create-ailk 0.1.1 → 0.3.0

package/templates/apps/web/jest.config.cjs

@@ -11,11 +11,11 @@ module.exports = {
   ],
   testMatch: ["**/__tests__/**/*.test.ts", "**/__tests__/**/*.test.tsx"],
   testPathIgnorePatterns: ["/node_modules/", "/.next/", "/dist/"],
-  // Ignore node_modules except fumadocs-* (ESM-only packages loaded via lib/source.ts → fumadocs-core/source).
+  // Ignore node_modules except @working-theory/* (their dist is ESM).
   // Mirrors the canonical jose carve-out used in apps/api, apps/mcp, and apps-paid/license-issuer.
   // Added: issue #1077
   transformIgnorePatterns: [
-    "/node_modules/(?!(\\.pnpm/)?(fumadocs-[^/]*?@?[^/]*?|@working-theory(?:\\+[^/]*?@?[^/]*?|/[^/]+))(/|$))",
+    "/node_modules/(?!(\\.pnpm/)?@working-theory(?:\\+[^/]*?@?[^/]*?|/[^/]+)(/|$))",
   ],
   moduleFileExtensions: ["ts", "tsx", "js", "jsx", "json"],
   // Workspace packages publish ESM in dist/, but ts-jest runs in CommonJS.
@@ -27,12 +27,6 @@ module.exports = {
     // Map all *.css to an empty stub — layout.tsx imports ./globals.css (#4090 item 1)
     // and CSS is not parseable by ts-jest's CommonJS transform (apps-paid/marketing-web precedent, #1531).
     "\\.css$": "<rootDir>/__tests__/__mocks__/style-mock.js",
-    // Fumadocs codegen output — produced by `pnpm --filter @working-theory/web build` into .source/
-    // The server entry uses top-level await + ESM-only fumadocs-mdx/runtime/server;
-    // map to a CJS stub so ts-jest can load modules that import lib/source.ts. (#1077)
-    // Stub lives in lib/__mocks__/ (committed) not .source/__mocks__/ (gitignored).
-    "^@/\\.source/server$": "<rootDir>/lib/__mocks__/source-server.js",
-    "^@/\\.source$": "<rootDir>/.source/index.ts",
     "^@working-theory/page-renderer/testing$":
       "<rootDir>/node_modules/@working-theory/page-renderer/dist/testing.js",
     "^@working-theory/page-renderer$":
@@ -51,8 +45,6 @@ module.exports = {
     "^@working-theory/api-client$": "<rootDir>/node_modules/@working-theory/api-client/dist/index.js",
     "^@working-theory/content-adapters$":
       "<rootDir>/node_modules/@working-theory/content-adapters/dist/index.js",
-    "^@working-theory/fumadocs-schema$":
-      "<rootDir>/node_modules/@working-theory/fumadocs-schema/dist/index.js",
     "^@working-theory/license$": "<rootDir>/node_modules/@working-theory/license/dist/index.js",
     "^@working-theory/jsonld$": "<rootDir>/node_modules/@working-theory/jsonld/dist/index.js",
     "^@working-theory/metadata$": "<rootDir>/node_modules/@working-theory/metadata/dist/index.js",
@@ -66,6 +58,7 @@ module.exports = {
       "<rootDir>/node_modules/@working-theory/schema-validator/dist/index.js",
     "^@working-theory/sections-registry$":
       "<rootDir>/node_modules/@working-theory/sections-registry/dist/index.js",
+
     "^@working-theory/templates/shells$":
       "<rootDir>/node_modules/@working-theory/templates/dist/shells/index.js",
     "^@working-theory/templates$": "<rootDir>/node_modules/@working-theory/templates/dist/index.js",
@@ -82,7 +75,21 @@ module.exports = {
     // tree, where nothing imports it, so the unused mapping is inert there.
     "^@working-theory/ui/slices/scheduling$":
       "<rootDir>/node_modules/@working-theory/ui/dist/sections/slices/scheduling.js",
+    // #5366: the signal-collectors slice's re-export subpath. Same reasoning
+    // as the scheduling mapping above.
+    "^@working-theory/ui/slices/signal-collectors$":
+      "<rootDir>/node_modules/@working-theory/ui/dist/sections/slices/signal-collectors.js",
+    // #5364: the commerce slice's renderer-registration + CheckoutPriceCard
+    // re-export subpath. Same reasoning as the scheduling mapping above.
+    "^@working-theory/ui/slices/commerce$":
+      "<rootDir>/node_modules/@working-theory/ui/dist/sections/slices/commerce.js",
     "^@working-theory/theme$": "<rootDir>/node_modules/@working-theory/theme/dist/index.js",
+    // site-config publishes ESM in dist/; map to source so ts-jest compiles it
+    // through the same transformer as every sibling above. Only the
+    // client-safe /schema entry is mapped — architecture.yaml forbids apps/web
+    // from importing /server at all (#1567).
+    "^@working-theory/site-config/schema$":
+      "<rootDir>/node_modules/@working-theory/site-config/dist/schema/index.js",
     "^@working-theory/validation$": "<rootDir>/node_modules/@working-theory/validation/dist/index.js",
     "^@working-theory/web-i18n$": "<rootDir>/node_modules/@working-theory/web-i18n/dist/index.js",
     // #5025: pnpm keys next-intl's virtual-store path on its resolved peers,
@@ -120,9 +127,9 @@ module.exports = {
   },
   setupFilesAfterEnv: ["<rootDir>/__tests__/setup.ts"],
   transform: {
-    // fumadocs-core (16.10.6+) ships `import.meta.env` in its dist JS
-    // (e.g. dist/url-*.js), which the transformIgnorePatterns carve-out
-    // above lets reach a transformer instead of being required raw.
+    // Some `@working-theory/*` dist JS ships `import.meta`, which the
+    // transformIgnorePatterns carve-out above lets reach a transformer
+    // instead of being required raw.
     // `import.meta` has no CJS form, so it must run through the shared
     // import.meta -> {} rewrite BEFORE ts-jest — ts-jest's own
     // astTransformers hook never fires for a node_modules JS file (see the

