create-ailk 0.22.0 → 0.23.0

package/dist/spoke-checkout.d.ts

@@ -2,26 +2,26 @@ import type { EnvCatalogEntry, PlanEnvRowsOptions } from "./lib/declared-env.js"
 import { type InstallReportRow } from "./lib/extract-module-bundle.js";
 import { type WorkspaceVersionMap } from "./substitute.js";
 import { type SignInMode } from "./topology.js";
-/** The checkout package a spoke's two route files import. */
+/** The checkout package a spoke's billing action and thank-you page import. */
 export declare const SPOKE_CHECKOUT_PACKAGE = "@working-theory/spoke-checkout";
-/** The site's checkout data — written once, the site's from then on (#8748 D2). */
+/** The site's checkout stamp — written once, the site's from then on (#8748 D2). */
 export declare const SPOKE_CHECKOUT_CONFIG_PATH = "apps/web/lib/checkout-config.ts";
-/** The two return pages: Stripe's success URL and every refused buy's target. */
+/** The two return pages a commerce spoke still carries (#8748 D5). */
 export declare const SPOKE_CHECKOUT_PAGE_FILES: readonly string[];
 /**
- * The standard spoke checkout's template paths, scaffold-relative (#8748 D3).
- * A directory entry covers every file under it, so the tests that sit beside
- * the routes and pages travel with them. `copyTemplate` skips all of them for
- * every scaffold; `writeSpokeCheckoutSlice` copies them into a commerce spoke.
+ * The spoke checkout's template paths, scaffold-relative (#8748 D3). A
+ * directory entry covers every file under it, so the tests that sit beside
+ * the pages travel with them. `copyTemplate` skips all of them for every
+ * scaffold; `writeSpokeCheckoutSlice` copies them into a commerce spoke.
  */
 export declare const SPOKE_CHECKOUT_TEMPLATE_PATHS: readonly string[];
-/** The variables a commerce spoke depends on (D9). The package reads three of them. */
+/** The variables a commerce spoke depends on (D9): the package reads both. */
 export declare const SPOKE_CHECKOUT_ENV_CATALOG: Readonly<Record<string, EnvCatalogEntry>>;
 /** The names a commerce spoke declares although only the package reads them (D9). */
 export declare const SPOKE_CHECKOUT_DECLARED_ENV: readonly string[];
 /**
  * The catalog (and declared names) a spoke's `appendEnvRows` call passes: a
- * commerce spoke adds the checkout's four rows (D9). `ENV_CATALOG` itself is
+ * commerce spoke adds the package's two rows (D9). `ENV_CATALOG` itself is
  * unchanged — its test fails on an entry the monorepo's apps never read.
  */
 export declare function spokeEnvRowOptions(commerce: boolean): Pick<PlanEnvRowsOptions, "catalog" | "declare">;
@@ -32,33 +32,22 @@ export declare function spokeEnvRowOptions(commerce: boolean): Pick<PlanEnvRowsO
  * `site-` and the first 8 hex characters of its SHA-256. Never `AILK_SITE_ID`.
  */
 export declare function spokeCheckoutSite(projectName: string): string;
-/** Where a commerce spoke's end-to-end checkout workflow lives. */
-export declare const SPOKE_CHECKOUT_E2E_WORKFLOW_PATH = ".github/workflows/checkout-e2e.yml";
+/** The billing action's first line, which marks the file as create-ailk's to rewrite. */
+export declare const BILLING_ACTION_MARKER = "// The spoke billing action \u2014 GENERATED by create-ailk (#8217). Do not edit:";
 /**
- * The Stripe CLI release the workflow installs, and the SHA-256 of its
- * `stripe_<v>_linux_x86_64.tar.gz` from that release's own
- * `stripe-linux-checksums.txt`. Never bump one without re-reading the other.
+ * The spoke billing action (#8217 D6): wiring only, byte-identical across
+ * sites, so every guarantee arrives by a package bump. A plain server module
+ * (C2): its two exports take no argument, and the hub's read is its only
+ * source of customer ids. It builds its config from the site's stamp and the
+ * site's own origin (#9142: no longer from `lib/checkout.ts`).
