Stop treating login/save-progress as a 48-character email limit.

The overlay was failing Zod on preset method-card support text attached with the draft; raise that cap, allow RFC-length emails, and drop Back to home from the overlay.

Co-authored-by: Cursor <cursoragent@cursor.com>

tests/unit/authMagicLinkRequestRoute.test.ts

@@ -113,6 +113,63 @@ describe("POST /api/auth/magic-link/request", () => {
     );
   });
 
+  it("accepts an email longer than 48 characters", async () => {
+    const email =
+      "very.long.local-part.for.testing@subdomain.example.communityrule.org";
+    expect(email.length).toBeGreaterThan(48);
+    const res = await POST(
+      new NextRequest("https://x.test/api/auth/magic-link/request", {
+        method: "POST",
+        body: JSON.stringify({ email }),
+        headers: { "content-type": "application/json" },
+      }),
+      undefined,
+    );
+    expect(res.status).toBe(200);
+    expect(sendMagicLinkEmailMock).toHaveBeenCalledWith(
+      email,
+      expect.stringContaining("/api/auth/magic-link/verify?token="),
+    );
+  });
+
+  it("rejects an email longer than 254 characters", async () => {
+    const email = `${"a".repeat(243)}@example.com`;
+    expect(email.length).toBeGreaterThan(254);
+    const res = await POST(
+      new NextRequest("https://x.test/api/auth/magic-link/request", {
+        method: "POST",
+        body: JSON.stringify({ email }),
+        headers: { "content-type": "application/json" },
+      }),
+      undefined,
+    );
+    expect(res.status).toBe(400);
+    expect(createMock).not.toHaveBeenCalled();
+  });
+
+  it("accepts a draft whose method-card support text is longer than 48 characters", async () => {
+    const res = await POST(
+      new NextRequest("https://x.test/api/auth/magic-link/request", {
+        method: "POST",
+        body: JSON.stringify({
+          email: "a@b.c",
+          draft: {
+            customMethodCardMetaById: {
+              "00000000-0000-4000-8000-000000000001": {
+                label: "Signal",
+                supportText:
+                  "A decision is assumed approved unless objections are raised within a specified timeframe.",
+              },
+            },
+          },
+        }),
+        headers: { "content-type": "application/json" },
+      }),
+      undefined,
+    );
+    expect(res.status).toBe(200);
+  });
+
   it("returns 502 and rolls back the token when mail fails", async () => {
     sendMagicLinkEmailMock.mockRejectedValueOnce(new Error("smtp down"));
     const res = await POST(

tests/unit/createFlowValidation.test.ts

@@ -1,4 +1,5 @@
 import { describe, it, expect } from "vitest";
+import { CUSTOM_METHOD_CARD_WIZARD_MAX_DESCRIPTION_CHARS } from "../../lib/create/customMethodCardWizardConstants";
 import {
   assertPlainJsonValue,
   DEFAULT_PLAIN_JSON_LIMITS,
@@ -87,6 +88,33 @@ describe("createFlowStateSchema", () => {
     expect(r.success).toBe(false);
   });
 
+  it("accepts custom method card support text longer than 48 characters", () => {
+    const r = createFlowStateSchema.safeParse({
+      customMethodCardMetaById: {
+        "00000000-0000-4000-8000-000000000001": {
+          label: "Signal",
+          supportText:
+            "A decision is assumed approved unless objections are raised within a specified timeframe.",
+        },
+      },
+    });
+    expect(r.success).toBe(true);
+  });
+
+  it("rejects custom method card support text over the description max", () => {
+    const r = createFlowStateSchema.safeParse({
+      customMethodCardMetaById: {
+        "00000000-0000-4000-8000-000000000001": {
+          label: "Signal",
+          supportText: "x".repeat(
+            CUSTOM_METHOD_CARD_WIZARD_MAX_DESCRIPTION_CHARS + 1,
+          ),
+        },
+      },
+    });
+    expect(r.success).toBe(false);
+  });
+
   it("accepts communityStructureChipSnapshots with custom chip rows", () => {
     const r = createFlowStateSchema.safeParse({
       communityStructureChipSnapshots: {