create-ailk 0.12.1 → 0.14.0

package/dist/design-presets.d.ts

@@ -2,6 +2,8 @@ import { type DesignSections } from "./design-package.js";
 export interface SectionLookCatalogEntry {
     /** The look group, in registry order (D2). */
     readonly look: readonly string[];
+    /** The type's rendering component (#7743 D6 — what the site manifest records), when the catalog names one. */
+    readonly component: string | undefined;
     /** The type's `data` JSON Schema `properties` (the catalog's `schema.properties`). */
     readonly properties: Readonly<Record<string, unknown>>;
 }
@@ -37,6 +39,9 @@ export interface LocatedDataEntry {
 export interface LocatedSection {
     readonly type: string;
     readonly form: "flow" | "block";
+    /** #7743 D3 — the element's `[start, end)` span: flow, its `{ … }`; block, from its `- ` to its last line's end. */
+    readonly start: number;
+    readonly end: number;
     /** Flow: the index of `data`'s `{`. Block: the end of the `data:` line (before its newline). */
     readonly dataOpen: number;
     /** Flow: the index of `data`'s `}`. Block: `dataOpen`. */
@@ -45,6 +50,15 @@ export interface LocatedSection {
     readonly entryColumn: number;
     readonly entries: readonly LocatedDataEntry[];
 }
+/**
+ * A page's located sections, with the `[valueStart, valueEnd)` span of the
+ * whole `sections:` value (#7743 D3): from just after `sections:` (and the
+ * spaces after it) to the flow form's `]`, or the block form's last line end.
+ */
+export type LocatedSections = LocatedSection[] & {
+    readonly valueStart: number;
+    readonly valueEnd: number;
+};
 /**
  * Locate a page's `sections[]` in its frontmatter — the prettier-formatted
  * flow form (`sections:\n  [ { "id": …, "type": …, "data": { … } }, … ]`)
@@ -52,7 +66,7 @@ export interface LocatedSection {
  * Undefined when the page has no frontmatter or no column-0 `sections:` key.
  * Any other shape throws `TemplateError` naming the element (D5).
  */
-export declare function locatePageSections(text: string, file: string): LocatedSection[] | undefined;
+export declare function locatePageSections(text: string, file: string): LocatedSections | undefined;
 export interface PresetPage {
     readonly path: string;
     readonly text: string;
@@ -64,6 +78,8 @@ export interface PresetApplication {
     readonly sectionType: string;
     readonly field: string;
 }
+/** The frontmatter's column-0 `type:` value, or undefined when it has none. */
+export declare function pageTypeOf(text: string, file: string): string | undefined;
 /**
  * Set one look field on section `index` of a page, splicing only its value
  * span (D5): an existing value is replaced; an absent field is inserted as

package/dist/design-presets.js

@@ -44,6 +44,7 @@ export function readSectionLookCatalog(catalogPath) {
         const properties = entry.schema["properties"];
         out[type] = {
             look: entry.look.map(String),
+            component: typeof entry.component === "string" ? entry.component : undefined,
             properties: isPlainObject(properties) ? properties : {},
         };
     }
@@ -397,6 +398,8 @@ function locateFlow(text, open, end, file) {
         out.push({
             type,
             form: "flow",
+            start: element.open,
+            end: element.close + 1,
             dataOpen: data.open,
             dataClose: data.close,
             entryColumn: -1,
@@ -410,7 +413,7 @@ function locateFlow(text, open, end, file) {
     }
     if (text[i] !== "]")
         cannotLocate(file, undefined, "the closing ]");
-    return out;
+    return { sections: out, close: i };
 }
 function splitLines(text, start, end) {
     const lines = [];
@@ -510,9 +513,12 @@ function locateBlock(text, lines, file) {
             lastDeep = l.end;
         }
         close();
+        const last = item.filter((l) => !l.blank).at(-1);
         return {
             type,
             form: "block",
+            start: item[0].start + itemIndent,
+            end: last.end,
             dataOpen: data.end,
             dataClose: data.end,
             entryColumn,
@@ -545,20 +551,26 @@ export function locatePageSections(text, file) {
     const nextKey = /\n(?=[^\s#-])/.exec(text.slice(afterKey, fmEnd));
     const valueEnd = nextKey ? afterKey + nextKey.index : fmEnd;
     const first = skipSpace(text, afterKey, valueEnd);
-    if (text[first] === "[")
-        return locateFlow(text, first, valueEnd, file);
+    if (text[first] === "[") {
+        const { sections, close } = locateFlow(text, first, valueEnd, file);
+        return Object.assign(sections, { valueStart: afterKey, valueEnd: close + 1 });
+    }
     const lineEnd = text.indexOf("\n", afterKey);
     if (lineEnd >= 0 && text.slice(afterKey, lineEnd).trim() === "") {
         const lines = splitLines(text, lineEnd + 1, valueEnd);
         const firstLine = lines.find((l) => !l.blank);
         if (firstLine === undefined || text.startsWith("- ", firstLine.start + firstLine.indent)) {
-            return locateBlock(text, lines, file);
+            const lastLine = lines.filter((l) => !l.blank).at(-1);
+            return Object.assign(locateBlock(text, lines, file), {
+                valueStart: afterKey,
+                valueEnd: lastLine?.end ?? afterKey,
+            });
         }
     }
     return cannotLocate(file, undefined, "a flow or block sequence");
 }
 /** The frontmatter's column-0 `type:` value, or undefined when it has none. */
-function pageTypeOf(text, file) {
+export function pageTypeOf(text, file) {
     const fm = /^---\r?\n([\s\S]*?)\r?\n---[ \t]*\r?$/m.exec(text);
     if (!fm || fm.index !== 0)
         return undefined;