  */
-export declare const STRIPE_CLI_VERSION = "1.51.1";
-export declare const STRIPE_CLI_LINUX_X64_SHA256 = "38c8de73a8cab810a4aab8a4015cd4e3398b7b87aa42b6944d09d89ed524ac53";
-/** The Playwright the workflow installs — the monorepo's own pinned version. */
-export declare const E2E_PLAYWRIGHT_VERSION = "1.61.1";
-/**
- * Every action the workflow uses, pinned to the commit its `v4` tag named
- * when this was written (SEC-7839-2): `gh api repos/<action>/commits/v4`.
- */
-export declare const E2E_ACTION_PINS: Readonly<Record<string, string>>;
-/**
- * The workflow text (D8). Identical for every spoke at one create-ailk
- * version. Every `${{ … }}` sits in an env-style value, never in a script.
- */
-export declare const CHECKOUT_E2E_WORKFLOW: string;
+export declare const BILLING_ACTION: string;
 /**
  * The rendered part of the slice for `site` (#8748 D3): with `signIn: "hub"`
- * the billing action (#8217 D8), then the checkout e2e workflow (#7839 D8).
- * Neither depends on `site`. The rest of the slice is template source,
- * copied by `writeSpokeCheckoutSlice`. Throws `TopologyError` for an invalid
- * stamp (SEC-7838-10).
+ * the billing action (#8217 D8), else nothing. It does not depend on `site`.
+ * The rest of the slice is template source, copied by
+ * `writeSpokeCheckoutSlice`. Throws `TopologyError` for an invalid stamp
+ * (SEC-7838-10).
  */
 export declare function renderSpokeCheckoutFiles(site: string, opts?: {
     signIn?: SignInMode | undefined;
@@ -76,9 +65,10 @@ export declare function renderSpokeCheckoutFiles(site: string, opts?: {
  * action, and the web seam — generated, so always rewritten — becomes the
  * billing render: reported `patched` when it changed, not at all when equal.
  * Adds the package to `apps/web/package.json` when absent, and raises a plain
- * pin older than the one it writes (#7839): the generated checkout e2e
- * workflow runs a command a `^0.2.0` pin never reaches. Any other range —
- * newer, `workspace:`, a tag — is the site's and is kept.
+ * pin older than the one it writes (#7839): the rendered billing action
+ * calls the package's current `createSpokeCheckout` shape, which an older
+ * pin does not take (#9142). Any other range — newer, `workspace:`, a tag —
+ * is the site's and is kept.
  * Every refusal (an invalid stamp, a version map without the package, a
  * missing or malformed `apps/web/package.json`, a template missing any
  * `SPOKE_CHECKOUT_TEMPLATE_PATHS` entry, a template config without exactly
@@ -101,3 +91,16 @@ export declare function writeSpokeCheckoutSlice(targetDir: string, opts: {
  * dependency, or without `apps/web/package.json`, is left as it is.
  */
 export declare function dropSpokeCheckoutDependency(targetDir: string): void;
+/**
+ * What the legacy env-key checkout left in a spoke, scaffold-relative: the
+ * buy route and the Stripe webhook route (a directory entry covers the tests
+ * beside each), `lib/checkout.ts` (the fulfilment) and its test. Each was a
+ * template copy create-ailk recorded in `.ailk-template-files.json`;
+ * `create-ailk sync-routes --apply` removes the ones still byte-identical to
+ * that record.
+ */
+export declare const RETIRED_SPOKE_CHECKOUT_PATHS: readonly string[];
+/** The retired checkout e2e workflow — rendered, never recorded (#7839 D8). */
+export declare const RETIRED_CHECKOUT_E2E_WORKFLOW_PATH = ".github/workflows/checkout-e2e.yml";
+/** The workflow's first line, which marks it as create-ailk's to remove. */
+export declare const RETIRED_CHECKOUT_E2E_MARKER = "# Checkout e2e \u2014 GENERATED by create-ailk (#7839). Do not edit: it changes";

package/dist/spoke-checkout.js

@@ -1,21 +1,24 @@
 /**
  * The spoke checkout slice (#7838, #8748) — what a spoke carrying `commerce`
- * gets in `apps/web`: the standard spoke checkout, copied from the template
- * tree. That is the buy route and the Stripe webhook route (allowed to import
- * the checkout package, #7873), `lib/checkout.ts` (the standard fulfilment),
- * the site's own `lib/checkout-config.ts`, the thank-you and unavailable
- * return pages and their tests (`SPOKE_CHECKOUT_TEMPLATE_PATHS`). A spoke that
- * signs in through its hub also gets the billing action, the third file
- * allowed to import the package, and the web seam render that reaches it
- * (#8217 D6–D8); that action and the checkout e2e workflow are still rendered
- * here.
