create-ailk 0.21.0 → 0.22.0

package/component-catalog.json

@@ -17,7 +17,7 @@
       "importPath": "@working-theory/ui/blocks",
       "rootBarrel": "@working-theory/ui",
       "sourceRoot": "packages/ui/src/blocks",
-      "count": 106
+      "count": 107
     },
     {
       "name": "chrome",
@@ -837,6 +837,17 @@
       "descriptionGrade": "strong",
       "sectionType": null
     },
+    {
+      "name": "AuthBackLink",
+      "tier": "blocks",
+      "sourcePath": "packages/ui/src/blocks/AuthBackLink.tsx",
+      "importPath": "@working-theory/ui/blocks",
+      "exported": true,
+      "description": "The auth shell's top-start \"← Back to <site>\". A hub's sign-in page renders it when the visitor arrived from a registered spoke, so the cross-domain handoff names where they came from and gives them the way back.",
+      "descriptionSource": "doc-comment",
+      "descriptionGrade": "strong",
+      "sectionType": null
+    },
     {
       "name": "AuthCard",
       "tier": "blocks",
@@ -5393,6 +5404,9 @@
           "headline": {
             "type": "string"
           },
+          "subtitle": {
+            "type": "string"
+          },
           "body": {
             "type": "string"
           },
@@ -12177,7 +12191,7 @@
       "groups": [
         {
           "name": "colors",
-          "leafCount": 62,
+          "leafCount": 64,
           "leaves": [
             {
               "path": "colors.light.bg",
@@ -12199,6 +12213,11 @@
               "type": "string",
               "value": "#475569"
             },
+            {
+              "path": "colors.light.link",
+              "type": "string",
+              "value": "#2563eb"
+            },
             {
               "path": "colors.light.textMuted",
               "type": "string",
@@ -12354,6 +12373,11 @@
               "type": "string",
               "value": "#94a3b8"
             },
+            {
+              "path": "colors.dark.link",
+              "type": "string",
+              "value": "#60a5fa"
+            },
             {
               "path": "colors.dark.textMuted",
               "type": "string",
@@ -13187,7 +13211,7 @@
         },
         {
           "name": "spacing",
-          "leafCount": 13,
+          "leafCount": 15,
           "leaves": [
             {
               "path": "spacing.controlX",
@@ -13234,6 +13258,16 @@
               "type": "string",
               "value": "1rem"
             },
+            {
+              "path": "spacing.deckLabelLine",
+              "type": "string",
+              "value": "var(--spacing-section-lg)"
+            },
+            {
+              "path": "spacing.deckActionLine",
+              "type": "string",
+              "value": "calc(2 * (var(--control-height-big) + var(--spacing-block-tight)))"
+            },
             {
               "path": "spacing.paragraph",
               "type": "string",

package/component-catalog.md

@@ -15,13 +15,13 @@ The component inventory of `@working-theory/ui` and the shells of `@working-theo
 3. Check the Primitives, Panels and Shells tables too — a low-level control, a collapsible layout container, or a route-level frame lives there, not under Sections or Blocks.
 4. Only then build. If you do build, you are declaring the capability is genuinely absent.
 
-Inventory: **319 component files** across 16 tiers — 56 sections, 106 blocks, 19 chrome, 79 primitives, 6 panels, 8 shells, 5 docs-blog-blocks, 1 docs-blog-chrome, 2 docs-blog-shells, 2 scheduling-sections, 6 scheduling-blocks, 5 signal-collectors-sections, 9 signal-collectors-blocks, 2 commerce-sections, 12 commerce-blocks, 1 commerce-panels. 316 distinct names: `SchedulerEmbed`, `Separator`, `Tabs` exist in more than one tier as genuinely different components, listed once per tier with its own source path.
+Inventory: **320 component files** across 16 tiers — 56 sections, 107 blocks, 19 chrome, 79 primitives, 6 panels, 8 shells, 5 docs-blog-blocks, 1 docs-blog-chrome, 2 docs-blog-shells, 2 scheduling-sections, 6 scheduling-blocks, 5 signal-collectors-sections, 9 signal-collectors-blocks, 2 commerce-sections, 12 commerce-blocks, 1 commerce-panels. 317 distinct names: `SchedulerEmbed`, `Separator`, `Tabs` exist in more than one tier as genuinely different components, listed once per tier with its own source path.
 
-Description coverage: **315/319** components carry a capability description derived from source — 44 from the section registry's hand-authored when-to-use text, 236 from the component's own doc-comment header, 35 from its tier barrel's roster line. **4** have none; they are listed under [Undescribed components](#undescribed-components) rather than given a sentence invented from their name.
+Description coverage: **316/320** components carry a capability description derived from source — 44 from the section registry's hand-authored when-to-use text, 237 from the component's own doc-comment header, 35 from its tier barrel's roster line. **4** have none; they are listed under [Undescribed components](#undescribed-components) rather than given a sentence invented from their name.
 
