create-ailk 0.10.0 → 0.11.0

package/README.md

@@ -275,8 +275,13 @@ gate runs before anything is copied (`scaffold()` in `src/programmatic.ts`), so
 a refused run leaves no partial scaffold behind.
 
 `AILK_MODULE_REGISTRY_URL` is optional: `fetchModule` uses an explicitly passed
-`registryUrl`, then that variable, then the built-in
-`DEFAULT_AILK_MODULE_REGISTRY_URL` (`src/lib/fetch-module.ts`).
+`registryUrl`, then that variable, then `https://api.ailaunchkit.ai/v1/modules`
+(`DEFAULT_AILK_MODULE_REGISTRY_URL`, `src/lib/fetch-module.ts`).
+`AILK_TEMPLATE_REGISTRY_URL` is optional the same way: `fetchTemplate` uses an
+explicitly passed `registryUrl`, then that variable, then
+`https://api.ailaunchkit.ai/v1/templates` (`DEFAULT_AILK_TEMPLATE_REGISTRY_URL`,
+`src/lib/fetch-template.ts`). Neither client follows a redirect: a 3xx from
+either registry fails the fetch before any second request is sent.
 
 ```bash
 # free-only — no key read, no network call

package/dist/cli.js

@@ -46,7 +46,7 @@ import { buildScaffoldMarkers } from "./copy.js";
 import { assertReleased } from "./lib/module-license-gate.js";
 import { FREE_PREREQUISITES_NOTE, LICENSED_PREREQUISITES_NOTE, isLicensedInstall, proCallout, } from "./lib/pro-callout.js";
 import { LICENSE_SET_HELP, runLicenseSet } from "./license-set.js";
-import { helpText, parseCliArgs, parseModules, resolveCliShape, toScaffoldOptions, } from "./parse-args.js";
+import { PLUGIN_INSTALL_LINES, helpText, parseCliArgs, parseModules, resolveCliShape, toScaffoldOptions, } from "./parse-args.js";
 import { addModule, formatSurfaceDrift, scaffold, syncArchitectureSync, syncCatalogSync, syncClaudeMdSync, syncRoutesSync, } from "./programmatic.js";
 import { CORE_SURFACE_PATHS, SURFACE_ALIASES } from "./surfaces.js";
 import { SYNC_ROUTES_HELP, formatSyncRoutesReport, parseSyncRoutesArgs, } from "./sync-routes.js";
@@ -381,6 +381,10 @@ async function main() {
     lines.push("Open http://localhost:3000 to see the home page.");
     lines.push("Adding auth, saved flows, checkout or database-backed content later? README.md \u00a7 \"When you need a database\" has the one-command setup.");
     lines.push("");
+    lines.push("Claude Code: the AI Launch Kit skills come from the ailk plugin. Trust this folder and Claude Code loads it, or run in a session:");
+    for (const line of PLUGIN_INSTALL_LINES)
+        lines.push(`  ${line}`);
+    lines.push("");
     lines.push(`Route surfaces: ${CORE_SURFACE_PATHS.join(", ")}` +
         (surfaces.length > 0 ? ` + ${surfaces.join(", ")}` : ""));
     lines.push("Add another with `create-ailk add-route <id>`, or re-run with --surfaces <id>.");

package/dist/content-payloads.d.ts

@@ -0,0 +1,37 @@
+/** The issuer's content kinds (spec 7110 § R1), pinned equal to CONTENT_KINDS by the issuer's test. */
+export declare const CONTENT_PAYLOAD_KINDS: readonly ["skill", "profile", "template-set", "instructions"];
+export type ContentPayloadKind = (typeof CONTENT_PAYLOAD_KINDS)[number];
+export interface ContentPayload {
+    readonly kind: ContentPayloadKind;
+    /** ^[a-z0-9][a-z0-9-]*$ — the route's :name and the store's path segment. */
+    readonly name: string;
+    /** The ONE paid feature the issuer's CONTENT_FEATURES row maps this name to. */
+    readonly feature: string;
+    /** SemVer — the content version, never create-ailk's (spec 7131 § D1). */
+    readonly version: string;
+    /**
+     * 64-hex `contentDigest` of `files` at `version` (§ D5). A change to any
+     * payload byte needs a new `version` AND a new `digest`; the build refuses
+     * until this agrees with the tree.
+     */
+    readonly digest: string;
+    /** Repo-relative, POSIX; each file's source is `${sourceRoot}/${file}`. */
+    readonly sourceRoot: string;
+    /** Archive paths, POSIX, relative, sorted, unique — listed, never globbed. */
+    readonly files: readonly string[];
+}
+export declare const CONTENT_PAYLOADS: readonly ContentPayload[];
+/** The producer-side cap on one payload's archive (spec 7131 § D6). */
+export declare const MAX_CONTENT_PAYLOAD_BYTES: number;
+/** The keyed route's public base; `AILK_CONTENT_REGISTRY_URL` overrides it. */
+export declare const DEFAULT_AILK_CONTENT_REGISTRY_URL = "https://api.ailaunchkit.ai/v1/content";
+/**
+ * sha256 over the sorted `${path}\0${sha256hex(bytes)}\n` lines (§ D5).
