create-ailk 0.17.0 → 0.19.0

package/dist/spoke-checkout.js

@@ -1,8 +1,10 @@
 /**
  * The spoke checkout slice (#7838) — what a spoke carrying `commerce` gets in
- * `apps/web`: the buy route and the Stripe webhook route (the only two files
- * allowed to import the checkout package, #7873), the site's own
- * `lib/checkout-config.ts`, and the thank-you and unavailable return pages.
+ * `apps/web`: the buy route and the Stripe webhook route (allowed to import
+ * the checkout package, #7873), the site's own `lib/checkout-config.ts`, and
+ * the thank-you and unavailable return pages. A spoke that signs in through
+ * its hub also gets the billing action, the third file allowed to import the
+ * package, and the web seam render that reaches it (#8217 D6–D8).
  *
  * Every guarantee lives in `@working-theory/spoke-checkout` and arrives by a
  * package bump; these files are thin and, apart from the config's one stamp
@@ -23,7 +25,7 @@ import { SPOKE_CHECKOUT_ROUTE_FILES } from "./derive-architecture.js";
 import { ENV_CATALOG } from "./lib/env-catalog.js";
 import { diffTwoStrings, } from "./lib/extract-module-bundle.js";
 import { substituteWorkspaceVersions, } from "./substitute.js";
-import { TopologyError } from "./topology.js";
+import { TopologyError, WEB_SEAM_PATH, renderWebSeam, } from "./topology.js";
 /** The checkout package a spoke's two route files import. */
 export const SPOKE_CHECKOUT_PACKAGE = "@working-theory/spoke-checkout";
 const API_CLIENT_PACKAGE = "@working-theory/api-client";
@@ -131,6 +133,33 @@ const WEBHOOK_ROUTE = renderRoute({
     waiver: "the endpoint URL registered in Stripe, not a versioned API contract",
     exportLine: "export const { POST } = createSpokeCheckout(checkoutConfig).webhook;",
 });
+/**
+ * The spoke billing action (#8217 D6): wiring only, byte-identical across
+ * sites, so every guarantee arrives by a package bump. A plain server module
+ * (C2): its two exports take no argument, and the hub's read is its only
+ * source of customer ids.
+ */
+const BILLING_ACTION = [
+    "// The spoke billing action — GENERATED by create-ailk (#8217). Do not edit:",
+    "// every guarantee lives in the spoke-checkout package and arrives by a",
+    "// package bump. A plain server module, not a Server Action file: neither",
+    "// export takes an argument, and the hub's GET /v1/member/billing is the only",
+    "// source of customer ids. billing-source.ts reaches it through",
+    "// lib/topology.generated.ts and never imports the package.",
+    `import { member } from "${API_CLIENT_PACKAGE}";`,
+    `import { createSpokeCheckout } from "${SPOKE_CHECKOUT_PACKAGE}";`,
+    "",
+    `import { checkoutConfig } from "../../../../../lib/checkout-config";`,
+    `import { forwardedCookieInit } from "../../../../../lib/server-api";`,
+    "",
+    "const billing = createSpokeCheckout(checkoutConfig).billing.forMember(",
+    "  async () => member.billing(await forwardedCookieInit()),",
+    ");",
+    "",
+    "export const readSpokeBilling = billing.read;",
+    "export const spokeBillingPortalUrl = billing.portalUrl;",
+    "",
+].join("\n");
 /** The site's checkout data (D5). Only the `const SITE` line varies by site. */
 function renderConfig(site) {
     return [
@@ -138,9 +167,10 @@ function renderConfig(site) {
         "//",
         "// Written once by create-ailk and yours from then on: create-ailk never",
         "// rewrites it. The buy route and the Stripe webhook route build their",
-        "// handlers from it. Those two are the only files allowed to import the",
-        "// checkout package (architecture.yaml), so this file never imports it,",
-        "// stripe-client or the stripe SDK. Keep it to data and the fulfil callback.",
+        "// handlers from it, and so does the billing action on a spoke that signs",
