create-ailk 0.21.0 → 0.23.0

package/dist/starter-grid.d.ts

@@ -109,9 +109,6 @@ export declare const ALIASES: Readonly<{
         readonly design: "standard";
         readonly modules: readonly ["marketing"];
         readonly categories: readonly ["accounting", "legal", "technology"];
-        readonly layout: {
-            readonly announcementBanner: true;
-        };
     };
     /**
      * The Pro flagship. Its module list is OFFERINGS § 4 offering 3's tiers line

package/dist/starter-grid.js

@@ -1,13 +1,17 @@
 /**
- * The two pages every starter carries whatever its shape (#6658 D5,
+ * The pages every starter carries whatever its shape (#6658 D5,
  * `docs/decisions/starter-roster-page-set.md` D4/D7): a glossary and a
- * newsletter signup. Each is a module-less `GATEABLE_SURFACES` entry the
- * roster enables, with its seed in `_base`.
+ * newsletter signup — each a module-less `GATEABLE_SURFACES` entry the
+ * roster enables, with its seed in `_base` — and the `/unsubscribe` landing
+ * every signed link calls (#8850 D1). That one is a code route with no
+ * `content`, like `/sign-in`: a `CORE_ROUTE_DIRS` entry every scaffold
+ * already serves, never gated (#8438 D17), declared here so the roster of
+ * record lists it beside the newsletter.
  *
- * The third — `/book-a-call` — was retired by #6897 D10: every scaffold's
- * former `/book-a-call` link now points at `/meet/book-a-call`, served by
- * `FREE_MEET_PLACEHOLDER_ROWS` below (a Free placeholder) or by the
- * scheduling module's own live `/meet/[slug]` page.
+ * A former third page — `/book-a-call` — was retired by #6897 D10: every
+ * scaffold's former `/book-a-call` link now points at `/meet/book-a-call`,
+ * served by `FREE_MEET_PLACEHOLDER_ROWS` below (a Free placeholder) or by
+ * the scheduling module's own live `/meet/[slug]` page.
  */
 const SHAPE_INDEPENDENT_ROWS = [
     { route: "/glossary", content: ["content/en/GlossaryList/glossary.mdx"] },
@@ -15,6 +19,7 @@ const SHAPE_INDEPENDENT_ROWS = [
         route: "/newsletter",
         content: ["content/en/NewsletterSignup/newsletter.mdx"],
     },
+    { route: "/unsubscribe" },
 ];
 /**
  * The Free `/meet` placeholder pages (#6897 D5) — a meeting-types hub
@@ -30,10 +35,12 @@ const SHAPE_INDEPENDENT_ROWS = [
  * Every alias that takes the `scheduling` module drops `"/meet"` and
  * `"/meet/[slug]"` (D5) — otherwise `mergeRoster` refuses the duplicate
  * route the module's own rows also contribute. The ROWS go; the SEEDS stay
- * (#6942, operator 2026-09-28, partly reversing D5): until
- * `SCHEDULING_CAL_LINK` is configured the module's pages hand off to the Free
- * placeholder routes, which serve these seeds. `withMeetPlaceholderSeeds`
- * (`site-roster.ts`) folds them onto the module's rows.
+ * (#6942, operator 2026-09-28, partly reversing D5): the module's meeting
+ * page reads a `BookCall/<slug>` seed for its URL, its JSON-LD and its
+ * fallback title, never its sections (#8843 C5). `withMeetPlaceholderSeeds`
+ * (`site-roster.ts`) folds them onto the module's rows. The hub-driven
+ * `/private` index has no row here: it reaches those aliases through the
+ * module's own `pageContributions` (#8843 D8, #8850 D2).
  */
 const FREE_MEET_PLACEHOLDER_ROWS = [
     { route: "/meet", content: ["content/en/LandingPage/meet.mdx"] },
@@ -391,9 +398,12 @@ export const ALIASES = Object.freeze({
         design: "standard",
         modules: ["marketing"],
         categories: ["accounting", "legal", "technology"],
-        // The demo site carries the "Get started with this template" banner
-        // (operator ruling 2026-09-23); every other layout knob keeps its default.
-        layout: { announcementBanner: true },
+        // No `layout`: every knob keeps its default. The "Get started for free or
+        // upgrade to Pro" banner this alias carried for the demo site (operator
+        // ruling 2026-09-23) reached every keyless `organization-product`
+        // scaffold too, so Epic #8845's "no starter page ships our own brands or
+        // upsells" retires it (#8850, spec C6); a demo deployment that wants it
+        // sets it in its own config.
     },
     /**
      * The Pro flagship. Its module list is OFFERINGS § 4 offering 3's tiers line