-Of those, **281** are *strong* — a capability sentence you could match a requirement against — and **34** are *weak*: either one short clause, or a long one that spends itself on wiring (client boundaries, class names, which primitives it composes) instead of on what the thing is for. Weak rows are marked `(weak)` and listed in full under [Weak descriptions](#weak-descriptions). Coverage is 99%, but **findable-without-luck coverage is 88%**.
+Of those, **282** are *strong* — a capability sentence you could match a requirement against — and **34** are *weak*: either one short clause, or a long one that spends itself on wiring (client boundaries, class names, which primitives it composes) instead of on what the thing is for. Weak rows are marked `(weak)` and listed in full under [Weak descriptions](#weak-descriptions). Coverage is 99%, but **findable-without-luck coverage is 88%**.
 
-Per tier, strong out of total: **Sections** 55/56 · **Blocks** 98/106 · **Chrome** 10/19 · **Primitives** 64/79 (4 undescribed) · **Panels** 5/6 · **Shells** 7/8 · **Docs + Blog Blocks** 5/5 · **Docs + Blog Chrome** 1/1 · **Docs + Blog Shells** 0/2 · **Scheduling Sections** 2/2 · **Scheduling Blocks** 6/6 · **Signal-Collectors Sections** 5/5 · **Signal-Collectors Blocks** 8/9 · **Commerce Sections** 2/2 · **Commerce Blocks** 12/12 · **Commerce Panels** 1/1. A tier low on this line is a tier where a capability search is most likely to come up empty on something that exists.
+Per tier, strong out of total: **Sections** 55/56 · **Blocks** 99/107 · **Chrome** 10/19 · **Primitives** 64/79 (4 undescribed) · **Panels** 5/6 · **Shells** 7/8 · **Docs + Blog Blocks** 5/5 · **Docs + Blog Chrome** 1/1 · **Docs + Blog Shells** 0/2 · **Scheduling Sections** 2/2 · **Scheduling Blocks** 6/6 · **Signal-Collectors Sections** 5/5 · **Signal-Collectors Blocks** 8/9 · **Commerce Sections** 2/2 · **Commerce Blocks** 12/12 · **Commerce Panels** 1/1. A tier low on this line is a tier where a capability search is most likely to come up empty on something that exists.
 
 That grade is **mechanical**. It counts what it can measure — how much a description adds beyond the component's own name, how much of it is spent on wiring, whether the extraction came out damaged — and it cannot tell a fluent paragraph about the wrong subject from a useful one. A person reading these tables will find more rows unusable than the weak count admits. Treat it as a floor on the problem, not a measurement of it, and read the source before concluding a capability is absent.
 
@@ -120,7 +120,7 @@ Import: `import { X } from "@working-theory/ui/sections";` (or from the `@workin
 
 ---
 
-## Blocks (106)
+## Blocks (107)
 
 Intermediate composition tiles — the pieces sections are built from. Compose primitives and panels; never import a section.
 
@@ -136,6 +136,7 @@ Import: `import { X } from "@working-theory/ui/blocks";` (or from the `@working-
 | `AskAiCommandGroup` | The ⌘K palette's composable "Ask AI" group; one CommandItem per provider seeding "About <entity>: <query>" (or the entity promptText when the query is empty); composed by the consumer's own CommandDialog. | `import { AskAiCommandGroup } from "@working-theory/ui/blocks"` |
 | `AskAiProviderRow` | The ONE shared provider-link row every ask-AI placement composes — the AskAi section (band + ticker variant) and the Hero `askAi` opt-in all render THIS block, never a per-placement fork. Renders a bounded set of five measured providers, each a deep link seeded with an AUTHORED `promptText` — the prompt is always consumer-supplied data, never derived from page context (headline, entity name, etc.). | `import { AskAiProviderRow } from "@working-theory/ui/blocks"` |
 | `AssetLightbox` | The asset detail lightbox: the image with zoom on the stage, a Details rail with in-place pencil-edit Title and Description, then Filename/Type/Size/Dimensions/Created, then Tags (from the seeded set the caller passes), then Copy link/Replace/Delete. Renders inside a ResponsiveSheet — the SAME field sequence in both layouts (: one field array, walked once, shared by both). | `import { AssetLightbox } from "@working-theory/ui/blocks"` |
+| `AuthBackLink` | The auth shell's top-start "← Back to <site>". A hub's sign-in page renders it when the visitor arrived from a registered spoke, so the cross-domain handoff names where they came from and gives them the way back. | `import { AuthBackLink } from "@working-theory/ui/blocks"` |
 | `AuthCard` | Multi-flow auth card: sign-in, sign-up, invitation, forgot, reset and sent, from one skeleton. One self-contained card renders every auth surface a site needs: signing in, signing up, a closed sign-up that requires an invitation, requesting a password reset, choosing a new password, and the check-your-email state that follows a magic link or a reset request. | `import { AuthCard } from "@working-theory/ui/blocks"` |
 | `AwardBadgePlaceholder` | The labeled placeholder an Awards badge slot renders when no image has been supplied — mirrors MediaPlaceholder's role but in an award-chevron/ laurel badge silhouette rather than a generic photo frame, since an unfilled award slot should read as "an award badge goes here," not "a photo goes here." The shape (a laurel-flanked medallion over a chevron ribbon) is a hand-drawn SVG outline — never a copied G2/Capterra/Apollo asset. | internal — compose from `packages/ui/src/blocks/AwardBadgePlaceholder.tsx` |
 | `BackgroundPattern` | Decorative SVG dot-grid / line pattern for ContactForm section. Decorative block (generalized beyond its original single consumer). Renders an absolutely-positioned decoration behind a section's content. Originally the pattern anchored behind ContactForm's form column; SpotlightPanel composes it as a full-bleed section backdrop (dimmed + blurred, behind a centered card) — same block, a second placement. | `import { BackgroundPattern } from "@working-theory/ui/blocks"` |

