create-ailk 0.1.1 → 0.3.0

package/templates/apps/api/src/vercel-handler.ts

@@ -31,39 +31,70 @@ async function getBuildFunction(): Promise<typeof buildServer> {
 
 // Initialize build function
 const buildPromise = getBuildFunction();
-let serverInstance: FastifyServer | null = null;
 
 /**
- * Get or create the Fastify server instance
+ * The in-flight (or settled) build. Caching the PROMISE rather than the
+ * resolved instance is what makes this safe: a warm Vercel container serves
+ * concurrent invocations on one Node process, and the old check-then-set
+ * (`if (!serverInstance)` followed by two awaits before the assignment) let
+ * two requests arriving during a cold start both see null and both construct
+ * a complete Fastify server — every plugin registered, every route wired, the
+ * Prisma client initialised — with one of the two then discarded. Nothing
+ * failed; the only symptoms were cold-start latency and memory (#5332).
  */
-async function getServer() {
-  if (!serverInstance) {
-    logger.info('[Vercel Handler] Building server instance...');
-    const startTime = Date.now();
-
-    try {
-      const buildTimeout = new Promise<never>((_, reject) => {
-        setTimeout(() => reject(new Error('Server build timeout after 10s')), 10000);
-      });
+let serverPromise: Promise<FastifyServer> | null = null;
 
-      const build = await Promise.race([buildPromise, buildTimeout]);
-      logger.info('[Vercel Handler] Build function obtained, creating server...');
+async function buildServerInstance(): Promise<FastifyServer> {
+  logger.info('[Vercel Handler] Building server instance...');
+  const startTime = Date.now();
 
-      const initTimeout = new Promise<never>((_, reject) => {
-        setTimeout(() => reject(new Error('Server initialization timeout after 10s')), 10000);
-      });
+  try {
+    const buildTimeout = new Promise<never>((_, reject) => {
+      setTimeout(() => reject(new Error('Server build timeout after 10s')), 10000);
+    });
 
-      serverInstance = await Promise.race([build(), initTimeout]);
+    const build = await Promise.race([buildPromise, buildTimeout]);
+    logger.info('[Vercel Handler] Build function obtained, creating server...');
 
-      const buildTime = Date.now() - startTime;
-      logger.info({ buildTime }, '[Vercel Handler] Server built successfully');
-    } catch (error) {
-      const buildTime = Date.now() - startTime;
-      logger.error({ err: error, buildTime }, '[Vercel Handler] Failed to build server');
-      throw new Error(`Server build failed: ${error instanceof Error ? error.message : String(error)}`, { cause: error });
-    }
+    const initTimeout = new Promise<never>((_, reject) => {
+      setTimeout(() => reject(new Error('Server initialization timeout after 10s')), 10000);
+    });
+
+    const serverInstance = await Promise.race([build(), initTimeout]);
+
+    const buildTime = Date.now() - startTime;
+    logger.info({ buildTime }, '[Vercel Handler] Server built successfully');
+    return serverInstance;
+  } catch (error) {
+    const buildTime = Date.now() - startTime;
+    logger.error({ err: error, buildTime }, '[Vercel Handler] Failed to build server');
+    throw new Error(`Server build failed: ${error instanceof Error ? error.message : String(error)}`, { cause: error });
   }
-  return serverInstance;
+}
+
+/**
+ * Get or create the Fastify server instance
+ */
+function getServer(): Promise<FastifyServer> {
+  if (serverPromise) {
+    return serverPromise;
+  }
+
+  const attempt = buildServerInstance();
+  serverPromise = attempt;
+  // Evict a FAILED build from the cache so the next invocation retries —
+  // a rejected promise left in place would serve every later request the
+  // same cold-start failure for the life of the container. The guard keeps
+  // this from clearing a newer attempt; `attempt` is returned as-is, so the
+  // rejection still reaches the caller (this handler only silences the
+  // unhandled-rejection warning on its own bookkeeping branch).
+  attempt.catch(() => {
+    if (serverPromise === attempt) {
+      serverPromise = null;
+    }
+  });
+
+  return attempt;
 }
 