package/dist/surfaces.js

@@ -229,15 +229,15 @@ export const GATEABLE_SURFACES = [
         content: [],
     },
     {
-        // The `scheduling` MODULE's presentation tier — the booking page, the
-        // per-booking-type page and the confirmation page the module OWNS
-        // (`/meet`, `/meet/:slug`, `/meet/confirmed`, one directory, so one entry
-        // gates all three; renamed from the schedule/ directory by #5563).
-        // API-backed like `flows`: the booker reads its slots from apps/api's
-        // `/v1/schedule/*` routes and the event name from `SCHEDULING_CAL_LINK`,
-        // so there is no MDX of its own.
+        // The `scheduling` MODULE's presentation tier — the meeting index, the
+        // meeting page and the confirmation page the module OWNS (`/meet`,
+        // `/meet/:slug`, `/meet/confirmed`, one directory; renamed from the
+        // schedule/ directory by #5563), and the private index `/private`
+        // (#8843 D10), a second directory gated with it. API-backed like
+        // `flows`: every meeting fact comes from apps/api's
+        // `GET /v1/schedule/meetings`, so there is no MDX of its own.
         id: "meet",
-        routes: [`${ROUTE_ROOT}/meet`],
+        routes: [`${ROUTE_ROOT}/meet`, `${ROUTE_ROOT}/private`],
         content: [],
         // `navLabelKey` names COPY, not a route — D1 R2 (#5563): renaming it would
         // orphan an operator's customised `messages/<locale>.json` for zero
@@ -395,7 +395,9 @@ export const MODULE_SURFACES = {
     // vocabulary assertion covers exactly the recognized module set.
     workspace: [],
     scheduling: ["meet"],
-    "signal-collectors": ["flows"],
+    // #8848 D12 — `/downloads` is now a redirect into `/reports`, both this
+    // module's, so `--surfaces downloads` without it is refused as `flows` is.
+    "signal-collectors": ["flows", "downloads"],
     commerce: [],
 };
 /** Thrown on an unrecognized surface id. Mirrors parse-args' ParseError shape. */
@@ -563,6 +565,13 @@ export const ROUTE_SINCE = {
     "blog/[[...slug]]": "0.0.0",
     careers: "0.0.0",
     "careers/[slug]": "0.0.0",
+    // #8840 D11 — the Job application magnet's two walks, signal-collectors
+    // slice files. Genuinely new, so they attach at the fixed group's next
+    // release line, the same rule #8661 D10 applied.
+    "careers/apply": "0.44.0",
+    "careers/[slug]/apply": "0.44.0",
+    // #8849 D7 — the Free apply page, a core file of the careers surface.
+    "careers/[slug]/[action]": "0.44.0",
     "case-studies": "0.0.0",
     "case-studies/[slug]": "0.0.0",
     clients: "0.0.0",
@@ -572,6 +581,9 @@ export const ROUTE_SINCE = {
     "dev/purchase": "0.0.0",
     "docs/[[...slug]]": "0.0.0",
     downloads: "0.0.0",
+    // #8848 D12 — the per-slug redirect into `/reports/<slug>`, a
+    // signal-collectors slice file at the fixed group's next release line.
+    "downloads/[slug]": "0.44.0",
     events: "0.0.0",
     "events/[slug]": "0.0.0",
     // #6721 — the feature pages, a new route pair at today's line.
@@ -751,6 +763,9 @@ export const ROUTE_SINCE = {
     // new route directory, so it attaches at today's fixed-group version, the
     // same rule applied above.
     "[slug]/[detail]": "0.28.0",
+    // #8843 D8 — the private meeting index, a new route directory gated with
+    // `meet`, attached at today's fixed-group version by the same rule.
+    private: "0.43.0",
 };
 /**
  * Surface id of the registry that owns `routeDir` (ROUTE_ROOT-relative): the
@@ -798,38 +813,42 @@ export const ROUTE_DEPENDENCIES = {
         "apps/web/lib/auth-routes.ts",
     ],
     "(auth)/sign-in": ["apps/web/lib/auth-env.ts"],
-    // #8438 D13/D21 — the sign-up card's agreements gate also carries the
-    // carried-cookie mint, `sign-up.actions.ts`, beside it in this route's own
-    // directory.
+    // #8765 D8/D9 — the sign-up page links its agreements through the one
+    // localized policy map; the carried-cookie mint (`sign-up.actions.ts`) is
+    // deleted, since the server now refuses and records the agreements.
     "(auth)/sign-up": [
         "apps/web/lib/auth-env.ts",
-        `${ROUTE_ROOT}/(auth)/sign-up/sign-up.actions.ts`,
+        "apps/web/lib/consent-policies.ts",
     ],
