create-ailk 0.19.1 → 0.21.0

package/dist/module-architecture.js

@@ -21,7 +21,7 @@
  * `architecture.yaml` template files — a fixed template IS the drift this
  * removes.
  */
-import { existsSync, readFileSync } from "node:fs";
+import { existsSync, lstatSync, readFileSync, realpathSync } from "node:fs";
 import { join, sep } from "node:path";
 import { CONTENT_PAYLOADS, } from "./content-payloads.js";
 import { importClosure } from "./lib/import-graph.js";
@@ -183,12 +183,18 @@ const MEMBER_AREA_FILES = [
     "apps/api/src/routes/member/request-form.ts",
     "apps/api/src/routes/member/billing.ts",
     "apps/api/src/routes/member/requests.ts",
+    // #8515 D13 — the client's onboarding read and write.
+    "apps/api/src/routes/member/onboarding.ts",
     "apps/api/src/routes/member/artifact-review.ts",
     "apps/api/src/routes/member/profile.ts",
     "apps/api/src/routes/member/deletion-request.ts",
     // #8438 D6 — the member's own consents; the same gate as the writes above.
     "apps/api/src/routes/member/consents.ts",
     "apps/api/src/services/member-area.ts",
+    // #8516 D8 — whether proposal payment runs, and the Checkout Session;
+    // imported only by member-area files (pieces.ts and the two member
+    // artifact routes), and itself imports only base files.
+    "apps/api/src/services/proposal-payments.ts",
     "apps/api/src/lib/member-store.ts",
     // #8226 D12 — the member-request match CLI; both import member-store.ts,
     // which a build without the member slice does not carry.
@@ -1488,6 +1494,13 @@ export const MODULE_SLICES = {
             "apps/api/src/routes/slack/index.ts",
             "apps/api/src/routes/slack/actions.ts",
             "apps/api/src/routes/waitlist-signups/index.ts",
+            // #7479 — the listing-draft forwarded-visitor suite exercises the three
+            // project-listings draft routes through the real build(), and those
+            // routes register only under isModuleEnabled("signal-collectors"), so
+            // the suite strips with this slice (the #7389 shape for
+            // schedule-forwarded-rate-limit.test.ts under scheduling) instead of
+            // failing every keyless scaffold's apps/api jest gate.
+            "apps/api/src/__tests__/listings-forwarded-rate-limit.test.ts",
             // apps/api/src/routes/project-listings/{start,patch-draft,submit,public,
             // me,respond,resume-token}.ts and services/{project-listings,
             // listing-config}.ts deliberately NOT listed — see the comment above
@@ -2201,11 +2214,51 @@ export function missingArchitectureEnforcement(siteDir) {
         missing.push("package.json scripts.preflight (runs pnpm architecture)");
     }
     const postToolUse = readJson(".claude/settings.json")?.hooks?.PostToolUse ?? [];
+    const ARCH_PNPM_RE = /\bpnpm\b.*\barchitecture\b/;
+    // CloudParity's repo-owned-hook command grammar (#8509 D2/D6): no
+    // $CLAUDE_PROJECT_DIR prefix, no arguments, no shell operators.
+    const ARCH_HOOK_SCRIPT_RE = /^bash \.claude\/hooks\/([A-Za-z0-9._-]+(?:\/[A-Za-z0-9._-]+)*)$/;
+    /**
+     * A command "runs architecture" either in today's inline form (matched on
+     * the command string itself, so a pre-#8509 scaffold still verifies) or in
+     * the script form CloudParity's declaration grammar requires — read the
+     * named script's own text, so a deleted or emptied script still reports
+     * missing even though the command string is unchanged.
+     */
+    const commandRunsArchitecture = (command) => {
+        if (ARCH_PNPM_RE.test(command))
+            return true;
+        const match = ARCH_HOOK_SCRIPT_RE.exec(command);
+        if (!match)
+            return false;
+        const scriptRel = match[1];
+        // The charset `ARCH_HOOK_SCRIPT_RE` allows per segment admits "." and
+        // "..", which CloudParity's own grammar forbids (#8509 spec §1) — reject
+        // them here too, so a crafted command string can't walk this read
+        // outside siteDir/.claude/hooks/.
+        if (scriptRel.split("/").some((seg) => seg === "." || seg === ".."))
+            return false;
+        const hooksDir = join(siteDir, ".claude", "hooks");
+        const scriptPath = join(hooksDir, scriptRel);
+        if (!existsSync(scriptPath))
+            return false;
+        try {
+            const realHooksDir = realpathSync(hooksDir);
+            const realScript = realpathSync(scriptPath);
+            if (!realScript.startsWith(realHooksDir + sep) || !lstatSync(realScript).isFile()) {
+                return false;
+            }
+            return ARCH_PNPM_RE.test(readFileSync(realScript, "utf8"));
+        }
+        catch {
+            return false;
+        }
+    };
     const hooked = postToolUse.some((entry) => {
         const tools = (entry.matcher ?? "").split("|");
         return (tools.includes("Edit") &&
             tools.includes("Write") &&
-            (entry.hooks ?? []).some((h) => /\bpnpm\b.*\barchitecture\b/.test(h.command ?? "")));
+            (entry.hooks ?? []).some((h) => commandRunsArchitecture(h.command ?? "")));
     });
     if (!hooked) {
         missing.push(".claude/settings.json PostToolUse hook on Edit|Write (runs pnpm architecture)");

