create-ailk 0.21.0 → 0.23.0

package/templates/content/en/BookCall/onsite-service.mdx

@@ -20,22 +20,6 @@ sections:
           "primaryCta": { "label": "{Get in touch}", "href": "/contact" },
         },
     },
-    {
-      "id": "add-scheduling",
-      "type": "cta",
-      "data":
-        {
-          "variant": "box",
-          "headline": "{What booking an onsite service call would do for your visitors}",
-          "description": "{One or two sentences on what live scheduling adds once it's on}",
-          "primaryCta":
-            {
-              "label": "Add scheduling with Pro",
-              "href": "https://ailaunchkit.ai/pricing",
-              "external": true,
-            },
-        },
-    },
     {
       "id": "back-to-meet",
       "type": "content-block",
@@ -53,4 +37,4 @@ sections:
   ]
 ---
 
-{/* Rendered from frontmatter `sections[]` by the /meet/[slug] placeholder route. A template that carries the scheduling module overrides this file with the live booker. Placeholder copy — replace every {brace} with your own words before you launch. */}
+{/* Rendered from frontmatter `sections[]` by the /meet/[slug] placeholder route. A site that carries the scheduling module renders the hub's meeting page instead, reading this seed only for its URL, its JSON-LD and its fallback title (#8843 C5). Placeholder copy — replace every {brace} with your own words before you launch. */}

package/templates/content/en/BookCall/start-project.mdx

@@ -20,22 +20,6 @@ sections:
           "primaryCta": { "label": "{Get in touch}", "href": "/contact" },
         },
     },
-    {
-      "id": "add-scheduling",
-      "type": "cta",
-      "data":
-        {
-          "variant": "box",
-          "headline": "{What booking a project kickoff would do for your visitors}",
-          "description": "{One or two sentences on what live scheduling adds once it's on}",
-          "primaryCta":
-            {
-              "label": "Add scheduling with Pro",
-              "href": "https://ailaunchkit.ai/pricing",
-              "external": true,
-            },
-        },
-    },
     {
       "id": "back-to-meet",
       "type": "content-block",
@@ -53,4 +37,4 @@ sections:
   ]
 ---
 
-{/* Rendered from frontmatter `sections[]` by the /meet/[slug] placeholder route. A template that carries the scheduling module overrides this file with the live booker. Placeholder copy — replace every {brace} with your own words before you launch. */}
+{/* Rendered from frontmatter `sections[]` by the /meet/[slug] placeholder route. A site that carries the scheduling module renders the hub's meeting page instead, reading this seed only for its URL, its JSON-LD and its fallback title (#8843 C5). Placeholder copy — replace every {brace} with your own words before you launch. */}

package/templates/content/en/ContactPage/contact.mdx

@@ -1,73 +1,16 @@
 ---
 type: "ContactPage"
 slug: "contact"
-title: "Contact {{COMPANY_NAME}}"
-description: "Or upgrade to Pro to save every message as a lead in your own marketing database."
+title: "Get in touch"
+description: "{One sentence on who should get in touch and how soon you reply}"
 sections:
   [
     {
-      "id": "hero",
-      "type": "hero",
-      "data":
-        {
-          "variant": "split",
-          "eyebrow": "Contact",
-          "headline": "Get every message in your email, free",
-          "subheadline": "Or upgrade to Pro to save every message as a lead in your own marketing database.",
-          "checklist":
-            [
-              "Every message arrives in your email",
-              "No database or setup to start",
-              "Upgrade any time to keep a lead inbox",
-            ],
-          "secondaryCta":
-            {
-              "label": "Save my leads",
-              "href": "https://ailaunchkit.ai/pricing",
-              "variant": "outline",
-            },
-        },
-    },
-    {
-      "id": "meeting-types",
-      "type": "items",
-      "data":
-        {
-          "headline": "{Add appointment scheduling to your site}",
-          "variant": "tiles",
-          "columns": 2,
-          "items":
-            [
-              {
-                "title": "Book a Call",
-                "description": "{A quick intro call.}",
-                "link": { "label": "Book a Call", "href": "/meet/book-a-call" },
-              },
-              {
-                "title": "Onsite Estimate",
-                "description": "{We come to you and quote the work.}",
-                "link":
-                  {
-                    "label": "Onsite Estimate",
-                    "href": "/meet/onsite-estimate",
-                  },
-              },
-              {
-                "title": "Start Project",
-                "description": "{Kick off a project you're ready to start.}",
-                "link":
-                  { "label": "Start Project", "href": "/meet/start-project" },
-              },
-              {
-                "title": "Onsite Service",
-                "description": "{Book a service visit at your location.}",
-                "link":
-                  { "label": "Onsite Service", "href": "/meet/onsite-service" },
-              },
-            ],
-        },
+      "id": "contact-form",
+      "type": "contact-form",
+      "data": { "variant": "column", "fields": [] },
     },
   ]
 ---
 