+        "// in through its hub. Only those files may import the checkout package",
+        "// (architecture.yaml), so this file never imports it, stripe-client or the",
+        "// stripe SDK. Keep it to data and the fulfil callback.",
         "//",
         "// site       Stamped on every Checkout Session as metadata.site. This site's",
         "//            webhook acts only on its own stamp, and the hub ignores any stamp",
@@ -462,15 +492,20 @@ jobs:
 /**
  * The slice for `site`, in order: the two route files, the config, the two
  * pages (D3), then the checkout e2e workflow (#7839 D8), which does not
- * depend on `site`. Throws `TopologyError` for an invalid stamp (SEC-7838-10).
+ * depend on `site`. With `signIn: "hub"` the billing action is the third
+ * pair, so the first three paths are `SPOKE_CHECKOUT_ROUTE_FILES` (#8217 D8).
+ * Throws `TopologyError` for an invalid stamp (SEC-7838-10).
  */
-export function renderSpokeCheckoutFiles(site) {
+export function renderSpokeCheckoutFiles(site, opts = {}) {
     assertSite(site);
-    const [buyPath, webhookPath] = SPOKE_CHECKOUT_ROUTE_FILES;
+    const [buyPath, webhookPath, billingActionPath] = SPOKE_CHECKOUT_ROUTE_FILES;
     const [thankYouPath, unavailablePath] = SPOKE_CHECKOUT_PAGE_FILES;
     return [
         [buyPath, BUY_ROUTE],
         [webhookPath, WEBHOOK_ROUTE],
+        ...(opts.signIn === "hub"
+            ? [[billingActionPath, BILLING_ACTION]]
+            : []),
         [SPOKE_CHECKOUT_CONFIG_PATH, renderConfig(site)],
         [thankYouPath, THANK_YOU_PAGE],
         [unavailablePath, UNAVAILABLE_PAGE],
@@ -516,7 +551,9 @@ function isOlderPin(current, wanted) {
 /**
  * Write the slice into `targetDir` (D3). A file that already exists is left
  * byte-for-byte and reported `skipped` — the config is the site's once
- * written. Adds the package to `apps/web/package.json` when absent, and
+ * written. With `signIn: "hub"` (#8217 D8) the slice carries the billing
+ * action, and the web seam — generated, so always rewritten — becomes the
+ * billing render: reported `patched` when it changed, not at all when equal. Adds the package to `apps/web/package.json` when absent, and
  * raises a plain pin older than the one it writes (#7839): the generated
  * checkout e2e workflow runs a command a `^0.2.0` pin never reaches. Any
  * other range — newer, `workspace:`, a tag — is the site's and is kept.
@@ -524,7 +561,7 @@ function isOlderPin(current, wanted) {
  * missing or malformed `apps/web/package.json`) throws before the first write.
  */
 export function writeSpokeCheckoutSlice(targetDir, opts) {
-    const files = renderSpokeCheckoutFiles(opts.site);
+    const files = renderSpokeCheckoutFiles(opts.site, { signIn: opts.signIn });
     const range = JSON.parse(substituteWorkspaceVersions(`{"${SPOKE_CHECKOUT_PACKAGE}": "workspace:*"}`, opts.versions));
     const version = range[SPOKE_CHECKOUT_PACKAGE];
     const pkgPath = join(targetDir, WEB_PACKAGE_JSON);
@@ -541,6 +578,19 @@ export function writeSpokeCheckoutSlice(targetDir, opts) {
         writeFileSync(abs, text);
         rows.push({ path, action: "written" });
     }
+    if (opts.signIn === "hub") {
+        const seamPath = join(targetDir, WEB_SEAM_PATH);
+        const seamBefore = existsSync(seamPath) ? readFileSync(seamPath, "utf8") : "";
+        const seam = renderWebSeam("spoke", "hub", { spokeBilling: true });
+        if (seamBefore !== seam) {
+            writeFileSync(seamPath, seam);
+            rows.push({
+                path: WEB_SEAM_PATH,
+                action: "patched",
+                change: diffTwoStrings(WEB_SEAM_PATH, seamBefore, seam, true),
+            });
+        }
+    }
     const deps = pkg.dependencies ?? {};
     const current = Object.prototype.hasOwnProperty.call(deps, SPOKE_CHECKOUT_PACKAGE)
         ? deps[SPOKE_CHECKOUT_PACKAGE]