 /**
@@ -156,9 +187,12 @@ export default async function handler(
     logger.error({ err: error }, '[Vercel Handler] Error handling request');
 
     if (!res.headersSent) {
+      // Generic body only (security review on #146): this catch sits above
+      // Fastify's error serializer, so error.message could carry hosts,
+      // paths, or driver detail. The logger.error above keeps the detail.
       res.status(500).json({
         error: 'Internal Server Error',
-        message: error instanceof Error ? error.message : String(error),
+        message: 'Something went wrong on our end.',
       });
     }
   }

package/templates/apps/mcp/.env.example

@@ -40,6 +40,14 @@ MCP_RATE_LIMIT_WRITE_PER_MIN=10
 # Example: https://app.yourdomain.com,https://other.yourdomain.com
 MCP_CORS_WRITE_ALLOWED_ORIGINS=
 
+# ── Paid modules (D-44, #5368) ──────────────────────────────────────────────────
+
+# Comma-separated allowlist of installed paid modules, e.g.
+# "multi-tenant,scheduling". Unset (the default) or "" means NO paid modules
+# — installed modules enable themselves explicitly. Recognized keys: docs,
+# multi-tenant, scheduling, content-write. Must match apps/api's value.
+# AILK_ENABLED_MODULES=
+
 # ── Abuse protection ───────────────────────────────────────────────────────────
 
 # Maximum number of capture_lead submissions per IP per day.

package/templates/apps/mcp/CLAUDE.md

@@ -25,8 +25,8 @@ Every tool maps 1:1 to an `apps/api` endpoint. When you change a tool, change th
 **Read (9):** `list_pages`, `read_content`, `search_content`, `get_site_info`, `get_business_hours`, `get_locations`, `get_offerings`, `get_pricing`, `get_faq`
 **Conversion-write (3):** `capture_lead`, `subscribe_newsletter`, `request_callback`
 **Maintenance (2):** `audit`, `scaffold`
-**Flow (2):** `get_flow`, `submit_flow_step`
-**Booking (3):** `list_availability`, `get_event_meta`, `create_booking`
+**Flow (2):** `get_flow`, `submit_flow_step` — module-gated (`module: "signal-collectors"`, D-48, #5366): identity-blind and free of any `requirePaidTier()` call like every tool in this list, but registered only when the signal-collectors module is present, the same shape Booking below already has
+**Booking (3):** `list_availability`, `get_event_meta`, `create_booking` — module-gated (`module: "scheduling"`)
 
 ### Why the catalog reports 23 and the server registers 22
 

package/templates/apps/mcp/__tests__/catalog-drift.test.ts

@@ -24,7 +24,28 @@ interface RegisteredTool {
   description?: string;
 }
 
+// The catalog includes module-gated tools (scheduling, content-write,
+// signal-collectors); an unset AILK_ENABLED_MODULES no longer registers them
+// by default (D-44, #5368), so this drift check enables every paid module
+// explicitly — it is comparing the full catalog, not what a default build
+// registers.
+const PAID_MODULES = "scheduling,content-write,signal-collectors";
+
 describe("MCP catalog ↔ server drift", () => {
+  const priorEnabledModules = process.env.AILK_ENABLED_MODULES;
+
+  beforeEach(() => {
+    process.env.AILK_ENABLED_MODULES = PAID_MODULES;
+  });
+
+  afterAll(() => {
+    if (priorEnabledModules === undefined) {
+      delete process.env.AILK_ENABLED_MODULES;
+    } else {
+      process.env.AILK_ENABLED_MODULES = priorEnabledModules;
+    }
+  });
+
   it("registered tool names equal catalog tool names", () => {
     const server = createMcpServer();
     const registered = (