package/dist/design-scaffold.d.ts

@@ -1,6 +1,5 @@
 import { type CompiledDesignTheme } from "./design-compile.js";
 import { type DesignPackage } from "./design-package.js";
-import type { LayerOwnership } from "./lib/extract-module-bundle.js";
 /** One resolved `--design` reference (D2). */
 export interface ResolvedDesign {
     /** "name" when the reference was a registry name, "path" when a directory. */
@@ -38,9 +37,12 @@ export declare function resolveDesign(ref: string, opts: {
 }): ResolvedDesign;
 /**
  * Render a compiled theme's `theme:` frontmatter block (D5) — `theme:`, each
- * treatment present as a bare `key: value`, then `colors:` with `light:`/
- * `dark:` sub-blocks, each colour slot as `slot: <JSON.stringify(value)>` in
- * `DESIGN_COLOR_MAP`'s order. Ends with a trailing newline.
+ * treatment present as a bare `key: value` (#7739's `darkInk`/`figures` after
+ * `checkmarks`), the `typography:` group when compiled — every role and field
+ * in the compile's order, role keys unquoted, sizes as plain scalars (#7720
+ * D2, #7739 D2.5) — then `colors:` with `light:`/`dark:` sub-blocks, each
+ * colour slot as `slot: <JSON.stringify(value)>` in `DESIGN_COLOR_MAP`'s
+ * order. Ends with a trailing newline.
  */
 export declare function renderThemeBlock(theme: CompiledDesignTheme): string;
 /**
@@ -53,24 +55,3 @@ export declare function renderThemeBlock(theme: CompiledDesignTheme): string;
  * @throws TemplateError when `text` carries no frontmatter to write into.
  */
 export declare function spliceThemeBlock(text: string, theme: CompiledDesignTheme, file: string): string;
-/**
- * Install a design's `sample/` directory onto a scaffold (spec 6892 D4) — a
- * FIXED, undeclared convention, not a design-package field: `sample/content/**`
- * lands at the scaffold's `content/**`, `sample/public/**` at
- * `apps/web/public/**`. A design with no `sample/` directory (e.g. `standard`)
- * installs nothing.
- *
- * Refuses — before its first write, so a refused sample leaves `targetDir`
- * untouched — any file outside those two roots, or any `.ts`/`.tsx`/`.js`/
- * `.mjs` file (content only, the template §5.2 rule this design package
- * amendment carries over). Every installed file's destination is recorded in
- * `ownership` as `design:<name>` (`readDesignPackage(designDir).name`), the
- * same call-scoped registry `installBundleTree` writes into.
- *
- * @throws Error on a file outside `content/`/`public/`, or a forbidden extension.
- */
-export declare function installDesignSample(opts: {
-    designDir: string;
-    targetDir: string;
-    ownership: LayerOwnership;
-}): void;

