create-ailk 0.17.0 → 0.19.0

package/templates/apps/mcp/src/server.ts

@@ -27,6 +27,7 @@ import {
   mcpHeldFeatures,
 } from "./lib/commerce-claim.js";
 import { notFoundError } from "./lib/errors.js";
+import { UNSERVED_MCP_TOOLS } from "./lib/topology.generated.js";
 import { ailkAudit } from "./tools/audit.js";
 import { ailkCaptureLead } from "./tools/capture_lead.js";
 import { ailkCreateProject } from "./tools/create_project.js";
@@ -169,8 +170,12 @@ export interface RegisteredToolDescriptor {
 
 /**
  * Whether a catalog registration entry should register on this build/boot —
- * three filters:
+ * four filters:
  *
+ *  0. the topology filter (#8070 D7): a name in the generated seam's
+ *     `UNSERVED_MCP_TOOLS` is never served — `create_project` on a spoke,
+ *     which carries no create-ailk CLI for it to spawn. `[]` on a hub. The
+ *     web manifest drops the same list, so the two surfaces agree;
  *  1. the OSS-disabled filter (static per-name set; empty since #5971);
  *  2. the module-presence filter (S1, #5088): a tool tagged with `module`
  *     (e.g. `create_booking` carrying `module: "scheduling"`) registers only
@@ -200,6 +205,7 @@ function shouldRegister(reg: {
   module?: string;
   addon?: "commerce";
 }): boolean {
+  if (UNSERVED_MCP_TOOLS.includes(reg.name)) return false;
   if (OSS_DISABLED_TOOLS.has(reg.name)) return false;
   if (reg.module && !isModuleEnabled(reg.module)) return false;
   if (reg.addon === "commerce" && mcpCommerceClaim() !== "claimed")
@@ -240,7 +246,8 @@ function catalogOptionsForThisBoot(): McpCatalogOptions {
  * boot serves whose licence `feature` the deployment does not hold, calls
  * `warn` once, naming the tool and the feature, and returns their names.
  *
- * Called ONCE per process from `index.ts`, after the claim resolves — never
+ * Called ONCE per process from `bootMcp()` (`boot.ts`, which both `index.ts`
+ * and the Vercel entry `app.ts` await), after the claim resolves — never
  * from {@link createMcpServer}, which runs once per HTTP session. In refuse
  * mode it finds nothing: the upstream catalog filter has already dropped
  * every such tool, so it needs no mode check of its own. Defaults to
@@ -283,6 +290,7 @@ export function listRegisteredTools(): RegisteredToolDescriptor[] {
 
 /**
  * Creates a configured McpServer with all AILK tools registered, less any
+ * tool this topology does not serve (`UNSERVED_MCP_TOOLS`, #8070 D7), less any
  * tool name in {@link OSS_DISABLED_TOOLS}, less any tool whose `module` is
  * not enabled on this build (S1, #5088), and less any `addon`-tagged tool
  * whose claim this deployment does not hold (#5971) — see