package/templates/apps/mcp/__tests__/config/modules.test.ts

@@ -0,0 +1,78 @@
+/**
+ * `isModuleEnabled()` default-flip regression test (D-44, #5368).
+ *
+ * Mirrors `apps/api/src/config/__tests__/modules.test.ts` — apps/* may not
+ * import apps/*, so this reader (and its test) are duplicated rather than
+ * shared. Proves the mechanical claim #5368 exists to make true: an UNSET
+ * `AILK_ENABLED_MODULES` now gates every paid module OFF, the same as an
+ * explicit empty string — only an explicit allowlist turns modules on, and
+ * turns on exactly the modules it names.
+ *
+ * Reverting `enabledModules()`'s unset branch back to the `undefined`
+ * sentinel (S1, #5088's original shape) makes the "unset" cases below fail
+ * RED — see #5368 verification notes.
+ */
+
+import { isModuleEnabled } from "../../src/config/modules.js";
+
+const RECOGNIZED_MODULES = [
+  "docs",
+  "multi-tenant",
+  "scheduling",
+  "content-write",
+] as const;
+
+describe("isModuleEnabled", () => {
+  const originalEnv = process.env.AILK_ENABLED_MODULES;
+
+  afterEach(() => {
+    if (originalEnv === undefined) {
+      delete process.env.AILK_ENABLED_MODULES;
+    } else {
+      process.env.AILK_ENABLED_MODULES = originalEnv;
+    }
+  });
+
+  describe("AILK_ENABLED_MODULES unset", () => {
+    it.each(RECOGNIZED_MODULES)("returns false for %s", (moduleName) => {
+      delete process.env.AILK_ENABLED_MODULES;
+      expect(isModuleEnabled(moduleName)).toBe(false);
+    });
+  });
+
+  describe('AILK_ENABLED_MODULES=""', () => {
+    it.each(RECOGNIZED_MODULES)("returns false for %s", (moduleName) => {
+      process.env.AILK_ENABLED_MODULES = "";
+      expect(isModuleEnabled(moduleName)).toBe(false);
+    });
+  });
+
+  describe("AILK_ENABLED_MODULES as an explicit allowlist", () => {
+    it.each(RECOGNIZED_MODULES)(
+      "enables exactly the listed modules — %s on when named",
+      (moduleName) => {
+        process.env.AILK_ENABLED_MODULES = moduleName;
+        expect(isModuleEnabled(moduleName)).toBe(true);
+        for (const other of RECOGNIZED_MODULES) {
+          if (other === moduleName) continue;
+          expect(isModuleEnabled(other)).toBe(false);
+        }
+      },
+    );
+
+    it("enables every module named in a comma list, and no others", () => {
+      process.env.AILK_ENABLED_MODULES = "multi-tenant,scheduling";
+      expect(isModuleEnabled("multi-tenant")).toBe(true);
+      expect(isModuleEnabled("scheduling")).toBe(true);
+      expect(isModuleEnabled("docs")).toBe(false);
+      expect(isModuleEnabled("content-write")).toBe(false);
+    });
+
+    it("trims whitespace and drops empty entries, same as before the flip", () => {
+      process.env.AILK_ENABLED_MODULES = " multi-tenant , , scheduling ";
+      expect(isModuleEnabled("multi-tenant")).toBe(true);
+      expect(isModuleEnabled("scheduling")).toBe(true);
+      expect(isModuleEnabled("docs")).toBe(false);
+    });
+  });
+});

package/templates/apps/mcp/__tests__/module-exclusion.test.ts

@@ -18,7 +18,7 @@ import { getMcpToolRegistrations } from "@working-theory/metadata";
 
 import { createMcpServer, listRegisteredTools } from "../src/server.js";
 
-const PAID_MODULES = ["scheduling", "content-write"] as const;
+const PAID_MODULES = ["scheduling", "content-write", "signal-collectors"] as const;
 
 function withEnabledModules<T>(enabled: string, fn: () => T): T {
   const prior = process.env.AILK_ENABLED_MODULES;

package/templates/apps/mcp/src/config/modules.ts

@@ -1,26 +1,29 @@
 /**
  * Paid-module presence — the registration-grain signal used by `server.ts`
  * to decide whether a paid module's tools are wired into this build
- * (S1, #5088). Mirrors `apps/api/src/config/modules.ts` — apps/* may not
- * import apps/*, so this tiny reader is duplicated rather than shared.
+ * (S1, #5088; defaulted off by D-44, #5368). Mirrors
+ * `apps/api/src/config/modules.ts` — apps/* may not import apps/*, so this
+ * tiny reader is duplicated rather than shared.
  *
  * `AILK_ENABLED_MODULES` is a comma-separated allowlist (e.g.
- * `"multi-tenant,scheduling"`). Unset means "every module on" — today's
- * behavior, unchanged for every existing deployment; an explicit empty
- * string (`""`) means "no paid modules" (the OSS-strip build target).
+ * `"multi-tenant,scheduling"`). Unset means **no paid modules** — installed
+ * modules enable themselves explicitly; an explicit empty string (`""`)
+ * means the same (the OSS-strip build target); a list enables exactly the
+ * modules it names.
  *
- * Recognized module keys: `docs`, `multi-tenant`, `scheduling` (the
- * `ModuleName` vocabulary `packages/create-ailk/src/module-architecture.ts`
- * already models via `MODULE_SLICES`) plus `content-write` — the Pro
+ * Recognized module keys: `docs`, `multi-tenant`, `scheduling`,
+ * `signal-collectors` (the `ModuleName` vocabulary
+ * `packages/create-ailk/src/module-architecture.ts` already models via
+ * `MODULE_SLICES`) plus `content-write` — the Pro
  * content-write surface (`create_page`/`update_page`/`delete_page`).
  * `content-write` is intentionally NOT a `MODULE_SLICES` entry: it is not
  * (yet) a create-ailk `--modules` selector, so it stays a local flag here
  * rather than widening the create-ailk module vocabulary.
  */
 