+ * gets in `apps/web`, copied from the template tree: the site's own
+ * `lib/checkout-config.ts` (its stamp) and the thank-you and unavailable
+ * return pages with their tests (`SPOKE_CHECKOUT_TEMPLATE_PATHS`). A spoke
+ * that signs in through its hub also gets the billing action, the one file
+ * allowed to import the package besides the thank-you page, and the web seam
+ * render that reaches it (#8217 D6–D8); that action is rendered here.
+ *
+ * A spoke sells through its hub's Offerings buy route
+ * (`apps/web/app/api/offerings/checkout/[lookupKey]/route.ts`), never its own
+ * key. The legacy env-key buy route, its Stripe webhook route, `lib/checkout.ts`
+ * (the fulfilment) and the checkout e2e workflow are retired (#9142):
+ * `create-ailk sync-routes --apply` removes them from an existing spoke
+ * (`RETIRED_SPOKE_CHECKOUT_PATHS`, sync-routes.ts).
  *
  * Every guarantee lives in `@working-theory/spoke-checkout` and arrives by a
  * package bump; the copied files are `apps/web` source, tested in the
  * monorepo and kept current by `create-ailk update`, and apart from the
  * config's one stamp line they are byte-identical across spokes at one
- * create-ailk version (roadmap D3, AC-SPOKE-02). A hub never gets them: its
- * checkout is `apps/api`'s.
+ * create-ailk version (roadmap D3, AC-SPOKE-02). A hub never gets them.
  *
  * Spec: docs/specs/7838-spoke-web-checkout-slice-spec.md (D3–D7, D9);
  * docs/specs/8748-a-standard-spoke-checkout-route-spec.md (D2, D3).
@@ -30,62 +33,50 @@ import { createHash } from "node:crypto";
 import { existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, realpathSync, writeFileSync, } from "node:fs";
 import { dirname, join, resolve, sep } from "node:path";
 import { buildScaffoldMarkers, renderTemplateFile, templateDestination } from "./copy.js";
-import { SPOKE_CHECKOUT_ROUTE_FILES } from "./derive-architecture.js";
+import { SPOKE_BILLING_ACTION_PATH } from "./derive-architecture.js";
 import { ENV_CATALOG } from "./lib/env-catalog.js";
 import { diffTwoStrings, } from "./lib/extract-module-bundle.js";
 import { substituteWorkspaceVersions, } from "./substitute.js";
 import { TopologyError, WEB_SEAM_PATH, renderWebSeam, } from "./topology.js";
-/** The checkout package a spoke's two route files import. */
+/** The checkout package a spoke's billing action and thank-you page import. */
 export const SPOKE_CHECKOUT_PACKAGE = "@working-theory/spoke-checkout";
 const API_CLIENT_PACKAGE = "@working-theory/api-client";
-/** The site's checkout data — written once, the site's from then on (#8748 D2). */
+/** The site's checkout stamp — written once, the site's from then on (#8748 D2). */
 export const SPOKE_CHECKOUT_CONFIG_PATH = "apps/web/lib/checkout-config.ts";
-/** The two return pages: Stripe's success URL and every refused buy's target. */
+/** The two return pages a commerce spoke still carries (#8748 D5). */
 export const SPOKE_CHECKOUT_PAGE_FILES = Object.freeze([
     "apps/web/app/[locale]/checkout/thank-you/page.tsx",
     "apps/web/app/[locale]/checkout/unavailable/page.tsx",
 ]);
 /**
- * The standard spoke checkout's template paths, scaffold-relative (#8748 D3).
- * A directory entry covers every file under it, so the tests that sit beside
- * the routes and pages travel with them. `copyTemplate` skips all of them for
- * every scaffold; `writeSpokeCheckoutSlice` copies them into a commerce spoke.