package/dist/design-scaffold.js

@@ -10,8 +10,8 @@
  * directory it reads is supplied by the caller — so it stays importable from
  * Jest's CJS transform, unlike `programmatic.ts`.
  */
-import { copyFileSync, existsSync, mkdirSync, readdirSync, statSync, } from "node:fs";
-import { join, relative, resolve, sep } from "node:path";
+import { statSync } from "node:fs";
+import { join, resolve } from "node:path";
 import { isDeepStrictEqual } from "node:util";
 import { DESIGN_COLOR_MAP } from "./design-compile.js";
 import { readDesignPackage } from "./design-package.js";
@@ -82,9 +82,12 @@ export function resolveDesign(ref, opts) {
 const RUNTIME_COLOR_SLOT_ORDER = DESIGN_COLOR_MAP.filter((row) => row.mode === "light").map((row) => row.runtime);
 /**
  * Render a compiled theme's `theme:` frontmatter block (D5) — `theme:`, each
- * treatment present as a bare `key: value`, then `colors:` with `light:`/
- * `dark:` sub-blocks, each colour slot as `slot: <JSON.stringify(value)>` in
- * `DESIGN_COLOR_MAP`'s order. Ends with a trailing newline.
+ * treatment present as a bare `key: value` (#7739's `darkInk`/`figures` after
+ * `checkmarks`), the `typography:` group when compiled — every role and field
+ * in the compile's order, role keys unquoted, sizes as plain scalars (#7720
+ * D2, #7739 D2.5) — then `colors:` with `light:`/`dark:` sub-blocks, each
+ * colour slot as `slot: <JSON.stringify(value)>` in `DESIGN_COLOR_MAP`'s
+ * order. Ends with a trailing newline.
  */
 export function renderThemeBlock(theme) {
     const lines = ["theme:"];
@@ -96,6 +99,24 @@ export function renderThemeBlock(theme) {
         lines.push(`  placeholders: ${theme.placeholders}`);
     if (theme.checkmarks !== undefined)
         lines.push(`  checkmarks: ${theme.checkmarks}`);
+    if (theme.buttonShape !== undefined)
+        lines.push(`  buttonShape: ${theme.buttonShape}`);
+    if (theme.darkInk !== undefined)
+        lines.push(`  darkInk: ${theme.darkInk}`);
+    if (theme.figures !== undefined)
+        lines.push(`  figures: ${theme.figures}`);
+    if (theme.typography !== undefined) {
+        lines.push("  typography:");
+        for (const [role, fields] of Object.entries(theme.typography)) {
+            lines.push(`    ${role}:`);
+            for (const [field, value] of Object.entries(fields)) {
+                lines.push(`      ${field}: ${String(value)}`);
+            }
+        }
+    }
+    // #7719 D6 — present only for a design that uses `solid-dark`, or (#7739 D2.3) sets `darkInk: accent`.
+    if (theme.darkBands !== undefined)
+        lines.push(`  darkBands: ${theme.darkBands}`);
     lines.push("  colors:");
     for (const mode of ["light", "dark"]) {
         lines.push(`    ${mode}:`);
@@ -149,72 +170,3 @@ export function spliceThemeBlock(text, theme, file) {
         : [...lines.slice(0, themeStart), ...rendered, ...lines.slice(themeEnd)];
     return next.join("\n");
 }
-/** Forbidden extensions for a design sample's files (spec 6892 D4) — content only, never code. */
-const SAMPLE_FORBIDDEN_EXTENSIONS = [".ts", ".tsx", ".js", ".mjs"];
-function hasSampleForbiddenExtension(p) {
-    return SAMPLE_FORBIDDEN_EXTENSIONS.some((ext) => p.toLowerCase().endsWith(ext));
-}
-/** Every file under `dir`, as `/`-separated paths relative to `dir`. */
-function listFiles(dir) {
-    const out = [];
-    const stack = [dir];
-    for (let cur = stack.pop(); cur !== undefined; cur = stack.pop()) {
-        for (const entry of readdirSync(cur, { withFileTypes: true })) {
-            const abs = join(cur, entry.name);
-            if (entry.isDirectory())
-                stack.push(abs);
-            else if (entry.isFile())
-                out.push(relative(dir, abs).split(sep).join("/"));
-        }
-    }
-    return out;
-}
-/** Where one `sample/` file lands on a scaffold (spec 6892 D4's fixed convention). */
-function sampleDestination(rel) {
-    if (rel.startsWith("content/"))
-        return rel;
-    return `apps/web/public/${rel.slice("public/".length)}`;
-}
-/**
- * Install a design's `sample/` directory onto a scaffold (spec 6892 D4) — a
- * FIXED, undeclared convention, not a design-package field: `sample/content/**`
- * lands at the scaffold's `content/**`, `sample/public/**` at
- * `apps/web/public/**`. A design with no `sample/` directory (e.g. `standard`)
- * installs nothing.
- *
- * Refuses — before its first write, so a refused sample leaves `targetDir`
- * untouched — any file outside those two roots, or any `.ts`/`.tsx`/`.js`/
- * `.mjs` file (content only, the template §5.2 rule this design package
- * amendment carries over). Every installed file's destination is recorded in
- * `ownership` as `design:<name>` (`readDesignPackage(designDir).name`), the
- * same call-scoped registry `installBundleTree` writes into.
- *
- * @throws Error on a file outside `content/`/`public/`, or a forbidden extension.
- */
-export function installDesignSample(opts) {
-    const sampleDir = join(opts.designDir, "sample");
-    if (!existsSync(sampleDir))
-        return;
-    const name = readDesignPackage(opts.designDir).name;
-    const subject = `design:${name}`;
-    // README.md at the sample root is the ONE documented exception (spec 6892
-    // D5: "the narrative sections move to designs/<name>/sample/README.md,
-    // which is not installed") — every other file is real content and is
-    // validated against the two roots below.
-    const files = listFiles(sampleDir).filter((rel) => rel !== "README.md");
-    for (const rel of files) {
-        if (!rel.startsWith("content/") && !rel.startsWith("public/")) {
-            throw new Error(`${subject}: sample file "${rel}" is outside content/ and public/ (spec 6892 D4)`);
-        }
-        if (hasSampleForbiddenExtension(rel)) {
-            throw new Error(`${subject}: sample file "${rel}" is a code file — a design sample is content only (spec 6892 D4)`);
-        }
-    }
-    for (const rel of files) {
-        const destinationRel = sampleDestination(rel);
-        const destinationAbs = resolve(opts.targetDir, destinationRel);
-        mkdirSync(join(destinationAbs, ".."), { recursive: true });
-        copyFileSync(join(sampleDir, rel), destinationAbs);
-        opts.ownership.set(destinationRel, subject);
-    }
-}

