create-ailk 0.1.0

package/templates/apps/web/security-headers.config.ts

@@ -0,0 +1,132 @@
+// S16 — Security-headers config (#612)
+//
+// Source of truth for the 7 baseline security headers applied by
+// `apps/web/middleware.ts`, plus the typed customer-extension interface.
+//
+// Spec: docs/internal/specs/ailk-pre-oss-security-phase-3-s16-security-headers-spec.md
+// Customer guide: docs/security/csp.md
+//
+// Locked directives — customers may NOT relax these via extension:
+//   - CSP `frame-ancestors 'none'`
+//   - CSP `base-uri 'self'`
+//   - Strict-Transport-Security (HSTS) entirely
+//
+// Customers MAY add additional sources to the extensible CSP directives
+// (`script-src`, `style-src`, `img-src`, `font-src`, `connect-src`, `media-src`,
+// `worker-src`, `frame-src`, `object-src`) by listing them in the
+// `csp` field of a `SecurityHeadersExtension`.
+
+/** Map of CSP directives keyed by directive name → list of source expressions. */
+export type CspDirectiveMap = Record<string, readonly string[]>;
+
+/** Customer-supplied extension; only the listed surfaces can be extended. */
+export type SecurityHeadersExtension = {
+  /**
+   * Additional CSP source expressions to append per directive.
+   * Customers may extend directives like `script-src`, `style-src`,
+   * `connect-src`, `img-src`, `font-src`, `media-src`, `worker-src`,
+   * `frame-src`, `object-src`. Attempting to extend a locked directive
+   * (`frame-ancestors`, `base-uri`) throws at build time.
+   */
+  csp?: CspDirectiveMap;
+};
+
+/** CSP directives that customers cannot override or relax. */
+const LOCKED_CSP_DIRECTIVES = new Set(["frame-ancestors", "base-uri"]);
+
+/** Top-level extension keys that attempt to relax HSTS. Customers may not
+ *  reach Strict-Transport-Security via any of these aliases. */
+const HSTS_ALIASES = new Set([
+  "hsts",
+  "strict-transport-security",
+  "Strict-Transport-Security",
+]);
+
+/** Baseline CSP directives. Each key is a directive; each value is the list
+ *  of source expressions emitted as a single space-joined directive entry. */
+const BASELINE_CSP: CspDirectiveMap = {
+  "default-src": ["'self'"],
+  // 'unsafe-inline' kept until app inline scripts are nonced (see csp.md).
+  "script-src": ["'self'", "'unsafe-inline'"],
+  "style-src": ["'self'", "'unsafe-inline'"],
+  "img-src": ["'self'", "data:", "https:"],
+  "font-src": ["'self'"],
+  "connect-src": ["'self'", "https://api.stripe.com"],
+  "frame-ancestors": ["'none'"],
+  "form-action": ["'self'"],
+  "base-uri": ["'self'"],
+};
+
+/** Compose a CSP header string from a directive map. */
+function serializeCsp(directives: CspDirectiveMap): string {
+  return Object.entries(directives)
+    .map(([directive, sources]) => `${directive} ${sources.join(" ")}`)
+    .join("; ");
+}
+
+/** Merge customer CSP extension into the baseline, refusing locked directives. */
+function mergeCsp(extension: CspDirectiveMap | undefined): CspDirectiveMap {
+  if (!extension) return BASELINE_CSP;
+
+  const merged: Record<string, string[]> = {};
+  for (const [directive, sources] of Object.entries(BASELINE_CSP)) {
+    merged[directive] = [...sources];
+  }
+
+  for (const [directive, sources] of Object.entries(extension)) {
+    if (LOCKED_CSP_DIRECTIVES.has(directive)) {
+      throw new Error(
+        `Security headers: CSP directive '${directive}' is locked and cannot be overridden by customer extension.`,
+      );
+    }
+    if (!sources || sources.length === 0) continue;
+    const existing = merged[directive] ?? [];
+    // Baseline ordering preserved first; new sources appended; duplicates dropped.
+    merged[directive] = Array.from(new Set([...existing, ...sources]));
+  }
+  return merged;
+}
+
+/** Compose the final header map, given an optional customer extension. */
+export function buildHeaders(
+  extension?: SecurityHeadersExtension,
+): Record<string, string> {
+  // SecurityHeadersExtension only exposes `csp`, but a customer that bypasses
+  // the type (e.g. JSON config) might smuggle an HSTS override. Reject named
+  // attempts; tolerate unknown keys silently for forward-compatibility.
+  if (extension) {
+    for (const key of Object.keys(extension)) {
+      if (HSTS_ALIASES.has(key)) {
+        throw new Error(
+          "Security headers: Strict-Transport-Security (HSTS) is locked and cannot be overridden by customer extension.",
+        );
+      }
+    }
+  }
+
+  const cspMap = mergeCsp(extension?.csp);
+  return {
+    "Content-Security-Policy": serializeCsp(cspMap),
+    "Strict-Transport-Security": "max-age=63072000; includeSubDomains; preload",
+    "X-Frame-Options": "DENY",
+    "X-Content-Type-Options": "nosniff",
+    "Referrer-Policy": "strict-origin-when-cross-origin",
+    "Permissions-Policy":
+      "camera=(), microphone=(), geolocation=(), interest-cohort=()",
+    "X-DNS-Prefetch-Control": "off",
+  };
+}
+
+/** Canonical default header map — no customer extension. Frozen for safety. */
+export const DEFAULT_SECURITY_HEADERS: Readonly<Record<string, string>> =
+  Object.freeze(buildHeaders());
+
+/** Write every entry from a header map onto a Headers object. */
+export function applyHeaders(
+  target: Headers,
+  source: Record<string, string>,
+): void {
+  for (const [key, value] of Object.entries(source)) {
+    target.set(key, value);
+  }
+}