+ * Covers archive paths and file bytes, never the archive's own bytes — gzip
+ * and tar headers differ between machines and must not decide whether the
+ * content changed.
+ */
+export declare function contentDigest(files: ReadonlyArray<{
+    path: string;
+    bytes: Uint8Array;
+}>): string;

package/dist/content-payloads.js

@@ -0,0 +1,64 @@
+/**
+ * The content-payload manifest (spec 7131 § D2): every licence-gated content
+ * payload the issuer's keyed route `GET /v1/content/:kind/:name/:version`
+ * serves (spec 7110) — its kind, name, feature, content version, content
+ * digest and source files. The ONE place the builder
+ * (`scripts/build-content-payloads.mjs`), its `--verify` leg and the issuer's
+ * `CONTENT_FEATURES` agreement test read.
+ *
+ * A build-time registry, not programmatic API: deliberately not exported from
+ * `src/index.ts`. It carries names, a feature, a version and a digest — never
+ * a payload byte — so the public tarball's `dist/content-payloads.js` ships no
+ * paid content (spec 7131 § 7, AC-SPB-05).
+ *
+ * create-ailk is `oss`-tier and cannot import the issuer or the licence
+ * manifest, so the kind list is a pinned COPY of the issuer's `CONTENT_KINDS`
+ * and `feature` is a plain string; the issuer's `module-features.test.ts`
+ * fails when either drifts.
+ */
+import { createHash } from "node:crypto";
+/** The issuer's content kinds (spec 7110 § R1), pinned equal to CONTENT_KINDS by the issuer's test. */
+export const CONTENT_PAYLOAD_KINDS = [
+    "skill",
+    "profile",
+    "template-set",
+    "instructions",
+];
+export const CONTENT_PAYLOADS = Object.freeze([
+    Object.freeze({
+        kind: "template-set",
+        name: "scaffold-commerce",
+        feature: "commerce",
+        version: "1.0.0",
+        digest: "baa4ac6e86ec7e3b367eb67e77c3407da90c7ff9ef51d5f4e1185615194543ee",
+        sourceRoot: "packages/create-ailk/module-templates/commerce/.claude/skills/scaffold-commerce",
+        files: Object.freeze([
+            "references/lookup-keys-template.md",
+            "references/marketplace-brand-pages.md",
+            "templates/checkout-route.template.ts",
+            "templates/invoice-route.template.ts",
+            "templates/marketplace-cta-route.tsx.tmpl",
+            "templates/payment-link-route.template.ts",
+            "templates/portal-route.template.ts",
+            "templates/stripe-config.template.ts",
+            "templates/subscription-route.template.ts",
+        ]),
+    }),
+]);
+/** The producer-side cap on one payload's archive (spec 7131 § D6). */
+export const MAX_CONTENT_PAYLOAD_BYTES = 256 * 1024;
+/** The keyed route's public base; `AILK_CONTENT_REGISTRY_URL` overrides it. */
+export const DEFAULT_AILK_CONTENT_REGISTRY_URL = "https://api.ailaunchkit.ai/v1/content";
+const sha256Hex = (bytes) => createHash("sha256").update(bytes).digest("hex");
+/**
+ * sha256 over the sorted `${path}\0${sha256hex(bytes)}\n` lines (§ D5).
+ * Covers archive paths and file bytes, never the archive's own bytes — gzip
+ * and tar headers differ between machines and must not decide whether the
+ * content changed.
+ */
+export function contentDigest(files) {
+    const lines = files
+        .map(({ path, bytes }) => `${path}\0${sha256Hex(bytes)}\n`)
+        .sort((a, b) => (a < b ? -1 : a > b ? 1 : 0));
+    return sha256Hex(lines.join(""));
+}

package/dist/lib/fetch-module.d.ts

@@ -1,4 +1,4 @@
-export declare const DEFAULT_AILK_MODULE_REGISTRY_URL = "https://ailaunchkit.ai/api/modules";
+export declare const DEFAULT_AILK_MODULE_REGISTRY_URL = "https://api.ailaunchkit.ai/v1/modules";
 export interface FetchModuleOptions {
     moduleName: string;
     /** JWT used as `Authorization: Bearer <token>`. Must be non-empty. */
@@ -11,10 +11,10 @@ export interface FetchModuleOptions {
     fetchImpl?: typeof fetch;
 }
 export declare class FetchModuleError extends Error {
-    /** True iff the failure was a license-gating signal (HTTP 401). */
+    /** True iff the failure was a license-gating signal (HTTP 401 or 403). */
     readonly isLicenseError: boolean;
     constructor(message: string, 
-    /** True iff the failure was a license-gating signal (HTTP 401). */
+    /** True iff the failure was a license-gating signal (HTTP 401 or 403). */
     isLicenseError?: boolean);
 }
 export declare function fetchModule(options: FetchModuleOptions): Promise<Uint8Array>;

package/dist/lib/fetch-module.js

@@ -9,8 +9,14 @@
  *     distribution only.