package/dist/programmatic.d.ts

@@ -195,8 +195,14 @@ export interface ScaffoldResult {
  *
  * Throws ValidationError if targetDir already exists and is non-empty.
  * Throws Error if the template copy fails for any other reason.
+ *
+ * @param copied — INTERNAL (#8522 D2): when passed, every recordable path
+ *   `copyTemplate` writes is hashed into this map (destination path -> the
+ *   sha256 of the bytes written), for `scaffold()` to build
+ *   `.ailk-template-files.json` from once every later layer has landed. No
+ *   existing caller passes it, so their behaviour is unchanged.
  */
-export declare function scaffoldSync(opts: ScaffoldOptions): ScaffoldResult;
+export declare function scaffoldSync(opts: ScaffoldOptions, copied?: Map<string, string>): ScaffoldResult;
 /**
  * Scaffold an AI Launch Kit starter project into targetDir (async wrapper).
  *

package/dist/programmatic.js

@@ -25,7 +25,7 @@ import { CATALOG_TARGET_PATH, writeComponentCatalog, } from "./component-catalog
 import { buildScaffoldMarkers, copyTemplate } from "./copy.js";
 import { deriveArchitecture } from "./derive-architecture.js";
 import { compileDesignFonts, compileDesignTheme } from "./design-compile.js";
-import { HOME_PAGE_PATH, designHomeSeeds, planDesignHome, shapeHomePath, shippedHomeSeeds, } from "./design-home.js";
+import { DESIGN_SEED_PAGES, designHomeSeeds, planDesignHome, shapeHomePath, shippedHomeSeeds, siteIdentityName, } from "./design-home.js";
 import { applyDesignPresets, readSectionLookCatalog, shippedPageTypes, validateDesignPresets, } from "./design-presets.js";
 import { resolveDesign, spliceThemeBlock, } from "./design-scaffold.js";
 import { writeAuthSecretFile } from "./lib/auth-secret-file.js";
@@ -48,6 +48,7 @@ import { spokeCheckoutSite, spokeEnvRowOptions, writeSpokeCheckoutSlice, } from
 import { GATEABLE_SURFACES, MODULE_SURFACES, NAV_CONFIG_PATH, excludedRoutePaths, isUnservedSurfaceContent, renderNavConfig, resolveSurfaces, } from "./surfaces.js";
 import { syncRoutes } from "./sync-routes.js";
 import { BASE_LAYER_DIR, SHAPE_STARTERS, TEMPLATE_MANIFESTS, TemplateError, mergeRoster, resolveTemplate, resolveTemplateLineage, rosterDeclares, templateDelivery, templateTreeDir, } from "./template-manifest.js";
+import { TEMPLATE_RECORD_PATH, isRecordable, planTemplateRecord, serializeTemplateRecord, sha256Hex, } from "./template-record.js";
 import { SPOKE_ONLY_FILES, TopologyError, applySpokeTransforms, isSpokeExcluded, normalizeHubSignInUrl, normalizeHubUrl, readSiteTopology, spokeExclusions, spokeDestination, spokeModuleRefusal, spokeModules, writeHubOriginEnv, writeHubSignInEnv, } from "./topology.js";
 import { validateTarget } from "./validate.js";
 const PKG_ROOT = resolve(dirname(fileURLToPath(import.meta.url)), "..");
@@ -148,8 +149,14 @@ function resolveShapeTemplate(shape) {
  *
  * Throws ValidationError if targetDir already exists and is non-empty.
  * Throws Error if the template copy fails for any other reason.
+ *
+ * @param copied — INTERNAL (#8522 D2): when passed, every recordable path
+ *   `copyTemplate` writes is hashed into this map (destination path -> the
+ *   sha256 of the bytes written), for `scaffold()` to build
+ *   `.ailk-template-files.json` from once every later layer has landed. No
+ *   existing caller passes it, so their behaviour is unchanged.
  */
-export function scaffoldSync(opts) {
+export function scaffoldSync(opts, copied) {
     // Validate target — throws ValidationError on rejection.
     const targetAbs = validateTarget(opts.targetDir);
     const projectName = opts.projectName ?? basename(targetAbs);
@@ -177,6 +184,14 @@ export function scaffoldSync(opts) {
                 : SPOKE_ONLY_FILES),
         ],
         markers: buildScaffoldMarkers(projectName),
+        ...(copied !== undefined
+            ? {
+                onWrite: (relPath, bytes) => {
+                    if (isRecordable(relPath))
+                        copied.set(relPath, sha256Hex(bytes));
+                },
+            }
+            : {}),
     });
     // #7426 D5/D6 — the root files a spoke rewrites, and the spoke seams.
     if (spoke !== undefined)
@@ -315,6 +330,10 @@ export async function scaffold(opts) {
     const designSeeds = resolvedDesign !== undefined
         ? designHomeSeeds(resolvedDesign, { designsDir: DESIGNS_DIR, catalog })
         : [];
+    // #8661 D11 — and its contact seeds, read and validated the same way.
+    const designContactSeeds = resolvedDesign !== undefined
+        ? designHomeSeeds(resolvedDesign, { designsDir: DESIGNS_DIR, catalog, page: "contact" })
+        : [];
     // #6813 D7 — the resolved design only when the CALLER chose one (`opts.design`);
     // a template's own declared design is never gated (#6778 option (c)).
     const chosenDesign = opts.design !== undefined ? resolvedDesign : undefined;
@@ -495,6 +514,10 @@ export async function scaffold(opts) {
     const surfaces = template !== undefined
         ? [...new Set([...(opts.surfaces ?? []), ...rosterSurfaces(template)])].sort()
         : opts.surfaces;
+    // #8522 D2 — every recordable path `copyTemplate` writes, hashed as it is
+    // written: the input to the per-file record `scaffold()` writes below,
+    // once every later layer has landed.
+    const copied = new Map();
     const result = scaffoldSync({
         ...opts,
         modules,
@@ -509,7 +532,7 @@ export async function scaffold(opts) {
         // #6813 D8 step 6 — the resolved design's OWN layout (never its name):