package/dist/starter-grid.d.ts

@@ -14,7 +14,7 @@
  * lives in `template-manifest.ts`, whose `resolveTemplate` is the one reader
  * that yields a template's roster. Nothing but those two files imports this one.
  */
-import type { CategorySlug } from "@working-theory/schema/categories";
+import type { CategorySlug } from "./category-profile.js";
 import type { ModuleName } from "./parse-args.js";
 import type { TemplateLayout } from "./site-chrome.js";
 import type { StarterDesign, StarterShape, TemplateRosterRow } from "./template-manifest.js";

package/dist/surfaces.js

@@ -630,6 +630,23 @@ export const ROUTE_SINCE = {
     // new, so it attaches at today's fixed-group version, the same rule #7430
     // applied above.
     "(authed)/account/inbox/message/[id]/file": "0.37.0",
+    // #8232 — User settings' two pages, General and Billing (the old
+    // `(authed)/account/settings` now redirects to General). Genuinely new, so
+    // they attach at today's fixed-group version, the same rule #7430 applied.
+    "(authed)/account/general": "0.38.0",
+    "(authed)/account/billing": "0.38.0",
+    // #8339 — User settings' two new tabs, Security and Notifications
+    // (General and Billing now render through the shared account-settings
+    // composition). Genuinely new, so they attach at today's fixed-group
+    // version, the same rule #7430/#8232 applied.
+    "(authed)/account/security": "0.38.0",
+    "(authed)/account/notifications": "0.38.0",
+    // #8234 — the member Artifacts pages and a version's file route. Genuinely
+    // new, so they attach at today's fixed-group version, the same rule #7430
+    // applied.
+    "(authed)/account/artifacts": "0.38.0",
+    "(authed)/account/artifacts/[pieceId]": "0.38.0",
+    "(authed)/account/artifacts/[pieceId]/versions/[version]/file": "0.38.0",
     // The leads inbox (#5678). The ROUTE ships in every scaffold, Free
     // included — lead capture is a never-gate surface, so reading a lead back
     // is one too. Whether it shows a ROW is a separate question with two
@@ -759,24 +776,139 @@ export const ROUTE_DEPENDENCIES = {
         `${ROUTE_ROOT}/(authed)/account/account-data.ts`,
         `${ROUTE_ROOT}/(authed)/account/error-row.tsx`,
         `${ROUTE_ROOT}/(authed)/account/retry-button.tsx`,
+        // #8233 C9 — the New menu's files beside account-config.ts: new-popups.tsx
+        // binds the config's actions to the popups, which import the menu and its
+        // server actions. (account-config.ts itself imports none of them — a
+        // spoke without sign-in drops the `(authed)` group and keeps the config.)
+        `${ROUTE_ROOT}/(authed)/account/new-menu.tsx`,
+        `${ROUTE_ROOT}/(authed)/account/new-actions.ts`,
+        `${ROUTE_ROOT}/(authed)/account/new-popups.tsx`,
+        `${ROUTE_ROOT}/(authed)/account/components/schedule-service.tsx`,
+        `${ROUTE_ROOT}/(authed)/account/components/request-quote.tsx`,
+        `${ROUTE_ROOT}/(authed)/account/components/send-message.tsx`,
     ],
     // #7920 — the member file read re-serves the hub's bytes with the
     // credential `forwardedCookieInit` returns.
     "(authed)/account/inbox/message/[id]/file": ["apps/web/lib/server-api.ts"],
+    // #8232 D13 — the settings route is a redirect now; what it still imports
+    // from outside itself is `theme-modes.ts`'s theme reader and the brand file
+    // that reader imports.
     "(authed)/account/settings": [
+        "apps/web/lib/site-brand.tsx",
+        "apps/web/lib/site-theme.ts",
+    ],
+    // #8232 D13 — General and Billing import files in their parent's directory