package/templates/apps/mcp/src/serverless-app.ts

@@ -0,0 +1,88 @@
+/**
+ * The testable part of the Vercel entry (#8070 D2, D5).
+ *
+ * `src/app.ts` is the thin file Vercel's Node-backend detection finds: it
+ * awaits the boot at module level and default-exports the
+ * {@link serverlessHandler} for the app. A module-level
+ * `await` does not compile under the package's ts-jest CommonJS preset, so
+ * everything app.ts does beyond that lives here, where a test can build the
+ * same app (`__tests__/app-entry.test.ts`).
+ */
+
+import type { IncomingMessage, ServerResponse } from "node:http";
+
+import type { FastifyInstance } from "fastify";
+
+import { httpTransportConfigFromEnv, readStatelessEnv } from "./boot.js";
+import { registerHttpTransport } from "./http-transport.js";
+
+/**
+ * Trust exactly one proxy hop — the immediate peer — and nothing behind it
+ * (D5). Fastify then takes `request.ip` from the LAST `X-Forwarded-For`
+ * entry, the address Vercel's edge saw, and a value a caller writes earlier
+ * in the header cannot move it.
+ *
+ * A function, not `trustProxy: 1`: Fastify 5.12 treats a numeric hop count as
+ * trust-nothing ("hop-count-only trust cannot validate the immediate peer"),
+ * so `1` would silently key every caller on the edge's address. A hop-only
+ * function is safe here for the reason Fastify's warning names: a Vercel
+ * function cannot be reached except through Vercel's edge, so its immediate
+ * peer is always the edge. It would NOT be safe on a host a client can reach
+ * directly — which is why the long-running entry (`buildHttpTransportApp`)
+ * sets no `trustProxy` at all.
+ *
+ * Trusting hop 0 also makes `request.host` and `request.protocol` follow
+ * `X-Forwarded-Host` / `X-Forwarded-Proto`. Nothing in apps/mcp reads either
+ * today; anything that starts to must remember they come from the edge.
+ */
+export function trustOneHop(_address: string, hop: number): boolean {
+  return hop === 0;
+}
+
+/**
+ * The Fastify options the Vercel entry builds its app with: no logger, and
+ * {@link trustOneHop} — so the per-IP rate limit and the daily caps key on
+ * the real caller. That holds for the topology the sites deploy: the MCP host
+ * name points straight at the Vercel project. A second proxy in front
+ * (Cloudflare in proxied mode, a rewrite from another Vercel project) would
+ * make every caller that proxy's address.
+ */
+export const SERVERLESS_FASTIFY_OPTIONS = {
+  logger: false,
+  trustProxy: trustOneHop,
+} as const;
+
+/**
+ * Register the MCP HTTP transport on the Vercel entry's app, from the
+ * environment. Stateless unless `MCP_HTTP_STATELESS` says otherwise (D1): a
+ * stateful transport keeps its sessions in one instance's memory, which a
+ * multi-instance host cannot honour. The port is read and ignored — Vercel
+ * calls the exported {@link serverlessHandler} and nothing listens.
+ */
+export async function configureServerlessApp(
+  app: FastifyInstance,
+): Promise<void> {
+  const { port: _port, ...config } = httpTransportConfigFromEnv();
+  await registerHttpTransport(app, {
+    ...config,
+    stateless: readStatelessEnv(true),
+  });
+}
+
+/**
+ * The `(req, res)` function the Vercel entry default-exports (#8070 D2,
+ * amendment 2). Vercel's Node runtime accepts a request function, an object of
+ * web handlers, or an `http.Server` the module starts listening — a Fastify
+ * instance is none of these, and exporting one answered every request with a
+ * 500. `app.server` is the `http.Server` Fastify builds without listening;
+ * emitting `request` on it is Fastify's own request path, so routing,
+ * `trustProxy` and every hook behave as on a listening server. The app must
+ * already be `ready()`.
+ */
+export function serverlessHandler(
+  app: FastifyInstance,
+): (req: IncomingMessage, res: ServerResponse) => void {
+  return (req, res) => {
+    app.server.emit("request", req, res);
+  };
+}

package/templates/apps/mcp/src/tools/capture_lead.ts

@@ -17,6 +17,8 @@ import {
   type SubmitLeadOutput,
 } from "@working-theory/validation";
 
+import { visitorForwardHeadersForThisCall } from "../request-context.js";
+
 export { submitLeadInputSchema, submitLeadOutputSchema };
 export type { SubmitLeadInput, SubmitLeadOutput };
 
@@ -47,7 +49,13 @@ export async function ailkCaptureLead(
     },
   };
 