package/templates/apps/web/lib/__tests__/site-theme.test.ts

@@ -0,0 +1,112 @@
+/**
+ * Round trip: the real `content/_site.mdx` → the emitted CSS custom properties.
+ *
+ * This is the end-to-end claim the wiring makes — a site declares a theme and
+ * the built page renders in those colours — asserted on the actual repo file
+ * rather than a fixture, so deleting the `theme:` block would fail here.
+ */
+import { mkdtempSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+
+import { PartialColorPaletteSchema } from "@working-theory/site-config/schema";
+import { siteColorTokenMap, themeToCssVarsBothModes } from "@working-theory/theme";
+
+import { loadSiteBrandTokens } from "../site-theme";
+
+const REPO_CONTENT_ROOT = join(__dirname, "..", "..", "..", "..", "content");
+
+/** The light-mode `:root { … }` block, without the dark one. */
+function lightBlock(css: string): string {
+  return css.slice(0, css.indexOf(':root[data-theme="dark"]'));
+}
+
+/** The dark-mode `:root[data-theme="dark"] { … }` block. */
+function darkBlock(css: string): string {
+  return css.slice(css.indexOf(':root[data-theme="dark"]'));
+}
+
+describe("loadSiteBrandTokens — the real content/_site.mdx", () => {
+  const originalRoot = process.env.AILK_CONTENT_ROOT;
+
+  beforeEach(() => {
+    process.env.AILK_CONTENT_ROOT = REPO_CONTENT_ROOT;
+  });
+
+  afterEach(() => {
+    if (originalRoot === undefined) delete process.env.AILK_CONTENT_ROOT;
+    else process.env.AILK_CONTENT_ROOT = originalRoot;
+  });
+
+  it("translates the declared theme into the token overlay", () => {
+    expect(loadSiteBrandTokens()).toEqual({
+      colors: {
+        light: { bg: "#fdfcfa", fg: "#1c1917" },
+        dark: { bg: "#0c0a09" },
+      },
+    });
+  });
+
+  it("reaches the emitted CSS custom properties", () => {
+    const brand = loadSiteBrandTokens();
+    const css = themeToCssVarsBothModes(brand ? { brand } : {});
+
+    expect(lightBlock(css)).toContain("--color-bg: #fdfcfa;");
+    expect(lightBlock(css)).toContain("--color-fg: #1c1917;");
+    expect(darkBlock(css)).toContain("--color-bg: #0c0a09;");
+  });
+
+  it("changes exactly the declared variables and nothing else", () => {
+    const brand = loadSiteBrandTokens();
+    const themed = themeToCssVarsBothModes(brand ? { brand } : {});
+    const expected = themeToCssVarsBothModes()
+      // light block — the two declared light colours
+      .replace("--color-bg: #ffffff;", "--color-bg: #fdfcfa;")
+      .replace("--color-fg: #030712;", "--color-fg: #1c1917;")
+      // dark block — the one declared dark colour
+      .replace("--color-bg: #0a0a0a;", "--color-bg: #0c0a09;");
+
+    expect(themed).toBe(expected);
+  });
+
+  it("treats a bare `theme:` key as no theme, rather than throwing", () => {
+    // YAML parses a dangling `theme:` to null. It is what commenting out the
+    // block's children leaves behind, it means the same as an absent key, and
+    // it must not escape as a ZodError out of an async Server Component.
+    const root = mkdtempSync(join(tmpdir(), "ailk-site-theme-"));
+    writeFileSync(
+      join(root, "_site.mdx"),
+      ["---", "siteName: Test", "theme:", "---", ""].join("\n"),
+      "utf8",
+    );
+    process.env.AILK_CONTENT_ROOT = root;
+
+    expect(loadSiteBrandTokens()).toBeUndefined();
+  });
+
+  it("returns undefined — and so emits the default CSS — when no config is readable", () => {
+    process.env.AILK_CONTENT_ROOT = join(__dirname, "no-such-content-root");
+
+    const brand = loadSiteBrandTokens();
+    expect(brand).toBeUndefined();
+    expect(themeToCssVarsBothModes(brand ? { brand } : {})).toBe(
+      themeToCssVarsBothModes(),
+    );
+  });
+});
+
+/**
+ * The twelve customer-facing colour slots live in `@working-theory/site-config`
+ * and the map from them to token names lives in `@working-theory/theme`;
+ * neither package may import the other, so nothing inside either can notice
+ * the two lists drifting. `apps/web` imports both, so the cross-check lives
+ * here — without it, a slot added to the palette schema would parse cleanly
+ * and then throw "is not a theme colour" at render.
+ */
+describe("the two vocabularies agree on which slots exist", () => {
+  it("siteColorTokenMap covers exactly the schema's colour slots", () => {
+    expect(Object.keys(siteColorTokenMap).sort()).toEqual(
+      Object.keys(PartialColorPaletteSchema.shape).sort(),
+    );
+  });
+});

package/templates/apps/web/lib/site-brand.tsx

@@ -55,8 +55,11 @@ interface SiteFrontmatter {
  * levels up from cwd — `apps/web` in dev/build, so `../../content` lands on
  * the site/scaffold root's `content/` directory. Duplicated locally because
  * that resolver isn't part of `@working-theory/page-renderer`'s public API.
+ *
+ * Exported so `lib/site-theme.ts` resolves the same root rather than keeping
+ * a third copy of this four-line rule.
  */
-function resolveContentRoot(): string {
+export function resolveContentRoot(): string {
   const override = process.env.AILK_CONTENT_ROOT;
   if (override && override.length > 0) return override;
   return join(process.cwd(), "..", "..", "content");