  *   - Empty-token guard before any network call (defense in depth — the
  *     caller should already have gated on an empty/absent key).
- *   - Status-code mapping: 401 → license invalid/revoked/lapsed, 404 →
- *     module content not yet available, other 4xx/5xx → upstream body.
+ *   - Status-code mapping: 401 → license invalid/revoked/lapsed, 403 →
+ *     not included / term ended, 404 → included, but that release's bundle
+ *     not yet uploaded, other 4xx/5xx → upstream body. The issuer answers
+ *     403 before 404 (spec 7110 § D4), so a 404 reaches only a key that
+ *     holds the module's feature.
+ *   - Default registry: the product API gateway (`api.ailaunchkit.ai`, routed
+ *     to the licence issuer's `/v1/modules`); `AILK_MODULE_REGISTRY_URL`
+ *     overrides it.
  *
  * Deliberately DOES NOT depend on `@working-theory/license` or
  * `@working-theory/cli` — both are `publishConfig.access: "restricted"` and
@@ -37,7 +43,7 @@
  */
 import pkg from "../../package.json" with { type: "json" };
 import { assertContentLengthWithinLimit, assertHttpsRegistryUrl, fetchTimeoutSignal, } from "./fetch-guard.js";
-export const DEFAULT_AILK_MODULE_REGISTRY_URL = "https://ailaunchkit.ai/api/modules";
+export const DEFAULT_AILK_MODULE_REGISTRY_URL = "https://api.ailaunchkit.ai/v1/modules";
 /**
  * This package's own `package.json` `"version"`. Deliberately a static JSON
  * import (`resolveJsonModule`), not `import.meta.url` + `fileURLToPath` (the
@@ -53,7 +59,7 @@ const CREATE_AILK_VERSION = pkg.version;
 export class FetchModuleError extends Error {
     isLicenseError;
     constructor(message, 
-    /** True iff the failure was a license-gating signal (HTTP 401). */
+    /** True iff the failure was a license-gating signal (HTTP 401 or 403). */
     isLicenseError = false) {
         super(message);
         this.isLicenseError = isLicenseError;
@@ -108,7 +114,7 @@ export async function fetchModule(options) {
         /* isLicenseError */ true);
     }
     if (response.status === 404) {
-        throw new FetchModuleError(`"${moduleName}" module content not yet available — ping us at hello@ailaunchkit.ai`);
+        throw new FetchModuleError(`"${moduleName}" module content not yet available for create-ailk ${version} — your licence includes it, but that release's bundle has not been uploaded yet; ping us at hello@ailaunchkit.ai`);
     }
     if (!response.ok) {
         const body = await safeReadBody(response);

package/dist/lib/fetch-template.d.ts

@@ -1,4 +1,4 @@
-export declare const DEFAULT_AILK_TEMPLATE_REGISTRY_URL = "https://ailaunchkit.ai/api/templates";
+export declare const DEFAULT_AILK_TEMPLATE_REGISTRY_URL = "https://api.ailaunchkit.ai/v1/templates";
 export interface FetchTemplateOptions {
     templateName: string;
     /** JWT used as `Authorization: Bearer <token>`. Must be non-empty. */

package/dist/lib/fetch-template.js

@@ -3,13 +3,16 @@
  * D1, § 6).
  *
  * The client half of `GET /v1/templates/:name/:version` (#5480's route),
- * reached publicly at `/api/templates/:path*`. Posture is
+ * reached at `https://api.ailaunchkit.ai/v1/templates/:name/:version` through
+ * the product API gateway. Posture is
  * `fetch-module.ts`'s, mirrored one-for-one rather than generalised into a
  * shared helper: bearer-JWT auth, `redirect: "error"` so a redirected
  * response cannot drop the bearer token onto an unintended host, an
  * empty-token guard before any network call, and the same status mapping —
  * 401 → licence invalid/revoked/lapsed, 403 → not included / term ended,
- * 404 → content not yet available, other non-2xx → the upstream body.
+ * 404 → included, but that release's bundle not yet uploaded, other non-2xx
+ * → the upstream body. The issuer answers 403 before 404 (spec 7110 § D4),
+ * so a 404 reaches only a key that holds the template's whole union.