-  const res = await apiClient.leads.submit(body);
+  // #8073 — forward the address the transport trusted (never an identity
+  // argument on this tool's own schema) so the hub counts the write in that
+  // visitor's own rate-limit bucket rather than this MCP host's.
+  const headers = visitorForwardHeadersForThisCall();
+  const res = headers
+    ? await apiClient.leads.submit(body, { headers })
+    : await apiClient.leads.submit(body);
   if (!res.ok) {
     return { ok: false, error: { kind: "api_error", status: res.status } };
   }

package/templates/apps/mcp/src/tools/get_business_hours.ts

@@ -15,8 +15,6 @@
  * Session/scope: none — read-only public content.
  */
 
-import { join } from "node:path";
-
 import {
   getBusinessHoursInputSchema,
   getBusinessHoursOutputSchema,
@@ -24,7 +22,10 @@ import {
   type GetBusinessHoursOutput,
 } from "@working-theory/validation";
 
-import { getMcpContentAdapter } from "../lib/content-adapter.js";
+import {
+  getMcpContentAdapter,
+  mcpContentRoot,
+} from "../lib/content-adapter.js";
 import { resolveLocale } from "../lib/resolve-locale.js";
 
 export { getBusinessHoursInputSchema, getBusinessHoursOutputSchema };
@@ -36,7 +37,7 @@ const DEFAULT_SLUG = "home";
  * get_business_hours handler.
  *
  * Accepts an optional `contentRoot` override for testing. When omitted,
- * resolves the content root relative to cwd (supports ESM runtime).
+ * resolves it through `mcpContentRoot()` (#8070 D3).
  */
 export async function ailkGetBusinessHours(
   input: GetBusinessHoursInput,
@@ -44,7 +45,7 @@ export async function ailkGetBusinessHours(
 ): Promise<GetBusinessHoursOutput> {
   getBusinessHoursInputSchema.parse(input);
 
-  const root = contentRoot ?? join(process.cwd(), "content");
+  const root = contentRoot ?? mcpContentRoot();
   const locale = resolveLocale(input.locale);
   const adapter = getMcpContentAdapter({ contentRoot: root, locale });
 

package/templates/apps/mcp/src/tools/get_faq.ts

@@ -15,8 +15,6 @@
  * Session/scope: none — read-only public content.
  */
 
-import { join } from "node:path";
-
 import {
   getFaqInputSchema,
   getFaqOutputSchema,
@@ -24,7 +22,10 @@ import {
   type GetFaqOutput,
 } from "@working-theory/validation";
 
-import { getMcpContentAdapter } from "../lib/content-adapter.js";
+import {
+  getMcpContentAdapter,
+  mcpContentRoot,
+} from "../lib/content-adapter.js";
 import { resolveLocale } from "../lib/resolve-locale.js";
 
 export { getFaqInputSchema, getFaqOutputSchema };
@@ -36,7 +37,7 @@ const DEFAULT_SLUG = "faq";
  * get_faq handler.
  *
  * Accepts an optional `contentRoot` override for testing. When omitted,
- * resolves the content root relative to cwd (supports ESM runtime).
+ * resolves it through `mcpContentRoot()` (#8070 D3).
  */
 export async function ailkGetFaq(
   input: GetFaqInput,
@@ -44,7 +45,7 @@ export async function ailkGetFaq(
 ): Promise<GetFaqOutput> {
   getFaqInputSchema.parse(input);
 
-  const root = contentRoot ?? join(process.cwd(), "content");
+  const root = contentRoot ?? mcpContentRoot();
   const locale = resolveLocale(input.locale);
   const adapter = getMcpContentAdapter({ contentRoot: root, locale });
 

package/templates/apps/mcp/src/tools/get_locations.ts

@@ -15,8 +15,6 @@
  * Session/scope: none — read-only public content.
  */
 
-import { join } from "node:path";
-
 import { SCHEMA_ORG_TYPES } from "@working-theory/content-adapters";
 import {
   getLocationsInputSchema,
@@ -25,7 +23,10 @@ import {
   type GetLocationsOutput,
 } from "@working-theory/validation";
 