package/dist/index.d.ts

@@ -10,6 +10,7 @@ export { DEFAULT_AILK_MODULE_REGISTRY_URL, FetchModuleError, fetchModule, type F
 export { extractModuleBundle, type ExistingFilePolicy, type ExtractModuleBundleOptions, type InstallReportRow, } from "./lib/extract-module-bundle.js";
 export { ADD_MODULE_HELP, AddModuleRefusedError, applyModuleToScaffold, formatAddModuleReport, parseAddModuleArgs, type AddModuleReportRow, type AddModuleResult, type ApplyModuleOptions, } from "./add-module.js";
 export { APPLY_DESIGN_HELP, applyDesign, formatApplyDesignReport, parseApplyDesignArgs, type ApplyDesignArgs, type ApplyDesignChange, type ApplyDesignOptions, type ApplyDesignResult, } from "./apply-design.js";
+export type { HomeSeedOutcome } from "./design-home.js";
 export { SITE_ROSTER_PATH, readSiteRoster, siteRosterProblems, } from "./site-roster.js";
 export { SYNC_ROUTES_HELP, formatSyncRoutesReport, listTemplateRouteDirs, parseSyncRoutesArgs, syncRoutes, type RouteReport, type SyncRoutesOptions, type SyncRoutesResult, } from "./sync-routes.js";
 export { deriveArchitecture } from "./derive-architecture.js";

package/dist/lib/design-checks.d.ts

@@ -46,7 +46,18 @@ export type JsonLdDriftVerdict = {
     changed: DriftNode[];
     reason: string;
 };
-/** Decide whether `apply-design <design>` left every page's JSON-LD unchanged (logo excluded). */
+/**
+ * `after` with the standard home put back when the seeded home's JSON-LD is
+ * exactly the standard home's node followed by one `Person` per
+ * `TEAM_SEED_MEMBERS` member, in order (the people slide's `team` section,
+ * #7744 D8). Any other home, or a home the people slide did not change, is
+ * returned as it is.
+ */
+export declare function admitSeededPeopleSlide(before: ComposedPages, after: ComposedPages): ComposedPages;
+/**
+ * Decide whether `apply-design <design>` left every page's JSON-LD unchanged
+ * (logo excluded), the seeded people slide's Persons admitted.
+ */
 export declare function assessJsonLdDrift(design: string, before: ComposedPages, after: ComposedPages): JsonLdDriftVerdict;
 export interface MeasureApplyDesignDriftOptions {
     /** create-ailk's built `dist/cli.js`. */