package/templates/apps/web/sentry.client.config.ts

@@ -0,0 +1,27 @@
+// Sentry client-side init for apps/web (#894).
+//
+// Loaded automatically by @sentry/nextjs at the start of every browser bundle.
+// When NEXT_PUBLIC_SENTRY_DSN is unset (the OSS-install default), `enabled`
+// resolves false and the SDK becomes a no-op — no network, no captures, no
+// console noise. When the DSN is set, the SDK initialises in the browser and
+// every uncaught error or unhandled promise rejection is forwarded to Sentry.
+//
+// Mirrors the env-driven OSS-default-on shape from #884 (stealth) and #886
+// (Google Analytics). Per Sentry's Next.js SDK skill, this file (or
+// `instrumentation-client.ts` on newer scaffolds) is the canonical browser
+// entry point.
+
+import * as Sentry from "@sentry/nextjs";
+
+Sentry.init({
+  dsn: process.env.NEXT_PUBLIC_SENTRY_DSN,
+  enabled: !!process.env.NEXT_PUBLIC_SENTRY_DSN,
+
+  // Capture 10% of transactions in production; 100% in development. The
+  // production rate keeps the Sentry quota workable; dev sees everything.
+  tracesSampleRate: process.env.NODE_ENV === "development" ? 1.0 : 0.1,
+
+  // Session replays: 10% of all sessions, 100% of sessions that hit an error.
+  replaysSessionSampleRate: 0.1,
+  replaysOnErrorSampleRate: 1.0,
+});

package/templates/apps/web/sentry.edge.config.ts

@@ -0,0 +1,15 @@
+// Sentry edge-runtime init for apps/web (#894).
+//
+// Loaded by @sentry/nextjs in the Edge runtime (middleware, edge route
+// handlers). When SENTRY_DSN is unset (the OSS-install default), `enabled`
+// resolves false and the SDK becomes a no-op. Paired with
+// sentry.client.config.ts (browser) and sentry.server.config.ts (Node.js).
+
+import * as Sentry from "@sentry/nextjs";
+
+Sentry.init({
+  dsn: process.env.SENTRY_DSN,
+  enabled: !!process.env.SENTRY_DSN,
+
+  tracesSampleRate: process.env.NODE_ENV === "development" ? 1.0 : 0.1,
+});