-import { getMcpContentAdapter } from "../lib/content-adapter.js";
+import {
+  getMcpContentAdapter,
+  mcpContentRoot,
+} from "../lib/content-adapter.js";
 import { resolveLocale } from "../lib/resolve-locale.js";
 
 export { getLocationsInputSchema, getLocationsOutputSchema };
@@ -35,7 +36,7 @@ export type { GetLocationsInput, GetLocationsOutput };
  * get_locations handler.
  *
  * Accepts an optional `contentRoot` override for testing. When omitted,
- * resolves the content root relative to cwd (supports ESM runtime).
+ * resolves it through `mcpContentRoot()` (#8070 D3).
  */
 export async function ailkGetLocations(
   input: GetLocationsInput,
@@ -43,7 +44,7 @@ export async function ailkGetLocations(
 ): Promise<GetLocationsOutput> {
   getLocationsInputSchema.parse(input);
 
-  const root = contentRoot ?? join(process.cwd(), "content");
+  const root = contentRoot ?? mcpContentRoot();
   const locale = resolveLocale(input.locale);
   const adapter = getMcpContentAdapter({ contentRoot: root, locale });
 

package/templates/apps/mcp/src/tools/get_offerings.ts

@@ -21,8 +21,6 @@
  * Session/scope: none — read-only public content.
  */
 
-import { join } from "node:path";
-
 import { type SchemaOrgType } from "@working-theory/content-adapters";
 import {
   getOfferingsInputSchema,
@@ -31,7 +29,10 @@ import {
   type GetOfferingsOutput,
 } from "@working-theory/validation";
 
-import { getMcpContentAdapter } from "../lib/content-adapter.js";
+import {
+  getMcpContentAdapter,
+  mcpContentRoot,
+} from "../lib/content-adapter.js";
 import { resolveLocale } from "../lib/resolve-locale.js";
 
 export { getOfferingsInputSchema, getOfferingsOutputSchema };
@@ -41,7 +42,7 @@ export type { GetOfferingsInput, GetOfferingsOutput };
  * get_offerings handler.
  *
  * Accepts an optional `contentRoot` override for testing. When omitted,
- * resolves the content root relative to cwd (supports ESM runtime).
+ * resolves it through `mcpContentRoot()` (#8070 D3).
  */
 export async function ailkGetOfferings(
   input: GetOfferingsInput,
@@ -49,7 +50,7 @@ export async function ailkGetOfferings(
 ): Promise<GetOfferingsOutput> {
   getOfferingsInputSchema.parse(input);
 
-  const root = contentRoot ?? join(process.cwd(), "content");
+  const root = contentRoot ?? mcpContentRoot();
   const locale = resolveLocale(input.locale);
   const adapter = getMcpContentAdapter({ contentRoot: root, locale });
 

package/templates/apps/mcp/src/tools/get_pricing.ts

@@ -21,8 +21,6 @@
  * Session/scope: none — read-only public content.
  */
 
-import { join } from "node:path";
-
 import {
   getPricingInputSchema,
   getPricingOutputSchema,
@@ -30,7 +28,10 @@ import {
   type GetPricingOutput,
 } from "@working-theory/validation";
 
-import { getMcpContentAdapter } from "../lib/content-adapter.js";
+import {
+  getMcpContentAdapter,
+  mcpContentRoot,
+} from "../lib/content-adapter.js";
 import { resolveLocale } from "../lib/resolve-locale.js";
 
 export { getPricingInputSchema, getPricingOutputSchema };
@@ -42,7 +43,7 @@ const DEFAULT_SLUG = "pricing";
  * get_pricing handler.
  *
  * Accepts an optional `contentRoot` override for testing. When omitted,
- * resolves the content root relative to cwd (supports ESM runtime).
+ * resolves it through `mcpContentRoot()` (#8070 D3).
  */
 export async function ailkGetPricing(
   input: GetPricingInput,
@@ -50,7 +51,7 @@ export async function ailkGetPricing(
 ): Promise<GetPricingOutput> {
   getPricingInputSchema.parse(input);
 
