create-ailk 0.11.4 → 0.11.5

package/component-catalog.json

@@ -821,7 +821,7 @@
       "sourcePath": "packages/ui/src/blocks/AssetLightbox.tsx",
       "importPath": "@working-theory/ui/blocks",
       "exported": true,
-      "description": "The asset detail lightbox: the image with zoom on the stage, a Details rail with in-place pencil-edit Title and Description, then Filename/Type/Size/Dimensions/Created, then Tags (from the seeded set the caller passes), then Copy URL/Replace/Delete. Renders inside a ResponsiveSheet — the SAME field sequence in both its dialog and sheet forms (: one field array, walked once, shared by both forms).",
+      "description": "The asset detail lightbox: the image with zoom on the stage, a Details rail with in-place pencil-edit Title and Description, then Filename/Type/Size/Dimensions/Created, then Tags (from the seeded set the caller passes), then Copy link/Replace/Delete. Renders inside a ResponsiveSheet — the SAME field sequence in both layouts (: one field array, walked once, shared by both).",
       "descriptionSource": "doc-comment",
       "descriptionGrade": "strong",
       "sectionType": null

package/component-catalog.md

@@ -134,7 +134,7 @@ Import: `import { X } from "@working-theory/ui/blocks";` (or from the `@working-
 | `ArticlePager` | The footer prev/next pager. Given the previous and next destinations — docs pages in tree order, or blog posts in date order — renders two link tiles (a directional label + the destination title). Either side may be absent (first / last item) — the present side still anchors to its edge. Renders nothing when both sides are absent. | `import { ArticlePager } from "@working-theory/ui/blocks"` |
 | `AskAiCommandGroup` | The ⌘K palette's composable "Ask AI" group; one CommandItem per provider seeding "About <entity>: <query>" (or the entity promptText when the query is empty); composed by the consumer's own CommandDialog. | `import { AskAiCommandGroup } from "@working-theory/ui/blocks"` |
 | `AskAiProviderRow` | The ONE shared provider-link row every ask-AI placement composes — the AskAi section (band + ticker variant) and the Hero `askAi` opt-in all render THIS block, never a per-placement fork. Renders a bounded set of five measured providers, each a deep link seeded with an AUTHORED `promptText` — the prompt is always consumer-supplied data, never derived from page context (headline, entity name, etc.). | `import { AskAiProviderRow } from "@working-theory/ui/blocks"` |
-| `AssetLightbox` | The asset detail lightbox: the image with zoom on the stage, a Details rail with in-place pencil-edit Title and Description, then Filename/Type/Size/Dimensions/Created, then Tags (from the seeded set the caller passes), then Copy URL/Replace/Delete. Renders inside a ResponsiveSheet — the SAME field sequence in both its dialog and sheet forms (: one field array, walked once, shared by both forms). | `import { AssetLightbox } from "@working-theory/ui/blocks"` |
+| `AssetLightbox` | The asset detail lightbox: the image with zoom on the stage, a Details rail with in-place pencil-edit Title and Description, then Filename/Type/Size/Dimensions/Created, then Tags (from the seeded set the caller passes), then Copy link/Replace/Delete. Renders inside a ResponsiveSheet — the SAME field sequence in both layouts (: one field array, walked once, shared by both). | `import { AssetLightbox } from "@working-theory/ui/blocks"` |
 | `AuthCard` | Multi-flow auth card: sign-in, sign-up, invitation, forgot, reset and sent, from one skeleton. One self-contained card renders every auth surface a site needs: signing in, signing up, a closed sign-up that requires an invitation, requesting a password reset, choosing a new password, and the check-your-email state that follows a magic link or a reset request. | `import { AuthCard } from "@working-theory/ui/blocks"` |
 | `AwardBadgePlaceholder` | The labeled placeholder an Awards badge slot renders when no image has been supplied — mirrors MediaPlaceholder's role but in an award-chevron/ laurel badge silhouette rather than a generic photo frame, since an unfilled award slot should read as "an award badge goes here," not "a photo goes here." The shape (a laurel-flanked medallion over a chevron ribbon) is a hand-drawn SVG outline — never a copied G2/Capterra/Apollo asset. | internal — compose from `packages/ui/src/blocks/AwardBadgePlaceholder.tsx` |
 | `BackgroundPattern` | Decorative SVG dot-grid / line pattern for ContactForm section. Decorative block (generalized beyond its original single consumer). Renders an absolutely-positioned decoration behind a section's content. Originally the pattern anchored behind ContactForm's form column; SpotlightPanel composes it as a full-bleed section backdrop (dimmed + blurred, behind a centered card) — same block, a second placement. | `import { BackgroundPattern } from "@working-theory/ui/blocks"` |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-ailk",
-  "version": "0.11.4",
+  "version": "0.11.5",
   "description": "Scaffolder for AI Launch Kit — `pnpm create ailk@latest <dir>` produces a starter repo consuming @working-theory/* from npm (per ADR 0007).",
   "type": "module",
   "main": "./dist/index.js",
@@ -27,8 +27,8 @@
     "tar": "^7.5.21"
   },
   "devDependencies": {
-    "@working-theory/schema": "0.32.0",
-    "@working-theory/templates": "0.32.0"
+    "@working-theory/schema": "0.33.0",
+    "@working-theory/templates": "0.33.0"
   },
   "repository": {
     "type": "git",