+    // too. Each listed parent file is new in #8232 or unchanged by it, so a
+    // scaffold that already has one keeps a copy that still compiles; the
+    // settings components General changed moved into `general/` instead (C3).
+    // `profile-actions.ts` imports `lib/hub-session/reseal.ts` by its own path,
+    // since a scaffold's existing `lib/hub-session/index.ts` is never updated.
+    //
+    // #8339 D11 — `settings/color-mode.tsx` drops: General's own color-mode
+    // control is now the shared `AccountSettings` composition's
+    // (@working-theory/templates/account). `sign-in-method.ts` stays: General no
+    // longer renders the Sign-in section itself (moved to Security), but it
+    // still imports `sign-in-method.ts` transitively through
+    // `profile-source.ts`'s `via` derivation.
+    "(authed)/account/general": [
         "apps/web/lib/account-config.ts",
         "apps/web/lib/auth-env.ts",
         "apps/web/lib/server-api.ts",
         "apps/web/lib/site-brand.tsx",
         "apps/web/lib/site-theme.ts",
+        "apps/web/lib/hub-session/reseal.ts",
         `${ROUTE_ROOT}/(authed)/account/account-data.ts`,
-        `${ROUTE_ROOT}/(authed)/account/support-actions.ts`,
+        `${ROUTE_ROOT}/(authed)/account/settings-frame.tsx`,
+        `${ROUTE_ROOT}/(authed)/account/sign-in-method.ts`,
+        `${ROUTE_ROOT}/(authed)/account/profile-actions.ts`,
+        `${ROUTE_ROOT}/(authed)/account/settings/theme-modes.ts`,
+        // #8233 C9 — the New menu's files beside account-config.ts: new-popups.tsx
+        // binds the config's actions to the popups, which import the menu and its
+        // server actions. (account-config.ts itself imports none of them — a
+        // spoke without sign-in drops the `(authed)` group and keeps the config.)
+        `${ROUTE_ROOT}/(authed)/account/new-menu.tsx`,
+        `${ROUTE_ROOT}/(authed)/account/new-actions.ts`,
+        `${ROUTE_ROOT}/(authed)/account/new-popups.tsx`,
+        `${ROUTE_ROOT}/(authed)/account/components/schedule-service.tsx`,
+        `${ROUTE_ROOT}/(authed)/account/components/request-quote.tsx`,
+        `${ROUTE_ROOT}/(authed)/account/components/send-message.tsx`,
+    ],
+    // #8339 D11 — Security holds the former Sign-in section, moved verbatim
+    // from General: `sign-in-method.ts` and what it imports.
+    "(authed)/account/security": [
+        "apps/web/lib/account-config.ts",
+        "apps/web/lib/auth-env.ts",
+        "apps/web/lib/server-api.ts",
+        "apps/web/lib/hub-session/config.ts",
+        `${ROUTE_ROOT}/(authed)/account/account-data.ts`,
+        `${ROUTE_ROOT}/(authed)/account/settings-frame.tsx`,
+        `${ROUTE_ROOT}/(authed)/account/sign-in-method.ts`,
+    ],
+    // #8339 D11 — Notifications holds the former Privacy section's
+    // cookie-settings link, moved verbatim from General.
+    "(authed)/account/notifications": [
+        "apps/web/lib/account-config.ts",
+        "apps/web/lib/server-api.ts",
+        `${ROUTE_ROOT}/(authed)/account/account-data.ts`,
+        `${ROUTE_ROOT}/(authed)/account/settings-frame.tsx`,
+    ],
+    "(authed)/account/billing": [
+        "apps/web/lib/account-config.ts",
+        "apps/web/lib/server-api.ts",
+        `${ROUTE_ROOT}/(authed)/account/account-data.ts`,
+        `${ROUTE_ROOT}/(authed)/account/actions.ts`,
+        `${ROUTE_ROOT}/(authed)/account/error-row.tsx`,
+        `${ROUTE_ROOT}/(authed)/account/retry-button.tsx`,
+        `${ROUTE_ROOT}/(authed)/account/settings-frame.tsx`,
+        `${ROUTE_ROOT}/(authed)/account/billing-source.ts`,
+        // #8233 C9 — the New menu's files beside account-config.ts: new-popups.tsx