     "(auth)/forgot-password": ["apps/web/lib/auth-env.ts"],
     "(auth)/reset-password": ["apps/web/lib/auth-env.ts"],
     // #7430 — the group's layout reads `isAccountPath()` to give the account
-    // area its member-facing signed-out gate.
+    // area its member-facing signed-out gate. #8765 D3/D4 — `auth.ts` imports
+    // the sign-up agreements plugin and hooks, so that file travels beside it.
     "(authed)": [
         "apps/web/auth.ts",
         "apps/web/lib/auth-env.ts",
         "apps/web/lib/auth-routes.ts",
+        "apps/web/lib/sign-up-agreements.ts",
     ],
     "(authed)/account": [
         "apps/web/lib/account-config.ts",
+        "apps/web/lib/consent-policies.ts",
         "apps/web/lib/server-api.ts",
         "apps/web/lib/site-brand.tsx",
         "apps/web/lib/site-logo.tsx",
-        // #8438 D13/D21 — two brand-new files in this already-existing route
-        // directory; a scaffold whose `(authed)/account` predates this unit
-        // needs them added, which the directory-level sync alone would not do
-        // (sync never overwrites or adds to a directory it already has).
-        // `acceptCarriedAgreementsAction` (the carried-cookie CONSUME side) lives
-        // in this directory's own `agreements-actions.ts`, never in
-        // `(auth)/sign-up` — see that file's header: `(auth)/**` is a sign-in
-        // seed a sign-in-less spoke drops, so a cross-directory reach from here
-        // into it would dangle.
+        // #8438 D13/D21, #8765 D7 — the agreements interstitial the layout shows
+        // a member with no current grant (`agreements-prompt.tsx`), its accept
+        // action (`agreements-actions.ts`) and the read the layout and the Inbox
+        // share (`agreements-gate.ts`). Listed because a scaffold
+        // whose `(authed)/account` predates #8438 needs them added, which the
+        // directory-level sync alone would not do (sync never overwrites or adds
+        // to a directory it already has). Both live in this directory, never in
+        // `(auth)/**` — a sign-in seed a sign-in-less spoke drops, so a
+        // cross-directory reach from here into it would dangle.
         `${ROUTE_ROOT}/(authed)/account/agreements-prompt.tsx`,
         `${ROUTE_ROOT}/(authed)/account/agreements-actions.ts`,
+        `${ROUTE_ROOT}/(authed)/account/agreements-gate.ts`,
     ],
     // #7430 — the three child routes also import files in their PARENT's
     // directory. A scaffold whose `(authed)/account` predates #7430 keeps its
@@ -934,6 +953,7 @@ export const ROUTE_DEPENDENCIES = {
     // D11 applied to Notifications' cookie-settings link.
     "(authed)/account/privacy": [
         "apps/web/lib/account-config.ts",
+        "apps/web/lib/consent-policies.ts",
         "apps/web/lib/server-api.ts",
         `${ROUTE_ROOT}/(authed)/account/account-data.ts`,
         `${ROUTE_ROOT}/(authed)/account/settings-frame.tsx`,
@@ -1039,9 +1059,13 @@ export const ROUTE_DEPENDENCIES = {
         `${ROUTE_ROOT}/(authed)/waitlist/components/ForbiddenState.tsx`,
     ],
     "(authed)/waitlist": ["apps/web/lib/server-api.ts"],
-    // #6183 S9b D5 — both /meet pages call the shared enabled-slug read.
-    meet: ["apps/web/lib/meeting-slugs.ts"],
-    "meet/[slug]": ["apps/web/lib/meeting-slugs.ts"],
+    // #8843 D6 — the booking pages share one builder over the meetings read;
+    // `/private` returns the index frame that lives under `meet/`.
+    meet: ["apps/web/lib/meetings.tsx"],
+    "meet/[slug]": ["apps/web/lib/meetings.tsx"],
+    private: ["apps/web/lib/meetings.tsx", `${ROUTE_ROOT}/meet/meeting-index.tsx`],
+    // #8927 D8 — /pricing maps the Offerings shown set through the mapper.
+    pricing: ["apps/web/lib/offerings-pricing.ts"],
 };
 /**
  * i18n message namespaces (dot-path into `apps/web/messages/<locale>.json`) a
@@ -1088,6 +1112,8 @@ export const ROUTE_MESSAGE_NAMESPACES = {
     team: ["team"],
     // #8438 D21 — the unsubscribe landing's own namespace.
     unsubscribe: ["unsubscribe"],
+    // #8927 D6 — the Offerings cards' CTA, recommendation and period phrases.
+    pricing: ["pricing", "pricingOfferings"],
 };
 /** Template-relative path of the generated site-nav registry. */
 export const NAV_CONFIG_PATH = "apps/web/lib/nav-config.ts";