-  const root = contentRoot ?? join(process.cwd(), "content");
+  const root = contentRoot ?? mcpContentRoot();
   const locale = resolveLocale(input.locale);
   const adapter = getMcpContentAdapter({ contentRoot: root, locale });
 

package/templates/apps/mcp/src/tools/get_site_info.ts

@@ -15,8 +15,6 @@
  * Session/scope: none — read-only public content.
  */
 
-import { join } from "node:path";
-
 import {
   getSiteInfoInputSchema,
   getSiteInfoOutputSchema,
@@ -24,7 +22,10 @@ import {
   type GetSiteInfoOutput,
 } from "@working-theory/validation";
 
-import { getMcpContentAdapter } from "../lib/content-adapter.js";
+import {
+  getMcpContentAdapter,
+  mcpContentRoot,
+} from "../lib/content-adapter.js";
 import { resolveLocale } from "../lib/resolve-locale.js";
 
 export { getSiteInfoInputSchema, getSiteInfoOutputSchema };
@@ -36,7 +37,7 @@ const DEFAULT_SLUG = "home";
  * get_site_info handler.
  *
  * Accepts an optional `contentRoot` override for testing. When omitted,
- * resolves the content root relative to cwd (supports ESM runtime).
+ * resolves it through `mcpContentRoot()` (#8070 D3).
  */
 export async function ailkGetSiteInfo(
   input: GetSiteInfoInput,
@@ -44,7 +45,7 @@ export async function ailkGetSiteInfo(
 ): Promise<GetSiteInfoOutput> {
   getSiteInfoInputSchema.parse(input);
 
-  const root = contentRoot ?? join(process.cwd(), "content");
+  const root = contentRoot ?? mcpContentRoot();
   const locale = resolveLocale(input.locale);
   const adapter = getMcpContentAdapter({ contentRoot: root, locale });
 

package/templates/apps/mcp/src/tools/list_pages.ts

@@ -15,8 +15,6 @@
  * Session/scope: none — read-only public content.
  */
 
-import { join } from "node:path";
-
 import {
   SCHEMA_ORG_TYPES,
   type SchemaOrgType,
@@ -28,7 +26,10 @@ import {
   type ListPagesOutput,
 } from "@working-theory/validation";
 
-import { getMcpContentAdapter } from "../lib/content-adapter.js";
+import {
+  getMcpContentAdapter,
+  mcpContentRoot,
+} from "../lib/content-adapter.js";
 import { resolveLocale } from "../lib/resolve-locale.js";
 
 export { listPagesInputSchema, listPagesOutputSchema };
@@ -38,8 +39,8 @@ export type { ListPagesInput, ListPagesOutput };
  * list_pages handler.
  *
  * Accepts an optional `contentRoot` override for testing (avoids coupling
- * unit tests to the deployed filesystem layout). When omitted, resolves the
- * content root relative to this file at call time (supports ESM runtime).
+ * unit tests to the deployed filesystem layout). When omitted, resolves it
+ * through `mcpContentRoot()` (#8070 D3).
  */
 export async function ailkListPages(
   input: ListPagesInput,
@@ -47,8 +48,8 @@ export async function ailkListPages(
 ): Promise<ListPagesOutput> {
   listPagesInputSchema.parse(input);
 
-  // Default: resolve content/ relative to cwd (works in ESM and jest/commonjs).
-  const root = contentRoot ?? join(process.cwd(), "content");
+  // Default: the one content-root resolver (#8070 D3).
+  const root = contentRoot ?? mcpContentRoot();
   const locale = resolveLocale(input.locale);
   const adapter = getMcpContentAdapter({ contentRoot: root, locale });
 

package/templates/apps/mcp/src/tools/read_content.ts

@@ -20,8 +20,6 @@
  * Session/scope: none — read-only public content.
  */
 
-import { join } from "node:path";
-
 import {
   readContentInputSchema,
   readContentOutputSchema,
@@ -29,7 +27,10 @@ import {
   type ReadContentOutput,
 } from "@working-theory/validation";
 