-{/* Rendered from frontmatter `sections[]`. The page's one contact surface — the plain contact form — is mounted by the /contact route itself, in the split hero's right column, and posts to the site's own API (`/v1/leads/submit`). Placeholder copy — replace before you launch. */}
+{/* Rendered from frontmatter `sections[]`. The page's one contact surface is the workspace's Contact form magnet: its heading, sentence, fields, consent, button and ending all come from the magnet, mounted by the /contact route in this section's slot. To change the form, change the magnet in Admin → Magnets. The `description` is the page's meta description — replace it before you launch. */}

package/templates/content/en/HomePage/home.mdx

@@ -39,27 +39,9 @@ sections:
           "headlineStyle": "label",
           "logos":
             [
-              {
-                "name": "SalesSmyth",
-                "src": "/logos/salessmyth.svg",
-                "darkSrc": "/logos/salessmyth-light.svg",
-                "width": 1118,
-                "height": 147,
-              },
-              {
-                "name": "AI Launch Kit",
-                "src": "/logos/ai-launch-kit.svg",
-                "darkSrc": "/logos/ai-launch-kit-light.svg",
-                "width": 1248,
-                "height": 144,
-              },
-              {
-                "name": "Atomic Agent",
-                "src": "/logos/atomic-agent.svg",
-                "darkSrc": "/logos/atomic-agent-light.svg",
-                "width": 1320,
-                "height": 148,
-              },
+              { "name": "Placeholder logo", "src": "/logomark.svg" },
+              { "name": "Placeholder logo", "src": "/logomark.svg" },
+              { "name": "Placeholder logo", "src": "/logomark.svg" },
             ],
           "layout": "inline",
           "treatment": "monochrome",