package/templates/apps/api/src/__tests__/content-write-production-boot.test.ts

@@ -0,0 +1,104 @@
+/**
+ * @file content-write-production-boot.test.ts
+ * @description A production build with `content-write` enabled boots without
+ * pino-pretty (#7502).
+ *
+ * `services/revalidation.ts` is loaded only by the content-write routes, and it
+ * used to build its logger with `createLogger({ service })` alone. The
+ * observability package read a missing `environment` as development and asked
+ * pino for a `pino-pretty` transport, which a production install does not carry:
+ * pino threw `unable to determine transport target for "pino-pretty"` at module
+ * load, `build()` rejected, and every route — `/health` included — answered 500.
+ *
+ * "Without pino-pretty installed" is simulated at the pino boundary: the mock
+ * below throws pino's own error whenever a `pino-pretty` transport is requested,
+ * and passes every other call through to the real pino. pino is mocked by its
+ * resolved path because `apps/api` does not depend on it directly — only
+ * `@working-theory/observability` does.
+ *
+ * Mirrors `module-exclusion.test.ts`'s external-boundary mocks (CORS,
+ * rate-limit, email).
+ */
+
+import type { FastifyInstance } from "fastify";
+
+jest.mock(
+  require.resolve("pino", {
+    paths: [`${__dirname}/../../../../packages/observability`],
+  }),
+  () => {
+    const realPino = jest.requireActual(
+      require.resolve("pino", {
+        paths: [`${__dirname}/../../../../packages/observability`],
+      }),
+    );
+    const withoutPinoPretty = (
+      options?: { transport?: { target?: string } },
+      ...rest: unknown[]
+    ) => {
+      if (options?.transport?.target === "pino-pretty") {
+        throw new Error(
+          'unable to determine transport target for "pino-pretty"',
+        );
+      }
+      return realPino(options, ...rest);
+    };
+    // pino exports itself as `default` and as `pino` too; both are replaced.
+    return Object.assign(withoutPinoPretty, realPino, {
+      default: withoutPinoPretty,
+      pino: withoutPinoPretty,
+    });
+  },
+);
+
+jest.mock("@fastify/cors", () => {
+  return jest.fn().mockResolvedValue(undefined);
+});
+
+jest.mock("@fastify/rate-limit", () => {
+  return jest.fn().mockResolvedValue(undefined);
+});
+
+jest.mock("@working-theory/email", () => ({
+  sendLeadNotification: jest.fn().mockResolvedValue({ ok: true }),
+}));
+
+describe("production boot with content-write enabled (#7502)", () => {
+  const prior = {
+    NODE_ENV: process.env.NODE_ENV,
+    AILK_ENABLED_MODULES: process.env.AILK_ENABLED_MODULES,
+  };
+  let app: FastifyInstance;
+
+  beforeAll(async () => {
+    process.env.NODE_ENV = "production";
+    // content-write registers only alongside a tenancy module (server.ts).
+    process.env.AILK_ENABLED_MODULES = "multi-tenant,content-write";
+    // The config and the observability singleton read NODE_ENV at import, so
+    // the server is loaded only after the environment is set.
+    const { build } = await import("../server");
+    app = await build();
+  });
+
+  afterAll(async () => {
+    await app?.close();
+    for (const [key, value] of Object.entries(prior)) {
+      if (value === undefined) delete process.env[key];
+      else process.env[key] = value;
+    }
+  });
+
+  it("answers /health with 200", async () => {
+    const res = await app.inject({ method: "GET", url: "/health" });
+    expect(res.statusCode).toBe(200);
+  });
+
+  it("registers the content-write routes, so revalidation.ts was loaded", async () => {
+    // Registered and session-less: 401, where an unregistered route is a 404.
+    const res = await app.inject({
+      method: "POST",
+      url: "/v1/workspaces/wksp_00000000-0000-7000-8000-0000000000aa/content",
+    });
+    expect(res.statusCode).toBe(401);
+  });
+});