package/templates/apps/web/lib/site-theme.ts

@@ -0,0 +1,74 @@
+/**
+ * Site theme — reads the `theme:` block out of `content/_site.mdx` and
+ * translates it into the token overlay `themeToCssVarsBothModes` accepts.
+ *
+ * The read is a local frontmatter parse rather than
+ * `@working-theory/site-config/server`'s `loadSiteConfig`, for the same
+ * reason `site-brand.tsx` reads locally (see its header, and #4157 D1) and
+ * one more: `architecture.yaml` forbids `apps/web` from importing that
+ * subpath at all, because it pulls `node:fs` into a tree that also carries
+ * edge routes (#1567). The `theme:` block is still validated against the
+ * canonical schema — `SiteThemeSchema` from the package's client-safe
+ * `/schema` entry — so the shape this app accepts and the shape the
+ * dashboard will write are one definition, not two.
+ *
+ * The translation itself lives in `@working-theory/theme`
+ * (`siteThemeToBrandTokens`) — the token vocabulary is that package's own.
+ *
+ * Returns `undefined` when the site declares no theme, so the layout passes
+ * no `brand` at all and the resolver emits byte-for-byte the CSS it emitted
+ * before this wiring existed.
+ */
+
+import { readFileSync } from "node:fs";
+import { join } from "node:path";
+
+import { SiteThemeSchema } from "@working-theory/site-config/schema";
+import {
+  siteThemeToBrandTokens,
+  type BrandTokenOverrides,
+} from "@working-theory/theme";
+import { parse as parseYaml } from "yaml";
+
+import { resolveContentRoot } from "./site-brand";
+
+const FRONTMATTER_RE = /^---\r?\n([\s\S]*?)\r?\n---/;
+
+const SOURCE = "content/_site.mdx theme";
+
+/**
+ * The `theme:` value as it appears in the frontmatter, or `undefined` when
+ * `_site.mdx` is absent, unreadable, or declares no theme. A site with no
+ * readable config has no theme to apply, and the default palette is the
+ * correct result — the same fallback `site-brand.tsx` takes.
+ *
+ * "Declares no theme" covers a bare `theme:` key with nothing under it, which
+ * YAML parses to `null`. That is the shape the most natural edit produces —
+ * commenting out the block's children leaves the key dangling — and it means
+ * exactly what an absent key means, so it takes the same path rather than
+ * reaching the schema and throwing out of a Server Component.
+ */
+function readThemeBlock(): unknown {
+  try {
+    const raw = readFileSync(join(resolveContentRoot(), "_site.mdx"), "utf8");
+    const match = FRONTMATTER_RE.exec(raw);
+    if (!match) return undefined;
+
+    const parsed: unknown = parseYaml(match[1] ?? "");
+    if (!parsed || typeof parsed !== "object") return undefined;
+
+    return (parsed as Record<string, unknown>).theme ?? undefined;
+  } catch {
+    return undefined;
+  }
+}
+
+export function loadSiteBrandTokens(): BrandTokenOverrides | undefined {
+  const block = readThemeBlock();
+  if (block === undefined) return undefined;
+
+  // Validation failures and unsupported colours BOTH throw, deliberately: a
+  // customer who set a colour and saw no change would have been lied to.
+  const theme = SiteThemeSchema.parse(block);
+  return siteThemeToBrandTokens(theme, SOURCE);
+}

package/templates/apps/web/next.config.mjs

@@ -3,7 +3,6 @@ import { join } from "node:path";
 import { parse as parseYaml } from "yaml";
 import bundleAnalyzer from "@next/bundle-analyzer";
 import { withSentryConfig } from "@sentry/nextjs";
-import { createMDX } from "fumadocs-mdx/next";
 import createNextIntlPlugin from "next-intl/plugin";
 
 // @next/bundle-analyzer — enabled when ANALYZE=true (set by ci-bundle.yml).
@@ -110,7 +109,6 @@ const nextConfig = {
     "@working-theory/analytics",
     "@working-theory/api-client",
     "@working-theory/content-adapters",
-    "@working-theory/fumadocs-schema",
     "@working-theory/jsonld",
     "@working-theory/metadata",
     "@working-theory/page-renderer",
@@ -168,6 +166,6 @@ const sentryBuildOptions = {
 };
 
 export default withSentryConfig(
-  withBundleAnalyzer(withNextIntl(createMDX()(nextConfig))),
+  withBundleAnalyzer(withNextIntl(nextConfig)),
   sentryBuildOptions,
 );

package/templates/apps/web/package.json

@@ -6,14 +6,11 @@
   "license": "Apache-2.0",
   "scripts": {
     "dev": "next dev",
-    "prebuild": "fumadocs-mdx",
     "build": "next build --webpack",
     "postbuild": "tsx scripts/assert-content-bundled.ts",
     "start": "next start",
-    "pretypecheck": "fumadocs-mdx",
     "type-check": "tsc --noEmit",
     "lint": "next lint",
-    "pretest": "fumadocs-mdx",
     "test": "jest",
     "test:watch": "jest --watch"
   },
@@ -24,21 +21,19 @@
     "@working-theory/api-client": "workspace:*",
     "@working-theory/content-adapters": "workspace:*",
     "@working-theory/database": "workspace:*",
-    "@working-theory/fumadocs-schema": "workspace:*",
     "@working-theory/jsonld": "workspace:*",
     "@working-theory/metadata": "workspace:*",
     "@working-theory/page-renderer": "workspace:*",
     "@working-theory/schema": "workspace:*",
     "@working-theory/schema-pack-registry": "workspace:*",
     "@working-theory/schema-validator": "workspace:*",
+    "@working-theory/site-config": "workspace:*",
     "@working-theory/templates": "workspace:*",
     "@working-theory/theme": "workspace:*",
     "@working-theory/ui": "workspace:*",
     "@working-theory/validation": "workspace:*",
     "@working-theory/web-i18n": "workspace:*",
     "better-auth": "1.6.22",
-    "fumadocs-core": "^16.10.4",
-    "fumadocs-mdx": "^15.0.12",
     "lucide-react": "^0.577.0",
     "next": "^16.3.3",
     "next-intl": "^3.26.3",

package/templates/apps/web/public/favicon.svg

@@ -1,4 +1,7 @@
-<svg width="1080" height="1080" viewBox="0 0 1080 1080" fill="none" xmlns="http://www.w3.org/2000/svg">
-<rect width="1080" height="1080" rx="190" fill="#F0B100"/>
-<path d="M127.624 704.255C127.624 704.255 303.232 444.079 606.336 428.823C606.336 428.823 827.464 405.543 824.36 645.295C824.36 645.295 824.344 832.999 659.872 916.079C507.8 992.887 380.56 892.023 383.664 757.023C386.552 631.327 467.136 458.695 824.392 199.167L792.552 155.463L952.384 137.359L893.416 288.399L861.864 246.503C861.864 246.503 529.792 463.231 475.216 676.335C475.216 676.335 432.544 848.583 558.992 852.527C689.056 856.591 794.88 637.543 696.856 535.383C613.632 448.639 369.888 498.079 163.504 733.167L127.616 704.263L127.624 704.255Z" fill="white"/>
+<svg width="1520" height="1520" viewBox="0 0 1520 1520" xmlns="http://www.w3.org/2000/svg" role="img" aria-label="AI Launch Kit loop logomark">
+<title>AI Launch Kit — favicon (the loop logomark on the #0656E9 tile)</title>
+<rect x="0" y="0" width="1520" height="1520" rx="267" fill="#0656E9"/>
+<svg x="258.4" y="270.1" width="1003.2" height="979.9" viewBox="127.6 137.2 824.8 805.6" fill="#FFFFFF">
+<path d="M127.624 704.255C127.624 704.255 303.232 444.079 606.336 428.823C606.336 428.823 827.464 405.543 824.36 645.295C824.36 645.295 824.344 832.999 659.872 916.079C507.8 992.887 380.56 892.023 383.664 757.023C386.552 631.327 467.136 458.695 824.392 199.167L792.552 155.463L952.384 137.359L893.416 288.399L861.864 246.503C861.864 246.503 529.792 463.231 475.216 676.335C475.216 676.335 432.544 848.583 558.992 852.527C689.056 856.591 794.88 637.543 696.856 535.383C613.632 448.639 369.888 498.079 163.504 733.167L127.616 704.263L127.624 704.255Z" fill="#FFFFFF"/>
+</svg>
 </svg>