package/templates/apps/web/sentry.server.config.ts

@@ -0,0 +1,20 @@
+// Sentry server-runtime init for apps/web (#894).
+//
+// Loaded by @sentry/nextjs in the Node.js runtime (App Router server
+// components, route handlers, server actions). When SENTRY_DSN is unset
+// (the OSS-install default), `enabled` resolves false and the SDK becomes a
+// no-op. When the DSN is set, every server-side uncaught exception is
+// forwarded to Sentry.
+//
+// Paired with sentry.client.config.ts (browser) and sentry.edge.config.ts
+// (Edge runtime) — all three gate on the same env presence pattern from
+// #884 / #886.
+
+import * as Sentry from "@sentry/nextjs";
+
+Sentry.init({
+  dsn: process.env.SENTRY_DSN,
+  enabled: !!process.env.SENTRY_DSN,
+
+  tracesSampleRate: process.env.NODE_ENV === "development" ? 1.0 : 0.1,
+});

package/templates/apps/web/source.config.ts

@@ -0,0 +1,78 @@
+/**
+ * Fumadocs MDX collection definitions.
+ *
+ * Drives the source loader in `lib/source.ts`. Per-app content directories
+ * (2026-05-25 path divergence — issue #1459): each deploy target owns its own
+ * content directory. Blog and docs content for the OSS template live at
+ * `apps/web/content/en/{blog,docs}/`. Fresh OSS forks own their content
+ * directory cleanly without inheriting ailaunchkit.ai-specific posts.
+ *
+ * i18n Phase 3 S2 (2026-05-18) moved content to `content/<locale>/<type>/`.
+ * Default-locale content lives at `content/en/`. Per-locale fumadocs
+ * collections (Spanish, French, etc.) are a Working Theory paid feature —
+ * out of scope for OSS.
+ *
+ * Frontmatter contract for blog:
+ *   - `title` (string, required)        — maps to schema.org `headline`
+ *   - `description` (string, required)  — maps to schema.org `description`
+ *   - `date` (ISO date string, optional) — maps to schema.org `datePublished`
+ *   - `updated` (ISO date string, optional) — maps to schema.org `dateModified`
+ *   - `image` (URL/path string, optional) — maps to schema.org `image`
+ *   - `author` (object, optional)       — `{ name, avatar? }`; feeds the
+ *       BlogList/BlogPost section byline (issue #2713).
+ *   - `tags` (string[], optional)       — feeds the section `categories`
+ *       chips (issue #2713).
+ *
+ * Frontmatter contract for docs:
+ *   - `title` (string, required)
+ *   - `description` (string, required)
+ */
+import * as path from "path";
+import { fileURLToPath } from "url";
+
+import { defineDocs } from "fumadocs-mdx/config";
+import { z } from "zod";
+
+// fumadocs-mdx compiles source.config.ts to .source/source.config.mjs before
+// running it, so import.meta.url inside the compiled file resolves to
+// apps/web/.source/source.config.mjs. The content directories live one level
+// up at apps/web/content/en/{blog,docs}/, so the relative prefix is "../".
+// Using a bare "content/en/blog" (no "../") anchors to .source/content/en/blog
+// which does not exist and produces an empty blog source at runtime (404 on
+// /blog/* routes). Fix: issue #1518.
+const blogDir = path.resolve(
+  path.dirname(fileURLToPath(import.meta.url)),
+  "../content/en/blog",
+);
+
+const docsDir = path.resolve(
+  path.dirname(fileURLToPath(import.meta.url)),
+  "../content/en/docs",
+);
+
+export const blog = defineDocs({
+  dir: blogDir,
+  docs: {
+    schema: z.object({
+      title: z.string(),
+      description: z.string(),
+      date: z.string().optional(),
+      updated: z.string().optional(),
+      image: z.string().optional(),
+      author: z
+        .object({ name: z.string(), avatar: z.string().optional() })
+        .optional(),
+      tags: z.array(z.string()).optional(),
+    }),
+  },
+});
+
+export const docs = defineDocs({
+  dir: docsDir,
+  docs: {
+    schema: z.object({
+      title: z.string(),
+      description: z.string(),
+    }),
+  },
+});