         // `resolveSiteChrome` reads a layout object now, not a `StarterDesign`.
         ...(resolvedDesign !== undefined ? { designLayout: resolvedDesign.pkg.layout } : {}),
-    });
+    }, copied);
     // Threaded to extractModuleBundle for `package.json` patch targets'
     // `workspace:*` substitution (spec 5418 § 3 D2) — the same version map
     // `scaffoldSync` already reads for `copyTemplate`, re-read here since
@@ -700,21 +723,35 @@ export async function scaffold(opts) {
         // every layer has landed, before the presets dress it. A home that is not
         // the shape's placeholder is never written; `--design standard` (no
         // seeds) leaves the shape's home byte-identical. The one
-        // `planDesignHome` call site in scaffold().
-        const homePath = join(result.targetDir, ...HOME_PAGE_PATH.split("/"));
-        let homeSeeded = false;
+        // `planDesignHome` call site in scaffold(). #8661 D11 — the contact page
+        // is planned right after the home, its heading named from the scaffold's
+        // `siteIdentity.name`.
+        const seededPages = [];
         if (template !== undefined) {
-            const homePlan = planDesignHome({
-                current: existsSync(homePath) ? readFileSync(homePath, "utf8") : undefined,
-                shape: template.shape,
-                target: designSeeds.find((seed) => seed.shape === template.shape),
-                shapeHome: readFileSync(shapeHomePath(template.shape, { siteTemplatesDir: SITE_TEMPLATES_DIR, templatesDir: TEMPLATES_DIR }), "utf8"),
-                shippedSeeds: shippedHomeSeeds({ designsDir: DESIGNS_DIR, catalog }),
-                catalog: catalog(),
-            });
-            if (homePlan.outcome === "seeded" && homePlan.text !== undefined) {
-                writeFileSync(homePath, homePlan.text);
-                homeSeeded = true;
+            const siteName = siteIdentityName(existsSync(siteMdxPath) ? readFileSync(siteMdxPath, "utf8") : undefined);
+            for (const [page, pageSeeds] of [
+                ["home", designSeeds],
+                ["contact", designContactSeeds],
+            ]) {
+                const pagePath = join(result.targetDir, ...DESIGN_SEED_PAGES[page].path.split("/"));
+                const plan = planDesignHome({
+                    page,
+                    siteName,
+                    current: existsSync(pagePath) ? readFileSync(pagePath, "utf8") : undefined,
+                    shape: template.shape,
+                    target: pageSeeds.find((seed) => seed.shape === template.shape),
+                    shapeHome: readFileSync(shapeHomePath(template.shape, {
+                        siteTemplatesDir: SITE_TEMPLATES_DIR,
+                        templatesDir: TEMPLATES_DIR,
+                        page,
+                    }), "utf8"),
+                    shippedSeeds: shippedHomeSeeds({ designsDir: DESIGNS_DIR, catalog, page }),
+                    catalog: catalog(),
+                });
+                if (plan.outcome === "seeded" && plan.text !== undefined) {
+                    writeFileSync(pagePath, plan.text);
+                    seededPages.push(page);
+                }
             }
         }
         // #6816 D6 step 10b — the design's section presets, written onto the
@@ -742,12 +779,18 @@ export async function scaffold(opts) {
             }
         }
         // #7743 D6 — the manifest's `/` row records the seeded home's sections,
-        // as the presets left them.
+        // as the presets left them. #8661 — and the `/contact` row the seeded
+        // contact page's.
         const rosterPath = join(result.targetDir, SITE_ROSTER_PATH);
-        if (homeSeeded && existsSync(rosterPath)) {
-            const nextManifest = planHomeRecord(readFileSync(rosterPath, "utf8"), readFileSync(homePath, "utf8"), catalog());
-            if (nextManifest !== undefined)
-                writeFileSync(rosterPath, nextManifest);
+        if (seededPages.length > 0 && existsSync(rosterPath)) {
+            const recorded = readFileSync(rosterPath, "utf8");
+            let manifestText = recorded;
+            for (const page of seededPages) {
+                const pagePath = join(result.targetDir, ...DESIGN_SEED_PAGES[page].path.split("/"));
+                manifestText = planHomeRecord(manifestText, readFileSync(pagePath, "utf8"), catalog(), page) ?? manifestText;
+            }
+            if (manifestText !== recorded)
+                writeFileSync(rosterPath, manifestText);
         }
     }
     // #7838 D8 — a commerce spoke's own checkout: two routes, its config and
@@ -785,6 +828,17 @@ export async function scaffold(opts) {
                 templatesDir: TEMPLATES_DIR,
                 markers,
             }));
+            // #8522 D2 — the per-file record, as this scaffold's LAST write (same
+            // guard and roster as the site manifest just above): a kept copied
+            // path only when its final bytes still hash to the copy — a later
+            // layer (a module bundle's patch, a generator) that rewrote the file
+            // is absent here too.
+            writeFileSync(join(result.targetDir, TEMPLATE_RECORD_PATH), serializeTemplateRecord(planTemplateRecord({
+                targetDir: result.targetDir,
+                copied,
+                version: markers["CREATE_AILK_VERSION"] ?? "",
+                projectName,
+            })));
         }
     }
     // #7536 D3 — the registry follows `apps/web/package.json`, which a module