package/dist/sync-routes.d.ts

@@ -78,6 +78,23 @@ export interface SyncRoutesResult {
         routes: string[];
         entry: string;
     }>;
+    /**
+     * The retired legacy spoke checkout (#9142), on a spoke only — empty lists
+     * on a hub. See `retireLegacySpokeCheckout`.
+     */
+    retiredCheckout: RetiredCheckoutReport;
+}
+/** What `retireLegacySpokeCheckout` found, and did when `apply` was set. */
+export interface RetiredCheckoutReport {
+    /** Files deleted (without `apply`: to delete), scaffold-relative, sorted. */
+    retired: string[];
+    /** Retired files left in place, with why — the site deletes them by hand. Sorted by path. */
+    kept: Array<{
+        path: string;
+        reason: string;
+    }>;
+    /** Generated files rewritten (without `apply`: to rewrite) — the billing action. */
+    rewritten: string[];
 }
 /** One `NO_STRUCTURED_DATA_ROUTES` element: its source text, dedented, and the routes it exempts. */
 interface StructuredDataExemption {
@@ -102,6 +119,26 @@ export declare function parseStructuredDataExemptions(source: string): Structure
  * the registry recognizes (`surfaceForRouteDir`).
  */
 export declare function listTemplateRouteDirs(templatesDir: string): string[];
+/**
+ * Retire the legacy env-key spoke checkout from a spoke (#9142): its buy
+ * route, Stripe webhook route, `lib/checkout.ts`, their tests
+ * (`RETIRED_SPOKE_CHECKOUT_PATHS`) and the generated checkout e2e workflow.
+ *
+ * - A copied file is deleted only when the template record lists it and its
+ *   bytes still hash to the recorded copy — the rule `create-ailk update`
+ *   uses for a file the template dropped; its record row goes with it. An
+ *   edited file, or one the record does not list, is reported in `kept`.
+ * - The workflow, never recorded, is deleted only when its first line is
+ *   still create-ailk's generated marker.
+ * - The billing action (a spoke that signs in through its hub) imported
+ *   `lib/checkout.ts`; when its first line is still the generated marker and
+ *   it differs from the current render, it is rewritten to `BILLING_ACTION`.
+ *   An edited one that still imports `lib/checkout` is reported in `kept`.
+ *
+ * Without `apply` nothing is written: the lists say what `--apply` would do.
+ * Directories the deletes leave empty are removed, up to `RETIRE_STOP_DIRS`.
+ */
+export declare function retireLegacySpokeCheckout(targetAbs: string, apply: boolean): RetiredCheckoutReport;
 /**
  * Compare an already-scaffolded repo's route tree with the template's and,
  * when `apply` is set, copy in the route dirs it is missing.
@@ -120,7 +157,7 @@ export interface SyncRoutesArgs {
     apply: boolean;
     help: boolean;
 }
-export declare const SYNC_ROUTES_HELP = "create-ailk sync-routes \u2014 copy template routes an existing site is missing.\n\nUsage:\n  create-ailk sync-routes [<target-dir>] [--apply]\n\nArguments:\n  <target-dir>             An already-scaffolded repo (contains\n                           architecture.yaml). Defaults to the current dir.\n\nOptions:\n  --apply                  Copy the missing route directories into the target.\n                           Without it the command only reports: exit 1 when a\n                           route is missing, 0 when in sync.\n  --help, -h               Print this message.\n\nChecks every core route plus the routes of each surface the site carries; a\nsurface gated off at scaffold time is skipped, not drift. A route the site has\nchanged locally is reported and never overwritten. Nothing is ever deleted.\n";
+export declare const SYNC_ROUTES_HELP = "create-ailk sync-routes \u2014 copy template routes an existing site is missing.\n\nUsage:\n  create-ailk sync-routes [<target-dir>] [--apply]\n\nArguments:\n  <target-dir>             An already-scaffolded repo (contains\n                           architecture.yaml). Defaults to the current dir.\n\nOptions:\n  --apply                  Copy the missing route directories into the target.\n                           Without it the command only reports: exit 1 when a\n                           route is missing, 0 when in sync.\n  --help, -h               Print this message.\n\nChecks every core route plus the routes of each surface the site carries; a\nsurface gated off at scaffold time is skipped, not drift. A route the site has\nchanged locally is reported and never overwritten. Nothing is deleted except,\non a spoke, the retired legacy checkout's files that still match create-ailk's\ncopy: --apply removes them and rewrites the generated billing action (#9142).\n";
 /**
  * Parse the argv AFTER the `sync-routes` word. Strict `node:util` parseArgs,
  * like `parseCliArgs`; at most one positional.