package/dist/add-module.js

@@ -168,16 +168,20 @@ export async function applyModuleToScaffold(opts) {
             }
             : {}),
     });
-    // #7838 D8 — commerce on a spoke brings the spoke's own checkout, stamped
-    // from the site directory's name (the `projectName` scaffold() defaults to).
-    // A file the site already has is left as it is. #8217 D8 — on a spoke that
-    // signs in through its hub, the billing action and its seam render too, so
-    // re-running add-module commerce gives an existing commerce spoke the action.
+    // #7838 D8 — commerce on a spoke brings the spoke's own checkout — the
+    // standard, copied from the template (#8748 D3) — stamped from the site
+    // directory's name (the `projectName` scaffold() defaults to). A file the
+    // site already has is left as it is. No record row: the record is written
+    // only at scaffold time. #8217 D8 — on a spoke that signs in through its
+    // hub, the billing action and its seam render too, so re-running
+    // add-module commerce gives an existing commerce spoke the action.
     const spokeCommerce = spoke !== undefined && opts.moduleName === "commerce";
     const checkoutRows = spokeCommerce
         ? writeSpokeCheckoutSlice(targetAbs, {
             site: spokeCheckoutSite(basename(targetAbs)),
+            projectName: basename(targetAbs),
             versions: opts.versions,
+            templatesDir: opts.templatesDir,
             signIn: spoke.signIn,
         })
         : [];

package/dist/derive-architecture.d.ts

@@ -28,7 +28,14 @@ export interface DeriveArchitectureOptions {
  * hub — the billing action (#8217 D9, a reviewed change to the #7873 rule).
  */
 export declare const SPOKE_CHECKOUT_ROUTE_FILES: readonly string[];
-/** The forbidden patterns a spoke's apps/web carries (#7873, brief Part 2 §2). */
+/**
+ * The spoke files that may import @working-theory/spoke-checkout to READ a
+ * paid session, and nothing else: the thank-you page's `readPaidCheckoutEmail`
+ * (#8757 D13). Kept apart from SPOKE_CHECKOUT_ROUTE_FILES so it does not
+ * also admit them to `lib/checkout`, the one file that fulfils an order.
+ */
+export declare const SPOKE_CHECKOUT_READER_FILES: readonly string[];
+/** The forbidden patterns a spoke's apps/web carries (#7873, brief Part 2 §2; #8748). */
 export declare const SPOKE_WEB_FORBIDDEN_PATTERNS: readonly ForbiddenPattern[];
 /** The same three for a spoke's kept apps/mcp — no MCP file may import the package (#7873). */
 export declare const SPOKE_MCP_FORBIDDEN_PATTERNS: readonly ForbiddenPattern[];