package/templates/apps/api/src/__tests__/root-modules.test.ts

@@ -0,0 +1,175 @@
+/**
+ * @file root-modules.test.ts
+ * @description `GET /` reports the optional modules this process registered
+ * routes for (#7501), so the Admin can hide what a build does not serve.
+ *
+ * Builds the REAL server under several `AILK_ENABLED_MODULES` values and reads
+ * the root index over `inject`. `modules` must agree with the route table
+ * Fastify actually registered — the content and meetings reads the Admin makes
+ * are present exactly when their module is listed.
+ *
+ * Mirrors `src/openapi/__tests__/surface-drift.test.ts`'s external-boundary
+ * mocks (CORS, rate-limit, email) — see that file's header for why each is
+ * mocked.
+ */
+
+jest.mock("@fastify/cors", () => {
+  return jest.fn().mockResolvedValue(undefined);
+});
+
+jest.mock("@fastify/rate-limit", () => {
+  return jest.fn().mockResolvedValue(undefined);
+});
+
+jest.mock("@working-theory/email", () => ({
+  sendLeadNotification: jest.fn().mockResolvedValue({ ok: true }),
+}));
+
+import { execFileSync } from "node:child_process";
+import path from "node:path";
+import { build } from "../server";
+import { readRegisteredRoutes } from "../openapi/spec";
+import { routeKey } from "../openapi/surface-drift";
+
+const CONTENT_READ = routeKey("GET", "/v1/workspaces/:workspaceId/content");
+const MEETINGS_READ = routeKey("GET", "/v1/workspaces/:workspaceId/meetings");
+
+/** Every route the Admin reads under `multi-tenant` alone (spec §1 fact 4). */
+const ADMIN_MULTI_TENANT_READS = [
+  routeKey("GET", "/v1/workspaces"),
+  routeKey("GET", "/v1/billing"),
+  routeKey("GET", "/v1/project-listings"),
+  routeKey("GET", "/v1/workspaces/:workspaceId/messages"),
+  routeKey("GET", "/v1/workspaces/:workspaceId/magnets"),
+  routeKey("GET", "/v1/workspaces/:workspaceId/assets"),
+  routeKey("GET", "/v1/workspaces/:workspaceId/sessions"),
+  routeKey("GET", "/v1/sessions/:sessionId/artifacts"),
+];
+
+const CONFIGS: Array<[string, string | undefined, string[]]> = [
+  ["unset", undefined, []],
+  ["multi-tenant", "multi-tenant", ["multi-tenant"]],
+  [
+    "scheduling, content-write,multi-tenant",
+    "scheduling, content-write,multi-tenant",
+    ["content-write", "multi-tenant", "scheduling"],
+  ],
+  ["content-write alone", "content-write", []],
+  [
+    "multi-tenant,bogus,signal-collectors",
+    "multi-tenant,bogus,signal-collectors",
+    ["multi-tenant", "signal-collectors"],
+  ],
+  // `docs` registers no apps/api route, so it is never reported as served.
+  ["docs,multi-tenant", "docs,multi-tenant", ["multi-tenant"]],
+];
+
+function setEnv(value: string | undefined): string | undefined {
+  const prior = process.env.AILK_ENABLED_MODULES;
+  if (value === undefined) {
+    delete process.env.AILK_ENABLED_MODULES;
+  } else {
+    process.env.AILK_ENABLED_MODULES = value;
+  }
+  return prior;
+}
+
+describe("GET / modules (#7501)", () => {
+  let prior: string | undefined;
+
+  beforeEach(() => {
+    prior = process.env.AILK_ENABLED_MODULES;
+  });
+
+  afterEach(() => {
+    setEnv(prior);
+  });
+
+  describe.each(CONFIGS)("AILK_ENABLED_MODULES = %s", (_label, env, expected) => {
+    let modules: unknown;
+    let routes: Set<string>;
+
+    beforeAll(async () => {
+      const before = setEnv(env);
+      try {
+        const app = await build();
+        await app.ready();
+        const res = await app.inject({ method: "GET", url: "/" });
+        routes = new Set(
+          readRegisteredRoutes(app).map((r) => routeKey(r.method, r.url)),
+        );
+        await app.close();
+        expect(res.statusCode).toBe(200);
+        modules = JSON.parse(res.body).modules;
+      } finally {
+        setEnv(before);
+      }
+    }, 60000);