-function enabledModules(): Set<string> | undefined {
+function enabledModules(): Set<string> {
   const raw = process.env.AILK_ENABLED_MODULES;
-  if (raw === undefined) return undefined; // undefined sentinel = "all enabled"
+  if (raw === undefined) return new Set(); // unset = no paid modules
   return new Set(
     raw
       .split(",")
@@ -31,7 +34,5 @@ function enabledModules(): Set<string> | undefined {
 
 /** Whether the named paid module's tools should register on this build/boot. */
 export function isModuleEnabled(moduleName: string): boolean {
-  const enabled = enabledModules();
-  if (enabled === undefined) return true;
-  return enabled.has(moduleName);
+  return enabledModules().has(moduleName);
 }

package/templates/apps/mcp/src/server.ts

@@ -20,7 +20,6 @@ import { ailkAudit } from "./tools/audit.js";
 import { ailkCaptureLead } from "./tools/capture_lead.js";
 import { ailkGetBusinessHours } from "./tools/get_business_hours.js";
 import { ailkGetFaq } from "./tools/get_faq.js";
-import { ailkGetFlow } from "./tools/get_flow.js";
 import { ailkGetLocations } from "./tools/get_locations.js";
 import { ailkGetOfferings } from "./tools/get_offerings.js";
 import { ailkGetPricing } from "./tools/get_pricing.js";
@@ -31,7 +30,6 @@ import { ailkReadContent } from "./tools/read_content.js";
 import { ailkRequestCallback } from "./tools/request_callback.js";
 import { ailkScaffold } from "./tools/scaffold.js";
 import { ailkSearchContent } from "./tools/search_content.js";
-import { ailkSubmitFlowStep } from "./tools/submit_flow_step.js";
 import { ailkSubscribeNewsletter } from "./tools/subscribe_newsletter.js";
 
 /**
@@ -65,8 +63,6 @@ const HANDLERS: Record<string, (input: unknown) => Promise<unknown>> = {
   subscribe_newsletter: (input) => ailkSubscribeNewsletter(input as never),
   request_callback: (input) => ailkRequestCallback(input as never),
   scaffold: (input) => ailkScaffold(input as never),
-  get_flow: (input) => ailkGetFlow(input as never),
-  submit_flow_step: (input) => ailkSubmitFlowStep(input as never),
 };
 
 type ToolHandler = (input: unknown) => Promise<unknown>;
@@ -119,6 +115,14 @@ const MODULE_TOOL_ENTRIES: Record<
   create_page: { specifier: "./tools/create_page.js", exportName: "ailkCreatePage" },
   update_page: { specifier: "./tools/update_page.js", exportName: "ailkUpdatePage" },
   delete_page: { specifier: "./tools/delete_page.js", exportName: "ailkDeletePage" },
+  // D-48 signal-collectors — the flow engine's MCP twins of GET
+  // /v1/flows/:slug and POST /v1/flows/:slug/steps. Anonymous, identity-blind;
+  // free-anonymous status is now module-gated rather than unconditional.
+  get_flow: { specifier: "./tools/get_flow.js", exportName: "ailkGetFlow" },
+  submit_flow_step: {
+    specifier: "./tools/submit_flow_step.js",
+    exportName: "ailkSubmitFlowStep",
+  },
 };
 
 /**

package/templates/apps/mcp/src/tools/index.ts

@@ -124,27 +124,12 @@ export {
   type ScaffoldOutput,
 } from "./scaffold.js";
 