+        // binds the config's actions to the popups, which import the menu and its
+        // server actions. (account-config.ts itself imports none of them — a
+        // spoke without sign-in drops the `(authed)` group and keeps the config.)
+        `${ROUTE_ROOT}/(authed)/account/new-menu.tsx`,
+        `${ROUTE_ROOT}/(authed)/account/new-actions.ts`,
+        `${ROUTE_ROOT}/(authed)/account/new-popups.tsx`,
+        `${ROUTE_ROOT}/(authed)/account/components/schedule-service.tsx`,
+        `${ROUTE_ROOT}/(authed)/account/components/request-quote.tsx`,
+        `${ROUTE_ROOT}/(authed)/account/components/send-message.tsx`,
+    ],
+    // #8234 — the Artifacts pages import files in their parent's directory, as
+    // #7430's children do; the artifact page also imports its own parent's
+    // `artifact-data.ts` and `artifact-actions.ts`, which an older synced
+    // `artifacts/` might lack. The file route re-serves the hub's bytes with
+    // the credential `forwardedCookieInit` returns.
+    "(authed)/account/artifacts": [
+        "apps/web/lib/account-config.ts",
+        "apps/web/lib/server-api.ts",
+        `${ROUTE_ROOT}/(authed)/account/account-data.ts`,
+        `${ROUTE_ROOT}/(authed)/account/error-row.tsx`,
+        `${ROUTE_ROOT}/(authed)/account/retry-button.tsx`,
+    ],
+    "(authed)/account/artifacts/[pieceId]": [
+        "apps/web/lib/account-config.ts",
+        "apps/web/lib/server-api.ts",
+        `${ROUTE_ROOT}/(authed)/account/account-data.ts`,
+        `${ROUTE_ROOT}/(authed)/account/error-row.tsx`,
+        `${ROUTE_ROOT}/(authed)/account/retry-button.tsx`,
+        `${ROUTE_ROOT}/(authed)/account/artifacts/artifact-data.ts`,
+        `${ROUTE_ROOT}/(authed)/account/artifacts/artifact-actions.ts`,
     ],
+    "(authed)/account/artifacts/[pieceId]/versions/[version]/file": ["apps/web/lib/server-api.ts"],
     "(authed)/account/support": [
         "apps/web/lib/account-config.ts",
         "apps/web/lib/server-api.ts",
         `${ROUTE_ROOT}/(authed)/account/account-data.ts`,
         `${ROUTE_ROOT}/(authed)/account/support-actions.ts`,
+        // #8233 C9 — the New menu's files beside account-config.ts: new-popups.tsx
+        // binds the config's actions to the popups, which import the menu and its
+        // server actions. (account-config.ts itself imports none of them — a
+        // spoke without sign-in drops the `(authed)` group and keeps the config.)
+        `${ROUTE_ROOT}/(authed)/account/new-menu.tsx`,
+        `${ROUTE_ROOT}/(authed)/account/new-actions.ts`,
+        `${ROUTE_ROOT}/(authed)/account/new-popups.tsx`,
+        `${ROUTE_ROOT}/(authed)/account/components/schedule-service.tsx`,
+        `${ROUTE_ROOT}/(authed)/account/components/request-quote.tsx`,
+        `${ROUTE_ROOT}/(authed)/account/components/send-message.tsx`,
     ],
     "(authed)/admin": [
         "apps/web/lib/server-api.ts",
@@ -832,6 +964,13 @@ export const ROUTE_MESSAGE_NAMESPACES = {
     "(authed)/account/inbox/[kind]/[id]": ["account"],
     "(authed)/account/settings": ["account"],
     "(authed)/account/support": ["account"],
+    "(authed)/account/general": ["account"],
+    "(authed)/account/security": ["account"],
+    "(authed)/account/notifications": ["account"],
+    "(authed)/account/billing": ["account"],
+    // #8234 — the two Artifacts pages; the file route renders no string.
+    "(authed)/account/artifacts": ["account"],
+    "(authed)/account/artifacts/[pieceId]": ["account"],
     "(authed)/admin": ["admin"],
     "(authed)/leads": ["leadsInbox"],
     // #5977 — every string on both editor routes comes from the `edit`