+ * The spoke checkout's template paths, scaffold-relative (#8748 D3). A
+ * directory entry covers every file under it, so the tests that sit beside
+ * the pages travel with them. `copyTemplate` skips all of them for every
+ * scaffold; `writeSpokeCheckoutSlice` copies them into a commerce spoke.
  */
 export const SPOKE_CHECKOUT_TEMPLATE_PATHS = Object.freeze([
-    "apps/web/app/api/checkout",
-    "apps/web/app/api/webhooks/stripe",
     "apps/web/app/[locale]/checkout",
-    "apps/web/lib/checkout.ts",
     SPOKE_CHECKOUT_CONFIG_PATH,
-    "apps/web/lib/__tests__/checkout.test.ts",
 ]);
-/** The variables a commerce spoke depends on (D9). The package reads three of them. */
+/** The variables a commerce spoke depends on (D9): the package reads both. */
 export const SPOKE_CHECKOUT_ENV_CATALOG = Object.freeze({
     STRIPE_SECRET_KEY: {
-        description: `Read by ${SPOKE_CHECKOUT_PACKAGE}: a test key (sk_test_ or rk_test_), or a restricted live key the operator sets with STRIPE_MODE=live.`,
-        secret: true,
-    },
-    STRIPE_WEBHOOK_SECRET: {
-        description: `Read by ${SPOKE_CHECKOUT_PACKAGE}: the signing secret of this site's Stripe webhook endpoint.`,
+        description: `Read by ${SPOKE_CHECKOUT_PACKAGE} for the thank-you page's paid-session read and the billing reads, never to sell: a test key (sk_test_ or rk_test_), or a restricted live key the operator sets with STRIPE_MODE=live.`,
         secret: true,
     },
     STRIPE_MODE: {
         description: `Read by ${SPOKE_CHECKOUT_PACKAGE}: test (the default) or live. Live is the operator's switch, per site.`,
         secret: false,
     },
-    // Read by the standard spoke checkout's fulfilment, so the base catalog
-    // carries it too (#8748).
-    AILK_SPOKE_KEY: ENV_CATALOG["AILK_SPOKE_KEY"],
 });
 /** The names a commerce spoke declares although only the package reads them (D9). */
 export const SPOKE_CHECKOUT_DECLARED_ENV = Object.freeze([
     "STRIPE_SECRET_KEY",
-    "STRIPE_WEBHOOK_SECRET",
     "STRIPE_MODE",
 ]);
 /**
  * The catalog (and declared names) a spoke's `appendEnvRows` call passes: a
- * commerce spoke adds the checkout's four rows (D9). `ENV_CATALOG` itself is
+ * commerce spoke adds the package's two rows (D9). `ENV_CATALOG` itself is
  * unchanged — its test fails on an entry the monorepo's apps never read.
  */
 export function spokeEnvRowOptions(commerce) {
@@ -96,7 +87,7 @@ export function spokeEnvRowOptions(commerce) {
         }
         : { catalog: ENV_CATALOG };
 }
-/** `metadata.site` / an offering slug — the package's own pattern. */
+/** `metadata.site` — the package's own pattern. */
 const SITE_PATTERN = /^[a-z0-9][a-z0-9-]{0,39}$/;
 /** A stamp a renderer may interpolate: the package's pattern, never `default` (D6). */
 function isValidSite(site) {
@@ -125,14 +116,17 @@ export function spokeCheckoutSite(projectName) {
     const digest = createHash("sha256").update(projectName).digest("hex");
     return `site-${digest.slice(0, 8)}`;
 }
+/** The billing action's first line, which marks the file as create-ailk's to rewrite. */
+export const BILLING_ACTION_MARKER = "// The spoke billing action — GENERATED by create-ailk (#8217). Do not edit:";
 /**
  * The spoke billing action (#8217 D6): wiring only, byte-identical across
  * sites, so every guarantee arrives by a package bump. A plain server module
  * (C2): its two exports take no argument, and the hub's read is its only
- * source of customer ids.
+ * source of customer ids. It builds its config from the site's stamp and the
+ * site's own origin (#9142: no longer from `lib/checkout.ts`).