-export {
-  getFlowInputSchema,
-  getFlowOutputSchema,
-  ailkGetFlow,
-  type GetFlowInput,
-  type AilkGetFlowOutput,
-} from "./get_flow.js";
-
-export {
-  submitFlowStepInputSchemaForTool,
-  submitFlowStepOutputSchema,
-  ailkSubmitFlowStep,
-  type SubmitFlowStepInput,
-  type AilkSubmitFlowStepOutput,
-} from "./submit_flow_step.js";
-
-// The scheduling tools (list_availability, get_event_meta, create_booking) are
-// deliberately NOT re-exported here, and neither are the content-write tools
-// (create_page, update_page, delete_page). Both groups are module-conditional
-// slice files (#5182): a re-export from this barrel is a static path into a
-// file the OSS strip removes, which reds the public tree's type-check. They are
-// reached only through `createMcpServer`'s per-module loader in ../server.ts.
+// The scheduling tools (list_availability, get_event_meta, create_booking),
+// the content-write tools (create_page, update_page, delete_page), and the
+// signal-collectors flow tools (get_flow, submit_flow_step) are deliberately
+// NOT re-exported here. All three groups are module-conditional slice files
+// (#5182): a re-export from this barrel is a static path into a file the OSS
+// strip removes, which reds the public tree's type-check. They are reached
+// only through `createMcpServer`'s per-module loader in ../server.ts.
 // The rule this barrel now follows: it re-exports exactly the tools no module
 // gate can remove.

package/templates/apps/web/.env.example

@@ -26,6 +26,21 @@ CONTENT_BACKEND=mdx
 # Same convention as apps/workspace/lib/client-api.ts's identically-named var.
 # Should be apps/api's origin with NO trailing slash (a single trailing
 # slash is stripped before joining, but keep this clean regardless).
+#
+# THIS IS THE ONE BROWSER-SIDE NAME (#5397). All three browser readers of the
+# apps/api origin resolve it from this variable: resolveSubmitUrl
+# (packages/ui, the form blocks above), apps/workspace's client-api, and
+# @working-theory/api-client's getApiBase() — which runs in the browser
+# wherever a "use client" component binds it, e.g. the founder application's
+# ListingApplicationClient. getApiBase() previously read NEXT_PUBLIC_API_URL,
+# a name this file never documented, so a site configured exactly per these
+# docs sent its browser traffic to http://localhost:3001. That name is still
+# honoured as a deprecated fallback; do not set it in a new deployment.
+#
+# The server-side counterpart is AILK_API_URL (see the repo-root .env.example)
+# — deliberately NOT NEXT_PUBLIC_, and it still wins over this one when both
+# are set, so an RSC/Server-Action call can target an internal origin the
+# browser never sees.
 # NEXT_PUBLIC_AILK_API_URL=http://localhost:3002
 
 # =============================================================================

package/templates/apps/web/app/[locale]/(authed)/{waitlist/__tests__ → __tests__}/gate.test.tsx

@@ -24,14 +24,14 @@ jest.mock("next/headers", () => ({
 
 const mockGetSession = jest.fn();
 // eslint-disable-next-line no-restricted-syntax -- #507: mock-internal rewrite pending; auth.ts's lazy Better-Auth singleton has no HTTP/DB boundary a unit test of the session-branch can mock without standing up Prisma.
-jest.mock("../../../../../auth", () => ({
+jest.mock("../../../../auth", () => ({
   __esModule: true,
   auth: { api: { getSession: (...args: unknown[]) => mockGetSession(...args) } },
 }));
 
 const mockGetActiveProviderIds = jest.fn();
 // eslint-disable-next-line no-restricted-syntax -- #507: mock-internal rewrite pending; auth-env.ts is a pure env-introspection module with no external boundary to mock instead.
-jest.mock("../../../../../lib/auth-env", () => ({
+jest.mock("../../../../lib/auth-env", () => ({
   __esModule: true,
   getActiveProviderIds: () => mockGetActiveProviderIds(),
 }));
@@ -48,8 +48,8 @@ jest.mock("better-auth/react", () => ({
   createAuthClient: () => ({ signIn: { social: mockSignInSocial } }),
 }));
 
-import AuthedLayout from "../../layout";
-import { SignInGate } from "../../sign-in-gate";
+import AuthedLayout from "../layout";
+import { SignInGate } from "../sign-in-gate";
 
 describe("AuthedLayout — the (authed) session guard", () => {
   beforeEach(() => {

package/templates/apps/web/app/[locale]/flows/[slug]/FlowStepperClient.tsx

@@ -1,3 +1,4 @@
+// oss: false
 "use client";
 