package/templates/database/CHANGELOG.md

@@ -1,5 +1,74 @@
 # @working-theory/database
 
+## 0.44.0
+
+### Minor Changes
+
+- [#8955](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/pull/8955) [`1a84162`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/1a841626a9e5664d926a2f186425f35e8757a6b4) Thanks [@samuelhenry](https://github.com/samuelhenry)! - The Offerings data model and its typed read services ([#8876](https://github.com/working-theory-labs/ai-launch-kit-internal/issues/8876)).
+
+  - **`@working-theory/database`** — three config tables, in migration `20261020120000_offerings_data_model`: `StripeConnection` (an Organization's own Stripe account by a restricted key — mode, last four, the key and webhook secret as ciphertext the database refuses in clear, a webhook token), `OrganizationOfferings` (the Products an Organization has switched on) and `WorkspaceOfferings` (what a workspace shows, its Recommended plan and add-on, and the last-good Stripe snapshot). Deploy the migration before the API. No existing table is touched.
+  - **`@working-theory/ids`** — registers the `stripecon`, `orgoffer` and `wsoffer` prefixes for the new models.
+  - **`@working-theory/validation`** — the Offerings data contract: `parseLookupKey` (the one lookup-key parser, `<plan>_<monthly|yearly|once>`), `periodOfStripePrice`, the text bounds, and the typed shapes `offeringsProductSchema`, `offeringsSnapshotSchema`, `orgEnabledProductsSchema`, `workspaceShownSetSchema` and `stripeConnectionSummarySchema`.
+  - **`create-ailk`** — a scaffold's `apps/api` carries the Offerings read services (`getOrgEnabledProducts`, `getWorkspaceShownSet`, `getSellableProductIds`, the bounded snapshot refresh and the connection summary). No route reads them yet, so a site's behaviour is unchanged.
+
+- [#8968](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/pull/8968) [`8da1163`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/8da1163fd04f083fd8d408a4a7d762b756b23274) Thanks [@samuelhenry](https://github.com/samuelhenry)! - The Offerings Checkout session record ([#8930](https://github.com/working-theory-labs/ai-launch-kit-internal/issues/8930)).
+
+  - **`@working-theory/database`** — one config table, in migration `20261021120000_offerings_checkout_session`: `OfferingsCheckoutSession`, one row per Checkout Session the hub created (its id, workspace, Organization, Price, lookup key and mode), with a CHECK on every column but `created_at`. Deploy the migration before the API. No existing table is touched.
+  - **`@working-theory/ids`** — registers the `ocsess` prefix for the new model.
+  - **`create-ailk`** — a scaffold's `apps/api` carries the record's one store (`recordCheckoutSession`, `readCheckoutSessionRecord`). No route calls it yet, so a site's behaviour is unchanged.
+
+- [#9091](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/pull/9091) [`23cf71c`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/23cf71c316c9e44c6109c76439cb64281e6368d5) Thanks [@samuelhenry](https://github.com/samuelhenry)! - A workspace's Offerings shown set is chosen per Stripe Price, and the Admin's Offerings page reads like Magnets ([#9070](https://github.com/working-theory-labs/ai-launch-kit-internal/issues/9070)).
+
+  - **`@working-theory/database`** — migration `20261023120000_offerings_shown_price_ids` adds `workspace_offerings.shown_price_ids TEXT[] NOT NULL DEFAULT '{}'` and two CHECKs (at most 300 non-null ids; Price ids only beside a shown Product). No row is rewritten: an empty array means every Price of each shown Product, so every workspace saved before this release shows exactly what it showed before. **Deploy the migration before the API, and the API before the Admin.** While the API and the Admin are on different versions the Offerings page cannot save (nothing is written and nothing new is sold).
+  - **`@working-theory/validation`** — new exports `OFFERINGS_PRICE_IDS_MAX`, `offeringsPriceIdsSchema`, `workspaceOfferingsShownEntrySchema` and `workspaceOfferingsShownSchema`. Changed shapes: `workspaceOfferingsSelectionInputSchema` is now one Price's switch, `{ productId, period, shown }`, so no body names a Recommended or a whole set; `workspaceOfferingsSelectionSchema` gains `shownPriceIds`, empty exactly when `shownProductIds` is; `workspaceOfferingsViewSchema`'s available branch answers `shown` (`{ productId, periods }` per Product) in place of `shownProductIds`.
+  - **`create-ailk`** — a scaffold's `PUT /v1/workspaces/:workspaceId/offerings` takes one Price per save and keeps or clears a stored Recommended but never sets one (`recommended_not_shown` is retired; a period the Product has no Price for is `400 price_not_offered`). Its audit row's `shown`, `added` and `removed` count Prices, not Products, from this release. `/pricing`, the agent pricing tools, the plan picker and checkout show and sell only the shown Prices, so a seller can show a yearly Price without its monthly sibling; a Price replaced in Stripe stays off until it is switched on. The Admin's Offerings page is a Title / Tags / Live table, one row per Price, with a New recommender button and no Recommended control.
+
+  **Rollback.** Roll the API back, then run `UPDATE workspace_offerings SET shown_price_ids = '{}'` so every row reads at the Product grain again and the old route's saves succeed. Tell each owner who saved per Price that every Price of their shown Products — on `/pricing` and at checkout — is on sale again. Never drop the column while a per-Price row exists without that notice.