package/dist/derive-architecture.js

@@ -37,6 +37,15 @@ export const SPOKE_CHECKOUT_ROUTE_FILES = Object.freeze([
     "apps/web/app/api/webhooks/stripe/route.ts",
     "apps/web/app/[locale]/(authed)/account/billing/spoke-billing.action.ts",
 ]);
+/**
+ * The spoke files that may import @working-theory/spoke-checkout to READ a
+ * paid session, and nothing else: the thank-you page's `readPaidCheckoutEmail`
+ * (#8757 D13). Kept apart from SPOKE_CHECKOUT_ROUTE_FILES so it does not
+ * also admit them to `lib/checkout`, the one file that fulfils an order.
+ */
+export const SPOKE_CHECKOUT_READER_FILES = Object.freeze([
+    "apps/web/app/[locale]/checkout/thank-you/page.tsx",
+]);
 /**
  * A line-level regex for an import of `specifier` or one of its subpaths, in
  * every form the line can take: `from "…"` (a static or re-export, including
@@ -53,7 +62,7 @@ function specifierForm(specifier) {
 /** P1 with no exclusions — a kept apps/mcp's form; apps/web adds the route files. */
 const SPOKE_CHECKOUT_PATTERN = Object.freeze({
     pattern: specifierForm("@working-theory/spoke-checkout"),
-    reason: "Spoke checkout: only the buy route, the webhook route and the billing action may import @working-theory/spoke-checkout (brief Part 2 §2, #7873, #8217)",
+    reason: "Spoke checkout: only the buy route, the webhook route, the billing action and the thank-you page may import @working-theory/spoke-checkout (brief Part 2 §2, #7873, #8217, #8757)",
 });
 const STRIPE_CLIENT_PATTERN = Object.freeze({
     pattern: specifierForm("@working-theory/stripe-client"),
@@ -63,11 +72,37 @@ const STRIPE_SDK_PATTERN = Object.freeze({
     pattern: specifierForm("stripe"),
     reason: "A spoke never imports the stripe SDK directly — it reaches Stripe only through @working-theory/spoke-checkout (#7873)",
 });
-/** The forbidden patterns a spoke's apps/web carries (#7873, brief Part 2 §2). */
+/**
+ * The standard spoke checkout's fulfilment (`lib/checkout.ts`) sends the one
+ * `Idempotency-Key` the hub reads as a purchase, so only the files allowed to
+ * import the package may reach it (#8748 D3, SEC-8748-A): any relative or
+ * `@/`-aliased import (apps/web's tsconfig maps `@/*` to the app root) whose
+ * last segment is `checkout` (with or without a `.js`/`.ts`-family
+ * extension, which `bundler` resolution maps to the same file), in every form
+ * `specifierForm` covers. The
+ * closing quote straight after `checkout` keeps `checkout-config` and
+ * `checkout.actions` out of it. The checkout tests the writer copies are
+ * excluded too: the scaffold's lint reads test files.
+ */
+const SPOKE_FULFILMENT_PATTERN = Object.freeze({
+    pattern: "\\b(?:from|import|require)\\s*\\(?\\s*['\"`](?:(?:\\.{1,2}/)+|@/)(?:[^'\"`]*/)?checkout(?:\\.[cm]?[jt]sx?)?['\"`]",
+    paths_excluded: [
+        ...SPOKE_CHECKOUT_ROUTE_FILES,
+        "apps/web/app/api/checkout/__tests__/**",
+        "apps/web/app/api/webhooks/stripe/__tests__/**",
+        "apps/web/lib/__tests__/checkout.test.ts",
+    ],
+    reason: "Spoke checkout: only the buy route, the webhook route and the billing action may import lib/checkout, the one file that sends the hub an Idempotency-Key (#8748)",
+});
+/** The forbidden patterns a spoke's apps/web carries (#7873, brief Part 2 §2; #8748). */
 export const SPOKE_WEB_FORBIDDEN_PATTERNS = Object.freeze([
-    Object.freeze({ ...SPOKE_CHECKOUT_PATTERN, paths_excluded: [...SPOKE_CHECKOUT_ROUTE_FILES] }),
+    Object.freeze({
+        ...SPOKE_CHECKOUT_PATTERN,
+        paths_excluded: [...SPOKE_CHECKOUT_ROUTE_FILES, ...SPOKE_CHECKOUT_READER_FILES],
+    }),
     STRIPE_CLIENT_PATTERN,
     STRIPE_SDK_PATTERN,
+    SPOKE_FULFILMENT_PATTERN,
 ]);
 /** The same three for a spoke's kept apps/mcp — no MCP file may import the package (#7873). */
 export const SPOKE_MCP_FORBIDDEN_PATTERNS = Object.freeze([

package/dist/design-package.js

@@ -486,13 +486,14 @@ function validateStringMap(raw, file, field) {
 }
 const LAYOUT_KEYS = ["nav", "footer", "announcementBanner", "home"];
 /** Every key a package's `layout` may carry — #7719 D3 adds the optional `deckGrounds` (a deck home only),
- *  #7721 D1 the optional `innerPages`, #7740 D1 the optional `deckPresentation` (a deck home only),
+ *  #7721 D1 the optional `innerPages`, #7740 D1 the optional `deckPresentation` (a deck home only), #8773 the optional `deckAnchors` (a presenting deck only),
  *  #7742 D1 the optional `colorMode` and `chromeStyle`, #7797 D1 the optional `closingFooterPaths`. */
 const ALLOWED_LAYOUT_KEYS = new Set([
     ...LAYOUT_KEYS,
     "deckGrounds",
     "innerPages",
     "deckPresentation",
+    "deckAnchors",
     "colorMode",
     "chromeStyle",
     "closingFooterPaths",
@@ -524,11 +525,12 @@ function validateLayout(raw, file) {
     // `ResolvedSiteChrome` shape; an explicit "default" is the absent key.
     // #7740 D1 — and `deckPresentation` only as `true`.
     // #7742 D1 — and `colorMode` only as "light", `chromeStyle` only as "minimal".
-    const { innerPages, deckPresentation, colorMode, chromeStyle, ...rest } = validated;
+    const { innerPages, deckPresentation, deckAnchors, colorMode, chromeStyle, ...rest } = validated;
     const layout = {
         ...rest,
         ...(innerPages === "bare" ? { innerPages } : {}),
         ...(deckPresentation === true ? { deckPresentation } : {}),
+        ...(deckAnchors === "bare" ? { deckAnchors } : {}),
         ...(colorMode === "light" ? { colorMode } : {}),
         ...(chromeStyle === "minimal" ? { chromeStyle } : {}),
     };
@@ -538,6 +540,9 @@ function validateLayout(raw, file) {
     if (deckPresentation === true && layout.home !== "deck") {
         refuse(file, "layout.deckPresentation", "applies only to home: deck");
     }
+    if (deckAnchors === "bare" && deckPresentation !== true) {
+        refuse(file, "layout.deckAnchors", "applies only with deckPresentation: true");
+    }
     return layout;
 }
 const TREATMENTS_ENUMS = {