package/templates/apps/web/public/lockup-horizontal.svg

@@ -0,0 +1,4 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="-196.50 -128.00 1248.00 143.50" width="1248" height="144">
+<!-- AI Launch Kit — horizontal lockup from the portfolio logo builder (mark: loop; wordmark: custom lettering). -->
+<g transform="scale(100)" fill="#2F2E2F"><g transform="translate(-1.9050 -1.2206) scale(0.0016343825665859565) translate(-127.0 -137.0)"><path d="M127.624 704.255C127.624 704.255 303.232 444.079 606.336 428.823C606.336 428.823 827.464 405.543 824.36 645.295C824.36 645.295 824.344 832.999 659.872 916.079C507.8 992.887 380.56 892.023 383.664 757.023C386.552 631.327 467.136 458.695 824.392 199.167L792.552 155.463L952.384 137.359L893.416 288.399L861.864 246.503C861.864 246.503 529.792 463.231 475.216 676.335C475.216 676.335 432.544 848.583 558.992 852.527C689.056 856.591 794.88 637.543 696.856 535.383C613.632 448.639 369.888 498.079 163.504 733.167L127.616 704.263L127.624 704.255Z" fill="#2F2E2F"/></g><g><g transform="translate(0.0000 0) scale(1.12)"><g transform="matrix(0.002500025961207091 0 0 0.002500025961207091 -4.7020750267431675 -1.4599045865638782)"><path d="M 2017.5 402.472656 L 2069.75 282.953125 L 2117.78125 403.007812 Z M 2058.75 183.148438 L 1880.675781 584.136719 L 1942.238281 584.136719 L 2008.234375 422.691406 L 2125.605469 423.199219 L 2190.234375 584.136719 L 2271.277344 584.136719 L 2099.449219 183.226562 Z M 2058.75 183.148438 "/></g></g><g transform="translate(1.2171 0) scale(1.12)"><g transform="matrix(0.00437188995905497 0 0 0.00437188995905497 -7.51705209867612 -1.835802888450144)"><path d="M1740.19 194.304L1719.36 191.411V202.211V419.908H1760.75V202.211V191.411L1740.19 194.304Z"/></g></g><g transform="translate(2.0699 0) scale(1.12)"><g transform="matrix(0.002500025961207091 0 0 0.002500025961207091 -5.830939525076691 -1.4599045865638782)"><path d="M 2402.425781 183.285156 C 2396.121094 184.144531 2381.960938 186.203125 2370.179688 188.808594 L 2369.75 188.917969 L 2369.320312 188.871094 C 2368.386719 188.792969 2347.890625 187.152344 2332.242188 182.320312 L 2332.367188 584.121094 L 2560.800781 582.847656 L 2560.800781 553.59375 L 2403.714844 559.222656 Z M 2402.425781 183.285156 "/></g></g><g transform="translate(2.7492 0) scale(1)"><g transform="matrix(0.002500025961207091 0 0 0.002500025961207091 -4.7020750267431675 -1.4599045865638782)"><path d="M 2017.5 402.472656 L 2069.75 282.953125 L 2117.78125 403.007812 Z M 2058.75 183.148438 L 1880.675781 584.136719 L 1942.238281 584.136719 L 2008.234375 422.691406 L 2125.605469 423.199219 L 2190.234375 584.136719 L 2271.277344 584.136719 L 2099.449219 183.226562 Z M 2058.75 183.148438 "/></g></g><g transform="translate(3.8551 0) scale(1)"><g transform="matrix(0.008439053643785967 0 0 0.008439053643785967 -4.32856421446149 -1.661401981511421)"><path d="M588.43 79.8509L582.5 78.3809H582.4V152.431C582.4 170.651 578.49 184.301 560.57 185.691C535.83 187.611 534.33 168.701 534.33 152.431V78.3809H512.93V154.271C512.93 180.851 526.97 196.901 553.55 196.901C580.13 196.901 594.34 180.851 594.34 154.271V78.3809H594.29L588.43 79.8509Z"/></g></g><g transform="translate(4.7219 0) scale(1)"><g transform="matrix(0.00437188995905497 0 0 0.00437188995905497 -8.030530574367127 -1.835802888450144)"><path d="M2004.42 193.996L1983.67 191.122V201.903V362.052H1981.67L1873.96 191.064H1836.85V419.909H1878.31V249.847H1880.2L1988.03 419.909H2024.9V201.903V191.122L2004.42 193.996Z"/></g></g><g transform="translate(5.7438 0) scale(1)"><g transform="matrix(0.008439053643785967 0 0 0.008439053643785967 -6.325890417670046 -1.661401981511421)"><path d="M836.41 164.341C835.23 168.751 829.47 176.661 826.1 179.451C821.03 183.641 815.16 185.671 808.28 185.381C799.06 185.021 790.21 178.941 786.62 175.401C774.31 163.261 763.42 126.371 785.6 101.151C790.38 95.7213 799.06 90.4313 808.28 90.0713C815.16 89.7813 821.04 91.8113 826.1 96.0013C829.47 98.8013 835.23 106.701 836.41 111.111L850.58 110.991L856.37 95.5913C854.69 93.3213 842.2 80.1513 813.29 78.3613H811.99C806.12 78.3613 800.73 78.8913 795.85 79.7713C774.34 83.6413 757.22 100.051 752.05 121.281C750.58 127.301 749.55 133.771 749.57 140.021C749.57 141.261 749.62 142.501 749.71 143.731C751.72 171.321 773.66 193.211 801.13 196.451C802.11 196.571 803.52 196.671 805.04 196.751C814.56 197.281 824.14 196.051 833.09 192.741C847.38 187.471 854.38 179.421 855.59 177.781L850.57 164.441L836.4 164.321L836.41 164.341Z"/></g></g><g transform="translate(6.8247 0) scale(1)"><g transform="matrix(0.002500025961207091 0 0 0.002500025961207091 -7.397806839178519 -1.4599045865638782)"><path d="M 3259.496094 184.34375 L 3259.21875 356.253906 L 3141.863281 363.183594 L 3028.496094 355.238281 L 3028.773438 185.34375 L 2994.425781 190.695312 L 2959.082031 185.328125 L 2959.082031 584.074219 L 2991.449219 583.722656 L 3028.789062 584.074219 L 3029.003906 381.808594 L 3142.355469 380.472656 L 3258.726562 381.808594 L 3259.496094 583.109375 L 3293.84375 582.753906 L 3329.21875 583.109375 L 3329.21875 184.359375 L 3294.855469 189.714844 Z M 3259.496094 184.34375 "/></g></g><g transform="translate(8.3998 0) scale(1.12)"><g transform="matrix(0.00437188995905497 0 0 0.00437188995905497 -6.531551848288504 -1.835802888450144)"><path d="M1582.59 274.514L1651.05 192.742H1636.78L1536.82 312.159V192.761L1515.7 195.828L1493.99 192.742V419.909H1536.82V329.69L1553.7 309.247L1614.7 419.909H1664.03L1582.59 274.514Z"/></g></g><g transform="translate(9.3625 0) scale(1)"><g transform="matrix(0.00437188995905497 0 0 0.00437188995905497 -7.51705209867612 -1.835802888450144)"><path d="M1740.19 194.304L1719.36 191.411V202.211V419.908H1760.75V202.211V191.411L1740.19 194.304Z"/></g></g><g transform="translate(9.6336 0) scale(1)"><g transform="matrix(0.002500025961207091 0 0 0.002500025961207091 -6.402239906111586 -1.4599045865638782)"><path d="M 2691.488281 583.628906 L 2758.25 583.628906 L 2758.25 204.410156 L 2888.722656 218.15625 L 2888.832031 183.714844 L 2560.910156 183.714844 L 2560.800781 217.679688 L 2691.488281 204.425781 Z M 2691.488281 583.628906 "/></g></g></g></g>
+</svg>

