posthog.key` | No | PostHog project key injected into the web bundle. |
 | `posthog.host` | No | PostHog host injected into the web bundle. |

packages/backend/src/__tests__/drivers/user.controller.driver.ts

@@ -1,6 +1,5 @@
 import type request from "supertest";
 import { Status } from "@core/errors/status.codes";
-import { type EmailUpdatesResponse } from "@core/types/email/email.types";
 import { type UserProfile } from "@core/types/user.types";
 import { type BaseDriver } from "@backend/__tests__/drivers/base.driver";
 import { type Summary_Delete } from "@backend/user/types/user.types";
@@ -29,26 +28,4 @@ export class UserControllerDriver {
       .use(this.baseDriver.setSessionPlugin(session))
       .expect(status);
   }
-
-  async getEmailUpdates(
-    session?: { userId: string },
-    status: Status = Status.OK,
-  ): Promise<Omit<request.Response, "body"> & { body: EmailUpdatesResponse }> {
-    return this.baseDriver
-      .getServer()
-      .get("/api/user/email-updates")
-      .use(this.baseDriver.setSessionPlugin(session))
-      .expect(status);
-  }
-
-  async subscribeToEmailUpdates(
-    session?: { userId: string },
-    status: Status = Status.OK,
-  ): Promise<Omit<request.Response, "body"> & { body: EmailUpdatesResponse }> {
-    return this.baseDriver
-      .getServer()
-      .put("/api/user/email-updates")
-      .use(this.baseDriver.setSessionPlugin(session))
-      .expect(status);
-  }
 }

packages/backend/src/common/constants/config.constants.ts

@@ -21,7 +21,6 @@ const ConfigSchema = z
     GOOGLE_CLIENT_ID: z.string().nonempty().optional(),
     GOOGLE_CLIENT_SECRET: z.string().nonempty().optional(),
     DB: z.string().nonempty(),
-    EMAILER_SECRET: z.string().nonempty().optional(),
     FRONTEND_URL: z.string().url(),
     MONGO_URI: z.string().nonempty(),
     NODE_ENV: z.nativeEnum(NodeEnv),
@@ -84,7 +83,6 @@ export function parseRawConfig(config: CompassConfig): Config {
     GOOGLE_CLIENT_ID: nonEmpty(config.google?.clientId),
     GOOGLE_CLIENT_SECRET: nonEmpty(config.google?.clientSecret),
     DB: isDev(nodeEnv) ? "dev_calendar" : "prod_calendar",
-    EMAILER_SECRET: nonEmpty(config.email?.kitApiSecret),
     FRONTEND_URL: config.web.url,
     MONGO_URI: config.mongo.uri,
     NODE_ENV: nodeEnv,
@@ -113,7 +111,6 @@ export function parseConfigFromEnv(
     GOOGLE_CLIENT_ID: rawEnv["GOOGLE_CLIENT_ID"],
     GOOGLE_CLIENT_SECRET: rawEnv["GOOGLE_CLIENT_SECRET"],
     DB: isDev(nodeEnv) ? "dev_calendar" : "prod_calendar",
-    EMAILER_SECRET: rawEnv["EMAILER_API_SECRET"],
     FRONTEND_URL: rawEnv["FRONTEND_URL"],
     MONGO_URI: rawEnv["MONGO_URI"],
     NODE_ENV: nodeEnv,

packages/backend/src/common/errors/handlers/error.handler.ts

@@ -1,5 +1,4 @@
 import { BaseError } from "@core/errors/errors.base";
-import { Status } from "@core/errors/status.codes";
 import { Logger } from "@core/logger/winston.logger";
 import { type ErrorMetadata } from "@backend/common/types/error.types";
 
@@ -21,19 +20,6 @@ export const error = (cause: ErrorMetadata, result: string) => {
   );
 };
 
-export const genericError = (
-  e: unknown,
-  result: string,
-  status = Status.INTERNAL_SERVER,
-  isOperational = true,
-) => {
-  const _e = e as Error;
-  const name = _e.name || "GenericName";
-  const description = `${name}: ${_e.message || "GenericMsg"}`;
-  const cause = { description, isOperational, status };
-  return error(cause, result);
-};
-
 /**
  * Returns a safe payload for BaseError to send to clients.
  * Avoids exposing stack, isOperational, or other internal details.