package/dist/site-roster.d.ts

@@ -1,4 +1,5 @@
 import type { CompiledDesignTheme } from "./design-compile.js";
+import { type DesignSeedPage } from "./design-home.js";
 import { type SectionLookCatalog } from "./design-presets.js";
 import { type PageRosterRow } from "./module-architecture.js";
 import type { ModuleName } from "./parse-args.js";
@@ -102,9 +103,10 @@ export declare const MANIFEST_OPTION_KEYS: readonly ["itemStyle", "actionsPositi
  * `MANIFEST_OPTION_KEYS` values, as the generator writes them. `undefined`
  * when the record already says so, or the manifest has no `/` row with a
  * `sections` key. The value is spliced in place at its own depth; no other
- * byte moves.
+ * byte moves. `page: "contact"` records the `/contact` row from the contact
+ * page instead (#8661 D11).
  */
-export declare function planHomeRecord(manifestText: string, homeText: string, catalog: SectionLookCatalog): string | undefined;
+export declare function planHomeRecord(manifestText: string, homeText: string, catalog: SectionLookCatalog, page?: DesignSeedPage): string | undefined;
 /**
  * The generator's row for each of a module's `pageContributions`, in
  * declaration order — read from the committed manifest of the first

package/dist/site-roster.js

@@ -28,7 +28,7 @@ import { existsSync, readFileSync, readdirSync } from "node:fs";
 import { join, relative, sep } from "node:path";
 import { isDeepStrictEqual } from "node:util";
 import { AddModuleRefusedError, readArchitectureHeader, } from "./add-module-core.js";
-import { HOME_PAGE_PATH } from "./design-home.js";
+import { DESIGN_SEED_PAGES } from "./design-home.js";
 import { locatePageSections } from "./design-presets.js";
 import { diffTwoStrings } from "./lib/extract-module-bundle.js";
 import { MODULE_SLICES, normalizeModules, } from "./module-architecture.js";
@@ -296,14 +296,16 @@ function scalarValue(raw) {
  * `MANIFEST_OPTION_KEYS` values, as the generator writes them. `undefined`
  * when the record already says so, or the manifest has no `/` row with a
  * `sections` key. The value is spliced in place at its own depth; no other
- * byte moves.
+ * byte moves. `page: "contact"` records the `/contact` row from the contact
+ * page instead (#8661 D11).
  */
-export function planHomeRecord(manifestText, homeText, catalog) {
+export function planHomeRecord(manifestText, homeText, catalog, page = "home") {
+    const { route, path } = DESIGN_SEED_PAGES[page];
     const file = parseRosterFile(manifestText, SITE_ROSTER_PATH);
-    const row = file.rows.find((r) => r.value["route"] === "/");
+    const row = file.rows.find((r) => r.value["route"] === route);
     if (row === undefined || !("sections" in row.value))
         return undefined;
-    const sections = (locatePageSections(homeText, HOME_PAGE_PATH) ?? []).map((section) => {
+    const sections = (locatePageSections(homeText, path) ?? []).map((section) => {
         const options = {};
         for (const key of MANIFEST_OPTION_KEYS) {
             const entry = section.entries.find((e) => e.key === key);

package/dist/spoke-checkout.d.ts

@@ -8,6 +8,13 @@ export declare const SPOKE_CHECKOUT_PACKAGE = "@working-theory/spoke-checkout";
 export declare const SPOKE_CHECKOUT_CONFIG_PATH = "apps/web/lib/checkout-config.ts";
 /** The two return pages: Stripe's success URL and every refused buy's target. */
 export declare const SPOKE_CHECKOUT_PAGE_FILES: readonly string[];
+/**
+ * The marker `renderPage()` stamps into both generated return pages' header
+ * comment (D3). `apps/web`'s structured-data test cannot import create-ailk
+ * (the import boundary), so it carries this text as a literal, kept in sync
+ * by `packages/create-ailk/__tests__/spoke-checkout.test.ts` (#8513 AC-5).
+ */
+export declare const SPOKE_CHECKOUT_PAGE_MARKER = "GENERATED by create-ailk (#7838)";
 /** The variables a commerce spoke depends on (D9). The package reads three of them. */
 export declare const SPOKE_CHECKOUT_ENV_CATALOG: Readonly<Record<string, EnvCatalogEntry>>;
 /** The names a commerce spoke declares although only the package reads them (D9). */

package/dist/spoke-checkout.js

@@ -38,6 +38,13 @@ export const SPOKE_CHECKOUT_PAGE_FILES = Object.freeze([
     "apps/web/app/[locale]/checkout/thank-you/page.tsx",
     "apps/web/app/[locale]/checkout/unavailable/page.tsx",
 ]);
+/**
+ * The marker `renderPage()` stamps into both generated return pages' header
+ * comment (D3). `apps/web`'s structured-data test cannot import create-ailk
+ * (the import boundary), so it carries this text as a literal, kept in sync
+ * by `packages/create-ailk/__tests__/spoke-checkout.test.ts` (#8513 AC-5).
+ */
+export const SPOKE_CHECKOUT_PAGE_MARKER = "GENERATED by create-ailk (#7838)";
 /** The variables a commerce spoke depends on (D9). The package reads three of them. */
 export const SPOKE_CHECKOUT_ENV_CATALOG = Object.freeze({
     STRIPE_SECRET_KEY: {
@@ -245,7 +252,7 @@ function renderConfig(site) {
 /** One return page (D7): a server component that reads nothing but its copy. */
 function renderPage(opts) {
     return [
-        `// ${opts.title} — GENERATED by create-ailk (#7838).`,
+        `// ${opts.title} — ${SPOKE_CHECKOUT_PAGE_MARKER}.`,
         ...opts.about.map((line) => `// ${line}`),
         `import { SectionRenderer } from "${UI_SECTIONS_PACKAGE}";`,
         `import type { PageSection } from "${VALIDATION_PACKAGE}";`,