package/dist/lib/env-catalog.js

@@ -52,7 +52,7 @@ export const ENV_CATALOG = {
         secret: false,
     },
     AILK_LEAD_SITE: {
-        description: "Marks which site of a hub and its spokes captured an MCP lead; unset leaves the lead unmarked.",
+        description: "This site's slug, written as payload.site on every lead its /contact form and MCP server capture, so a hub can tell its sites apart; unset leaves the lead unmarked.",
         secret: false,
     },
     AILK_LICENSE_STORAGE_PATH: {
@@ -71,6 +71,10 @@ export const ENV_CATALOG = {
         description: "The scope captured leads are stamped with; on a single-tenant install, the default workspace id.",
         secret: false,
     },
+    AILK_SPOKE_KEY: {
+        description: "The hub-issued key this site sends as x-ailk-spoke-key; the checkout fulfilment refuses to run without it. Never committed.",
+        secret: true,
+    },
     AILK_VISITOR_FORWARD_KEY: {
         description: "This spoke's key for forwarding each visitor's IP to the hub, so the hub rate-limits per visitor. Server-only.",
         secret: true,

package/dist/module-architecture.js

@@ -1813,8 +1813,10 @@ export const MODULE_SLICES = {
         // the flow results pages, dev/purchase — spoke-intake Rule 3). What lands
         // is the scaffold-commerce skill, the commerce-boundary rule and the
         // @working-theory/ui-commerce dependency (`patches` below); the spoke's own
-        // checkout — two routes, checkout-config.ts and two return pages — is
-        // rendered by create-ailk (`spoke-checkout.ts`), not carried here.
+        // checkout — the standard spoke checkout, `apps/web` template source
+        // (two routes, lib/checkout.ts, checkout-config.ts, two return pages and
+        // their tests) — is copied by `writeSpokeCheckoutSlice`
+        // (`spoke-checkout.ts`, #8748), not carried here.
         spoke: true,
         paidSectionsPackage: "@working-theory/ui-commerce",
         apps: {