package/dist/sync-routes.js

@@ -19,26 +19,33 @@
  *   - Expected bytes are what `copyTemplate` would write. The copier's
  *     text/binary + marker rules are NOT re-implemented here: the template's
  *     route root is copied once into a scratch dir and compared from there.
- *   - Never overwrite, never delete. A route dir the site has changed is
- *     reported as modified and left alone; `--apply` only creates directories
- *     that do not exist, so a second run is a no-op. When the site has edited
- *     its structured-data test, a route `--apply` adds that the template
- *     exempts there is reported with the exact `NO_STRUCTURED_DATA_ROUTES`
- *     entry to add — the test itself is never written (#8704).
+ *   - Never overwrite, never delete — with one named exception. A route dir
+ *     the site has changed is reported as modified and left alone; `--apply`
+ *     only creates directories that do not exist, so a second run is a no-op.
+ *     When the site has edited its structured-data test, a route `--apply`
+ *     adds that the template exempts there is reported with the exact
+ *     `NO_STRUCTURED_DATA_ROUTES` entry to add — the test itself is never
+ *     written (#8704). The exception is the retired legacy spoke checkout
+ *     (#9142): on a spoke, `--apply` deletes its files that are still
+ *     byte-identical to the template record and rewrites the generated
+ *     billing action off them (`retireLegacySpokeCheckout`); an edited or
+ *     unrecorded file is reported and left alone.
  *
  * Pure module: no `import.meta.url`, so jest can import it directly. The
  * package's own `templates/` dir is supplied by programmatic.ts.
  */
-import { existsSync, mkdirSync, mkdtempSync, readdirSync, readFileSync, rmSync, statSync, writeFileSync, } from "node:fs";
+import { existsSync, lstatSync, mkdirSync, mkdtempSync, readdirSync, readFileSync, rmdirSync, rmSync, statSync, writeFileSync, } from "node:fs";
 import { tmpdir } from "node:os";
 import { basename, dirname, join, resolve, sep } from "node:path";
 import { parseArgs } from "node:util";
 import { copyTemplate } from "./copy.js";
+import { SPOKE_BILLING_ACTION_PATH } from "./derive-architecture.js";
 import { appendEnvRows } from "./lib/declared-env.js";
 import { ENV_CATALOG } from "./lib/env-catalog.js";
+import { BILLING_ACTION, BILLING_ACTION_MARKER, RETIRED_CHECKOUT_E2E_MARKER, RETIRED_CHECKOUT_E2E_WORKFLOW_PATH, RETIRED_SPOKE_CHECKOUT_PATHS, } from "./spoke-checkout.js";
 import { substituteMarkers } from "./substitute.js";
 import { GATEABLE_SURFACES, NON_ROUTE_DIRS, ROUTE_DEPENDENCIES, ROUTE_MESSAGE_NAMESPACES, ROUTE_SINCE, surfaceForRouteDir, } from "./surfaces.js";
-import { TEMPLATE_RECORD_PATH, parseTemplateRecord, sha256Hex } from "./template-record.js";
+import { TEMPLATE_RECORD_PATH, parseTemplateRecord, serializeTemplateRecord, sha256Hex, } from "./template-record.js";
 import { SPOKE_SEAM_FILES, isSpokeExcluded, readSpokeShape, } from "./topology.js";
 /** Template-relative prefix every `apps/web` route directory sits under. */
 const ROUTE_ROOT = "apps/web/app/[locale]";
@@ -50,11 +57,18 @@ export const STRUCTURED_DATA_TEST_PATH = "apps/web/lib/__tests__/structured-data
  * `projects/apply` (#5048) is signal-collectors' own owned file
  * (`ListingApplicationClient.tsx`, D-48) — its module bundle restores it
  * whenever signal-collectors is selected, independent of the unrelated
- * "projects" content surface's own selection. See the doc comment on
- * `syncRoutes`'s `carried` computation.
+ * "projects" content surface's own selection. `careers/apply` and
+ * `careers/[slug]` (#8840 D13) are the same case: signal-collectors' bundle
+ * lands the Job application walks (`careers/apply/page.tsx`,
+ * `careers/[slug]/apply/**`) whenever the module is selected, so a site that
+ * turned the careers pages off must not read as carrying "careers" — a site
+ * that carries them keeps `careers/page.tsx`, which still counts. See the doc
+ * comment on `syncRoutes`'s `carried` computation.
  */
 const NESTED_FOREIGN_MODULE_ENTRIES = new Set([
     "projects/apply",
+    "careers/apply",
+    "careers/[slug]",
 ]);
 /**
  * The elements of `source`'s `NO_STRUCTURED_DATA_ROUTES` array literal, by a