package/dist/starter-grid.js

@@ -117,6 +117,10 @@ const TEMPLATE_BASE_ROSTER = [
     { route: "/sign-up" },
     { route: "/privacy", content: ["content/en/PrivacyPage/privacy.mdx"] },
     { route: "/terms", content: ["content/en/TermsPage/terms.mdx"] },
+    {
+        route: "/working-agreement",
+        content: ["content/en/WorkingAgreementPage/working-agreement.mdx"],
+    },
     {
         route: "/purchase-policy",
         content: ["content/en/PurchasePolicyPage/purchase-policy.mdx"],
@@ -235,6 +239,10 @@ const ORGANIZATION_SERVICE_ROWS = [
     { route: "/sign-up" },
     { route: "/privacy", content: ["content/en/PrivacyPage/privacy.mdx"] },
     { route: "/terms", content: ["content/en/TermsPage/terms.mdx"] },
+    {
+        route: "/working-agreement",
+        content: ["content/en/WorkingAgreementPage/working-agreement.mdx"],
+    },
     {
         route: "/purchase-policy",
         content: ["content/en/PurchasePolicyPage/purchase-policy.mdx"],
@@ -267,6 +275,10 @@ const LOCAL_BUSINESS_SERVICE_ROWS = [
     },
     { route: "/privacy", content: ["content/en/PrivacyPage/privacy.mdx"] },
     { route: "/terms", content: ["content/en/TermsPage/terms.mdx"] },
+    {
+        route: "/working-agreement",
+        content: ["content/en/WorkingAgreementPage/working-agreement.mdx"],
+    },
 ];
 /**
  * `person-service`'s own rows (#6758 D1, D3), derived from
@@ -302,6 +314,10 @@ const PERSON_SERVICE_ROWS = [
     },
     { route: "/privacy", content: ["content/en/PrivacyPage/privacy.mdx"] },
     { route: "/terms", content: ["content/en/TermsPage/terms.mdx"] },
+    {
+        route: "/working-agreement",
+        content: ["content/en/WorkingAgreementPage/working-agreement.mdx"],
+    },
 ];
 /**
  * Each buildable shape's standard roster (#6753 D3) — the rows an alias starts