  */
-const BILLING_ACTION = [
-    "// The spoke billing action — GENERATED by create-ailk (#8217). Do not edit:",
+export const BILLING_ACTION = [
+    BILLING_ACTION_MARKER,
     "// every guarantee lives in the spoke-checkout package and arrives by a",
     "// package bump. A plain server module, not a Server Action file: neither",
     "// export takes an argument, and the hub's GET /v1/member/billing is the only",
@@ -141,206 +135,29 @@ const BILLING_ACTION = [
     `import { member } from "${API_CLIENT_PACKAGE}";`,
     `import { createSpokeCheckout } from "${SPOKE_CHECKOUT_PACKAGE}";`,
     "",
-    `import { spokeCheckoutConfig } from "../../../../../lib/checkout";`,
+    `import { checkoutConfig } from "../../../../../lib/checkout-config";`,
     `import { forwardedCookieInit } from "../../../../../lib/server-api";`,
+    `import { resolveBaseUrl } from "../../../../../src/lib/routes";`,
     "",
-    "const billing = createSpokeCheckout(spokeCheckoutConfig).billing.forMember(",
-    "  async () => member.billing(await forwardedCookieInit()),",
-    ");",
+    "const billing = createSpokeCheckout({",
+    "  site: checkoutConfig.site,",
+    "  siteBaseUrl: resolveBaseUrl(),",
+    "}).billing.forMember(async () => member.billing(await forwardedCookieInit()));",
     "",
     "export const readSpokeBilling = billing.read;",
     "export const spokeBillingPortalUrl = billing.portalUrl;",
     "",
 ].join("\n");
-// ── #7839 D8 — the checkout e2e workflow ─────────────────────────────────────
-/** Where a commerce spoke's end-to-end checkout workflow lives. */
-export const SPOKE_CHECKOUT_E2E_WORKFLOW_PATH = ".github/workflows/checkout-e2e.yml";
-/**
- * The Stripe CLI release the workflow installs, and the SHA-256 of its
- * `stripe_<v>_linux_x86_64.tar.gz` from that release's own
- * `stripe-linux-checksums.txt`. Never bump one without re-reading the other.
- */
-export const STRIPE_CLI_VERSION = "1.51.1";
-export const STRIPE_CLI_LINUX_X64_SHA256 = "38c8de73a8cab810a4aab8a4015cd4e3398b7b87aa42b6944d09d89ed524ac53";
-/** The Playwright the workflow installs — the monorepo's own pinned version. */
-export const E2E_PLAYWRIGHT_VERSION = "1.61.1";
-/**
- * Every action the workflow uses, pinned to the commit its `v4` tag named
- * when this was written (SEC-7839-2): `gh api repos/<action>/commits/v4`.
- */
-export const E2E_ACTION_PINS = Object.freeze({
-    "actions/checkout": "11d5960a326750d5838078e36cf38b85af677262",
-    "pnpm/action-setup": "b906affcce14559ad1aafd4ab0e942779e9f58b1",
-    "actions/setup-node": "49933ea5288caeca8642d1e84afbd3f7d6820020",
-    "actions/upload-artifact": "ea165f8d65b6e75b540449e92b4886f43607fa02",
-});
-function uses(action) {
-    return `uses: ${action}@${E2E_ACTION_PINS[action]} # v4`;
-}
-/**
- * The workflow text (D8). Identical for every spoke at one create-ailk
- * version. Every `${{ … }}` sits in an env-style value, never in a script.
- */
-export const CHECKOUT_E2E_WORKFLOW = `# Checkout e2e — GENERATED by create-ailk (#7839). Do not edit: it changes
-# with the ${SPOKE_CHECKOUT_PACKAGE} command it runs.
-#
-# Pays each named offering once through Stripe's hosted Checkout in TEST
-# mode, then checks Stripe's webhook was answered 2xx and this site's
-# fulfilment ran. Start it by hand (Actions > Checkout e2e > Run workflow)
-# after a checkout change and before any live flip. It never runs on a push
-# or a pull request: it needs the network, the Stripe CLI and test-mode state.
-#
-# Setup, once: create the GitHub Environment "checkout-e2e", limit its
-# deployment branches to the default branch, and add to it the secrets
-# STRIPE_TEST_SECRET_KEY (an sk_test_ or rk_test_ key) and AILK_SPOKE_KEY,
-# and the variable AILK_API_URL (https). Each paid session posts one
-# test-mode lead to the hub. Test subscriptions it creates are cancelled.