package/dist/template-manifest.d.ts

@@ -14,7 +14,7 @@
  * package already twice records that a fixed template FILE is the drift a
  * registry removes.
  */
-import type { CategorySlug } from "@working-theory/schema/categories";
+import type { CategorySlug } from "./category-profile.js";
 import { type PageRosterRow } from "./module-architecture.js";
 import type { ModuleName } from "./parse-args.js";
 import type { TemplateLayout } from "./site-chrome.js";
@@ -66,8 +66,9 @@ export interface TemplateManifest {
      * The business categories this template is FOR — one or more LEAF slugs from
      * the site-category registry (`@working-theory/schema/categories`, #5830),
      * shared with content's frontmatter `categories`. Required, and typed against
-     * `CategorySlug`, for the same reason `requires` is typed against
-     * `ModuleName`: an unrecognized name fails type-check rather than a runtime
+     * `CategorySlug` — create-ailk's drift-tested copy of the registry's leaves
+     * (`category-profile.ts`, #8412) — for the same reason `requires` is typed
+     * against `ModuleName`: an unrecognized name fails type-check rather than a runtime
      * validation, and every template must be findable under at least one
      * category on the hub's "Browse by business" band.
      *

package/dist/topology.d.ts

@@ -122,13 +122,26 @@ export declare function isSpokeExcluded(path: string, opts: IsSpokeExcludedOptio
  * install passes no remap.
  */
 export declare function spokeDestination(destination: string): string;
+/**
+ * The MCP tools a spoke does not serve (#8070 D7). `create_project` spawns
+ * `packages/create-ailk/dist/cli.js` from the MCP host's working directory,
+ * which a spoke does not carry. Both seams carry the list, so the MCP
+ * server's registration and the web discovery manifest agree; a hub's is
+ * empty.
+ */
+export declare const SPOKE_UNSERVED_MCP_TOOLS: readonly string[];
 /**
  * `apps/web/lib/topology.generated.ts` for `topology` (D5) and, on a spoke,
  * its sign-in mode (#7894 D8). The hub render loads `auth.ts` only when a
  * session is read, so a module that imports this seam for a constant never
- * loads Better Auth.
+ * loads Better Auth. `opts.spokeBilling` (#8217 D7) makes `loadSpokeBilling`
+ * reach the spoke billing action — only on a spoke that signs in through its
+ * hub, the one render whose account area can call it.
+ * @throws TopologyError for `spokeBilling` on a hub or a default-mode spoke.
  */
-export declare function renderWebSeam(topology: Topology, signIn?: SignInMode): string;
+export declare function renderWebSeam(topology: Topology, signIn?: SignInMode, opts?: {
+    spokeBilling?: boolean;
+}): string;
 /**
  * `apps/web/app/[locale]/(authed)/signed-out-gate.generated.tsx` (#7894 D8).
  * The hub render is the `(authed)` layout's no-session branch, moved; the