  *
  * ONE word differs, and it is the whole reason this is a sibling rather
  * than a second call site of `fetchModule` (spec 5481 § 3 DD5): the 404
@@ -27,7 +30,7 @@
  */
 import pkg from "../../package.json" with { type: "json" };
 import { assertContentLengthWithinLimit, assertHttpsRegistryUrl, fetchTimeoutSignal, } from "./fetch-guard.js";
-export const DEFAULT_AILK_TEMPLATE_REGISTRY_URL = "https://ailaunchkit.ai/api/templates";
+export const DEFAULT_AILK_TEMPLATE_REGISTRY_URL = "https://api.ailaunchkit.ai/v1/templates";
 /**
  * This package's own `package.json` `"version"` — a static JSON import for
  * the reason `fetch-module.ts`'s `CREATE_AILK_VERSION` doc gives: `import.meta`
@@ -95,7 +98,7 @@ export async function fetchTemplate(options) {
         /* isLicenseError */ true);
     }
     if (response.status === 404) {
-        throw new FetchTemplateError(`"${templateName}" template content not yet available — ping us at hello@ailaunchkit.ai`);
+        throw new FetchTemplateError(`"${templateName}" template content not yet available for create-ailk ${version} — your licence includes it, but that release's bundle has not been uploaded yet; ping us at hello@ailaunchkit.ai`);
     }
     if (!response.ok) {
         const body = await safeReadBody(response);

package/dist/module-architecture.d.ts

@@ -212,6 +212,15 @@ export interface ModuleSlice {
      * leak class `scripts/check-oss-strip.sh` exists to catch (#5644).
      */
     installRoot?: string;
+    /**
+     * Paths this module's keyed content payloads occupy (src/content-payloads.ts):
+     * each payload file's monorepo source AND the scaffold path its skill's fetch
+     * writes it to. Never delivered — no build, extract or patch step reads this
+     * field. Declared so the paid-path leak guards, which derive from
+     * `ownedFiles`/`installMap`, still recognise a leaked copy after the files
+     * left `installMap` (#7133).
+     */
+    contentPayloadPaths?: string[];
     /**
      * Plain text `extractModuleBundle` prints to stdout after a successful
      * merge, with C0/C1 control characters (other than newline) stripped

package/dist/module-architecture.js

@@ -23,6 +23,7 @@
  */
 import { existsSync, readFileSync } from "node:fs";
 import { join, sep } from "node:path";
+import { CONTENT_PAYLOADS, } from "./content-payloads.js";
 import { importClosure } from "./lib/import-graph.js";
 import { PAID_MODULES } from "./lib/module-tier.js";
 import { RECOGNIZED_MODULES } from "./parse-args.js";
@@ -183,6 +184,21 @@ const ASSET_STORE_FILES = [
  * tools/lint-architecture.ts fails on (#6649).
  */
 const WEB_AUTH_ADAPTER_IMPORT = "database";
+/**
+ * A content payload's paths for `ModuleSlice.contentPayloadPaths` (#7133):
+ * each file's `${sourceRoot}/${file}` and the `${destRoot}/${file}` its
+ * skill's keyed fetch writes it to — read off `CONTENT_PAYLOADS`, never
+ * hand-listed, so the leak guards cannot drift from the manifest.
+ */
+function payloadPaths(kind, name, destRoot) {
+    const payload = CONTENT_PAYLOADS.find((p) => p.kind === kind && p.name === name);
+    if (!payload)
+        throw new Error(`no content payload ${kind}/${name}`);
+    return payload.files.flatMap((file) => [
+        `${payload.sourceRoot}/${file}`,
+        `${destRoot}/${file}`,
+    ]);
+}
 /**
  * The per-module slices. Authored for every `RECOGNIZED_MODULES` value; only
  * `marketing` (the default) is validated end-to-end against a golden.
@@ -1661,31 +1677,31 @@ export const MODULE_SLICES = {
         // it sits outside build-templates.mjs's SNAPSHOT_DIRS/overlay, so
         // ownedFiles/paidModuleTemplateExclusions cannot reach it) to
         // `module-templates/commerce/.claude/skills/scaffold-commerce/`, and
-        // delivered into a keyed scaffold by `installMap` instead. Eleven literal
+        // delivered into a keyed scaffold by `installMap` instead. Five literal
         // entries, not one directory entry: `extractModuleBundle`'s
         // `validateInstallMap` requires every source to be a FILE the bundle
         // produced (`extract-module-bundle.ts`'s `!sourceStat.isFile()` check) —
-        // a directory source is rejected outright.