@@ -122,8 +136,9 @@ export function parseStructuredDataExemptions(source) {
 /**
  * The first exemption covering `route` by the structured-data test's route
  * rule (`route` itself, or under a `subtree` entry). An entry's `requires`
- * strings are not checked: they key only the generated spoke checkout pages,
- * which no template route dir — so no `--apply` — ever adds.
+ * strings are not checked: they key only the standard spoke checkout pages
+ * (#8748), which `surfaceForRouteDir` leaves unclassified, so no `--apply`
+ * ever adds them.
  */
 function exemptionFor(exemptions, route) {
     return exemptions.find((e) => route === e.route || (e.subtree && route.startsWith(`${e.route}/`)));
@@ -228,6 +243,141 @@ function isModified(expectedDir, targetDir, skip = () => false) {
     }
     return false;
 }
+/** Directories a retirement never removes, even when it leaves them empty. */
+const RETIRE_STOP_DIRS = new Set([
+    "apps/web/app/api",
+    "apps/web/lib",
+    "apps/web/lib/__tests__",
+    ".github/workflows",
+]);
+/** Every regular file at or under `rel` in `targetAbs`, `/`-separated. A symlink is skipped, never followed. */
+function regularFilesUnder(targetAbs, rel) {
+    const abs = join(targetAbs, ...rel.split("/"));
+    let stat;
+    try {
+        stat = lstatSync(abs);
+    }
+    catch {
+        return [];
+    }
+    if (stat.isFile())
+        return [rel];
+    if (!stat.isDirectory())
+        return [];
+    return readdirSync(abs)
+        .sort()
+        .flatMap((name) => regularFilesUnder(targetAbs, `${rel}/${name}`));
+}
+/** The first line of a text file. */
+function firstLine(text) {
+    const eol = text.indexOf("\n");
+    return eol === -1 ? text : text.slice(0, eol);
+}
+/**
+ * Retire the legacy env-key spoke checkout from a spoke (#9142): its buy
+ * route, Stripe webhook route, `lib/checkout.ts`, their tests
+ * (`RETIRED_SPOKE_CHECKOUT_PATHS`) and the generated checkout e2e workflow.
+ *
+ * - A copied file is deleted only when the template record lists it and its
+ *   bytes still hash to the recorded copy — the rule `create-ailk update`
+ *   uses for a file the template dropped; its record row goes with it. An
+ *   edited file, or one the record does not list, is reported in `kept`.
+ * - The workflow, never recorded, is deleted only when its first line is
+ *   still create-ailk's generated marker.
+ * - The billing action (a spoke that signs in through its hub) imported
+ *   `lib/checkout.ts`; when its first line is still the generated marker and
+ *   it differs from the current render, it is rewritten to `BILLING_ACTION`.
+ *   An edited one that still imports `lib/checkout` is reported in `kept`.
+ *
+ * Without `apply` nothing is written: the lists say what `--apply` would do.
+ * Directories the deletes leave empty are removed, up to `RETIRE_STOP_DIRS`.
+ */
+export function retireLegacySpokeCheckout(targetAbs, apply) {
+    const retired = [];
+    const kept = [];
+    const rewritten = [];
+    const recordPath = join(targetAbs, TEMPLATE_RECORD_PATH);
+    let record;
+    if (existsSync(recordPath)) {
+        try {
+            record = parseTemplateRecord(readFileSync(recordPath, "utf8"));
+        }
+        catch {
+            record = undefined;
+        }
+    }
+    for (const path of RETIRED_SPOKE_CHECKOUT_PATHS.flatMap((rel) => regularFilesUnder(targetAbs, rel))) {
+        const recorded = record?.files[path]?.sha256;
+        if (recorded === undefined) {
+            kept.push({
+                path,
+                reason: record === undefined
+                    ? "no readable template record, so an edit cannot be told apart"
+                    : "not in the template record",
+            });
+        }
+        else if (sha256Hex(readFileSync(join(targetAbs, ...path.split("/")))) !== recorded) {
+            kept.push({ path, reason: "edited here" });
+        }
+        else {
+            retired.push(path);
+        }
+    }
+    const workflow = regularFilesUnder(targetAbs, RETIRED_CHECKOUT_E2E_WORKFLOW_PATH);
+    for (const path of workflow) {
+        const text = readFileSync(join(targetAbs, ...path.split("/")), "utf8");
+        if (firstLine(text) === RETIRED_CHECKOUT_E2E_MARKER)
+            retired.push(path);
+        else
+            kept.push({ path, reason: "edited here" });