 /**
@@ -53,7 +54,7 @@ import {
   type FlowStepperMessages,
   type FlowStepSubmitPayload,
   type FlowStepSubmitResult,
-} from "@working-theory/ui";
+} from "@working-theory/ui/slices/signal-collectors";
 import type { AeoScoreResult, FlowConfig, FlowState } from "@working-theory/validation";
 import {
   deriveFlags,

package/templates/apps/web/app/[locale]/flows/[slug]/__tests__/FlowStepperClient.permalink.test.tsx

@@ -1,3 +1,4 @@
+// oss: false
 /**
  * Tests for FlowStepperClient's permalink completion redirect on a
  * `mode:"recommending"` flow (#4770 D1/D7/D12).
@@ -64,7 +65,7 @@ interface MockFlowStepperProps {
 
 let captured: MockFlowStepperProps | undefined;
 
-jest.mock("@working-theory/ui", () => ({
+jest.mock("@working-theory/ui/slices/signal-collectors", () => ({
   FlowStepper: (props: MockFlowStepperProps) => {
     captured = props;
     return require("react").createElement("div", {

package/templates/apps/web/app/[locale]/flows/[slug]/__tests__/FlowStepperClient.test.tsx

@@ -1,3 +1,4 @@
+// oss: false
 /**
  * Tests for FlowStepperClient's segment-keyed completion redirect (#3960 D5).
  *
@@ -68,7 +69,7 @@ const PII_PAYLOAD = {
 
 let capturedOnCompleted: MockFlowStepperProps["onCompleted"];
 
-jest.mock("@working-theory/ui", () => ({
+jest.mock("@working-theory/ui/slices/signal-collectors", () => ({
   FlowStepper: (props: MockFlowStepperProps) => {
     capturedOnCompleted = props.onCompleted;
     async function handleSubmit(): Promise<void> {

package/templates/apps/web/app/[locale]/flows/[slug]/__tests__/flow.actions.test.ts

@@ -1,3 +1,4 @@
+// oss: false
 /**
  * Tests for submitFlowStepAction Server Action (#3957 D8).
  *

package/templates/apps/web/app/[locale]/flows/[slug]/__tests__/two-route-tool.test.tsx

@@ -1,3 +1,4 @@
+// oss: false
 /**
  * #5053 — an interactive tool is two routes.
  *

package/templates/apps/web/app/[locale]/flows/[slug]/flow.actions.ts

@@ -1,3 +1,4 @@
+// oss: false
 "use server";
 
 /**
@@ -29,7 +30,7 @@
  */
 
 import { flows } from "@working-theory/api-client";
-import type { FlowStepSubmitResult } from "@working-theory/ui";
+import type { FlowStepSubmitResult } from "@working-theory/ui/slices/signal-collectors";
 import {
   flowSlugSchema,
   submitFlowStepInputSchema,

package/templates/apps/web/app/[locale]/flows/[slug]/page.tsx

@@ -1,3 +1,4 @@
+// oss: false
 /**
  * /[locale]/flows/[slug] — the tool's LANDING route (#5053 D3/D5).
  *

package/templates/apps/web/app/[locale]/flows/[slug]/start/page.tsx

@@ -1,3 +1,4 @@
+// oss: false
 /**
  * /[locale]/flows/[slug]/start — the flow half of the two-route tool
  * (#5053 D3/D5). Moved here from `../page.tsx`, which is now the indexed

package/templates/apps/web/app/[locale]/layout.tsx

@@ -4,6 +4,7 @@
 // Chrome extract — Nav + Footer from @working-theory/ui (#1451)
 // Shell/Chrome composition — Nav + Footer wrap via @working-theory/templates MarketingShell (#2820)
 // Session-aware Nav actions — Sign in / Account + Sign out from the server-read session (#4984)
+// Site-declared theme — `_site.mdx` `theme:` block → token overlay → CSS vars
 //
 // Sits under app/[locale]/ and sets the <html lang> attribute to the
 // active locale. next-intl's NextIntlClientProvider is wired here so
@@ -48,6 +49,7 @@ import { SignOutTrigger } from "../../components/sign-out-trigger";
 import { navItems } from "../../lib/nav-config";
 import { getOgImageUrl } from "../../lib/og";
 import { SITE_NAME, siteLogo } from "../../lib/site-brand";
+import { loadSiteBrandTokens } from "../../lib/site-theme";
 import { resolveBaseUrl } from "../../src/lib/routes";
 