+        // a directory source is rejected outright. The skill ships as steps only
+        // (#7133): its `templates/` and `references/` are the keyed content
+        // payload `template-set/scaffold-commerce` (src/content-payloads.ts),
+        // which `scripts/fetch-templates.ts` fetches with the site's licence key;
+        // `link/` carries byte copies of the link path's two files, which need no
+        // key.
         installMap: {
             "packages/create-ailk/module-templates/commerce/.claude/skills/scaffold-commerce/SKILL.md": ".claude/skills/scaffold-commerce/SKILL.md",
-            "packages/create-ailk/module-templates/commerce/.claude/skills/scaffold-commerce/references/lookup-keys-template.md": ".claude/skills/scaffold-commerce/references/lookup-keys-template.md",
-            "packages/create-ailk/module-templates/commerce/.claude/skills/scaffold-commerce/references/marketplace-brand-pages.md": ".claude/skills/scaffold-commerce/references/marketplace-brand-pages.md",
-            "packages/create-ailk/module-templates/commerce/.claude/skills/scaffold-commerce/templates/checkout-route.template.ts": ".claude/skills/scaffold-commerce/templates/checkout-route.template.ts",
-            "packages/create-ailk/module-templates/commerce/.claude/skills/scaffold-commerce/templates/invoice-route.template.ts": ".claude/skills/scaffold-commerce/templates/invoice-route.template.ts",
-            "packages/create-ailk/module-templates/commerce/.claude/skills/scaffold-commerce/templates/marketplace-cta-route.tsx.tmpl": ".claude/skills/scaffold-commerce/templates/marketplace-cta-route.tsx.tmpl",
-            "packages/create-ailk/module-templates/commerce/.claude/skills/scaffold-commerce/templates/payment-link-route.template.ts": ".claude/skills/scaffold-commerce/templates/payment-link-route.template.ts",
-            "packages/create-ailk/module-templates/commerce/.claude/skills/scaffold-commerce/templates/portal-route.template.ts": ".claude/skills/scaffold-commerce/templates/portal-route.template.ts",
-            "packages/create-ailk/module-templates/commerce/.claude/skills/scaffold-commerce/templates/stripe-config.template.ts": ".claude/skills/scaffold-commerce/templates/stripe-config.template.ts",
-            "packages/create-ailk/module-templates/commerce/.claude/skills/scaffold-commerce/templates/subscription-route.template.ts": ".claude/skills/scaffold-commerce/templates/subscription-route.template.ts",
+            "packages/create-ailk/module-templates/commerce/.claude/skills/scaffold-commerce/link/marketplace-brand-pages.md": ".claude/skills/scaffold-commerce/link/marketplace-brand-pages.md",
+            "packages/create-ailk/module-templates/commerce/.claude/skills/scaffold-commerce/link/marketplace-cta-route.tsx.tmpl": ".claude/skills/scaffold-commerce/link/marketplace-cta-route.tsx.tmpl",
+            "packages/create-ailk/module-templates/commerce/.claude/skills/scaffold-commerce/scripts/fetch-templates.ts": ".claude/skills/scaffold-commerce/scripts/fetch-templates.ts",
             "packages/create-ailk/module-templates/commerce/.claude/skills/scaffold-commerce/scripts/stripe-catalog.ts": ".claude/skills/scaffold-commerce/scripts/stripe-catalog.ts",
             // The commerce-boundary rule (#6039/#6070, this entry #6041): ships to
             // a commerce-keyed scaffold's project root so an agent working there
             // reads the money/live-mode/personal-data classification before it
-            // acts. One more literal entry alongside the eleven scaffold-commerce
+            // acts. One more literal entry alongside the five scaffold-commerce
             // skill entries above, for the same reason — a directory source is
             // rejected by `validateInstallMap`.
             "packages/create-ailk/module-templates/commerce/.claude/rules/commerce-boundary.md": ".claude/rules/commerce-boundary.md",
         },
+        contentPayloadPaths: payloadPaths("template-set", "scaffold-commerce", ".claude/skills/scaffold-commerce"),
         // patches (#5581 U5, D5) — delivers the extracted component package to a
         // keyed scaffold's apps/web, mirroring the workspace slice's identical
         // merge-keys op above.
@@ -1833,12 +1849,27 @@ export function coOwnedModuleDestinations() {
 //     see that entry, and sync-routes' AC-5 coverage test, which reads this
 //     list so the resulting ROUTE_SINCE-vs-template absence is justified
 //     rather than reported stale.
+//   - the three app-side suites of the API ↔ MCP parity guard (#7135, spec
+//     docs/specs/7135-an-api-mcp-parity-guard-spec.md D11) — file entries,
+//     matched exactly by `isExcludedTemplatePath`. Each imports the guard's
+//     core from the monorepo's root `tests/parity/api-parity/` by relative
+//     path, which a scaffold does not carry. A test that imports a slice file
+//     is a dependent, not an import-graph companion, so
+//     `paidModuleTemplateExclusions` never sweeps these along.