+
+    it("AC-1: lists exactly the served optional modules, sorted", () => {
+      expect(modules).toEqual(expected);
+    });
+
+    it("AC-2: content-write is listed exactly when the content read registered", () => {
+      expect((modules as string[]).includes("content-write")).toBe(
+        routes.has(CONTENT_READ),
+      );
+    });
+
+    it("AC-2: scheduling is listed exactly when the meetings read registered", () => {
+      expect((modules as string[]).includes("scheduling")).toBe(
+        routes.has(MEETINGS_READ),
+      );
+    });
+  });
+
+  it("AC-1: a built server keeps its module list after the env changes", async () => {
+    const before = setEnv("multi-tenant,content-write");
+    let app: Awaited<ReturnType<typeof build>>;
+    try {
+      app = await build();
+      await app.ready();
+    } finally {
+      setEnv(before);
+    }
+    process.env.AILK_ENABLED_MODULES = "";
+    try {
+      const res = await app.inject({ method: "GET", url: "/" });
+      expect(JSON.parse(res.body).modules).toEqual([
+        "content-write",
+        "multi-tenant",
+      ]);
+    } finally {
+      await app.close();
+    }
+  }, 60000);
+
+  it("AC-2: multi-tenant alone registers every route the Admin reads, bar content and meetings", async () => {
+    const before = setEnv("multi-tenant");
+    try {
+      const app = await build();
+      await app.ready();
+      const routes = new Set(
+        readRegisteredRoutes(app).map((r) => routeKey(r.method, r.url)),
+      );
+      await app.close();
+      for (const read of ADMIN_MULTI_TENANT_READS) {
+        expect(routes).toContain(read);
+      }
+      expect(routes).not.toContain(CONTENT_READ);
+      expect(routes).not.toContain(MEETINGS_READ);
+    } finally {
+      setEnv(before);
+    }
+  }, 60000);
+
+  it("AC-2: pnpm lint:slice-registration exits 0", () => {
+    const repoRoot = path.resolve(__dirname, "../../../..");
+    expect(() =>
+      execFileSync("pnpm", ["lint:slice-registration"], {
+        cwd: repoRoot,
+        stdio: "pipe",
+      }),
+    ).not.toThrow();
+  }, 120000);
+});

package/templates/apps/api/src/config/modules.ts

@@ -43,3 +43,41 @@ function enabledModules(): Set<string> {
 export function isModuleEnabled(moduleName: string): boolean {
   return enabledModules().has(moduleName);
 }
+
+/**
+ * The recognized optional-module keys, sorted — the vocabulary the root index
+ * may report (#7501). Filtering to this list is what keeps the anonymous
+ * `GET /` from echoing whatever text an operator typed into
+ * `AILK_ENABLED_MODULES`. `docs` is deliberately absent: no apps/api route
+ * registers under it, so reporting it would break "modules this process
+ * registered routes for".
+ */
+export const OPTIONAL_MODULES = [
+  "commerce",
+  "content-write",
+  "multi-tenant",
+  "scheduling",
+  "signal-collectors",
+  "workspace",
+] as const;
+
+/**
+ * The optional modules whose routes this process registers, sorted. Called
+ * once at build time by `server.ts`, so the answer matches what registered
+ * even if the env changes afterwards.
+ *
+ * `content-write` counts only alongside a tenancy module (`workspace` or
+ * `multi-tenant`) — the exact predicate `server.ts` registers the editor's
+ * content routes under. That gate stays a literal there (the
+ * slice-registration lint reads `isModuleEnabled("X")` guards by text), so the
+ * predicate is repeated here and `root-modules.test.ts` asserts they agree.
+ */
+export function servedModules(): string[] {
+  return OPTIONAL_MODULES.filter((name) => {
+    if (!isModuleEnabled(name)) return false;
+    if (name === "content-write") {
+      return isModuleEnabled("workspace") || isModuleEnabled("multi-tenant");
+    }
+    return true;
+  });
+}