package/templates/apps/web/src/components/SiteNav.tsx

@@ -0,0 +1,21 @@
+// SiteNav — minimal site-wide navigation. Server Component (no interactivity needed).
+// data-testid anchors serve the post-OSS e2e suite (e2e-testing-roadmap.md §5.2).
+import { Link } from "@working-theory/ui";
+import type { ReactElement } from "react";
+
+// i18n-allow: nav labels are static English for v1 (single-locale). ADR 0019
+// follow-up: migrate to getTranslations when SiteNav becomes async.
+const NAV_LABELS = { home: "Home", contact: "Contact" } as const;
+
+export function SiteNav(): ReactElement {
+  return (
+    <nav aria-label="Site navigation">
+      <Link href="/" data-testid="nav-home-link">
+        {NAV_LABELS.home}
+      </Link>
+      <Link href="/contact" data-testid="nav-contact-link">
+        {NAV_LABELS.contact}
+      </Link>
+    </nav>
+  );
+}

package/templates/apps/web/src/lib/routes.ts

@@ -0,0 +1,37 @@
+/**
+ * Shared route utilities for agent-surface discovery routes.
+ *
+ * Extracted from llms.txt, sitemap.xml, robots.txt, and ai-plugin.json
+ * handlers to avoid copy-paste duplication.
+ */
+
+/**
+ * Resolves the canonical base URL for the site.
+ * Falls back to a placeholder so routes work without env configuration.
+ */
+export function resolveBaseUrl(): string {
+  return process.env["NEXT_PUBLIC_BASE_URL"] ?? "https://ailk.example.com";
+}
+
+/**
+ * Maps a content-adapter page type + slug to a site-relative path.
+ * Drives both /llms.txt and /sitemap.xml URL generation.
+ */
+export function slugToPath(type: string, slug: string): string {
+  switch (type) {
+    case "HomePage":
+      return "/";
+    case "BlogPosting":
+      return `/blog/${slug}`;
+    case "Product":
+      return `/products/${slug}`;
+    case "Service":
+      return `/services/${slug}`;
+    case "AboutPage":
+      return "/about";
+    case "ContactPage":
+      return "/contact";
+    default:
+      return `/${slug}`;
+  }
+}

package/templates/apps/web/tsconfig.json

@@ -0,0 +1,35 @@
+{
+  "extends": "../../tsconfig.base.json",
+  "compilerOptions": {
+    "paths": {
+      "@/*": ["./*"]
+    },
+    "target": "ES2022",
+    "lib": ["ES2022", "DOM", "DOM.Iterable"],
+    "module": "ESNext",
+    "moduleResolution": "bundler",
+    "jsx": "preserve",
+    "allowJs": true,
+    "noEmit": true,
+    "incremental": true,
+    "plugins": [{ "name": "next" }],
+    "types": ["jest", "node", "@testing-library/jest-dom"]
+  },
+  "include": ["next-env.d.ts", "**/*.ts", "**/*.tsx", ".next/types/**/*.ts"],
+  "exclude": ["node_modules", ".next", "dist"],
+  "references": [
+    { "path": "../../packages/analytics" },
+    { "path": "../../packages/page-renderer" },
+    { "path": "../../packages/api-client" },
+    { "path": "../../packages/theme" },
+    { "path": "../../packages/content-adapters" },
+    { "path": "../../packages/fumadocs-schema" },
+    { "path": "../../packages/metadata" },
+    { "path": "../../packages/schema" },
+    { "path": "../../packages/schema-pack-registry" },
+    { "path": "../../packages/templates" },
+    { "path": "../../packages/ui" },
+    { "path": "../../packages/validation" },
+    { "path": "../../packages/web-i18n" }
+  ]
+}

package/templates/apps/web/types/messages.d.ts

@@ -0,0 +1,19 @@
+// i18n S2 — Type-safe useTranslations key declarations (#949)
+//
+// Declares the shape of `messages/en.json` to TypeScript so that
+// `useTranslations('namespace')` returns a narrowly typed accessor.
+// Typos in key names (e.g. `t('consnt.title')`) are caught at compile time
+// by `tsc --noEmit`.
+//
+// To verify: intentionally misspell a key in a component and run
+// `pnpm --filter @working-theory/web type-check` — the compiler will error.
+
+import type enMessages from "../messages/en.json";
+
+type Messages = typeof enMessages;
+
+declare global {
+  // next-intl reads this via module augmentation.
+  // eslint-disable-next-line @typescript-eslint/no-empty-object-type
+  interface IntlMessages extends Messages {}
+}