+
+### Patch Changes
+
+- Updated dependencies [[`6ad87d6`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/6ad87d65d91013ac9c0945a62efbf28c627b1fce), [`d9c2cd3`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/d9c2cd3c601d9a267d4d29cb9bcef77ec71cd518), [`407810f`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/407810fbd63a02d14773aef36a10c1f9f04dd5e3), [`5875c18`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/5875c189f72f66ea2af7b7c79a47baba53a329d1), [`13c0b3d`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/13c0b3dd64a105292962821f5b0050c5cabc2d45), [`82bc2f1`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/82bc2f1ecab1a12f23a45e326355841ba87d9f04), [`ea18e21`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/ea18e2181241ba9357b4dcfa3a1d2f4c3ffe4518), [`8754f86`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/8754f866b49003965c4be28cbe19b1f040aec4af), [`1a84162`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/1a841626a9e5664d926a2f186425f35e8757a6b4), [`74cb7b3`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/74cb7b37adea5d27adc1f3ec3ea58b9941167c4d), [`25b4b61`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/25b4b6199d8632167bd5501a4e12d4774eed432a), [`8da1163`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/8da1163fd04f083fd8d408a4a7d762b756b23274), [`bd1c9b5`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/bd1c9b576ac337596e585145f09b08696e9f412e), [`d1dacc5`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/d1dacc5d76a9cc91f6ad3b1883067e327b5e3d3c), [`fff5487`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/fff5487a6d14a3010bf22cb99e7554e6542449a0), [`23cf71c`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/23cf71c316c9e44c6109c76439cb64281e6368d5), [`75ecc58`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/75ecc584f43793bb5234f69e0f80b15327a99236), [`85ae357`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/85ae357410ebd6c11b08b04355a9ede1d2088d2d), [`059c892`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/059c89249f7db3dc106f133ef37180e9eb1e318a), [`c563360`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/c563360db386758aa2d25309ab693a18a41e4139)]:
+  - @working-theory/validation@0.44.0
+  - @working-theory/ids@0.15.0
+
+## 0.43.0
+
+### Minor Changes
+
+- [#8775](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/pull/8775) [`ee8e713`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/ee8e713b8194e8d65052f4b1dca928ca0c970318) Thanks [@claudio-planck](https://github.com/claudio-planck)! - A per-magnet completion setting — lead only, invite to account, or continue to checkout ([#8757](https://github.com/working-theory-labs/ai-launch-kit-internal/issues/8757), Phase 1).
+
+  - **`@working-theory/database`** — `flow_definitions` gains `completion` (`lead` | `invite` | `checkout`, default `lead`) and `checkout_offering`, closed by three CHECKs. The migration backfills `onboarding`, `request-quote` and `job-application` to `invite` by slug; `contact` and every other magnet stay `lead`. Deploy the migration before the API.
+  - **`@working-theory/validation`** — `flow-completion.ts`: `FLOW_COMPLETIONS`, `flowCompletionSettingSchema`, `flowCheckoutOfferingSchema`, `STANDARD_MAGNET_COMPLETIONS`, `leadSubmitNextSchema`, `accountEmailHintSchema`, `accountInvitePath`, the invite caps and the email defaults.
+  - **`@working-theory/api-client`** — `Magnet` carries `completion` and `checkoutOffering`, `MagnetUpdateInput` can set them, and `LeadWriteResponse` gains an optional `next`.
+  - **`@working-theory/ui`** — `AuthCard` takes an optional `defaultEmail`; `LeadCaptureFormState`'s success state takes an optional `next` link.
+  - **`@working-theory/analytics`** — `email` and `login_hint` are scrubbed from URLs like `session_id`.
+  - **`create-ailk`** — the API: the magnet PATCH writes the setting alone (`checkout` needs a person, the `commerce` claim and a published offering) and every full row serves it; a `flow:<slug>` submit to an `invite` magnet answers `next` and sends one capped confirmation email whose link starts sign-in with the address prefilled. The web: /contact's thank-you shows "Track this in your account", and sign-in opens with a hinted email on a site and through the hub. The Admin: one "When someone submits" control on the magnet page.
+
+- [#8807](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/pull/8807) [`956bfe6`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/956bfe60fff4bd9a43135e6a2fb79e6f012e14f8) Thanks [@claudio-planck](https://github.com/claudio-planck)! - Every hosted Stripe Checkout session collects terms acceptance, and a completed checkout records a dated grant for the buyer ([#8765](https://github.com/working-theory-labs/ai-launch-kit-internal/issues/8765), PR B).
+
+  - **`@working-theory/stripe-client`** — both session creators set `consent_collection.terms_of_service: "required"` and a `custom_text.terms_of_service_acceptance` message: the site's account-terms sentence with its Terms, Privacy Policy and Working Agreement links resolved on the session's own return origin. Every session is stamped `metadata.ailk_terms` (`account_terms@2` by default). An optional `termsOfService` input overrides the sentence and its links. A Stripe refusal for a missing Terms URL is rethrown as `TermsOfServiceUrlMissingError`. **Precondition:** the seller's Stripe account needs a Terms of Service URL in its Dashboard's Public details, or Stripe refuses every session with the box.