+//   - apps/mcp/__tests__/pro-tool-call-gate.test.ts (#7315, spec
+//     docs/specs/7315-a-gated-pro-tool-re-spec.md D4) — same reason as the
+//     three suites above: it imports `SITE_ARGS` from the monorepo's root
+//     `tests/parity/` tree, which no scaffold carries.
 export const EXCLUDE_TEMPLATE_DIRS = [
     "apps/web/__tests__",
     "apps/web/app/__tests__",
     "apps/web/app/[locale]/__tests__",
     "apps/web/app/[locale]/(authed)/edit",
     "apps/web/content",
+    "apps/api/src/__tests__/api-parity.test.ts",
+    "apps/api/src/__tests__/api-parity-paid.test.ts",
+    "apps/mcp/__tests__/api-parity.test.ts",
+    "apps/mcp/__tests__/pro-tool-call-gate.test.ts",
 ];
 export function paidModuleTemplateExclusions(snapshotRoots, repoRoot) {
     const roots = new Set(snapshotRoots);

package/dist/parse-args.d.ts

@@ -103,6 +103,8 @@ export interface ParseEnv {
     /** A human can answer a prompt: `process.stdin.isTTY === true` in cli.ts. */
     interactive: boolean;
 }
+/** The two lines that install the `ailk` plugin in a Claude Code session (#7298). */
+export declare const PLUGIN_INSTALL_LINES: readonly ["/plugin marketplace add working-theory-labs/claude-plugins", "/plugin install ailk@working-theory"];
 export declare const helpText: string;
 /**
  * Parse `create-ailk` argv. `env.interactive` defaults to false —

package/dist/parse-args.js

@@ -65,6 +65,11 @@ export class ParseError extends Error {
         this.name = "ParseError";
     }
 }
+/** The two lines that install the `ailk` plugin in a Claude Code session (#7298). */
+export const PLUGIN_INSTALL_LINES = [
+    "/plugin marketplace add working-theory-labs/claude-plugins",
+    "/plugin install ailk@working-theory",
+];
 export const helpText = `create-ailk — scaffold a new AI Launch Kit site.
 
 Usage:
@@ -166,6 +171,8 @@ Next steps after a successful scaffold:
   cd <target-dir>
   pnpm install
   pnpm dev
+Then, in Claude Code, install the ailk plugin:
+${PLUGIN_INSTALL_LINES.map((line) => `  ${line}`).join("\n")}
 
 Reference: ADR 0007 — \`pnpm create ailk@latest\` is the canonical install path.
 `;

package/dist/surfaces.js

@@ -20,8 +20,7 @@
  *
  * The default (`--modules marketing`) enables NO gateable surface: every one of
  * them is a claim about the business that the scaffolder cannot make. The path
- * from there is the `add-page` skill that already ships in
- * `templates/.claude/skills/`.
+ * from there is the `/ailk:add-page` skill in the `ailk` Claude Code plugin.
  *
  * Zero runtime dependencies — create-ailk is a published, standalone CLI.
  *
@@ -1047,7 +1046,7 @@ export function renderNavConfig(enabled, options) {
 // below it, the nav is yours and add-module reports the change it wanted
 // instead.
 //
-// Adding a link: scaffold the page (the \`add-page\` skill), then add an
+// Adding a link: scaffold the page (the \`/ailk:add-page\` skill), then add an
 // entry below with a \`labelKey\` that exists in the \`nav\` namespace of
 // \`apps/web/messages/<locale>.json\`. Paths are locale-agnostic — Nav prefixes
 // them with the active locale at render.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-ailk",
-  "version": "0.10.0",
+  "version": "0.11.0",
   "description": "Scaffolder for AI Launch Kit — `pnpm create ailk@latest <dir>` produces a starter repo consuming @working-theory/* from npm (per ADR 0007).",
   "type": "module",
   "main": "./dist/index.js",
@@ -27,8 +27,8 @@
     "tar": "^7.5.21"
   },
   "devDependencies": {
-    "@working-theory/schema": "0.29.0",
-    "@working-theory/templates": "0.29.0"
+    "@working-theory/schema": "0.30.0",
+    "@working-theory/templates": "0.30.0"
   },
   "repository": {
     "type": "git",

package/site-templates/marketing-site-free/TEMPLATE-MANIFEST.md

@@ -366,10 +366,11 @@ Every content route emits one `application/ld+json` script whose `@graph` carrie
 | Node                                                   | `@id`                                                                                         | Built from                                                                | Links                                                                                                                                                                                |
 | ------------------------------------------------------ | --------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
 | Identity (`Organization` · `Person` · `LocalBusiness`) | `<origin>/#organization` (`#person` for a Person)                                             | `siteIdentity` `name` · `url` · `logo`/`image` · `description` · `sameAs` | —                                                                                                                                                                                    |
+| Identity (`SoftwareApplication`)                       | `<origin>/#product`                                                                           | `siteIdentity` fields; `logo` emitted as `image`                          | `publisher` → the maker's own `@id` (`siteIdentity.publisher`), never a node here; takes no secondary                                                                                |
 | Secondary (optional)                                   | `<origin>/#product` (a `SoftwareApplication`) · `<origin>/#organization` (a Person's company) | `siteIdentity.secondary`                                                  | product `publisher` → `#organization`, `featureList` from the product page's (`/software/product`) feature items; a Person `worksFor` its company, which has the Person as `founder` |
-| `WebSite`                                              | `<origin>/#website`                                                                           | `siteName` · `baseUrl` · the render locale                                | `publisher` → the identity node                                                                                                                                                      |
+| `WebSite`                                              | `<origin>/#website`                                                                           | `siteName` · `baseUrl` · the render locale                                | `publisher` → the identity node (the maker, for a `SoftwareApplication` identity)                                                                                                    |
 
-Each page's primary node is `isPartOf` the `WebSite`; the home page's `mainEntity` is the secondary when declared, else the identity. A testimonials `Review` points its `itemReviewed` at the identity node, declared in the same graph. Free declares no secondary, so a fresh site emits the Organization and the WebSite. `/sign-in` emits no JSON-LD.