package/dist/programmatic.js

@@ -44,7 +44,7 @@ import { SITE_CHROME_PATH, renderSiteChrome, resolveSiteChrome, } from "./site-c
 import { SITE_FONTS_PATH, renderSiteFonts } from "./site-fonts.js";
 import { planSiteManifest } from "./site-manifest.js";
 import { SITE_ROSTER_PATH, planHomeRecord, planSiteManifestDesign, readSiteRoster, withMeetPlaceholderSeeds, } from "./site-roster.js";
-import { spokeCheckoutSite, spokeEnvRowOptions, writeSpokeCheckoutSlice, } from "./spoke-checkout.js";
+import { SPOKE_CHECKOUT_TEMPLATE_PATHS, dropSpokeCheckoutDependency, spokeCheckoutSite, spokeEnvRowOptions, writeSpokeCheckoutSlice, } from "./spoke-checkout.js";
 import { GATEABLE_SURFACES, MODULE_SURFACES, NAV_CONFIG_PATH, excludedRoutePaths, isUnservedSurfaceContent, renderNavConfig, resolveSurfaces, } from "./surfaces.js";
 import { syncRoutes } from "./sync-routes.js";
 import { BASE_LAYER_DIR, SHAPE_STARTERS, TEMPLATE_MANIFESTS, TemplateError, mergeRoster, resolveTemplate, resolveTemplateLineage, rosterDeclares, templateDelivery, templateTreeDir, } from "./template-manifest.js";
@@ -182,6 +182,9 @@ export function scaffoldSync(opts, copied) {
             ...(spoke !== undefined
                 ? spokeExclusions(TEMPLATES_DIR, spoke)
                 : SPOKE_ONLY_FILES),
+            // #8748 D3 — the standard spoke checkout lands only through
+            // `writeSpokeCheckoutSlice`, on a spoke carrying commerce.
+            ...SPOKE_CHECKOUT_TEMPLATE_PATHS,
         ],
         markers: buildScaffoldMarkers(projectName),
         ...(copied !== undefined
@@ -193,6 +196,9 @@ export function scaffoldSync(opts, copied) {
             }
             : {}),
     });
+    // #8748 D3 — the copied apps/web depends on the checkout package; only a
+    // commerce spoke keeps it, re-added by `writeSpokeCheckoutSlice` in scaffold().
+    dropSpokeCheckoutDependency(targetAbs);
     // #7426 D5/D6 — the root files a spoke rewrites, and the spoke seams.
     if (spoke !== undefined)
         applySpokeTransforms(targetAbs, spoke);
@@ -793,18 +799,26 @@ export async function scaffold(opts) {
                 writeFileSync(rosterPath, manifestText);
         }
     }
-    // #7838 D8 — a commerce spoke's own checkout: two routes, its config and
-    // two return pages, once every layer has landed (so the spoke filter has
-    // already dropped the hub-checkout files) and before the manifest, whose
-    // code-route rows then record /checkout/thank-you and /checkout/unavailable.
+    // #7838 D8 — a commerce spoke's own checkout: the standard spoke checkout
+    // copied from the template (#8748 D3), its config stamped, once every layer
+    // has landed (so the spoke filter has already dropped the hub-checkout
+    // files) and before the manifest, whose code-route rows then record
+    // /checkout/thank-you and /checkout/unavailable. Each copied file is
+    // recorded like the base copy's, so `update` keeps it current.
     // #8217 D8 — a spoke that signs in through its hub also gets the billing
     // action and the web seam render that reaches it.
     const spokeCommerce = spoke !== undefined && result.modules.includes("commerce");
     if (spokeCommerce) {
         writeSpokeCheckoutSlice(result.targetDir, {
             site: spokeCheckoutSite(projectName),
+            projectName,
             versions,
+            templatesDir: TEMPLATES_DIR,
             signIn: spoke.signIn,
+            onWrite: (relPath, bytes) => {
+                if (isRecordable(relPath))
+                    copied.set(relPath, sha256Hex(bytes));
+            },
         });
     }
     // #6944 — the manifest records what this scaffold IS, once every layer has

package/dist/site-chrome.d.ts

@@ -41,6 +41,10 @@ export type SiteChromeHome = "default" | "deck";
 /** The `innerPages` knob's vocabulary (#7721). `bare` → every non-home page
  *  gets the bare header and the one-bar footer. */
 export type SiteChromeInnerPages = "default" | "bare";
+/** The `deckAnchors` knob's vocabulary (#8773). `bare` → the deck home names
+ *  its slides `#<id>` instead of `#slide-<id>`, keeping the `slide-` name only
+ *  where the bare id would collide (the page renderer's `deckSlideAnchors`). */
+export type SiteChromeDeckAnchors = "prefixed" | "bare";
 /** The `colorMode` knob's vocabulary (#7742). `light` pins the site to light
  *  and removes every theme switch; dark then appears only as a deck ground. */
 export type SiteChromeColorMode = "user" | "light";
@@ -72,6 +76,8 @@ export interface TemplateLayout {
     innerPages?: SiteChromeInnerPages;
     /** #7740 D1 — `true`: the deck home presents slide by slide (a deck home only). */
     deckPresentation?: boolean;
+    /** #8773 — `bare`: a presenting deck names its slides `#<id>` (a presenting deck home only). */
+    deckAnchors?: SiteChromeDeckAnchors;
     /** #7742 D1 — `light`: the site is pinned to light, with no theme switch. */
     colorMode?: SiteChromeColorMode;
     /** #7742 D1 — `minimal`: the minimal closing slide, consent bar and themed 404. */
@@ -91,6 +97,8 @@ export interface ResolvedSiteChrome {
     innerPages?: "bare";
     /** Present only when it resolves to `true` AND `home` is `deck` (#7740 D1) — never `false`. */
     deckPresentation?: true;
+    /** Present only when it resolves to "bare" on a presenting deck home (#8773) — never "prefixed". */
+    deckAnchors?: "bare";
     /** Present only when it resolves to "light" — never "user" (#7742 D1). */
     colorMode?: "light";
     /** Present only when it resolves to "minimal" — never "default" (#7742 D1). */