package/dist/surfaces.js

@@ -94,6 +94,11 @@ export const CORE_ROUTE_DIRS = [
     // 404s. Neither `GATEABLE_SURFACES` nor `MODULE_SURFACES.commerce` gains
     // an entry — the claim decides whether the pages serve, not the scaffold.
     `${ROUTE_ROOT}/purchase`,
+    // #8438 D17/D21 — the one unsubscribe landing every signed link calls.
+    // Consent logging is part of the never-gated privacy floor (CLAUDE.md §
+    // License & tier hygiene's never-gate list), so this ships unconditionally
+    // like `/about`/`/contact`/`/faq` above — never a `GATEABLE_SURFACES` entry.
+    `${ROUTE_ROOT}/unsubscribe`,
 ];
 /**
  * Directory names skipped by `listTemplateRouteDirs`'s walker even though they
@@ -326,6 +331,13 @@ export const GATEABLE_SURFACES = [
         routes: [`${ROUTE_ROOT}/whitepapers`],
         content: ["content/<locale>/Whitepaper"],
     },
+    {
+        // #8661 D10 — the working agreement, module-less like `privacy` and
+        // `terms`: every shape roster names it right after /terms.
+        id: "working-agreement",
+        routes: [`${ROUTE_ROOT}/working-agreement`],
+        content: ["content/<locale>/WorkingAgreementPage"],
+    },
 ];
 /** The recognized `--surfaces` vocabulary, sorted. */
 export const RECOGNIZED_SURFACES = GATEABLE_SURFACES.map((s) => s.id);
@@ -547,6 +559,7 @@ export function isUnservedSurfaceContent(path, enabled) {
  */
 export const ROUTE_SINCE = {
     about: "0.0.0",
+    "about/[slug]": "0.42.0",
     "blog/[[...slug]]": "0.0.0",
     careers: "0.0.0",
     "careers/[slug]": "0.0.0",
@@ -633,6 +646,9 @@ export const ROUTE_SINCE = {
     "vs/[slug]": "0.28.0",
     whitepapers: "0.0.0",
     "whitepapers/[slug]": "0.0.0",
+    // #8661 D10 — the working-agreement page. Genuinely new, so it attaches at
+    // the fixed group's next release line, the same rule #7430 applied.
+    "working-agreement": "0.42.0",
     // #5014 — the (authed) route GROUP: layout.tsx + sign-in-gate.tsx sit
     // directly under "(authed)" (a Next.js route group — its parens are not a
     // URL segment); account/ and waitlist/ are its two syncable sub-trees.
@@ -666,12 +682,20 @@ export const ROUTE_SINCE = {
     // version, the same rule #7430/#8232 applied.
     "(authed)/account/security": "0.38.0",
     "(authed)/account/notifications": "0.38.0",
+    // #8438 D21 — User settings' fifth tab, Privacy, and the public
+    // unsubscribe landing every signed link calls. Genuinely new, so they
+    // attach at today's fixed-group version, the same rule #8339 applied.
+    "(authed)/account/privacy": "0.40.0",
+    unsubscribe: "0.40.0",
     // #8234 — the member Artifacts pages and a version's file route. Genuinely
     // new, so they attach at today's fixed-group version, the same rule #7430
     // applied.
     "(authed)/account/artifacts": "0.38.0",
     "(authed)/account/artifacts/[pieceId]": "0.38.0",
     "(authed)/account/artifacts/[pieceId]/versions/[version]/file": "0.38.0",
+    // #8515 — the client's onboarding page. Genuinely new, so it attaches at
+    // today's fixed-group version, the same rule #7430 applied.
+    "(authed)/account/onboarding": "0.40.0",
     // The leads inbox (#5678). The ROUTE ships in every scaffold, Free
     // included — lead capture is a never-gate surface, so reading a lead back
     // is one too. Whether it shows a ROW is a separate question with two
@@ -774,7 +798,13 @@ export const ROUTE_DEPENDENCIES = {
         "apps/web/lib/auth-routes.ts",
     ],
     "(auth)/sign-in": ["apps/web/lib/auth-env.ts"],
-    "(auth)/sign-up": ["apps/web/lib/auth-env.ts"],
+    // #8438 D13/D21 — the sign-up card's agreements gate also carries the
+    // carried-cookie mint, `sign-up.actions.ts`, beside it in this route's own
+    // directory.
+    "(auth)/sign-up": [
+        "apps/web/lib/auth-env.ts",
+        `${ROUTE_ROOT}/(auth)/sign-up/sign-up.actions.ts`,
+    ],
     "(auth)/forgot-password": ["apps/web/lib/auth-env.ts"],
     "(auth)/reset-password": ["apps/web/lib/auth-env.ts"],
     // #7430 — the group's layout reads `isAccountPath()` to give the account
@@ -789,6 +819,17 @@ export const ROUTE_DEPENDENCIES = {
         "apps/web/lib/server-api.ts",
         "apps/web/lib/site-brand.tsx",
         "apps/web/lib/site-logo.tsx",
+        // #8438 D13/D21 — two brand-new files in this already-existing route
+        // directory; a scaffold whose `(authed)/account` predates this unit
+        // needs them added, which the directory-level sync alone would not do
+        // (sync never overwrites or adds to a directory it already has).