+    }
+    const billingAbs = join(targetAbs, ...SPOKE_BILLING_ACTION_PATH.split("/"));
+    if (regularFilesUnder(targetAbs, SPOKE_BILLING_ACTION_PATH).length === 1) {
+        const text = readFileSync(billingAbs, "utf8");
+        if (text !== BILLING_ACTION) {
+            if (firstLine(text) === BILLING_ACTION_MARKER) {
+                rewritten.push(SPOKE_BILLING_ACTION_PATH);
+            }
+            else if (/lib\/checkout["'`]/.test(text)) {
+                kept.push({
+                    path: SPOKE_BILLING_ACTION_PATH,
+                    reason: "edited here, and it imports the retired lib/checkout",
+                });
+            }
+        }
+    }
+    if (apply) {
+        for (const path of retired) {
+            const abs = resolve(join(targetAbs, ...path.split("/")));
+            if (!abs.startsWith(targetAbs + sep)) {
+                throw new Error(`refusing to delete outside target dir: ${abs}`);
+            }
+            rmSync(abs);
+            let dir = dirname(path);
+            while (dir !== "." && !RETIRE_STOP_DIRS.has(dir)) {
+                const dirAbs = join(targetAbs, ...dir.split("/"));
+                if (!existsSync(dirAbs) || readdirSync(dirAbs).length > 0)
+                    break;
+                rmdirSync(dirAbs);
+                dir = dirname(dir);
+            }
+        }
+        if (rewritten.length > 0)
+            writeFileSync(billingAbs, BILLING_ACTION);
+        if (record !== undefined && retired.some((path) => path in record.files)) {
+            const files = { ...record.files };
+            for (const path of retired)
+                delete files[path];
+            writeFileSync(recordPath, serializeTemplateRecord({ ...record, files }));
+        }
+    }
+    const byPath = (a, b) => (a < b ? -1 : a > b ? 1 : 0);
+    return {
+        retired: retired.sort(byPath),
+        kept: kept.sort((a, b) => byPath(a.path, b.path)),
+        rewritten,
+    };
+}
 /**
  * Compare an already-scaffolded repo's route tree with the template's and,
  * when `apply` is set, copy in the route dirs it is missing.
@@ -391,6 +541,9 @@ export function syncRoutes(opts) {
         missingMessageNamespaces,
         skippedSurfaces,
         structuredDataEntries: structuredDataEntriesFor(targetAbs, opts.templatesDir, applied),
+        retiredCheckout: spoke !== undefined
+            ? retireLegacySpokeCheckout(targetAbs, opts.apply === true)
+            : { retired: [], kept: [], rewritten: [] },
     };
 }
 /**
@@ -477,6 +630,25 @@ export function formatSyncRoutesReport(result, apply) {
             lines.push(...entry.split("\n").map((line) => `    ${line}`));
         }
     }
+    // #9142 — the retired legacy spoke checkout, named so the operator sees
+    // exactly what left and what stays for them to delete.
+    const retiredCheckout = result.retiredCheckout;
+    if (retiredCheckout.retired.length > 0) {
+        lines.push(apply
+            ? `[create-ailk] Removed ${retiredCheckout.retired.length} file(s) of the retired legacy spoke checkout (a spoke sells through its hub's Offerings buy route):`
+            : `[create-ailk] ${retiredCheckout.retired.length} file(s) of the retired legacy spoke checkout to remove with --apply (a spoke sells through its hub's Offerings buy route):`);
+        lines.push(...retiredCheckout.retired.map((path) => `  ${path}`));
+    }
+    if (retiredCheckout.rewritten.length > 0) {
+        lines.push(apply
+            ? "[create-ailk] Rewrote the generated billing action off the retired lib/checkout:"
+            : "[create-ailk] The generated billing action imports the retired lib/checkout; --apply rewrites it:");
+        lines.push(...retiredCheckout.rewritten.map((path) => `  ${path}`));
+    }
+    if (retiredCheckout.kept.length > 0) {
+        lines.push(`[create-ailk] ${retiredCheckout.kept.length} file(s) of the retired legacy spoke checkout left in place — delete or rewrite by hand:`);
+        lines.push(...retiredCheckout.kept.map(({ path, reason }) => `  ${path}  (${reason})`));
+    }
     if (result.missing.length > 0 && !apply) {
         lines.push("Run `create-ailk sync-routes <target> --apply` to copy the missing routes.");
     }
@@ -499,7 +671,9 @@ Options:
 