+  - **`@working-theory/validation`** — `CONSENT_SOURCES` gains `checkout`.
+  - **`@working-theory/database`** — a migration widens the `consent_grants_source_known` CHECK to the eight sources. It writes no row.
+  - **`create-ailk`** — the API: the hub's `checkout.session.completed` webhook records one `checkout` grant per session for the buyer's Person when the session carries the terms stamp and Stripe recorded the consent as accepted. A checkout row is an unverified (any-source) row. The Admin labels the source "Checkout".
+
+### Patch Changes
+
+- [#8767](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/pull/8767) [`5ff341d`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/5ff341d683d35a024fc1073c1b010aa56956a1d2) Thanks [@claudio-planck](https://github.com/claudio-planck)! - A JobPosting names where to apply, and a standard Job application magnet is seeded like the Contact form and drawn on every job page ([#8746](https://github.com/working-theory-labs/ai-launch-kit-internal/issues/8746)).
+
+  - **`@working-theory/schema`** — `ContentPageInput` gains an optional `origin` (the site's origin, passed by the caller; the package never reads the environment for it). When it is present, the JobPosting builder puts a `potentialAction` `ApplyAction` on the JobPosting whose `target` is the job page's own URL plus `#apply`: `<origin>/<locale>/careers/<slug>#apply`, the same form the page's BreadcrumbList uses. `buildJobPostingNode` takes an optional `applyUrl`. Every other builder ignores `origin`, so CareersList keeps its ItemList unchanged.
+  - **`@working-theory/page-renderer`** — `toContentPageInput` passes the render's origin (the one the BreadcrumbList is built from).
+  - **`@working-theory/validation`** — the magnet's one source: `JOB_APPLICATION_FLOW_SLUG` (`job-application`), `JOB_APPLICATION_FLOW_TITLE`, `JOB_APPLICATION_LANDING_PAGE` (`/careers`) and `jobApplicationFlowConfig` — one field step of First name, Last name and Email (required), Phone (`tel`) and LinkedIn URL (`url`). `RESERVED_FLOW_SLUGS` gains `job-application`, so no flow-engine write, spoke seed or new listing takes it.
+  - **`@working-theory/database`** — the database seed writes the default workspace's Job application magnet: `diagnostic`, `live`, landing page `/careers`, insert-only.
+  - **`create-ailk`** — the API seeds the magnet into every workspace insert-only (after `POST /v1/workspaces` and from the seed-presets CLI for existing workspaces), a magnet can be neither renamed from nor to `job-application`, and `GET /v1/content/:type/:slug` passes `_site.mdx`'s `baseUrl` as the origin, so the API's JobPosting JSON-LD carries the ApplyAction too. Each job page `/careers/<slug>` renders the magnet's field step under an `#apply` anchor, falling back to the same built-in form when the magnet is absent or off; a submission is a `flow:job-application` lead whose `name` is first + last and whose hidden `job` is the posting's slug, and the form thanks the applicant with the `careers` catalog's own `applicationSuccess` line. The `/careers` index carries no form.
+
+- [#8788](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/pull/8788) [`3a89742`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/3a89742f7b816deca6cd604863f2fd041a79abfa) Thanks [@claudio-planck](https://github.com/claudio-planck)! - The standard magnets are seeded with their completion setting ([#8759](https://github.com/working-theory-labs/ai-launch-kit-internal/issues/8759)), so a workspace created after the [#8757](https://github.com/working-theory-labs/ai-launch-kit-internal/issues/8757) migration no longer depends on its backfill.
+
+  - **`@working-theory/database`** — the database seed writes `completion` on the default workspace's magnets: `invite` on `request-quote` and `job-application`, `lead` on `contact`. On a fresh install the migration's backfill runs before the seed and finds no rows.
+  - **`create-ailk`** — the API's insert-only seed writes `lead` on the Contact form and `invite` on the onboarding and Job application magnets, and `POST /v1/workspaces` creates the `request-quote` magnet at `invite`.
+
+- Updated dependencies [[`5032b3e`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/5032b3eefb05bbe67ebddf1b4b07904717100472), [`5ff341d`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/5ff341d683d35a024fc1073c1b010aa56956a1d2), [`ee8e713`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/ee8e713b8194e8d65052f4b1dca928ca0c970318), [`c74bd72`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/c74bd7270fa2cb82bebedfb1b53f89ca6e09917f), [`956bfe6`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/956bfe60fff4bd9a43135e6a2fb79e6f012e14f8), [`97237f2`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/97237f278006a43e17d58709ed9ac3b4f62ae76f), [`1eb9688`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/1eb9688708dbc65cd4e2fdb6efeb40880e1606f0), [`b001413`](https://github.com/Working-Theory-Labs/ai-launch-kit-internal/commit/b001413238973f4ecb3d4a5a18968cd7732210d8)]:
+  - @working-theory/validation@0.43.0
+
 ## 0.42.0
 