package/templates/apps/web/public/logomark.svg

@@ -0,0 +1,4 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 100" width="100" height="100">
+<!-- loop logomark in the portfolio square frame (fills 90% of the side) -->
+<g transform="translate(5.000 6.090) scale(0.108959) translate(-127.0 -137.0)" fill="#2F2E2F"><path d="M127.624 704.255C127.624 704.255 303.232 444.079 606.336 428.823C606.336 428.823 827.464 405.543 824.36 645.295C824.36 645.295 824.344 832.999 659.872 916.079C507.8 992.887 380.56 892.023 383.664 757.023C386.552 631.327 467.136 458.695 824.392 199.167L792.552 155.463L952.384 137.359L893.416 288.399L861.864 246.503C861.864 246.503 529.792 463.231 475.216 676.335C475.216 676.335 432.544 848.583 558.992 852.527C689.056 856.591 794.88 637.543 696.856 535.383C613.632 448.639 369.888 498.079 163.504 733.167L127.616 704.263L127.624 704.255Z" fill="#2F2E2F"/></g>
+</svg>

package/templates/apps/web/public/site.webmanifest

@@ -13,7 +13,7 @@
       "type": "image/png"
     }
   ],
-  "theme_color": "#F0B100",
-  "background_color": "#ffffff",
+  "theme_color": "#0656E9",
+  "background_color": "#0656E9",
   "display": "standalone"
 }

package/templates/apps/web/public/wordmark.svg

@@ -0,0 +1,4 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="-6.00 -118.50 1057.50 124.50" width="1058" height="125">
+<!-- AI Launch Kit — wordmark from the portfolio logo builder (custom lettering). -->
+<g transform="scale(100)" fill="#2F2E2F"><g><g transform="translate(0.0000 0) scale(1.12)"><g transform="matrix(0.002500025961207091 0 0 0.002500025961207091 -4.7020750267431675 -1.4599045865638782)"><path d="M 2017.5 402.472656 L 2069.75 282.953125 L 2117.78125 403.007812 Z M 2058.75 183.148438 L 1880.675781 584.136719 L 1942.238281 584.136719 L 2008.234375 422.691406 L 2125.605469 423.199219 L 2190.234375 584.136719 L 2271.277344 584.136719 L 2099.449219 183.226562 Z M 2058.75 183.148438 "/></g></g><g transform="translate(1.2171 0) scale(1.12)"><g transform="matrix(0.00437188995905497 0 0 0.00437188995905497 -7.51705209867612 -1.835802888450144)"><path d="M1740.19 194.304L1719.36 191.411V202.211V419.908H1760.75V202.211V191.411L1740.19 194.304Z"/></g></g><g transform="translate(2.0699 0) scale(1.12)"><g transform="matrix(0.002500025961207091 0 0 0.002500025961207091 -5.830939525076691 -1.4599045865638782)"><path d="M 2402.425781 183.285156 C 2396.121094 184.144531 2381.960938 186.203125 2370.179688 188.808594 L 2369.75 188.917969 L 2369.320312 188.871094 C 2368.386719 188.792969 2347.890625 187.152344 2332.242188 182.320312 L 2332.367188 584.121094 L 2560.800781 582.847656 L 2560.800781 553.59375 L 2403.714844 559.222656 Z M 2402.425781 183.285156 "/></g></g><g transform="translate(2.7492 0) scale(1)"><g transform="matrix(0.002500025961207091 0 0 0.002500025961207091 -4.7020750267431675 -1.4599045865638782)"><path d="M 2017.5 402.472656 L 2069.75 282.953125 L 2117.78125 403.007812 Z M 2058.75 183.148438 L 1880.675781 584.136719 L 1942.238281 584.136719 L 2008.234375 422.691406 L 2125.605469 423.199219 L 2190.234375 584.136719 L 2271.277344 584.136719 L 2099.449219 183.226562 Z M 2058.75 183.148438 "/></g></g><g transform="translate(3.8551 0) scale(1)"><g transform="matrix(0.008439053643785967 0 0 0.008439053643785967 -4.32856421446149 -1.661401981511421)"><path d="M588.43 79.8509L582.5 78.3809H582.4V152.431C582.4 170.651 578.49 184.301 560.57 185.691C535.83 187.611 534.33 168.701 534.33 152.431V78.3809H512.93V154.271C512.93 180.851 526.97 196.901 553.55 196.901C580.13 196.901 594.34 180.851 594.34 154.271V78.3809H594.29L588.43 79.8509Z"/></g></g><g transform="translate(4.7219 0) scale(1)"><g transform="matrix(0.00437188995905497 0 0 0.00437188995905497 -8.030530574367127 -1.835802888450144)"><path d="M2004.42 193.996L1983.67 191.122V201.903V362.052H1981.67L1873.96 191.064H1836.85V419.909H1878.31V249.847H1880.2L1988.03 419.909H2024.9V201.903V191.122L2004.42 193.996Z"/></g></g><g transform="translate(5.7438 0) scale(1)"><g transform="matrix(0.008439053643785967 0 0 0.008439053643785967 -6.325890417670046 -1.661401981511421)"><path d="M836.41 164.341C835.23 168.751 829.47 176.661 826.1 179.451C821.03 183.641 815.16 185.671 808.28 185.381C799.06 185.021 790.21 178.941 786.62 175.401C774.31 163.261 763.42 126.371 785.6 101.151C790.38 95.7213 799.06 90.4313 808.28 90.0713C815.16 89.7813 821.04 91.8113 826.1 96.0013C829.47 98.8013 835.23 106.701 836.41 111.111L850.58 110.991L856.37 95.5913C854.69 93.3213 842.2 80.1513 813.29 78.3613H811.99C806.12 78.3613 800.73 78.8913 795.85 79.7713C774.34 83.6413 757.22 100.051 752.05 121.281C750.58 127.301 749.55 133.771 749.57 140.021C749.57 141.261 749.62 142.501 749.71 143.731C751.72 171.321 773.66 193.211 801.13 196.451C802.11 196.571 803.52 196.671 805.04 196.751C814.56 197.281 824.14 196.051 833.09 192.741C847.38 187.471 854.38 179.421 855.59 177.781L850.57 164.441L836.4 164.321L836.41 164.341Z"/></g></g><g transform="translate(6.8247 0) scale(1)"><g transform="matrix(0.002500025961207091 0 0 0.002500025961207091 -7.397806839178519 -1.4599045865638782)"><path d="M 3259.496094 184.34375 L 3259.21875 356.253906 L 3141.863281 363.183594 L 3028.496094 355.238281 L 3028.773438 185.34375 L 2994.425781 190.695312 L 2959.082031 185.328125 L 2959.082031 584.074219 L 2991.449219 583.722656 L 3028.789062 584.074219 L 3029.003906 381.808594 L 3142.355469 380.472656 L 3258.726562 381.808594 L 3259.496094 583.109375 L 3293.84375 582.753906 L 3329.21875 583.109375 L 3329.21875 184.359375 L 3294.855469 189.714844 Z M 3259.496094 184.34375 "/></g></g><g transform="translate(8.3998 0) scale(1.12)"><g transform="matrix(0.00437188995905497 0 0 0.00437188995905497 -6.531551848288504 -1.835802888450144)"><path d="M1582.59 274.514L1651.05 192.742H1636.78L1536.82 312.159V192.761L1515.7 195.828L1493.99 192.742V419.909H1536.82V329.69L1553.7 309.247L1614.7 419.909H1664.03L1582.59 274.514Z"/></g></g><g transform="translate(9.3625 0) scale(1)"><g transform="matrix(0.00437188995905497 0 0 0.00437188995905497 -7.51705209867612 -1.835802888450144)"><path d="M1740.19 194.304L1719.36 191.411V202.211V419.908H1760.75V202.211V191.411L1740.19 194.304Z"/></g></g><g transform="translate(9.6336 0) scale(1)"><g transform="matrix(0.002500025961207091 0 0 0.002500025961207091 -6.402239906111586 -1.4599045865638782)"><path d="M 2691.488281 583.628906 L 2758.25 583.628906 L 2758.25 204.410156 L 2888.722656 218.15625 L 2888.832031 183.714844 L 2560.910156 183.714844 L 2560.800781 217.679688 L 2691.488281 204.425781 Z M 2691.488281 583.628906 "/></g></g></g></g>
+</svg>