package/templates/apps/api/src/server.ts

@@ -21,7 +21,7 @@ import type {
 } from "fastify";
 
 import { config } from "./config/index.js";
-import { isModuleEnabled } from "./config/modules.js";
+import { isModuleEnabled, servedModules } from "./config/modules.js";
 import { registerErrorSerializer } from "./lib/error-serializer.js";
 import { validateLeadCaptureDir } from "./lib/lead-capture-store.js";
 import { registerLicenseKeyStore } from "./lib/license-key-store.js";
@@ -722,12 +722,19 @@ export async function build() {
   // Root endpoint — introduces this deployment as the SITE it serves, not as
   // the kit it was built with (#5307). `_site.mdx` is read once per process;
   // a site without one degrades to a neutral name, never to the kit's.
+  //
+  // `modules` (#7501) is the optional modules whose routes this build
+  // registers, computed once here — before any route registers — so the index
+  // reports what registered rather than re-reading the env per request. The
+  // Admin reads it to hide the surfaces whose module is off.
+  const modules = servedModules();
   server.get("/", async () => {
     const identity = resolveApiIdentity();
     return {
       name: apiDisplayName(identity),
       version: API_VERSION,
       description: apiDescription(identity),
+      modules,
       // Derived from the routes this process actually registered (#5314),
       // not a hand-maintained literal. The literal listed 11 endpoints against
       // 68 registered routes, omitted `/v1/project-listings/public` and

package/templates/apps/api/src/services/__tests__/revalidation.test.ts

@@ -311,3 +311,22 @@ describe("notifyRevalidate", () => {
     });
   });
 });
+
+describe("logger environment (#7502)", () => {
+  it.each(["production", "development"])(
+    "builds its logger for NODE_ENV=%s, as the api's main logger does",
+    (nodeEnv) => {
+      process.env.NODE_ENV = nodeEnv;
+
+      loadService();
+
+      const { createLogger } = require("@working-theory/observability") as {
+        createLogger: jest.Mock;
+      };
+      expect(createLogger).toHaveBeenCalledWith({
+        service: "revalidation",
+        environment: nodeEnv,
+      });
+    },
+  );
+});

package/templates/apps/api/src/services/revalidation.ts

@@ -49,7 +49,14 @@ import { z } from "zod";
 import { config } from "../config/index.js";
 import { outboundFetch } from "../lib/outbound-http.js";
 
-const log = createLogger({ service: "revalidation" });
+// The environment is the api's own NODE_ENV, as the observability `logger`
+// singleton reads it. Omitted, createLogger assumes development and asks for a
+// pino-pretty transport a production install does not carry — a throw at load
+// that took the whole api down once content-write was enabled (#7502).
+const log = createLogger({
+  service: "revalidation",
+  environment: config.NODE_ENV,
+});
 
 const SIGNATURE_HEADER = "x-ailk-revalidate-signature";
 const EVENT_HEADER = "x-ailk-revalidate-event";