 Checks every core route plus the routes of each surface the site carries; a
 surface gated off at scaffold time is skipped, not drift. A route the site has
-changed locally is reported and never overwritten. Nothing is ever deleted.
+changed locally is reported and never overwritten. Nothing is deleted except,
+on a spoke, the retired legacy checkout's files that still match create-ailk's
+copy: --apply removes them and rewrites the generated billing action (#9142).
 `;
 /**
  * Parse the argv AFTER the `sync-routes` word. Strict `node:util` parseArgs,

package/dist/template-record.d.ts

@@ -3,9 +3,10 @@ export declare const TEMPLATE_RECORD_PATH = ".ailk-template-files.json";
 /**
  * The app paths a generator rewrites after `copyTemplate` lands its copy
  * (§1): the nav, the site chrome, the site fonts, the paid-sections
- * registry, and the four spoke seams. Composed from each writer's own
- * exported path constant, so a renamed constant carries its path along
- * here too (#8522 D2).
+ * registry and its module-presence flags (#8843 D10), the four spoke seams, and a commerce spoke's checkout config,
+ * which the checkout writer stamps and the site owns from then on (#8748
+ * D2). Composed from each writer's own exported path constant, so a renamed
+ * constant carries its path along here too (#8522 D2).
  */
 export declare const REGENERATED_APP_PATHS: readonly string[];
 /**

package/dist/template-record.js

@@ -18,9 +18,10 @@
 import { createHash } from "node:crypto";
 import { existsSync, readFileSync } from "node:fs";
 import { join } from "node:path";
-import { PAID_SECTIONS_PATH } from "./paid-sections.js";
+import { MODULE_FLAGS_PATH, PAID_SECTIONS_PATH } from "./paid-sections.js";
 import { SITE_CHROME_PATH } from "./site-chrome.js";
 import { SITE_FONTS_PATH } from "./site-fonts.js";
+import { SPOKE_CHECKOUT_CONFIG_PATH } from "./spoke-checkout.js";
 import { NAV_CONFIG_PATH } from "./surfaces.js";
 import { SPOKE_SEAM_FILES } from "./topology.js";
 /** Where the per-file record lives, beside `.ailk-site-manifest.json`. */
@@ -28,16 +29,19 @@ export const TEMPLATE_RECORD_PATH = ".ailk-template-files.json";
 /**
  * The app paths a generator rewrites after `copyTemplate` lands its copy
  * (§1): the nav, the site chrome, the site fonts, the paid-sections
- * registry, and the four spoke seams. Composed from each writer's own
- * exported path constant, so a renamed constant carries its path along
- * here too (#8522 D2).
+ * registry and its module-presence flags (#8843 D10), the four spoke seams, and a commerce spoke's checkout config,
+ * which the checkout writer stamps and the site owns from then on (#8748
+ * D2). Composed from each writer's own exported path constant, so a renamed
+ * constant carries its path along here too (#8522 D2).
  */
 export const REGENERATED_APP_PATHS = [
     NAV_CONFIG_PATH,
     SITE_CHROME_PATH,
     SITE_FONTS_PATH,
     PAID_SECTIONS_PATH,
+    MODULE_FLAGS_PATH,
     ...SPOKE_SEAM_FILES,
+    SPOKE_CHECKOUT_CONFIG_PATH,
 ];
 const REGENERATED_SET = new Set(REGENERATED_APP_PATHS);
 const RECORDABLE_APP_ROOT = /^apps\/(web|api|mcp)\//;