-import { getMcpMdxContentAdapter } from "../lib/content-adapter.js";
+import {
+  getMcpMdxContentAdapter,
+  mcpContentRoot,
+} from "../lib/content-adapter.js";
 import { resolveLocale } from "../lib/resolve-locale.js";
 
 export { readContentInputSchema, readContentOutputSchema };
@@ -39,8 +40,7 @@ export type { ReadContentInput, ReadContentOutput };
  * read_content handler.
  *
  * Accepts an optional `contentRoot` override for testing. When omitted,
- * resolves the content root relative to this file at call time (supports
- * ESM runtime).
+ * resolves it through `mcpContentRoot()` (#8070 D3).
  */
 export async function ailkReadContent(
   input: ReadContentInput,
@@ -48,8 +48,8 @@ export async function ailkReadContent(
 ): Promise<ReadContentOutput> {
   readContentInputSchema.parse(input);
 
-  // Default: resolve content/ relative to cwd (works in ESM and jest/commonjs).
-  const root = contentRoot ?? join(process.cwd(), "content");
+  // Default: the one content-root resolver (#8070 D3).
+  const root = contentRoot ?? mcpContentRoot();
   const locale = resolveLocale(input.locale);
 
   const adapter = getMcpMdxContentAdapter({ contentRoot: root, locale });

package/templates/apps/mcp/src/tools/request_callback.ts

@@ -18,6 +18,8 @@ import {
   type RequestCallbackOutput,
 } from "@working-theory/validation";
 
+import { visitorForwardHeadersForThisCall } from "../request-context.js";
+
 export { requestCallbackInputSchema, requestCallbackOutputSchema };
 export type { RequestCallbackInput, RequestCallbackOutput };
 
@@ -42,7 +44,13 @@ export async function ailkRequestCallback(
     payload: {},
   };
 
-  const res = await apiClient.leads.callback(body);
+  // #8073 — forward the address the transport trusted (never an identity
+  // argument on this tool's own schema) so the hub counts the write in that
+  // visitor's own rate-limit bucket rather than this MCP host's.
+  const headers = visitorForwardHeadersForThisCall();
+  const res = headers
+    ? await apiClient.leads.callback(body, { headers })
+    : await apiClient.leads.callback(body);
   if (!res.ok) {
     return { ok: false, error: { kind: "api_error", status: res.status } };
   }

package/templates/apps/mcp/src/tools/search_content.ts

@@ -20,8 +20,6 @@
  * Session/scope: none — read-only public content.
  */
 
-import { join } from "node:path";
-
 import {
   searchContentInputSchema,
   searchContentOutputSchema,
@@ -29,7 +27,10 @@ import {
   type SearchContentOutput,
 } from "@working-theory/validation";
 
-import { getMcpContentAdapter } from "../lib/content-adapter.js";
+import {
+  getMcpContentAdapter,
+  mcpContentRoot,
+} from "../lib/content-adapter.js";
 import { resolveLocale } from "../lib/resolve-locale.js";
 
 export { searchContentInputSchema, searchContentOutputSchema };
@@ -41,7 +42,7 @@ const DEFAULT_LIMIT = 10;
  * search_content handler.
  *
  * Accepts an optional `contentRoot` override for testing. When omitted,
- * resolves the content root relative to cwd (supports ESM runtime).
+ * resolves it through `mcpContentRoot()` (#8070 D3).
  */
 export async function ailkSearchContent(
   input: SearchContentInput,
@@ -49,7 +50,7 @@ export async function ailkSearchContent(
 ): Promise<SearchContentOutput> {
   searchContentInputSchema.parse(input);
 
-  const root = contentRoot ?? join(process.cwd(), "content");
+  const root = contentRoot ?? mcpContentRoot();
   const locale = resolveLocale(input.locale);
   const adapter = getMcpContentAdapter({ contentRoot: root, locale });
 

package/templates/apps/mcp/src/tools/subscribe_newsletter.ts

@@ -18,6 +18,8 @@ import {
   type SubscribeNewsletterOutput,
 } from "@working-theory/validation";
 
+import { visitorForwardHeadersForThisCall } from "../request-context.js";
+
 export { subscribeNewsletterInputSchema, subscribeNewsletterOutputSchema };
 export type { SubscribeNewsletterInput, SubscribeNewsletterOutput };
 