+        // `acceptCarriedAgreementsAction` (the carried-cookie CONSUME side) lives
+        // in this directory's own `agreements-actions.ts`, never in
+        // `(auth)/sign-up` — see that file's header: `(auth)/**` is a sign-in
+        // seed a sign-in-less spoke drops, so a cross-directory reach from here
+        // into it would dangle.
+        `${ROUTE_ROOT}/(authed)/account/agreements-prompt.tsx`,
+        `${ROUTE_ROOT}/(authed)/account/agreements-actions.ts`,
     ],
     // #7430 — the three child routes also import files in their PARENT's
     // directory. A scaffold whose `(authed)/account` predates #7430 keeps its
@@ -875,12 +916,31 @@ export const ROUTE_DEPENDENCIES = {
         `${ROUTE_ROOT}/(authed)/account/sign-in-method.ts`,
     ],
     // #8339 D11 — Notifications holds the former Privacy section's
-    // cookie-settings link, moved verbatim from General.
+    // cookie-settings link, moved verbatim from General. #8438 D15 — that
+    // link moved on again, to Privacy; Notifications now reads the registry
+    // through `member.consents` instead, so it keeps the same dependency set.
     "(authed)/account/notifications": [
         "apps/web/lib/account-config.ts",
         "apps/web/lib/server-api.ts",
         `${ROUTE_ROOT}/(authed)/account/account-data.ts`,
         `${ROUTE_ROOT}/(authed)/account/settings-frame.tsx`,
+        `${ROUTE_ROOT}/(authed)/account/privacy/actions.ts`,
+    ],
+    // #8438 D14 — Privacy's five sections: the summary, the cookie-choice
+    // read from the browser cookie, data-use consents and read-only
+    // agreements (both through `member.consents`), and Request account
+    // deletion, moved here unchanged from General (D16) — so Privacy needs
+    // General's own deletion files too, the same cross-directory rule #8339
+    // D11 applied to Notifications' cookie-settings link.
+    "(authed)/account/privacy": [
+        "apps/web/lib/account-config.ts",
+        "apps/web/lib/server-api.ts",
+        `${ROUTE_ROOT}/(authed)/account/account-data.ts`,
+        `${ROUTE_ROOT}/(authed)/account/settings-frame.tsx`,
+        `${ROUTE_ROOT}/(authed)/account/sign-in-method.ts`,
+        `${ROUTE_ROOT}/(authed)/account/profile-actions.ts`,
+        `${ROUTE_ROOT}/(authed)/account/general/deletion-request.tsx`,
+        `${ROUTE_ROOT}/(authed)/account/general/profile-source.ts`,
     ],
     "(authed)/account/billing": [
         "apps/web/lib/account-config.ts",
@@ -924,6 +984,17 @@ export const ROUTE_DEPENDENCIES = {
         `${ROUTE_ROOT}/(authed)/account/artifacts/artifact-actions.ts`,
     ],
     "(authed)/account/artifacts/[pieceId]/versions/[version]/file": ["apps/web/lib/server-api.ts"],
+    // #8515 D12 — the onboarding page imports its parent's account-data.ts
+    // and error-row.tsx (which renders retry-button.tsx); its actions forward
+    // the credential `forwardedCookieInit` returns. account-data.ts reads the
+    // account config, as the Artifacts pages' does.
+    "(authed)/account/onboarding": [
+        "apps/web/lib/account-config.ts",
+        "apps/web/lib/server-api.ts",
+        `${ROUTE_ROOT}/(authed)/account/account-data.ts`,
+        `${ROUTE_ROOT}/(authed)/account/error-row.tsx`,
+        `${ROUTE_ROOT}/(authed)/account/retry-button.tsx`,
+    ],
     "(authed)/account/support": [
         "apps/web/lib/account-config.ts",
         "apps/web/lib/server-api.ts",
@@ -997,10 +1068,13 @@ export const ROUTE_MESSAGE_NAMESPACES = {
     "(authed)/account/general": ["account"],
     "(authed)/account/security": ["account"],
     "(authed)/account/notifications": ["account"],
+    "(authed)/account/privacy": ["account"],
     "(authed)/account/billing": ["account"],
     // #8234 — the two Artifacts pages; the file route renders no string.
     "(authed)/account/artifacts": ["account"],
     "(authed)/account/artifacts/[pieceId]": ["account"],
+    // #8515 — the onboarding page.
+    "(authed)/account/onboarding": ["account"],
     "(authed)/admin": ["admin"],
     "(authed)/leads": ["leadsInbox"],
     // #5977 — every string on both editor routes comes from the `edit`
@@ -1012,6 +1086,8 @@ export const ROUTE_MESSAGE_NAMESPACES = {
     "(authed)/waitlist": ["waitlistDashboard.gate"],
     // #7744 — the /team hub's empty state reads the `team` namespace.
     team: ["team"],
+    // #8438 D21 — the unsubscribe landing's own namespace.
+    unsubscribe: ["unsubscribe"],
 };
 /** Template-relative path of the generated site-nav registry. */
 export const NAV_CONFIG_PATH = "apps/web/lib/nav-config.ts";