+Each page's primary node is `isPartOf` the `WebSite`; the home page's `mainEntity` is the secondary when declared, else the identity (`#product` for a `SoftwareApplication` identity, #7103). A testimonials `Review` points its `itemReviewed` at the identity node, declared in the same graph. Free declares no secondary, so a fresh site emits the Organization and the WebSite. `/sign-in` emits no JSON-LD.
 
 ## 2a. State and persistence (every interactive element)
 
@@ -466,7 +467,7 @@ reversed (`docs/decisions/starter-roster-page-set.md` D4, D7).
 
 ### 3b. Site entity (operator-disposed 2026-09-24)
 
-`derive-roster.py` names `SoftwareApplication` as the main entity for this template's inputs. The template deliberately declares the **Organization** as the site's primary node and the software as its **secondary** node (`siteIdentity.secondary`, kind `SoftwareApplication`, #6597): the Free template is a company's own site about its product, so the entity the site is _about_ is the maker. The inverse — `SoftwareApplication` primary — is for a product whose canonical site is elsewhere (Positionary, whose maker has its own site). A fresh Free scaffold declares no `secondary` until the owner names the product; the overlay `_site.mdx` documents the field.
+`derive-roster.py` names `SoftwareApplication` as the main entity for this template's inputs. The template deliberately declares the **Organization** as the site's primary node and the software as its **secondary** node (`siteIdentity.secondary`, kind `SoftwareApplication`, #6597): the Free template is a company's own site about its product, so the entity the site is _about_ is the maker. The inverse — `SoftwareApplication` primary — is for a product whose maker has its own site (Positionary): express it as `siteIdentity.kind: SoftwareApplication` with a required `publisher` naming the maker's stable `@id` on that site (e.g. `https://salessmyth.com/#organization`, #7103), so the product is `<origin>/#product` and the maker is a reference, never a second Organization node here. A fresh Free scaffold declares no `secondary` until the owner names the product; the overlay `_site.mdx` documents the field.
 
 ## 4. Component inventory (Free, by tier)
 

package/templates/.claude/settings.json

@@ -11,5 +11,17 @@
         ]
       }
     ]
+  },
+  "extraKnownMarketplaces": {
+    "working-theory": {
+      "source": {
+        "source": "github",
+        "repo": "working-theory-labs/claude-plugins"
+      },
+      "autoUpdate": true
+    }
+  },
+  "enabledPlugins": {
+    "ailk@working-theory": true
   }
 }

package/templates/.env.example