package/templates/content/CLAUDE.md

@@ -0,0 +1,85 @@
+# content/ — MDX Content Authoring
+
+Inherits root `CLAUDE.md`. This file owns content-authoring rules.
+
+## What lives here
+
+File-based MDX content, one file per page, organized by page type:
+
+content/
+├── HomePage/home.mdx
+├── ServicesList/services.mdx
+├── Service/<slug>.mdx
+├── BlogList/blog.mdx
+├── BlogPosting/<slug>.mdx
+└── ...
+
+For the full list of supported page types and what each emits, see `packages/schema/README.md`. It's the source of truth. For per-page-type component guidance (which `@working-theory/ui` components are idiomatic for each family), see `packages/schema/CLAUDE.md` § `@working-theory/ui` component map.
+
+## Frontmatter contract (hard rule)
+
+Every MDX file has frontmatter validated at build time against `@working-theory/schema`. Required:
+
+- `type` — must match a `SchemaOrgType` key from the schema README
+- `slug` — URL slug, no leading slash
+- `title` — visible page title
+- `description` — meta description and JSON-LD `description`
+
+Optional:
+
+- `locale` — defaults to `'en'`. Emitted as `inLanguage`.
+- `publishedAt`, `updatedAt`, `image`
+- `schema` — escape hatch (see below)
+
+Build fails on missing/invalid frontmatter. Fix the frontmatter, not the validator.
+
+## The `schema` field (escape hatch)
+
+`schema` is a shallow-merged record. Frontmatter wins on conflicts with the builder. Use it to:
+
+- Add structured sub-entities (`author`, `mainEntity`, `step`)
+- Enrich page types whose schema.org default is generic (e.g. Integration → `mainEntity: SoftwareApplication`)
+- Override a derived field (rare)
+
+Some types (JobPosting in particular) REQUIRE programmatic overrides for full coverage — frontmatter alone can't express `baseSalary`, `employmentType`. See `packages/schema/README.md` for which types need code-level overrides.
+
+After using `schema`, run `ailk audit` — a malformed override produces invalid JSON-LD and tanks AEO scoring.
+
+## Component vocabulary (universal — page type doesn't change this)
+
+These components are available on any page. Choice depends on content, not page type. An FAQ block belongs in `<FAQ>` whether it's on a HomePage, ServicePage, or FAQPage.
+
+- `<Hero>` — top-of-page hero. One per page max.
+- `<FAQ>` — FAQ entry. **One question per block** (see AEO rules below).
+- `<CTA>` — call-to-action card. Use sparingly.
+- `<Testimonial>` — single testimonial. Multiple = multiple blocks.
+- `<PriceTable>` — pricing display.
+- `<FeatureGrid>` — feature/benefit grid.
+- `<Locations>` — physical locations.
+- `<BusinessHours>` — hours of operation.
+
+For the per-page-type editorial map (which family of pages typically uses which components), see `packages/schema/CLAUDE.md` § `@working-theory/ui` component map.
+
+Don't use raw HTML where a component exists. Components carry schema and styling guarantees; `<div>` soup throws both away.
+
+## AEO editorial craft (universal — this is the wedge)
+
+**Lead with the answer.** First 60 words of body content state the answer to the page's implicit question. LLM citation extractors read top-down and bail early. Backstory comes after.
+
+**One question per `<FAQ>` block.** Don't cram multiple Q&As into one block. Each block becomes one `Question` entity in JSON-LD — separation drives citability.
+
+**Entity clarity in the first paragraph.** Name the company, product, location, or person explicitly. "We" and "our service" are entity-opaque. AEO rewards unambiguous attribution.
+
+**Concrete claims over adjectives.** "Ships in 48 hours" beats "fast turnaround." Specifics get cited; vagueness gets skipped.
+
+**Headings as questions when natural.** H2/H3 phrased as questions (when the content actually answers one) align with passage extraction.
+
+**Don't pad for length.** A 400-word page that answers cleanly outperforms a 1,500-word page that buries the answer.
+
+## What NOT to do
+
+- Don't hand-roll JSON-LD in MDX body. Ever.
+- Don't use `<script type="application/ld+json">` inside content.
+- Don't bypass the frontmatter validator.
+- Don't write `type: WebPage` to silence a validator error — pick the right type.
+- Don't use raw `<h1>` in body. The page template emits the H1 from `title`.