 ### Patch Changes

package/templates/database/__tests__/consent-source-checkout-migration.test.ts

@@ -0,0 +1,79 @@
+/**
+ * @file consent-source-checkout-migration.test.ts
+ *
+ * DB-free proof of the consent_source_checkout migration's shape (#8765, spec
+ * docs/specs/8765-sign-up-refuses-without-the-spec.md D13, AC-8). Reads the
+ * migration's own text: it drops `consent_grants_source_known` and re-adds it
+ * `NOT VALID` with exactly the values of `CONSENT_SOURCES`, then `VALIDATE`s
+ * it — with no `UPDATE`, `INSERT` or `DELETE`, so the append-only ledger is
+ * never written.
+ */
+import { readFileSync } from "node:fs";
+import { join } from "node:path";
+
+import { CONSENT_SOURCES } from "@working-theory/validation";
+
+const MIGRATION = join(
+  __dirname,
+  "..",
+  "migrations",
+  "20261019120000_consent_source_checkout",
+  "migration.sql",
+);
+
+/** The migration's statements, comments stripped, whitespace collapsed. */
+function statements(): string[] {
+  const text = readFileSync(MIGRATION, "utf8")
+    .split("\n")
+    .filter((line) => !line.trimStart().startsWith("--"))
+    .join("\n");
+  return text
+    .split(";")
+    .map((s) => s.replace(/\s+/g, " ").trim())
+    .filter((s) => s.length > 0);
+}
+
+describe("the consent_source_checkout migration (#8765 D13, AC-8)", () => {
+  it("drops the source CHECK, re-adds it NOT VALID, then VALIDATEs it — nothing else", () => {
+    const shapes = statements().map((s) => {
+      if (
+        s ===
+        'ALTER TABLE "consent_grants" DROP CONSTRAINT "consent_grants_source_known"'
+      ) {
+        return "drop";
+      }
+      if (
+        /^ALTER TABLE "consent_grants" ADD CONSTRAINT "consent_grants_source_known" CHECK \(.*\) NOT VALID$/.test(
+          s,
+        )
+      ) {
+        return "add";
+      }
+      if (
+        s ===
+        'ALTER TABLE "consent_grants" VALIDATE CONSTRAINT "consent_grants_source_known"'
+      ) {
+        return "validate";
+      }
+      return `unexpected: ${s}`;
+    });
+    expect(shapes).toEqual(["drop", "add", "validate"]);
+  });
+
+  it("names exactly the eight values of CONSENT_SOURCES, checkout among them", () => {
+    const add = statements().find((s) => s.includes("ADD CONSTRAINT"));
+    const list = add?.match(/CHECK \("source" IN \(([^)]*)\)\)/)?.[1];
+    expect(list).toBeDefined();
+    const values = (list ?? "")
+      .split(",")
+      .map((v) => v.trim().replace(/^'|'$/g, ""));
+    expect(values).toHaveLength(8);
+    expect([...values].sort()).toEqual([...CONSENT_SOURCES].sort());
+    expect(values).toContain("checkout");
+  });
+
+  it("writes no row: no UPDATE, INSERT or DELETE", () => {
+    for (const s of statements())
+      expect(s).not.toMatch(/\b(UPDATE|INSERT|DELETE)\b/i);
+  });
+});