@@ -40,7 +42,13 @@ export async function ailkSubscribeNewsletter(
   const siteId = process.env.AILK_SITE_ID ?? "default";
   const body = { siteId, email, source: "mcp" };
 
-  const res = await apiClient.leads.subscribe(body);
+  // #8073 — forward the address the transport trusted (never an identity
+  // argument on this tool's own schema) so the hub counts the write in that
+  // visitor's own rate-limit bucket rather than this MCP host's.
+  const headers = visitorForwardHeadersForThisCall();
+  const res = headers
+    ? await apiClient.leads.subscribe(body, { headers })
+    : await apiClient.leads.subscribe(body);
   if (!res.ok) {
     return { ok: false, error: { kind: "api_error", status: res.status } };
   }

package/templates/apps/mcp/tsconfig.json

@@ -4,6 +4,8 @@
     "outDir": "./dist",
     "rootDir": "./src",
     "composite": true,
+    "module": "ESNext",
+    "moduleResolution": "bundler",
     "types": ["node"]
   },
   "include": ["src"],

package/templates/apps/web/LICENSE

@@ -1,3 +1,4 @@
+
                                  Apache License
                            Version 2.0, January 2004
                         http://www.apache.org/licenses/
@@ -137,8 +138,8 @@
 
    6. Trademarks. This License does not grant permission to use the trade
       names, trademarks, service marks, or product names of the Licensor,
-      except as required for describing the origin of the Work and
-      reproducing the content of the NOTICE file.
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
 
    7. Disclaimer of Warranty. Unless required by applicable law or
       agreed to in writing, Licensor provides the Work (and each
@@ -162,7 +163,7 @@
       other commercial damages or losses), even if such Contributor
       has been advised of the possibility of such damages.
 
-   9. Accepting Warranty or Support. While redistributing
+   9. Accepting Warranty or Additional Liability. While redistributing
       the Work or Derivative Works thereof, You may choose to offer,
       and charge a fee for, acceptance of support, warranty, indemnity,
       or other liability obligations and/or rights consistent with this
@@ -171,7 +172,7 @@
       of any other Contributor, and only if You agree to indemnify,
       defend, and hold each Contributor harmless for any liability
       incurred by, or claims asserted against, such Contributor by reason
-      of your accepting any such warranty or support.
+      of your accepting any such warranty or additional liability.
 
    END OF TERMS AND CONDITIONS
 
@@ -186,7 +187,7 @@
       same "printed page" as the copyright notice for easier
       identification within third-party archives.
 
-   Copyright 2026 Tailwind AI
+   Copyright [yyyy] [name of copyright owner]
 
    Licensed under the Apache License, Version 2.0 (the "License");
    you may not use this file except in compliance with the License.

package/templates/apps/web/NOTICE

@@ -0,0 +1,2 @@
+AI Launch Kit
+Copyright 2026 SalesSmyth LLC

package/templates/apps/web/app/.well-known/ai-plugin.json/route.ts

@@ -28,7 +28,7 @@
  * See `docs/security/agent-manifest.md` for the full consumer guidance.
  */
 
-import { SITE_NAME } from "../../../lib/site-brand";
+import { SITE_DESCRIPTION, SITE_NAME } from "../../../lib/site-brand";
 import { resolveBaseUrl } from "../../../src/lib/routes";
 
 /** Soft cap to detect runaway `description_for_model` growth. */
@@ -66,8 +66,8 @@ export function GET(): Response {
     schema_version: "v1",
     name_for_human: SITE_NAME,
     name_for_model: "ai_launch_kit",
-    description_for_human:
-      "AX-first OSS template — ship software with API + MCP as canonical agent surfaces.",
+    // #8085 — the site's own description, as /.well-known/mcp.json (#8057).
+    description_for_human: SITE_DESCRIPTION,
     description_for_model: MANIFEST_DESCRIPTION_FOR_MODEL,
     auth: { type: "none" },
     api: {