package/templates/content/_site.mdx

@@ -0,0 +1,38 @@
+---
+version: "1"
+siteName: AI Launch Kit
+baseUrl: https://ailaunchkit.ai
+defaultLocale: en
+siteIdentity:
+  kind: Organization
+  name: AI Launch Kit
+  url: https://ailaunchkit.ai
+  logo: https://ailaunchkit.ai/opengraph-image.png
+  description: >
+    AI Launch Kit is the open-source website foundation for the agent-first
+    internet. Apache 2.0, agent-ready, AEO-scored, deployable in days.
+  sameAs:
+    - https://github.com/tailwind-ai/ai-launch-kit
+  foundingDate: "2024"
+  founderName: Sam Henry
+analytics:
+  vercelAnalytics: true
+brand:
+  logomark:
+    light: /logomark-light.svg
+    dark: /logomark-dark.svg
+    alt: AI Launch Kit
+---
+
+<!--
+This file is your site's canonical configuration. Edit the frontmatter
+above to set your site name, base URL, default locale, and identity
+(Organization, Person, or LocalBusiness).
+
+For the agent-operator workflow, use the `set_site_identity` MCP tool
+instead of editing this file directly — it validates input and writes
+with optimistic locking.
+
+See docs/site-config.md (introduced in Phase 3) for the full schema
+reference and the three identity kinds.
+-->