package/dist/topology.js

@@ -269,13 +269,32 @@ const WEB_SEAM_HEADER = `// topology.generated.ts — how this site reads a sess
 // every scaffold rewrites it. A hub reads the session through Better Auth.
 // A spoke (\`--topology spoke\`) has no database of its own: by default it
 // has no sign-in, so its render reads no session and imports nothing; with
-// \`--hub-sign-in\` (#7894) it reads the sealed hub-session cookie.`;
+// \`--hub-sign-in\` (#7894) it reads the sealed hub-session cookie.
+// UNSERVED_MCP_TOOLS names the MCP tools /.well-known/mcp.json leaves out
+// on this topology (#8070).
+// loadSpokeBilling reaches the spoke billing action only on a spoke that
+// signs in through its hub and carries commerce (#8217); elsewhere, null.`;
 const MCP_SEAM_HEADER = `// topology.generated.ts — how this MCP server resolves its workspace store.
 //
 // GENERATED by create-ailk for this site's topology (#7426). Do not edit:
 // every scaffold rewrites it. A hub resolves its workspace through the
 // database; a spoke (\`--topology spoke\`) has none, so its content tools
-// read the spoke's own MDX and its writes go to the hub at AILK_API_URL.`;
+// read the spoke's own MDX and its writes go to the hub at AILK_API_URL.
+// UNSERVED_MCP_TOOLS names the tools this server does not register on this
+// topology (#8070).`;
+/**
+ * The MCP tools a spoke does not serve (#8070 D7). `create_project` spawns
+ * `packages/create-ailk/dist/cli.js` from the MCP host's working directory,
+ * which a spoke does not carry. Both seams carry the list, so the MCP
+ * server's registration and the web discovery manifest agree; a hub's is
+ * empty.
+ */
+export const SPOKE_UNSERVED_MCP_TOOLS = ["create_project"];
+/** The `UNSERVED_MCP_TOOLS` export every web and mcp seam render carries. */
+function unservedToolsExport(topology) {
+    const list = topology === "spoke" ? SPOKE_UNSERVED_MCP_TOOLS : [];
+    return `export const UNSERVED_MCP_TOOLS: readonly string[] = ${JSON.stringify(list)};`;
+}
 const SITE_SESSION_TYPE = `export type SiteSession = {
   user: {
     name?: string | null;
@@ -293,17 +312,67 @@ export const SIGN_IN_PATH: string | null = ${literal(values.signInPath)};
 export const SIGN_UP_PATH: string | null = ${literal(values.signUpPath)};
 export const SIGN_OUT_ENDPOINT: string | null = ${literal(values.signOutEndpoint)};`;
 }
+/** The spoke billing action (#8217 D6), relative to the web seam. */
+const SPOKE_BILLING_ACTION_IMPORT = "../app/[locale]/(authed)/account/billing/spoke-billing.action";
+/** The billing types every web seam render carries (#8217 D7). */
+const SPOKE_BILLING_TYPES = `export type SpokeCard = { brand: string; last4: string; expMonth: number; expYear: number };
+
+export type SpokeBillingRead =
+  | {
+      kind: "subscription";
+      status: "trialing" | "active" | "past_due" | "canceled";
+      planName: string | null;
+      paymentMethod: SpokeCard | null;
+      unreadable: boolean;
+    }
+  | { kind: "none"; unreadable: boolean }
+  | { kind: "failed" };
+
+export type SpokeBilling = {
+  read(): Promise<SpokeBillingRead>;
+  portalUrl(): Promise<string | null>;
+};`;
+/**
+ * `loadSpokeBilling` (#8217 D7): the billing render imports the action, by a
+ * dynamic import, so a module that reads this seam for a constant never
+ * loads the checkout package; every other render resolves `null`.
+ */
+function spokeBillingLoader(spokeBilling) {
+    if (!spokeBilling) {
+        return `${SPOKE_BILLING_TYPES}
+
+export function loadSpokeBilling(): Promise<SpokeBilling | null> {
+  return Promise.resolve(null);
+}`;
+    }
+    return `${SPOKE_BILLING_TYPES}
+
+export async function loadSpokeBilling(): Promise<SpokeBilling | null> {
+  const { readSpokeBilling, spokeBillingPortalUrl } = await import(
+    "${SPOKE_BILLING_ACTION_IMPORT}"
+  );
+  return { read: readSpokeBilling, portalUrl: spokeBillingPortalUrl };
+}`;
+}
 /**
  * `apps/web/lib/topology.generated.ts` for `topology` (D5) and, on a spoke,
  * its sign-in mode (#7894 D8). The hub render loads `auth.ts` only when a
  * session is read, so a module that imports this seam for a constant never
- * loads Better Auth.
+ * loads Better Auth. `opts.spokeBilling` (#8217 D7) makes `loadSpokeBilling`
+ * reach the spoke billing action — only on a spoke that signs in through its
+ * hub, the one render whose account area can call it.
+ * @throws TopologyError for `spokeBilling` on a hub or a default-mode spoke.
  */
-export function renderWebSeam(topology, signIn = "off") {
+export function renderWebSeam(topology, signIn = "off", opts = {}) {
+    const spokeBilling = opts.spokeBilling === true;
+    if (spokeBilling && (topology !== "spoke" || signIn !== "hub")) {
+        throw new TopologyError("the spoke billing loader renders only on a spoke that signs in through its hub (--hub-sign-in)");
+    }
     if (topology === "hub") {
         return `${WEB_SEAM_HEADER}
 
 export const TOPOLOGY: "hub" | "spoke" = "hub";
+${unservedToolsExport("hub")}
 ${signInExports({ enabled: true, provider: "site", signInPath: "/sign-in", signUpPath: "/sign-up", signOutEndpoint: null })}
 
 ${SITE_SESSION_TYPE}
@@ -317,6 +386,8 @@ export async function registerSiteStores(): Promise<void> {
   const { registerLicenseKeyStore } = await import("./license-key-store");
   await registerLicenseKeyStore();
 }
+
+${spokeBillingLoader(false)}
 `;
     }
     if (signIn === "hub") {
@@ -324,6 +395,7 @@ export async function registerSiteStores(): Promise<void> {
 import { readHubSession } from "./hub-session/session";
 
 export const TOPOLOGY: "hub" | "spoke" = "spoke";
+${unservedToolsExport("spoke")}
 ${signInExports({ enabled: true, provider: "hub", signInPath: "/account", signUpPath: null, signOutEndpoint: "/api/hub-session/sign-out" })}
 