package/templates/content/_site.mdx

@@ -14,6 +14,13 @@ siteIdentity:
   sameAs: []
 analytics:
   vercelAnalytics: false
+theme:
+  colors:
+    light:
+      bg: "#fdfcfa"
+      text: "#1c1917"
+    dark:
+      bg: "#0c0a09"
 ---
 
 <!--
@@ -31,6 +38,11 @@ your LinkedIn company page, your GitHub org, your X profile. Answer engines use
 it to reconcile your site with the rest of your presence, so it is worth
 filling in.
 
+`theme.colors` is the site's colour overlay: each key names a customer-facing
+colour role (`bg`, `text`, `primary`, `accent`, …) per light/dark mode, and the
+build turns it into the CSS custom properties every component reads. Declare
+only what you change — an absent role keeps the platform default.
+
 For the agent-operator workflow, use the `set_site_identity` MCP tool rather
 than editing this file directly — it validates input and writes with optimistic
 locking.

package/templates/database/CHANGELOG.md

@@ -1,5 +1,99 @@
 # @working-theory/database
 
+## 0.22.0
+
+### Minor Changes
+
+- [#5412](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/pull/5412) [`e94f08c`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/e94f08cccfe6cb9d096b6746a092c1b6921677cf) Thanks [@claudio-planck](https://github.com/claudio-planck)! - The founder application collects first name, last name and phone on step one, and records email verification when the emailed resume link is opened ([#5407](https://github.com/working-theory-labs/ai-launch-kit-internal/issues/5407)).
+
+  **Migration: `20260914120000_listing_founder_identity`.** Five nullable columns on `project_listings` — `founder_first_name`, `founder_last_name`, `founder_phone`, `email_verify_nonce_hash` and `email_verified_at` — with no backfill and no change to any existing column. `founder_name` stays NOT NULL and stays the single-line DISPLAY name every existing reader reads; the parts sit beside it, exactly as [#5279](https://github.com/working-theory-labs/ai-launch-kit-internal/issues/5279) put the six address parts beside `address`. Composition runs one way only, so no existing row's `founder_name` is split by guessing.
+
+  The platform's default contact screen now asks first name, last name, email, phone and consent. Phone is required by default and a site relaxes it with `questions: [{ id: "founder_phone", required: false }]`. A site that still asks for one "Your name" line keeps parsing untouched: the required `founderName` contract row is satisfied either by a question writing it or by the two parts that compose it.
+
+  `POST /v1/project-listings` accepts `founderFirstName` / `founderLastName` / `founderPhone` and composes `founder_name` server-side; a body carrying only `founderName`, as every caller before this release sends, is accepted unchanged.
+
+  New anonymous, credential-gated route `POST /v1/project-listings/drafts/:id/verify-email`, reached from `projectListings.verifyEmail(id, resumeToken, verifyNonce)`. It takes two credentials, and only the second carries the proof: the resume token is in `start`'s own 201 body, so it says only that you opened the draft, while the verification NONCE is minted at `start`, stored as a digest, and handed to nothing but the resume-email builder — it reaches the outside world only as the `?verify=` parameter of the emailed link. The route stamps `email_verified_at` write-once by compare-and-swap, so repeat openings answer the first stamp; a wrong token, a wrong nonce and an unknown draft all return the same `404 not_found` the other token-gated routes return.
+
+  `ListingApplicationFlow` calls it once when it mounts with a `resume.verifyNonce`, and a failure never blocks the founder. A resume link with no nonce still resumes the draft and records nothing — which is also what a site that has not switched the resume email on gets, permanently, since no nonce is ever delivered there.
+
+  `start`'s request and response shapes are unchanged: the nonce is never in a response body and never in a log line.
+
+  `founder_phone` and `email_verified_at` are omitted from the public listing read. The operator sees both on the tenant dashboard row and in the decision/review payload, and the weekly CSV sweep's outcome log now says whether the address it mailed had been proved.
+
+### Patch Changes
+
+- Updated dependencies [[`941db5d`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/941db5d317b7332c3c5bb4134d0cc18f80678781), [`cbe99c2`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/cbe99c228200b4720b2f36af50c822a4bcca2275), [`e94f08c`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/e94f08cccfe6cb9d096b6746a092c1b6921677cf), [`f42b96b`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/f42b96b7489b5dae503b6c32e2045a14f382c583), [`4d28c33`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/4d28c33978dde5cd33540813ec6317436a42a877)]:
+  - @working-theory/ids@0.7.0
+  - @working-theory/validation@0.22.0
+
+## 0.21.0
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @working-theory/validation@0.21.0
+
+## 0.20.0
+
+### Minor Changes
+
+- [#5282](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/pull/5282) [`49e6ba4`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/49e6ba470a0ff4a0e6d4f7d14147232e90a12259) Thanks [@claudio-planck](https://github.com/claudio-planck)! - Consent purposes and grants ([#5275](https://github.com/working-theory-labs/ai-launch-kit-internal/issues/5275)): a site declares its consent purposes once, any form renders them as real checkboxes with inline policy links, and every answer produces a durable record carrying the exact wording the person read.
+
+  `@working-theory/validation` gains `consent-config.ts` — the per-site consent registry contract (`siteConsentConfigSchema`, `SITE_CONSENT_CONFIG_DEFAULTS`, `consentConfigFor`, `resolveConsentStatement`), following `SiteListingConfig`: a Zod-validated blob, platform defaults, and an unparseable blob that resolves to those defaults rather than to a failed form. A statement's links are markdown-shaped with a KEY target (`[Privacy Policy](privacy)`) resolved against the site's policy map, so a config string can never carry a URL or a scheme. `fieldInputTypeSchema` gains the `consent` kind, carrying `purposes: string[]` (ids only; `options`/`minLength` are refused on it). `projectListingStartSchema` keeps `consent: z.literal(true)` and gains an optional `consents: Record<purposeId, boolean>` and `locale`, so every existing caller (agent submission included) still parses. The listing application's contact step compiles its consent control as the `consent` kind (an optional `consentPurposes` list, defaulting to the platform's `service_terms`) instead of a `select` carrying one fake option.