package/templates/content/ar/HomePage/home.mdx

@@ -0,0 +1,123 @@
+---
+type: HomePage
+slug: home
+title: AI Launch Kit — أساس الموقع الإلكتروني مفتوح المصدر لإنترنت عصر الذكاء الاصطناعي
+description: قالب مفتوح المصدر Apache 2.0 مُصمَّم لبحث الذكاء الاصطناعي. جاهز للوكلاء، مُقيَّم بمعايير AEO، قابل للنشر في أيام.
+sections:
+  - id: hero-1
+    type: hero
+    data:
+      variant: centered
+      headline: AI Launch Kit — أساس الموقع الإلكتروني مفتوح المصدر لإنترنت عصر الذكاء الاصطناعي
+      subheadline: قالب مفتوح المصدر Apache 2.0 مُصمَّم لبحث الذكاء الاصطناعي. جاهز للوكلاء، مُقيَّم بمعايير AEO، قابل للنشر في أيام.
+      body: مبني من قِبَل فريق Working Theory ومُستخدَم لتشغيل Sam Henry وWorking Theory وSalesSmyth على نفس البنية التحتية. ثلاثة مسارات أدناه. اختر الذي يناسبك.
+      primaryCta:
+        label: اختر مسارك
+        href: "#choose-your-path"
+      secondaryCta:
+        label: نجوم على GitHub
+        href: https://github.com/working-theory/ai-launch-kit
+        external: true
+
+  - id: stats-1
+    type: stats
+    data:
+      variant: tiles
+      headline: مبني ليُستشهد به منذ اليوم الأول
+      items:
+        - value: "45"
+          label: أنواع مخطط الصفحة
+        - value: "21"
+          label: أنواع الأقسام
+        - value: "14"
+          label: أدوات MCP
+        - value: Apache 2.0
+          label: الرخصة
+
+  - id: content-block-1
+    type: content-block
+    data:
+      variant: narrow
+      headline: الصفحة هي وحدة الاستشهاد، وليس الموقع بأكمله
+      body: |
+        عندما يوصي نموذج ذكاء اصطناعي بشركة ما، فإنه يجمع التوصية من صفحات فردية
+        قرأها ونسبها إلى علامة تجارية ووثق بها بما يكفي لاقتباسها. العلامة التجارية التي يُستشهد
+        بها هي العلامة التجارية التي قُرئت صفحاتها بشكل صحيح.
+
+        المواقع التي لا تحتوي على كيانات مُعلَنة تخسر في خطوة الإسناد. لا يستطيع النموذج
+        تحديد الكيان الذي تنتمي إليه الصفحة، لذا يستشهد بمنافس كانت صفحته أوضح.
+        ويفشل عمل AEO بصمت عند هذه النقطة.
+
+  - id: feature-1
+    type: feature
+    data:
+      variant: alternating
+      headline: أربع قدرات هيكلية تجعل الموقع قابلاً للاستشهاد به منذ وقت النشر
+      description: >
+        كل قدرة قابلة للتحقق اليوم — ليست وعداً في خارطة الطريق.
+        انسخ المستودع وشغِّل ailk audit لترى بنفسك.
+      features:
+        - title: سجل مخططات مُصنَّفة
+          description: >
+            45 نوع صفحة تُعلِن كل كيان بشكل صحيح. النموذج يعرف موضوع الصفحة
+            والشركة التي تنتمي إليها.
+          icon: database
+        - title: خادم MCP من الدرجة الأولى
+          description: >
+            تكافؤ مُطبَّق في CI مع واجهة المستخدم البشرية. الوكلاء الذين يبحثون نيابة عن
+            المشتري يجدون نفس السطح، وليس تقريباً متدهوراً.
+          icon: bot
+        - title: CLI لتسجيل نقاط AEO
+          description: >
+            يُشغِّل ailk audit فحوصات الاستشهاد في CI قبل إطلاق الموقع.
+            المشاكل الهيكلية تُكتَشف في CI، وليس بعد ثلاثة أشهر من الإطلاق.
+          icon: check-circle
+        - title: سقالة مُساعَدة بالذكاء الاصطناعي
+          description: >
+            من العلامة التجارية المرجعية إلى الموقع المُنشَر في أيام. مسارات السقالة
+            تستهدف وكلاء Claude Code بمسار تثبيت قابل للتكرار.
+          icon: zap
+
+  - id: items-1
+    type: items
+    data:
+      headline: اختر مسارك
+      description: ثلاثة مسارات، بنية تحتية واحدة. كل بطاقة تقودك إلى الصفحة المكتوبة لدورك.
+      columns: 3
+      items:
+        - title: أدير وكالة بحث الذكاء الاصطناعي
+          description: AILK هو البنية التحتية لإطلاق مواقع الشركات الصغيرة والمتوسطة التي تعمل للوكلاء والبشر منذ اليوم الأول.
+          icon: briefcase
+          link:
+            label: اقرأ أطروحة الوكالة
+            href: /partners
+        - title: أنا مطور أو مستقل
+          description: مستودع Apache 2.0. pnpm create ailk@latest للسقالة؛ ailk audit للتسجيل؛ النشر على Vercel من نسخة جديدة.
+          icon: code
+          link:
+            label: افتح توثيقات المطور
+            href: /docs
+        - title: وكالة أخبرتني للنظر في هذا
+          description: AILK هو أساس الموقع الذي تستخدمه وكالتك. ChatGPT وClaude يستطيعان قراءة الصفحات المبنية عليه.
+          icon: users
+          link:
+            label: اعرف ما تبني وكالتك عليه
+            href: /for-businesses
+
+  - id: cta-1
+    type: cta
+    data:
+      variant: box
+      headline: اختر مساراً
+      description: ثلاثة مسارات من هنا. اختر المكتوب لك، أو نجِّم AILK على GitHub وارجع عندما تكون مستعداً.
+      primaryCta:
+        label: أدير وكالة بحث الذكاء الاصطناعي
+        href: /partners
+      secondaryCta:
+        label: نجِّم AILK على GitHub
+        href: https://github.com/working-theory/ai-launch-kit
+        external: true
+---
+
+<!-- محتوى MDX محفوظ لمحولات المحتوى التي تستخدمه، لكن الصفحة تعرض من أقسام frontmatter. -->
+<!-- RTL test page — Arabic placeholder content for architecture verification (TWP2-IV) -->