 // ── Constants ────────────────────────────────────────────────────────────────
@@ -238,11 +240,21 @@ export default async function LocaleLayout({
   // Shared brand mark injected into both Nav and Footer chrome slots.
   const brandLogo = siteLogo();
 
+  // The site's own declared colours, read from `content/_site.mdx`'s `theme:`
+  // block and translated from that customer-facing vocabulary onto a token
+  // overlay (`siteThemeToBrandTokens`). `undefined` when the site declares no
+  // theme — which is the regression floor: no `brand` key is passed, the
+  // resolver takes its untouched fast path, and the emitted CSS is
+  // byte-for-byte what it was before this wiring existed.
+  const siteBrandTokens = loadSiteBrandTokens();
+
   // Both theme modes, gated by [data-theme="dark"] (#1532 — sibling fix; the
   // single-mode call inlined an unconditional :root block that never
   // responded to a client-side data-theme toggle). themeMode still drives
   // the initial data-theme attribute below for a no-flash first paint.
-  const inlineThemeStyle = themeToCssVarsBothModes();
+  const inlineThemeStyle = themeToCssVarsBothModes(
+    siteBrandTokens ? { brand: siteBrandTokens } : {},
+  );
 
   return (
     <html lang={locale} dir={isRtl(locale) ? "rtl" : "ltr"} data-theme={themeMode}>

package/templates/apps/web/app/llms.txt/route.ts

@@ -4,9 +4,11 @@
  * Returns a plain-text index of AILK's content surface for LLM consumption,
  * following the llms.txt convention (https://llmstxt.org).
  *
- * Aggregates two surfaces:
- *   1. Section-catalog (MDX seeds in content/) via @working-theory/content-adapters
- *   2. Fumadocs blog corpus via blogSource.getPages()
+ * Indexes the section catalog (MDX seeds in content/) via
+ * @working-theory/content-adapters. Nothing is gated: a Free site has no blog
+ * (D-46), so there is no blog corpus to omit — `getBlogPages` defaults to an
+ * empty list and the docs + blog module ships its own variant of this route
+ * that reads `blogSource` (#5365 D9).
  *
  * Format per entry:
  *   - Title: <title>
@@ -14,8 +16,9 @@
  *     Description: <description>
  *
  * DI note: `createLlmsHandler` accepts optional `getContentAdapter` and
- * `getBlogPages` deps for testing — tests inject stubs to avoid mocking
- * internal modules. The exported `GET` uses the real implementations.
+ * `getBlogPages` deps — tests inject stubs, and the module's variant of this
+ * route supplies the real `blogSource` reader. The exported `GET` is
+ * unchanged either way.
  */
 
 import { SCHEMA_ORG_TYPES } from "@working-theory/content-adapters";
@@ -23,7 +26,6 @@ import type { ContentAdapter, SchemaOrgType } from "@working-theory/content-adap
 import { getContentAdapter as defaultGetContentAdapter } from "@working-theory/page-renderer";
 
 import { SITE_NAME } from "../../lib/site-brand";
-import { blogSource as defaultBlogSource } from "../../lib/source";
 import { resolveBaseUrl, slugToPath } from "../../src/lib/routes";
 
 export interface LlmsHandlerDeps {
@@ -33,8 +35,9 @@ export interface LlmsHandlerDeps {
    */
   getContentAdapter?: () => ContentAdapter;
   /**
-   * Blog pages getter. Defaults to the real blogSource.getPages().
-   * Override in tests to inject stub pages without mocking lib/source.
+   * Blog pages getter. Defaults to none — Free has no blog (D-46, #5365 D9).
+   * The docs + blog module's own copy of this route reads `blogSource`.
+   * Override in tests to inject stub pages.
    */
   getBlogPages?: () => Array<{ url: string; data: { title: string; description?: string } }>;
 }
@@ -45,7 +48,7 @@ export interface LlmsHandlerDeps {
  */
 export function createLlmsHandler(deps: LlmsHandlerDeps = {}) {
   const resolveAdapter = deps.getContentAdapter ?? defaultGetContentAdapter;
-  const resolveBlogPages = deps.getBlogPages ?? (() => defaultBlogSource.getPages() as Array<{ url: string; data: { title: string; description?: string } }>);
+  const resolveBlogPages = deps.getBlogPages ?? (() => []);
 
   return async function llmsGET(): Promise<Response> {
     const adapter = resolveAdapter();