package/templates/database/__tests__/flow-completion-migration.test.ts

@@ -0,0 +1,115 @@
+/**
+ * @file flow-completion-migration.test.ts
+ *
+ * DB-free proof of the flow_completion migration's shape (#8757, spec
+ * docs/specs/8757-a-per-magnet-completion-setting-spec.md D2, AC-2). Reads
+ * the migration's own text: it adds exactly the two columns and three named
+ * CHECKs, each added `NOT VALID` then `VALIDATE`d, and its one `UPDATE` is the
+ * slug backfill between its markers — naming exactly the standard magnets
+ * whose default is `invite` (`STANDARD_MAGNET_COMPLETIONS`). It inserts and
+ * deletes nothing. The live-database half is `flow-completion.db.test.ts`.
+ */
+import { readFileSync } from "node:fs";
+import { join } from "node:path";
+
+import { STANDARD_MAGNET_COMPLETIONS } from "@working-theory/validation";
+
+const MIGRATION = join(
+  __dirname,
+  "..",
+  "migrations",
+  "20261018120000_flow_completion",
+  "migration.sql",
+);
+
+const CHECKS = [
+  "flow_definitions_completion_domain",
+  "flow_definitions_checkout_offering_pair",
+  "flow_definitions_checkout_offering_format",
+];
+
+/** The migration's statements, comments stripped, whitespace collapsed. */
+function statements(): string[] {
+  const text = readFileSync(MIGRATION, "utf8")
+    .split("\n")
+    .filter((line) => !line.trimStart().startsWith("--"))
+    .join("\n");
+  return text
+    .split(";")
+    .map((s) => s.replace(/\s+/g, " ").trim())
+    .filter((s) => s.length > 0);
+}
+
+/** The text between the `-- BEGIN completion backfill` / `-- END …` markers. */
+function backfillBlock(): string {
+  const match = /-- BEGIN completion backfill\n([\s\S]*?)-- END completion backfill/.exec(
+    readFileSync(MIGRATION, "utf8"),
+  );
+  if (!match) throw new Error("completion backfill markers not found");
+  return match[1]!;
+}
+
+describe("the flow_completion migration (#8757 D2, AC-2)", () => {
+  it("adds exactly the two columns, the completion default lead", () => {
+    const adds = statements().filter((s) => /^ALTER TABLE "flow_definitions" ADD COLUMN /.test(s));
+    expect(adds).toHaveLength(1);
+    const columns = adds[0]!.split(/ADD COLUMN /).slice(1).map((c) => c.trim().replace(/,$/, ""));
+    expect(columns).toEqual([
+      `"completion" VARCHAR(16) NOT NULL DEFAULT 'lead'`,
+      `"checkout_offering" VARCHAR(40)`,
+    ]);
+  });
+
+  it("adds the three named CHECKs NOT VALID, then VALIDATEs each", () => {
+    const all = statements();
+    const added = all
+      .map((s) => /^ALTER TABLE "flow_definitions" ADD CONSTRAINT "([a-z_]+)" CHECK \(.*\) NOT VALID$/.exec(s)?.[1])
+      .filter((name): name is string => name !== undefined);
+    const validated = all
+      .map((s) => /^ALTER TABLE "flow_definitions" VALIDATE CONSTRAINT "([a-z_]+)"$/.exec(s)?.[1])
+      .filter((name): name is string => name !== undefined);
+    expect(added).toEqual(CHECKS);
+    expect(validated).toEqual(CHECKS);
+    for (const name of CHECKS) {
+      expect(all.findIndex((s) => s.includes(`VALIDATE CONSTRAINT "${name}"`))).toBeGreaterThan(
+        all.findIndex((s) => s.includes(`ADD CONSTRAINT "${name}"`)),
+      );
+    }
+  });
+
+  it("holds exactly one UPDATE, inside the backfill markers, naming the invite defaults", () => {
+    const updates = statements().filter((s) => /\bUPDATE\b/i.test(s));
+    expect(updates).toHaveLength(1);
+    const block = backfillBlock().replace(/\s+/g, " ").trim();
+    expect(block).toBe(updates[0] + ";");
+    const list = /WHERE "slug" IN \(([^)]*)\)/.exec(block)?.[1];
+    const slugs = (list ?? "").split(",").map((s) => s.trim().replace(/^'|'$/g, ""));
+    const invite = Object.entries(STANDARD_MAGNET_COMPLETIONS)
+      .filter(([, completion]) => completion === "invite")
+      .map(([slug]) => slug);
+    expect([...slugs].sort()).toEqual([...invite].sort());
+    expect(block).toContain(`SET "completion" = 'invite'`);
+  });
+
+  it("inserts and deletes nothing", () => {
+    for (const s of statements()) expect(s).not.toMatch(/\b(INSERT|DELETE)\b/i);
+  });
+
+  it("every statement is one of the expected shapes", () => {
+    const unexpected = statements().filter(
+      (s) =>
+        !/^ALTER TABLE "flow_definitions" (ADD COLUMN|ADD CONSTRAINT|VALIDATE CONSTRAINT) /.test(s) &&
+        !/^UPDATE "flow_definitions" SET "completion" = 'invite' WHERE "slug" IN \(/.test(s),
+    );
+    expect(unexpected).toEqual([]);
+  });
+
+  it("schema.prisma declares both fields on FlowDefinition", () => {
+    const prisma = readFileSync(join(__dirname, "..", "inbox", "schema.prisma"), "utf8");
+    const model = /model FlowDefinition \{([\s\S]*?)\n\}/.exec(prisma)?.[1] ?? "";
+    expect(model).toMatch(/\n\s*completion String @default\("lead"\) @db\.VarChar\(16\)\n/);
+    expect(model).toMatch(
+      /\n\s*checkoutOffering String\? @map\("checkout_offering"\) @db\.VarChar\(40\)\n/,
+    );
+  });
+});