package/templates/apps/web/messages/en.json

@@ -768,39 +768,63 @@
     "notFoundHeadline": "Page not found",
     "notFoundDescription": "There is no page at this address. It may have been renamed or removed.",
     "editor": {
-      "tabForm": "Details",
-      "tabBody": "Body",
       "tabPreview": "Preview",
-      "tabCode": "Code",
+      "toolChanges": "Show unsaved changes",
+      "backLabel": "Pages",
       "statusDraft": "Draft",
       "statusNotYetLive": "Not yet live",
       "statusPublished": "Published",
-      "frontmatterHeading": "Page details",
+      "publishedSwitch": "Published",
+      "publishBlockedHint": "Fix the items under For you before publishing.",
+      "unsaved": "Unsaved",
+      "unsavedChanges": "Unsaved changes",
+      "discardButton": "Discard",
+      "loading": "Loading…",
+      "loadError": "Could not load this page. Try again.",
+      "retryButton": "Try again",
       "frontmatterTitle": "Title",
       "frontmatterSlug": "Slug",
       "frontmatterDescription": "Description",
-      "issuesHeading": "Fix these before publishing",
-      "saveButton": "Save draft",
+      "titlePlaceholder": "Page title",
+      "fieldPageType": "Page type",
+      "toolbarLabel": "Formatting",
+      "formatMenu": "Page actions",
+      "closeSheet": "Close",
+      "toolH1": "Heading 1",
+      "toolH2": "Heading 2",
+      "toolH3": "Heading 3",
+      "toolBold": "Bold",
+      "toolItalic": "Italic",
+      "toolBulletList": "Bulleted list",
+      "toolNumberedList": "Numbered list",
+      "toolLink": "Link",
+      "toolImage": "Insert image",
+      "issueRequired": "{field} is required.",
+      "issueInvalid": "{field} isn't a valid choice.",
+      "forYou": {
+        "typeFix": "Blocks publish",
+        "typeSuggestion": "Suggestion",
+        "fixWhy": "The page can't go live until this is fixed.",
+        "fixOutcome": "Once it is fixed, the Published switch turns on.",
+        "descriptionTitle": "Add a search description",
+        "descriptionWhy": "Search engines and AI answers show this line under the page's title. Without it they write their own.",
+        "descriptionOutcome": "A sentence you chose appears wherever this page is listed.",
+        "altTitle": "{count, plural, one {Describe # image} other {Describe # images}}",
+        "altWhy": "Screen readers and search engines can't see an image without alt text.",
+        "altOutcome": "Every reader gets the image's meaning, and the page is easier to find."
+      },
+      "saveButton": "Save",
       "saving": "Saving…",
       "saved": "Saved",
       "saveError": "Could not save. Try again.",
-      "publishButton": "Publish",
-      "publishing": "Publishing…",
-      "published": "Published",
       "publishError": "Could not publish. Try again.",
-      "unpublishButton": "Unpublish",
-      "unpublishing": "Unpublishing…",
-      "unpublished": "Unpublished",
       "unpublishError": "Could not unpublish. Try again.",
       "conflictHeading": "Someone else saved this page",
       "conflictMessage": "This page changed since you opened it. Reload to take their version, or overwrite it with yours.",
       "conflictReload": "Reload their version",
       "conflictOverwrite": "Overwrite with mine",
-      "imageInsertLabel": "Insert an image",
-      "imageInsertHint": "The image is uploaded and its markdown inserted at the cursor.",
       "imageAlt": "Image",
       "imageInsertError": "Could not upload that image. Try again.",
-      "codeHeading": "Composed MDX",
       "diffLegendAdded": "Added",
       "diffLegendRemoved": "Removed",
       "diffLegendUnchanged": "Unchanged"

package/templates/database/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @working-theory/database
 
+## 0.33.0
+
+### Patch Changes
+
+- Updated dependencies [[`bf2c0a7`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/bf2c0a722c08974f6a199e9f8bf3d837a100be58)]:
+  - @working-theory/validation@0.33.0
+
 ## 0.32.0
 