package/dist/lib/design-checks.js

@@ -16,10 +16,17 @@
  * touches the filesystem and processes only through the paths it is handed,
  * so the driver and `__tests__/verify-scaffold-checks.test.ts` run the same
  * procedure. Nothing here imports `@working-theory/theme`.
+ *
+ * One change is content, not drift (#7744 D8): a design that seeds an
+ * organization home's people slide adds one `Person` per seeded team member to
+ * the home's graph. `admitSeededPeopleSlide` puts the standard home back only
+ * when the seeded home is exactly that, so any other change still counts.
  */
 import { execFileSync } from "node:child_process";
 import { writeFileSync } from "node:fs";
 import { join } from "node:path";
+import { isDeepStrictEqual } from "node:util";
+import { TEAM_SEED_MEMBERS } from "../team-profiles.js";
 function describePair(row) {
     const measured = row.status === "unmeasurable" || row.ratio === null
         ? "unmeasurable"
@@ -107,15 +114,44 @@ export function jsonLdDrift(before, after) {
     const cmp = (a, b) => (a < b ? -1 : a > b ? 1 : 0);
     return nodes.sort((x, y) => cmp(x.page, y.page) || cmp(x.path, y.path));
 }
+const HOME_PAGE = "content/en/HomePage/home.mdx";
+/**
+ * `after` with the standard home put back when the seeded home's JSON-LD is
+ * exactly the standard home's node followed by one `Person` per
+ * `TEAM_SEED_MEMBERS` member, in order (the people slide's `team` section,
+ * #7744 D8). Any other home, or a home the people slide did not change, is
+ * returned as it is.
+ */
+export function admitSeededPeopleSlide(before, after) {
+    const standard = before[HOME_PAGE];
+    const seeded = after[HOME_PAGE];
+    if (standard === undefined || seeded === undefined || !seeded.sectionsValid)
+        return after;
+    const graph = JSON.parse(seeded.jsonld)["@graph"];
+    if (!Array.isArray(graph))
+        return after;
+    const [page, ...people] = graph;
+    const expected = TEAM_SEED_MEMBERS.map((m) => ({
+        "@context": "https://schema.org",
+        "@type": "Person",
+        name: m.name,
+        jobTitle: m.role,
+    }));
+    const isPeopleSlide = isDeepStrictEqual(page, JSON.parse(standard.jsonld)) && isDeepStrictEqual(people, expected);
+    return isPeopleSlide ? { ...after, [HOME_PAGE]: standard } : after;
+}
 /** How many changed nodes a drift reason lists before it stops. */
 const REASON_NODE_LIMIT = 10;
-/** Decide whether `apply-design <design>` left every page's JSON-LD unchanged (logo excluded). */
+/**
+ * Decide whether `apply-design <design>` left every page's JSON-LD unchanged
+ * (logo excluded), the seeded people slide's Persons admitted.
+ */
 export function assessJsonLdDrift(design, before, after) {
     const pages = Object.keys(before).length;
     if (pages === 0) {
         return { ok: false, pages, changed: [], reason: `design ${design}: no page was composed` };
     }
-    const changed = jsonLdDrift(before, after);
+    const changed = jsonLdDrift(before, admitSeededPeopleSlide(before, after));
     if (changed.length === 0)
         return { ok: true, pages };
     const listed = changed

package/dist/lib/module-license-gate.d.ts

@@ -139,6 +139,15 @@ export declare function deriveLevel(options: GateOptions): Promise<{
     level: Level;
     bundles: Map<ModuleName, Uint8Array>;
 }>;
+/**
+ * The level a `--modules`-keep run's chosen non-Free design is gated on
+ * (#7010). `resolveModuleSet`'s keep branch composes no level (NFR-2), so
+ * `scaffold()` derives one here through `deriveLevel`, as the addition branch
+ * does. A key the registry refuses for a Pro module — lapsed, revoked, or one
+ * that does not cover Pro — reads as `"free"`, so `assertDesignAllowed`
+ * refuses with its own message (fail closed); any other failure propagates.
+ */
+export declare function deriveDesignLevel(options: GateOptions): Promise<Level>;
 /**
  * The one entry point that turns `--modules` + the key into the effective
  * module set and its resolved bundles (D5) — `programmatic.ts`'s `scaffold()`