package/dist/site-chrome.js

@@ -64,6 +64,7 @@ const NAV_VALUES = ["full", "mark-only"];
 const FOOTER_VALUES = ["columns", "centered"];
 const HOME_VALUES = ["default", "deck"];
 const INNER_PAGES_VALUES = ["default", "bare"];
+const DECK_ANCHORS_VALUES = ["prefixed", "bare"];
 const COLOR_MODE_VALUES = ["user", "light"];
 const CHROME_STYLE_VALUES = ["default", "minimal"];
 /**
@@ -140,6 +141,12 @@ export function validateTemplateLayout(value, subject) {
         }
         result.deckPresentation = raw.deckPresentation;
     }
+    if ("deckAnchors" in raw && raw.deckAnchors !== undefined) {
+        if (!DECK_ANCHORS_VALUES.includes(raw.deckAnchors)) {
+            throw new TemplateLayoutError(`${subject}: layout.deckAnchors must be one of ${DECK_ANCHORS_VALUES.join(", ")} — got ${JSON.stringify(raw.deckAnchors)}`);
+        }
+        result.deckAnchors = raw.deckAnchors;
+    }
     if ("colorMode" in raw && raw.colorMode !== undefined) {
         if (!COLOR_MODE_VALUES.includes(raw.colorMode)) {
             throw new TemplateLayoutError(`${subject}: layout.colorMode must be one of ${COLOR_MODE_VALUES.join(", ")} — got ${JSON.stringify(raw.colorMode)}`);
@@ -206,6 +213,11 @@ export function resolveSiteChrome(layout, designLayout) {
     if ((layout?.deckPresentation ?? fromDesign.deckPresentation) === true && resolved.home === "deck") {
         resolved.deckPresentation = true;
     }
+    // #8773 — only "bare" is ever a key, and only where the deck presents: the
+    // slide anchors it names exist only under the presentation dial.
+    if ((layout?.deckAnchors ?? fromDesign.deckAnchors) === "bare" && resolved.deckPresentation === true) {
+        resolved.deckAnchors = "bare";
+    }
     // #7742 D1 — as with `innerPages`, only the opt-in value is ever a key.
     if ((layout?.colorMode ?? fromDesign.colorMode) === "light") {
         resolved.colorMode = "light";
@@ -245,6 +257,8 @@ export function renderSiteChrome(resolved) {
     // #7740 D1 — `innerPages`' form: the member and bullet always, the value
     // line only when the chrome presents.
     const presentationValue = resolved.deckPresentation === true ? "\n  deckPresentation: true," : "";
+    // #8773 — the same form: member and bullet always, the value line only for "bare".
+    const deckAnchorsValue = resolved.deckAnchors === "bare" ? '\n  deckAnchors: "bare",' : "";
     // #7742 D1 — the same form again: member and bullet always, value lines
     // only for the opt-in values.
     const colorModeValue = resolved.colorMode === "light" ? '\n  colorMode: "light",' : "";
@@ -271,6 +285,7 @@ export function renderSiteChrome(resolved) {
 //   - innerPages: "bare" → every non-home page renders the bare header and
 //     the one-bar footer.
 //   - deckPresentation → the deck home presents slide by slide: fitted slides, slide anchors, the mark follows the ground
+//   - deckAnchors: "bare" → the presenting deck names its slides #<id> instead of #slide-<id>
 //   - colorMode: "light" → the site is pinned to light and shows no theme
 //     switch; dark appears only as a deck ground.
 //   - chromeStyle: "minimal" → the deck's closing slide is the wordmark,
@@ -286,6 +301,7 @@ export interface SiteChrome {
   home: "default" | "deck";
   innerPages?: "bare";
   deckPresentation?: true;
+  deckAnchors?: "bare";
   colorMode?: "light";
   chromeStyle?: "minimal";
   closingFooterPaths?: readonly string[];${groundsMember}
@@ -295,7 +311,7 @@ export const siteChrome: SiteChrome = {
   nav: ${JSON.stringify(resolved.nav)},
   footer: ${JSON.stringify(resolved.footer)},
   announcementBanner: ${JSON.stringify(resolved.announcementBanner)},
-  home: ${JSON.stringify(resolved.home)},${groundsValue}${innerPagesValue}${presentationValue}${colorModeValue}${chromeStyleValue}${closingFooterPathsValue}
+  home: ${JSON.stringify(resolved.home)},${groundsValue}${innerPagesValue}${presentationValue}${deckAnchorsValue}${colorModeValue}${chromeStyleValue}${closingFooterPathsValue}
 };
 `;
 }