+
+  `@working-theory/ui` gains two blocks: `ConsentStatement` (parses `[Label](key)` tokens; an unresolvable key renders as plain text, never a dead link; no code path renders an href taken from the statement string) and `ConsentGroup` (one `Checkbox` per purpose, every box unticked on first render, each named and described by its statement via `aria-labelledby`/`aria-describedby`, posting under a flat `<field>.<purposeId>` name). `ContactFormFields` accepts `type: "consent"`; `FlowStepper` gates advance on required purposes only and sends one `"true"`/`"false"` per purpose (a decline is a value, not an absent key); both take an optional `consentConfig` that defaults to the platform registry. `ListingApplicationFlow` now sends the founder's real grants (`consents` + `locale`) instead of a hardcoded `consent: true`.
+
+  `@working-theory/database` gains the append-only `ConsentGrant` model (`consent_grants`): subject as a type + id pair of plain scalars (no cross-namespace relation), declines stored as `granted: false`, the resolved statement denormalized with its hash and served locale, no `updatedAt` and no unique constraint on subject + purpose. The migration backfills one row per pre-existing listing marked wording-unrecoverable, stamped at the listing's own `consent_at`, and never touches `project_listings`.
+
+  Additive: a flow, form, or site declaring no consent config renders and parses exactly as before. The one deliberate behavior change is the listing application's consent control.
+
+- [#5294](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/pull/5294) [`cf6b325`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/cf6b325298e92d22ab7edfe8538f5ca17f54ebfd) Thanks [@claudio-planck](https://github.com/claudio-planck)! - The founder application becomes data ([#5285](https://github.com/working-theory-labs/ai-launch-kit-internal/issues/5285)): a published field contract, questions and screens as records, and override by exception.
+
+  `@working-theory/validation` gains `listing-application-contract.ts` — the fields the platform actually READS, each with the call site that reads it, which of them a published listing cannot do without, and the control a question writing one must declare. Two beliefs the design carried did not survive that grounding and are recorded in the module header: there is no `FAQPage` emission for a listing in this tree, and no resume-link email. `listing-application.ts` gains the question record (an id, a control, copy, options, validation, and either a `writesTo` naming a contract field or a `siteAnswer` destination carrying a visibility flag), the screen record (its own copy, an ordered list of question ids, and its own side-panel declaration), merge-by-id so a site rewording one question inherits every other default including ones added later, and a parse-time invariant: exactly one question writes each required contract field, with zero and two both named failures. The compiler emits ONE step per screen carrying every field its questions contribute — the generalization of the `contact` and `faqs` cases, not a third mechanism. `listing-application-defaults.ts` ships a complete default question set and a grouped arrangement following combine-selection, separate-composition; it deliberately reverses the ships-no-copy discipline and says why.
+
+  `@working-theory/ui` reaches two capabilities that already existed and were thrown away in one line. `ListingApplicationFlow` returned the live tile unconditionally on every step, ignoring the view `FlowStepper` handed it; a screen declares its own side panel now, and a screen declaring none renders a full-width question with `FlowFrame`'s side region collapsed. `FlowFrame` gains a side cell with the same padding, measure and centring the active cell's step card has, so side content no longer hand-rolls its own inset, and its side region gains `md:flex-1` — without it the region carried `md:w-1/2` against an active region carrying `flex-1`, so a caller's gap came out of the question column alone. `FlowStepper` measures the step card and sizes the side cell to the tallest card observed, never shrinking, capped at the VISIBLE slot height rather than the frame's declared `h-dvh` — a page mounting the frame below a header makes it taller than the viewport.
+
+  `@working-theory/database` gains the bounded site-answers store on `ProjectListing`, and the logo columns become writable from the application.
+
+  Additive, with two boundaries stated precisely. The flat `steps` config parses and compiles to the byte-identical `FlowConfig` — verified old-against-new on a fifteen-step config exercising every step kind — and `steps` is now optional, with a config declaring both shapes, or declaring `steps` as an explicit `undefined`, a named parse failure. What is NOT unchanged is the rendered frame: the side-cell container, the shared gap and the measured panel height are fixes to `FlowFrame` and `FlowStepper`, so they reach every consumer of those two components by design, not only the listing application.
+
+  A site that overrides one question's copy and declares no `screens` inherits every other default and renders new defaults added later. A site that declares its own `screens` inherits new defaults into its question set but does not render them — declared screens are that site's statement of what it asks, and inserting a screen into a live form is not something an upstream release should do. A new default that writes a REQUIRED contract field still fails that site's config at parse, by name.
+
+  The three fields the application gained — the two logo URLs and the requested window — are OPT-IN: they are excluded from the default collected-field mask, so adding them cannot widen what an anonymous caller may write on a site that never asked for them. A site that wants them names them.
+
+- [#5298](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/pull/5298) [`57b0b04`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/57b0b047eb3f04d40f0712a893c89415b742c7f5) Thanks [@claudio-planck](https://github.com/claudio-planck)! - A verified owner link on a listing ([#5295](https://github.com/working-theory-labs/ai-launch-kit-internal/issues/5295)): a founder who signs in can read their own submitted listings, and nobody else's.
+