package/dist/lib/module-license-gate.js

@@ -294,6 +294,24 @@ export async function deriveLevel(options) {
         throw err;
     }
 }
+/**
+ * The level a `--modules`-keep run's chosen non-Free design is gated on
+ * (#7010). `resolveModuleSet`'s keep branch composes no level (NFR-2), so
+ * `scaffold()` derives one here through `deriveLevel`, as the addition branch
+ * does. A key the registry refuses for a Pro module — lapsed, revoked, or one
+ * that does not cover Pro — reads as `"free"`, so `assertDesignAllowed`
+ * refuses with its own message (fail closed); any other failure propagates.
+ */
+export async function deriveDesignLevel(options) {
+    try {
+        return (await deriveLevel(options)).level;
+    }
+    catch (err) {
+        if (err instanceof LicenseRequiredError)
+            return "free";
+        throw err;
+    }
+}
 /**
  * The one entry point that turns `--modules` + the key into the effective
  * module set and its resolved bundles (D5) — `programmatic.ts`'s `scaffold()`

package/dist/module-architecture.js

@@ -806,6 +806,19 @@ export const MODULE_SLICES = {
             // `__tests__/tenancy-slice-resolution.test.ts` holds the whole gate set.
             "apps/api/src/routes/workspaces/general.ts",
             "apps/api/src/routes/workspaces/members.ts",
+            // #3591 PR-B — the agent seat's routes, a sibling of `members.ts` under
+            // the same `workspace || multi-tenant` gate, so co-owned with
+            // `workspace` for the #7399 reason above.
+            "apps/api/src/routes/workspaces/agents.ts",
+            // #3591 PR-E — the signed-in workspace MCP tools that twin the agent
+            // context, message and submission routes above. Each registers when
+            // its twin route does (`workspace || multi-tenant`), so co-owned with
+            // `workspace` for the same reason; the application tools' file is
+            // co-owned with `signal-collectors` instead, its routes' gate.
+            "apps/mcp/src/tools/agent_context.ts",
+            "apps/mcp/src/tools/inbox_messages.ts",
+            "apps/mcp/src/tools/inbox_submissions.ts",
+            "apps/mcp/src/tools/inbox_applications.ts",
             "apps/api/src/lib/tenant-db.ts",
             "apps/api/src/lib/ws-token.ts",
             // #6157 D16 — the magnet Admin authoring surface, co-owned with
@@ -910,6 +923,16 @@ export const MODULE_SLICES = {
             // register under the workspace||multi-tenant gate.
             "apps/api/src/routes/workspaces/general.ts",
             "apps/api/src/routes/workspaces/members.ts",
+            // Co-owned with `multi-tenant` (#3591 PR-B), for the reason the two
+            // lines above carry.
+            "apps/api/src/routes/workspaces/agents.ts",
+            // Co-owned with `multi-tenant` (#3591 PR-E): the signed-in MCP tools
+            // that twin the agent context, message and submission routes register
+            // under the same `workspace || multi-tenant` disjunction as those
+            // routes.
+            "apps/mcp/src/tools/agent_context.ts",
+            "apps/mcp/src/tools/inbox_messages.ts",
+            "apps/mcp/src/tools/inbox_submissions.ts",
             // Co-owned with `multi-tenant` (#6216) — see that slice's entry: the
             // route registers under the SAME workspace||multi-tenant gate as the
             // two lines above, and its service function imports `lib/tenant-db.ts`
@@ -1370,6 +1393,10 @@ export const MODULE_SLICES = {
             "apps/api/src/bin/seed-waitlist-experiments.ts",
             "apps/mcp/src/tools/get_flow.ts",
             "apps/mcp/src/tools/submit_flow_step.ts",
+            // #3591 PR-E — the signed-in MCP tools that twin the tenant-scoped
+            // project-listing routes, CO-OWNED with multi-tenant: they register
+            // under the routes' own `multi-tenant || signal-collectors` gate.
+            "apps/mcp/src/tools/inbox_applications.ts",
             // ── The review surface (#5677) — CO-OWNED with multi-tenant ──────────
             //
             // Every path below is ALSO a multi-tenant `ownedFiles` entry and stays