package/dist/spoke-checkout.d.ts

@@ -4,17 +4,17 @@ import { type WorkspaceVersionMap } from "./substitute.js";
 import { type SignInMode } from "./topology.js";
 /** The checkout package a spoke's two route files import. */
 export declare const SPOKE_CHECKOUT_PACKAGE = "@working-theory/spoke-checkout";
-/** The site's checkout data — written once, the site's from then on. */
+/** The site's checkout data — written once, the site's from then on (#8748 D2). */
 export declare const SPOKE_CHECKOUT_CONFIG_PATH = "apps/web/lib/checkout-config.ts";
 /** The two return pages: Stripe's success URL and every refused buy's target. */
 export declare const SPOKE_CHECKOUT_PAGE_FILES: readonly string[];
 /**
- * The marker `renderPage()` stamps into both generated return pages' header
- * comment (D3). `apps/web`'s structured-data test cannot import create-ailk
- * (the import boundary), so it carries this text as a literal, kept in sync
- * by `packages/create-ailk/__tests__/spoke-checkout.test.ts` (#8513 AC-5).
+ * The standard spoke checkout's template paths, scaffold-relative (#8748 D3).
+ * A directory entry covers every file under it, so the tests that sit beside
+ * the routes and pages travel with them. `copyTemplate` skips all of them for
+ * every scaffold; `writeSpokeCheckoutSlice` copies them into a commerce spoke.
  */
-export declare const SPOKE_CHECKOUT_PAGE_MARKER = "GENERATED by create-ailk (#7838)";
+export declare const SPOKE_CHECKOUT_TEMPLATE_PATHS: readonly string[];
 /** The variables a commerce spoke depends on (D9). The package reads three of them. */
 export declare const SPOKE_CHECKOUT_ENV_CATALOG: Readonly<Record<string, EnvCatalogEntry>>;
 /** The names a commerce spoke declares although only the package reads them (D9). */
@@ -54,29 +54,50 @@ export declare const E2E_ACTION_PINS: Readonly<Record<string, string>>;
  */
 export declare const CHECKOUT_E2E_WORKFLOW: string;
 /**
- * The slice for `site`, in order: the two route files, the config, the two
- * pages (D3), then the checkout e2e workflow (#7839 D8), which does not
- * depend on `site`. With `signIn: "hub"` the billing action is the third
- * pair, so the first three paths are `SPOKE_CHECKOUT_ROUTE_FILES` (#8217 D8).
- * Throws `TopologyError` for an invalid stamp (SEC-7838-10).
+ * The rendered part of the slice for `site` (#8748 D3): with `signIn: "hub"`
+ * the billing action (#8217 D8), then the checkout e2e workflow (#7839 D8).
+ * Neither depends on `site`. The rest of the slice is template source,
+ * copied by `writeSpokeCheckoutSlice`. Throws `TopologyError` for an invalid
+ * stamp (SEC-7838-10).
  */
 export declare function renderSpokeCheckoutFiles(site: string, opts?: {
     signIn?: SignInMode | undefined;
 }): [string, string][];
 /**
- * Write the slice into `targetDir` (D3). A file that already exists is left
- * byte-for-byte and reported `skipped` — the config is the site's once
+ * Write the slice into `targetDir` (#7838 D3, #8748 D3). The standard's
+ * template files (`SPOKE_CHECKOUT_TEMPLATE_PATHS`) are copied from
+ * `templatesDir`, each rendered with `copyTemplate`'s own renderer and
+ * markers, so a recorded hash equals what `create-ailk update` renders; the
+ * config's one `const SITE` line is stamped with `site`. `onWrite` is called
+ * once per template file written, as `copyTemplate` calls it. Then come the
+ * rendered files (`renderSpokeCheckoutFiles`). A file that already exists is
+ * left byte-for-byte and reported `skipped` — the config is the site's once
  * written. With `signIn: "hub"` (#8217 D8) the slice carries the billing
  * action, and the web seam — generated, so always rewritten — becomes the
- * billing render: reported `patched` when it changed, not at all when equal. Adds the package to `apps/web/package.json` when absent, and
- * raises a plain pin older than the one it writes (#7839): the generated
- * checkout e2e workflow runs a command a `^0.2.0` pin never reaches. Any
- * other range — newer, `workspace:`, a tag — is the site's and is kept.
+ * billing render: reported `patched` when it changed, not at all when equal.
+ * Adds the package to `apps/web/package.json` when absent, and raises a plain
+ * pin older than the one it writes (#7839): the generated checkout e2e
+ * workflow runs a command a `^0.2.0` pin never reaches. Any other range —
+ * newer, `workspace:`, a tag — is the site's and is kept.
  * Every refusal (an invalid stamp, a version map without the package, a
- * missing or malformed `apps/web/package.json`) throws before the first write.
+ * missing or malformed `apps/web/package.json`, a template missing any
+ * `SPOKE_CHECKOUT_TEMPLATE_PATHS` entry, a template config without exactly
+ * one `const SITE` line, a destination to write that resolves outside
+ * `targetDir`) throws before the first write.
  */
 export declare function writeSpokeCheckoutSlice(targetDir: string, opts: {
     site: string;
+    projectName: string;
     versions: WorkspaceVersionMap;
+    templatesDir: string;
     signIn?: SignInMode | undefined;
+    onWrite?: (relPath: string, bytes: Uint8Array) => void;
 }): InstallReportRow[];
+/**
+ * Drop the checkout package from a scaffold that does not get the slice — a
+ * hub, or a spoke without `commerce` (#8748 D3). The template's
+ * `apps/web/package.json` depends on it because the monorepo's `apps/web`
+ * carries the standard. Every other key is kept in place; a site without the
+ * dependency, or without `apps/web/package.json`, is left as it is.
+ */
+export declare function dropSpokeCheckoutDependency(targetDir: string): void;