+  `@working-theory/database` gains `ProjectListing.ownerUserId` / `ownerLinkedAt` — plain nullable scalars with no cross-namespace relation, exactly the shape `Lead.promotedUserId` / `promotedAt` already has (ADR 0009 invariant [#1](https://github.com/working-theory-labs/ai-launch-kit-internal/issues/1)). A listing carried `founderEmail` and `leadId` and no user link, so the only join available for "the listings belonging to this signed-in person" was a session's email against `founderEmail`. That string is typed into an anonymous form and proves nothing: two people who type the same address are two people, and the join hands one of them the other's submission. These columns are the ownership claim a read may actually join on.
+
+  The link is stamped only when all three of these hold: the reconciling user's own email is VERIFIED; that verified address matches the row's `founderEmail`; and the row's site resolves to one of that user's own tenant workspaces. Any one failing writes nothing and returns a count rather than throwing — the reconciliation path would otherwise fail an unrelated request. The email comparison is exact equality against the same normalization the write path applies, deliberately not Prisma's `mode: "insensitive"`, which compiles to `ILIKE` and would make `_` and `%` in the caller's own address wildcards that capture a neighbour's row.
+
+  A fourth condition has no counterpart in the lead service: the match must be UNAMBIGUOUS. Two strangers can type the same address into the anonymous form, and when they do nothing says which of the two un-linked rows is whose — so a row is claimed only when it is the only un-linked row carrying that address at its site, and an ambiguous group stays null. The cost is a founder who legitimately submitted two applications at one site, which the concurrent limit allows: neither is linked. That is the deliberate trade, because nothing in the data separates their second application from a stranger's first. The write also repeats `ownerUserId: null`, making it a compare-and-swap, so two concurrent reconciliation runs cannot transfer a row away from whoever claimed it first.
+
+  Candidacy is also restricted to submitted rows — every stored status except `draft`. A draft is addressed by its resume token, which is cleared at submit, so the token and the owner link hand off to each other cleanly and a draft needs no link. It is also a security boundary: draft creation is anonymous with the quota enforced at submit, so a claimable draft would let one unauthenticated request either disclose a stranger's text or, under the ambiguity refusal, permanently block someone from claiming their own listing.
+
+  `@working-theory/validation` gains `projectListingMeResponseSchema` — an array of the existing founder-facing `projectListingDraftSchema`, reused rather than forked because the audience is the same person that shape already serves. Nothing existing changes.
+
+  No existing row is backfilled, now or later. Every row predates verification, so deriving a link from `founderEmail` would assert the thing nobody proved. A listing submitted by someone who never signs in stays null for the life of the row, which is a legitimate resting state rather than a backlog.
+
+  Additive throughout. Both columns are nullable with no default; the new schema export is new; the operator's `owner|admin` floor on the existing tenant-scoped listing routes is unchanged, and the founder reads their own rows through the owner link rather than through a relaxed floor.
+
+- [#5283](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/pull/5283) [`a713ea7`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/a713ea78c12c1dc2519b80831deed197a4f227b4) Thanks [@claudio-planck](https://github.com/claudio-planck)! - A structured `address` field type in the flow vocabulary, and structured address storage for listings ([#5279](https://github.com/working-theory-labs/ai-launch-kit-internal/issues/5279)).
+
+  `AddressFieldset` has shipped since [#4395](https://github.com/working-theory-labs/ai-launch-kit-internal/issues/4395) and `StepFlow` has rendered it ever since, but `fieldInputTypeSchema` exposed six input types and `address` was not one of them — so a flow config could not name the composite, and the founder application collected a whole published business address in a single free-text box capped at 300 characters.
+
+  `fieldInputTypeSchema` gains `"address"`. The two cross-field rules already beneath that enum cover the new member without a new clause: `options` is select-only and `minLength` is text/textarea-only, so an address field declaring either is a named parse failure rather than a silently discarded setting. `flowAddressValueSchema` and `composeAddressLine` are new exports — the first declares the six-part value an address field submits, the second composes the single-line display string from those parts. There is deliberately no function that runs the conversion the other way.
+
+  `FlowStepper` reads, validates, gates, seeds and submits the composite against the six fixed keys `AddressFieldset` posts under, which is the handling `StepFlow` has carried since [#4395](https://github.com/working-theory-labs/ai-launch-kit-internal/issues/4395). Required means every required sub-control has a value rather than that a key named `address` is non-empty. `ContactFormFields` already rendered the type and is unchanged, as are `AddressFieldset` and `ADDRESS_COUNTRIES`.
+
+  `ProjectListing` keeps `address` as the single-line display string and gains six nullable columns for the parts beside it. A new application composes its display string from the parts, server-side. An existing row keeps its display string exactly as the founder typed it and its parts stay null — no stored address is ever parsed, split, or rewritten, and the migration does not backfill.
+
+  Every change is additive: a flow config that declares no address field parses, renders and submits exactly as it did before, and a listing carrying only the legacy free-text address reads unchanged.
+
+### Patch Changes
+
+- Updated dependencies [[`49e6ba4`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/49e6ba470a0ff4a0e6d4f7d14147232e90a12259), [`cf6b325`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/cf6b325298e92d22ab7edfe8538f5ca17f54ebfd), [`767a35c`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/767a35ca83155f774667ea3f7a10eb0ce1c094ab), [`57b0b04`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/57b0b047eb3f04d40f0712a893c89415b742c7f5), [`65989b4`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/65989b4dc6915bf37608475ed6409f98cd5945e2), [`a713ea7`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/a713ea78c12c1dc2519b80831deed197a4f227b4)]:
+  - @working-theory/validation@0.20.0
+
 ## 0.19.0
 
 ### Minor Changes