@@ -314,7 +314,7 @@ CONTENT_ADAPTER=mdx
 # AILK_LICENSE_KEY=
 # Override the daily refresh upstream (self-hosters point at their own server
 # implementing the @working-theory/validation refresh contract).
-# Default: https://ailaunchkit.ai/api/license/refresh
+# Default: https://api.ailaunchkit.ai/v1/licenses/refresh
 # AILK_LICENSE_REFRESH_URL=
 # Self-host override — replaces the bundled public key with a PEM-encoded one.
 # Only set this if you operate your own license-signing infrastructure.

package/templates/CLAUDE.md

@@ -21,7 +21,7 @@ apps/api/         Fastify HTTP API — lead capture, checkout, webhooks
 apps/mcp/         MCP server — agent-callable tools
 database/         Prisma schema + migrations
 content/          Site settings (_site.mdx) and MDX pages (en/<TypeName>/)
-.claude/          Rules, skills and agent definitions for Claude Code
+.claude/          Rules, the agent definition and settings for Claude Code
 tools/            This repo's own checks (architecture, CLAUDE.md drift)
 ```
 
@@ -67,7 +67,7 @@ your module set; `pnpm architecture` enforces it, and a hook in
 | Diff hygiene when editing existing files       | `.claude/rules/preserve-existing-style.md`                                                         |
 | Code style, testing, security                  | `CONVENTIONS.md`                                                                                   |
 | Environment variables and what they unlock     | `.env.example`                                                                                     |
-| Deploy configuration                           | `apps/api/vercel.json`; the `setup-deploy` skill                                                   |
+| Deploy configuration                           | `apps/api/vercel.json`; the `/ailk:setup-deploy` skill                                             |
 | Verification before push                       | `pnpm preflight` (see § Checks)                                                                    |
 
 <!-- /ailk:template id="resource-map" -->
@@ -76,18 +76,34 @@ your module set; `pnpm architecture` enforces it, and a hook in
 
 ## Skills
 
-In `.claude/skills/`; Claude Code finds them at session start.
+The AI Launch Kit skills come from the `ailk` Claude Code plugin, not from
+this repo. `.claude/settings.json` names its marketplace and enables it, so
+Claude Code loads it once you trust this folder. To install it by hand, run
+these two lines in a Claude Code session:
 
-| Skill            | Use when                                                          |
-| ---------------- | ----------------------------------------------------------------- |
-| `add-page`       | You need a new page, or extra JSON-LD on an existing one          |
-| `update-page`    | A page should live at a different URL, or needs a new title       |
-| `fill-page`      | A page still carries `{placeholder}` copy                         |
-| `check-site`     | You want the site's citation-readiness score and findings         |
-| `setup-database` | Leads should land in a database inbox at `/leads`                 |
-| `setup-deploy`   | You are ready to deploy to Vercel                                 |
-| `add-auth`       | Visitors need to sign in (email, Google, GitHub)                  |
-| `upgrade-plan`   | You are weighing Free against a paid level or the commerce add-on |
+```
+/plugin marketplace add working-theory-labs/claude-plugins
+/plugin install ailk@working-theory
+```
+
+| Skill                  | Use when                                                          |
+| ---------------------- | ----------------------------------------------------------------- |
+| `/ailk:add-page`       | You need a new page, or extra JSON-LD on an existing one          |
+| `/ailk:update-page`    | A page should live at a different URL, or needs a new title       |
+| `/ailk:fill-page`      | A page still carries `{placeholder}` copy                         |
+| `/ailk:check-site`     | You want the site's citation-readiness score and findings         |
+| `/ailk:setup-database` | Leads should land in a database inbox at `/leads`                 |
+| `/ailk:setup-deploy`   | You are ready to deploy to Vercel                                 |
+| `/ailk:add-auth`       | Visitors need to sign in (email, Google, GitHub)                  |
+| `/ailk:upgrade-plan`   | You are weighing Free against a paid level or the commerce add-on |
+
+A repo scaffolded by an earlier create-ailk also carries its own older
+copies of these skills. Once the plugin is installed, delete those copies;
+keep scaffold-commerce, which the commerce module delivers.
+
+For design work, the third-party impeccable plugin is optional:
+`/plugin marketplace add pbakaus/impeccable`, then
+`/plugin install impeccable@impeccable`.
 
 <!-- /ailk:template id="skills" -->
 
@@ -95,15 +111,15 @@ In `.claude/skills/`; Claude Code finds them at session start.
 
 ## Checks
 
-| Command                | Catches                                                  |
-| ---------------------- | -------------------------------------------------------- |
-| `pnpm preflight`       | The next four and `build`, not `test`. Run before a push |
-| `pnpm architecture`    | An import that crosses a boundary in `architecture.yaml` |
-| `pnpm claude-md:check` | A hand-edit inside a template-owned section of this file |
-| `pnpm type-check`      | Type errors in every workspace                           |
-| `pnpm lint`            | Lint errors in every workspace                           |
-| `pnpm test`            | Failing unit tests                                       |
-| `check-site` skill     | Missing or invalid JSON-LD, weak citation-readiness      |
+| Command                  | Catches                                                  |
+| ------------------------ | -------------------------------------------------------- |
+| `pnpm preflight`         | The next four and `build`, not `test`. Run before a push |
+| `pnpm architecture`      | An import that crosses a boundary in `architecture.yaml` |
+| `pnpm claude-md:check`   | A hand-edit inside a template-owned section of this file |
+| `pnpm type-check`        | Type errors in every workspace                           |
+| `pnpm lint`              | Lint errors in every workspace                           |
+| `pnpm test`              | Failing unit tests                                       |
+| `/ailk:check-site` skill | Missing or invalid JSON-LD, weak citation-readiness      |
 
 <!-- /ailk:template id="checks" -->