package/templates/database/__tests__/flow-completion.db.test.ts

@@ -0,0 +1,136 @@
+/**
+ * @file flow-completion.db.test.ts
+ *
+ * LIVE-DATABASE proof of a magnet's completion columns (#8757, spec
+ * docs/specs/8757-a-per-magnet-completion-setting-spec.md D2, AC-2). Requires
+ * DATABASE_URL pointing at a Postgres with the migrations applied — SKIPS
+ * when DATABASE_URL is unset (the repo convention; the `apps/api Route Tests
+ * (Postgres)` workflow exercises it).
+ *
+ * Uses the `pg` driver directly, in ONE transaction that is rolled back. What
+ * it proves that a mock cannot:
+ *   1. The migration's backfill block, run over magnets at the five slugs,
+ *      leaves `contact` and `form` at `lead` and sets the three process
+ *      magnets to `invite`; a second run changes nothing.
+ *   2. Each CHECK refuses what it names.
+ */
+import { readFileSync } from "node:fs";
+import { join } from "node:path";
+
+import { Client } from "pg";
+
+const describeDb = process.env.DATABASE_URL ? describe : describe.skip;
+
+const MIGRATION_SQL = readFileSync(
+  join(__dirname, "..", "migrations", "20261018120000_flow_completion", "migration.sql"),
+  "utf8",
+);
+
+/** The text between the `-- BEGIN completion backfill` / `-- END …` markers. */
+function backfillBlock(sql: string): string {
+  const match = /-- BEGIN completion backfill\n([\s\S]*?)-- END completion backfill/.exec(sql);
+  if (!match?.[1]) throw new Error("completion backfill markers not found");
+  return match[1];
+}
+
+const WS = "wksp_01920000-8757-7000-8000-0000000000c1";
+const SLUGS = ["contact", "onboarding", "request-quote", "job-application", "form"] as const;
+
+describeDb("the magnet completion columns (#8757 D2, AC-2, live DB)", () => {
+  let db: Client;
+
+  beforeAll(async () => {
+    db = new Client({ connectionString: process.env.DATABASE_URL });
+    await db.connect();
+    await db.query("BEGIN");
+  });
+
+  afterAll(async () => {
+    await db.query("ROLLBACK");
+    await db.end();
+  });
+
+  /** Insert one magnet at `slug`, with any of the completion columns. */
+  const insertMagnet = (slug: string, cols: Record<string, unknown> = {}) => {
+    const all: Record<string, unknown> = {
+      site_id: WS,
+      workspace_id: WS,
+      slug,
+      config: JSON.stringify({ steps: [] }),
+      title: `Magnet ${slug}`,
+      status: "draft",
+      updated_at: new Date("2026-10-01T09:00:00.000Z"),
+      ...cols,
+    };
+    const names = Object.keys(all);
+    return db.query<{ id: string }>(
+      `INSERT INTO "flow_definitions" (${names.map((n) => `"${n}"`).join(", ")})
+       VALUES (${names.map((_, i) => `$${i + 1}`).join(", ")}) RETURNING "id"`,
+      names.map((n) => all[n]),
+    );
+  };
+
+  /** Run `run` inside a savepoint; resolve to the violated constraint's name, or null. */
+  const violation = async (run: () => Promise<unknown>): Promise<string | null> => {
+    await db.query("SAVEPOINT attempt");
+    try {
+      await run();
+      await db.query("RELEASE SAVEPOINT attempt");
+      return null;
+    } catch (err) {
+      await db.query("ROLLBACK TO SAVEPOINT attempt");
+      return (err as { constraint?: string }).constraint ?? String(err);
+    }
+  };
+
+  const completions = async () =>
+    Object.fromEntries(
+      (
+        await db.query<{ slug: string; completion: string; checkout_offering: string | null }>(
+          `SELECT "slug", "completion", "checkout_offering" FROM "flow_definitions" WHERE "workspace_id" = $1`,
+          [WS],
+        )
+      ).rows.map((r) => [r.slug, [r.completion, r.checkout_offering]]),
+    );
+
+  it("the backfill sets the three process magnets to invite and leaves contact and form at lead, idempotently", async () => {
+    for (const slug of SLUGS) await insertMagnet(slug);
+    const before = await completions();
+    for (const slug of SLUGS) expect(before[slug]).toEqual(["lead", null]);
+
+    await db.query(backfillBlock(MIGRATION_SQL));
+    const after = await completions();
+    expect(after).toEqual({
+      contact: ["lead", null],
+      form: ["lead", null],
+      onboarding: ["invite", null],
+      "request-quote": ["invite", null],
+      "job-application": ["invite", null],
+    });
+
+    const rerun = await db.query(backfillBlock(MIGRATION_SQL));
+    expect(await completions()).toEqual(after);
+    // The re-run matches the same rows but stores the same values.
+    expect(rerun.rowCount).toBeGreaterThanOrEqual(3);
+  });
+
+  it.each([
+    ["checkout with no offering", { completion: "checkout", checkout_offering: null }, "flow_definitions_checkout_offering_pair"],
+    ["an offering beside lead", { completion: "lead", checkout_offering: "retainer" }, "flow_definitions_checkout_offering_pair"],
+    ["a capitalised key", { completion: "checkout", checkout_offering: "Bad" }, "flow_definitions_checkout_offering_format"],
+    ["an underscored key", { completion: "checkout", checkout_offering: "a_b" }, "flow_definitions_checkout_offering_format"],
+    ["a fourth value", { completion: "other", checkout_offering: null }, "flow_definitions_completion_domain"],
+  ])("refuses %s", async (_label, cols, constraint) => {
+    expect(await violation(() => insertMagnet(`refused-${constraint.length}-${String(cols.completion)}`, cols))).toBe(
+      constraint,
+    );
+  });
+
+  it("accepts checkout with a listed-shape offering", async () => {
+    expect(
+      await violation(() =>
+        insertMagnet("paid-waitlist", { completion: "checkout", checkout_offering: "retainer" }),
+      ),
+    ).toBeNull();
+  });
+});