 ${SITE_SESSION_TYPE}
@@ -335,11 +407,14 @@ export function readSession(headers: Headers): Promise<SiteSession> {
 export function registerSiteStores(): Promise<void> {
   return Promise.resolve();
 }
+
+${spokeBillingLoader(spokeBilling)}
 `;
     }
     return `${WEB_SEAM_HEADER}
 
 export const TOPOLOGY: "hub" | "spoke" = "spoke";
+${unservedToolsExport("spoke")}
 ${signInExports({ enabled: false, provider: "none", signInPath: null, signUpPath: null, signOutEndpoint: null })}
 
 ${SITE_SESSION_TYPE}
@@ -352,6 +427,8 @@ export function readSession(headers: Headers): Promise<SiteSession> {
 export function registerSiteStores(): Promise<void> {
   return Promise.resolve();
 }
+
+${spokeBillingLoader(false)}
 `;
 }
 const AUTHED_GATE_SEAM_HEADER = `// signed-out-gate.generated.tsx — what the (authed) group shows a signed-out visitor.
@@ -504,6 +581,7 @@ export { registerLicenseKeyStore } from "./license-key-store.js";
 export type { McpWorkspaceResolution };
 
 export const TOPOLOGY: "hub" | "spoke" = "hub";
+${unservedToolsExport("hub")}
 
 export async function initPublicWorkspace(): Promise<void> {
   await initMcpPublicWorkspace();
@@ -523,6 +601,7 @@ export type McpWorkspaceResolution =
   | { kind: "unresolved"; reason: "ambiguous" };
 
 export const TOPOLOGY: "hub" | "spoke" = "spoke";
+${unservedToolsExport("spoke")}
 
 export function initPublicWorkspace(): Promise<void> {
   return Promise.resolve();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-ailk",
-  "version": "0.17.0",
+  "version": "0.19.0",
   "description": "Scaffolder for AI Launch Kit — `pnpm create ailk@latest <dir>` produces a starter repo consuming @working-theory/* from npm (per ADR 0007).",
   "type": "module",
   "main": "./dist/index.js",
@@ -18,7 +18,8 @@
     "component-catalog.json",
     "component-catalog.md",
     "README.md",
-    "LICENSE"
+    "LICENSE",
+    "NOTICE"
   ],
   "publishConfig": {
     "access": "public"
@@ -27,8 +28,8 @@
     "tar": "^7.5.21"
   },
   "devDependencies": {
-    "@working-theory/templates": "0.38.0",
-    "@working-theory/schema": "0.38.0"
+    "@working-theory/schema": "0.39.0",
+    "@working-theory/templates": "0.39.0"
   },
   "repository": {
     "type": "git",

package/templates/.env.example

@@ -9,9 +9,9 @@ AILK_PUBLIC_DOMAIN=ailaunchkit.ai
 # STEALTH defaults to "true" for new installs so a freshly-deployed instance
 # isn't indexed by crawlers or unfurled by Slack/Twitter/LinkedIn before the
 # operator is ready. Three layers gate on this single flag:
-#   1. apps-paid/marketing-web/public/robots.txt (always-blocking static file)
-#   2. X-Robots-Tag: noindex, nofollow, noarchive HTTP header (next.config.ts)
-#   3. <meta name="robots" content="noindex,nofollow"> tag (app/layout.tsx)
+#   1. robots.txt answers "Disallow: /" for every crawler (apps/web/app/robots.txt/route.ts)
+#   2. X-Robots-Tag: noindex, nofollow, noarchive HTTP header (apps/web/next.config.mjs)
+#   3. <meta name="robots" content="noindex,nofollow"> tag (apps/web/app/[locale]/layout.tsx)
 # At launch, set STEALTH=false on the hosting platform's env vars and redeploy.
 # See README.md § "Going live" for the full flip checklist.
 STEALTH=true

package/templates/.github/workflows/ci.yml

@@ -54,4 +54,9 @@ jobs:
 
       - run: pnpm test
 
+      # apps/web's `next build` with the docs module outgrows Node's default
+      # ~2 GB heap and aborts with "JavaScript heap out of memory" (#8069).
+      # The hosted runner has ~7 GB; give the build room.
       - run: pnpm build
+        env:
+          NODE_OPTIONS: --max-old-space-size=6144