package/dist/sync-routes.d.ts

@@ -1,4 +1,6 @@
 import type { WorkspaceVersionMap } from "./substitute.js";
+/** The site test that fails a route neither rendered through `renderPage` nor in its `NO_STRUCTURED_DATA_ROUTES` (#8704). */
+export declare const STRUCTURED_DATA_TEST_PATH = "apps/web/lib/__tests__/structured-data.test.tsx";
 export interface SyncRoutesOptions {
     /**
      * The already-scaffolded repo (absolute or relative). Must exist, be a
@@ -65,7 +67,32 @@ export interface SyncRoutesResult {
     missingMessageNamespaces: string[];
     /** Gateable surface ids the target does not carry, sorted. */
     skippedSurfaces: string[];
+    /**
+     * When `apply` added a route the template exempts in its structured-data
+     * test and the site's copy of that test is site-edited (its bytes differ
+     * from the recorded hash), each template `NO_STRUCTURED_DATA_ROUTES` entry
+     * the site's test lacks, verbatim, with the added routes it covers (#8704).
+     * Sorted by entry; empty otherwise. The site's test is never written.
+     */
+    structuredDataEntries: Array<{
+        routes: string[];
+        entry: string;
+    }>;
+}
+/** One `NO_STRUCTURED_DATA_ROUTES` element: its source text, dedented, and the routes it exempts. */
+interface StructuredDataExemption {
+    route: string;
+    subtree: boolean;
+    text: string;
 }
+/**
+ * The elements of `source`'s `NO_STRUCTURED_DATA_ROUTES` array literal, by a
+ * brace scan that skips string literals and comments. Empty when the
+ * file declares no such array. It assumes what the template's array holds:
+ * object literals of string, boolean and identifier-array values — no regex
+ * literal or `${…}` interpolation.
+ */
+export declare function parseStructuredDataExemptions(source: string): StructuredDataExemption[];
 /**
  * The template's route directories, ROUTE_ROOT-relative and sorted.
  *
@@ -99,3 +126,4 @@ export declare const SYNC_ROUTES_HELP = "create-ailk sync-routes \u2014 copy tem
  * like `parseCliArgs`; at most one positional.
  */
 export declare function parseSyncRoutesArgs(argv: string[]): SyncRoutesArgs;
+export {};