 ### Patch Changes

package/templates/database/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@working-theory/database",
-  "version": "0.32.0",
+  "version": "0.33.0",
   "license": "Apache-2.0",
   "publishConfig": {
     "access": "public"

package/versions.json

@@ -1,52 +1,52 @@
 {
-  "@working-theory/admin-ui": "0.32.0",
-  "@working-theory/aeo": "0.32.0",
-  "@working-theory/agent-context": "0.32.0",
+  "@working-theory/admin-ui": "0.33.0",
+  "@working-theory/aeo": "0.33.0",
+  "@working-theory/agent-context": "0.33.0",
   "@working-theory/agent-contract": "0.1.0",
   "@working-theory/agent-memory": "0.0.0",
   "@working-theory/ai": "0.1.0",
-  "@working-theory/analytics": "0.32.0",
-  "@working-theory/api-client": "0.32.0",
+  "@working-theory/analytics": "0.33.0",
+  "@working-theory/api-client": "0.33.0",
   "@working-theory/cda-filesystem": "0.0.0",
-  "@working-theory/cli": "0.32.0",
-  "@working-theory/common": "0.32.0",
+  "@working-theory/cli": "0.33.0",
+  "@working-theory/common": "0.33.0",
   "@working-theory/consent": "0.1.0",
-  "@working-theory/content-adapters": "0.32.0",
-  "@working-theory/content-projection": "0.32.0",
-  "@working-theory/email": "0.32.0",
+  "@working-theory/content-adapters": "0.33.0",
+  "@working-theory/content-projection": "0.33.0",
+  "@working-theory/email": "0.33.0",
   "@working-theory/env": "0.0.0",
-  "@working-theory/eslint-config": "0.32.0",
-  "@working-theory/fumadocs-schema": "0.32.0",
+  "@working-theory/eslint-config": "0.33.0",
+  "@working-theory/fumadocs-schema": "0.33.0",
   "@working-theory/ids": "0.8.0",
-  "@working-theory/jsonld": "0.32.0",
-  "@working-theory/license": "0.32.0",
-  "@working-theory/metadata": "0.32.0",
-  "@working-theory/observability": "0.32.0",
-  "@working-theory/page-renderer": "0.32.0",
+  "@working-theory/jsonld": "0.33.0",
+  "@working-theory/license": "0.33.0",
+  "@working-theory/metadata": "0.33.0",
+  "@working-theory/observability": "0.33.0",
+  "@working-theory/page-renderer": "0.33.0",
   "@working-theory/plugin-mcp": "0.1.1",
-  "@working-theory/schema": "0.32.0",
-  "@working-theory/schema-pack-registry": "0.32.0",
-  "@working-theory/schema-validator": "0.32.0",
-  "@working-theory/sections-registry": "0.32.0",
-  "@working-theory/site-config": "0.32.0",
-  "@working-theory/stripe-client": "0.32.0",
-  "@working-theory/templates": "0.32.0",
-  "@working-theory/theme": "0.32.0",
-  "@working-theory/ui": "0.32.0",
-  "@working-theory/validation": "0.32.0",
-  "@working-theory/web-i18n": "0.32.0",
+  "@working-theory/schema": "0.33.0",
+  "@working-theory/schema-pack-registry": "0.33.0",
+  "@working-theory/schema-validator": "0.33.0",
+  "@working-theory/sections-registry": "0.33.0",
+  "@working-theory/site-config": "0.33.0",
+  "@working-theory/stripe-client": "0.33.0",
+  "@working-theory/templates": "0.33.0",
+  "@working-theory/theme": "0.33.0",
+  "@working-theory/ui": "0.33.0",
+  "@working-theory/validation": "0.33.0",
+  "@working-theory/web-i18n": "0.33.0",
   "@working-theory/billing-client": "0.0.0",
   "@working-theory/branding": "0.0.0",
   "@working-theory/license-client": "0.0.0",
   "@working-theory/license-manifest": "0.0.0",
   "@working-theory/partner-session": "0.0.0",
   "@working-theory/preview-protocol": "0.0.0",
-  "@working-theory/ui-commerce": "0.23.9",
-  "@working-theory/ui-docs-blog": "0.23.9",
-  "@working-theory/ui-scheduling": "0.23.9",
-  "@working-theory/ui-signal-collectors": "0.24.7",
+  "@working-theory/ui-commerce": "0.23.10",
+  "@working-theory/ui-docs-blog": "0.23.10",
+  "@working-theory/ui-scheduling": "0.23.10",
+  "@working-theory/ui-signal-collectors": "0.24.8",
   "@working-theory/web": "0.0.0",
   "@working-theory/api": "1.0.0",
   "@working-theory/mcp": "0.0.0",
-  "@working-theory/database": "0.32.0"
+  "@working-theory/database": "0.33.0"
 }