-name: Checkout e2e
-
-on:
-  workflow_dispatch:
-    inputs:
-      offerings:
-        description: Comma-separated fixed offering slugs from apps/web/lib/checkout-config.ts
-        required: true
-        type: string
-
-permissions:
-  contents: read
-
-concurrency:
-  group: checkout-e2e
-  cancel-in-progress: false
-
-jobs:
-  checkout-e2e:
-    runs-on: ubuntu-latest
-    timeout-minutes: 30
-    environment: checkout-e2e
-    env:
-      NEXT_PUBLIC_BASE_URL: http://localhost:3000
-      STRIPE_MODE: test
-    steps:
-      - name: Refuse a live key or a missing setting
-        env:
-          STRIPE_SECRET_KEY: \${{ secrets.STRIPE_TEST_SECRET_KEY }}
-          AILK_SPOKE_KEY: \${{ secrets.AILK_SPOKE_KEY }}
-          AILK_API_URL: \${{ vars.AILK_API_URL }}
-        run: |
-          case "$STRIPE_SECRET_KEY" in
-            sk_test_*|rk_test_*) ;;
-            *) echo "::error::STRIPE_TEST_SECRET_KEY must be an sk_test_ or rk_test_ key"; exit 2 ;;
-          esac
-          if [ -z "$AILK_SPOKE_KEY" ]; then
-            echo "::error::set the AILK_SPOKE_KEY secret in the checkout-e2e environment"; exit 2
-          fi
-          case "$AILK_API_URL" in
-            https://*) ;;
-            *) echo "::error::AILK_API_URL must be the hub's https origin"; exit 2 ;;
-          esac
-
-      - ${uses("actions/checkout")}
-
-      - ${uses("pnpm/action-setup")}
-
-      - run: test -f pnpm-lock.yaml || touch pnpm-lock.yaml
-
-      - ${uses("actions/setup-node")}
-        with:
-          node-version: 20
-          cache: pnpm
-          cache-dependency-path: pnpm-lock.yaml
-
-      - name: Install
-        run: |
-          if [ -s pnpm-lock.yaml ]; then pnpm install --frozen-lockfile; else pnpm install; fi
-
-      - name: Install the Stripe CLI (pinned, checksum-checked)
-        run: |
-          curl -fsSL -o "$RUNNER_TEMP/stripe.tar.gz" \\
-            https://github.com/stripe/stripe-cli/releases/download/v${STRIPE_CLI_VERSION}/stripe_${STRIPE_CLI_VERSION}_linux_x86_64.tar.gz
-          echo "${STRIPE_CLI_LINUX_X64_SHA256}  $RUNNER_TEMP/stripe.tar.gz" | sha256sum -c -
-          mkdir -p "$RUNNER_TEMP/stripe-cli"
-          tar -xzf "$RUNNER_TEMP/stripe.tar.gz" -C "$RUNNER_TEMP/stripe-cli" stripe
-
-      - name: Install Playwright (pinned) and Chromium
-        run: |
-          npm install --no-save --ignore-scripts --prefix "$RUNNER_TEMP/e2e-deps" playwright@${E2E_PLAYWRIGHT_VERSION}
-          "$RUNNER_TEMP/e2e-deps/node_modules/.bin/playwright" install --with-deps chromium
-
-      - name: Fetch the Stripe CLI's signing secret
-        env:
-          STRIPE_API_KEY: \${{ secrets.STRIPE_TEST_SECRET_KEY }}
-        run: |
-          umask 077
-          secret="$("$RUNNER_TEMP/stripe-cli/stripe" listen --print-secret)"
-          echo "::add-mask::$secret"
-          printf '%s' "$secret" > "$RUNNER_TEMP/stripe-whsec"
-
-      - name: Build the site
-        run: pnpm --filter ./apps/web build
-
-      - name: Start the site
-        env:
-          STRIPE_SECRET_KEY: \${{ secrets.STRIPE_TEST_SECRET_KEY }}
-          AILK_SPOKE_KEY: \${{ secrets.AILK_SPOKE_KEY }}
-          AILK_API_URL: \${{ vars.AILK_API_URL }}
-        run: |
-          STRIPE_WEBHOOK_SECRET="$(cat "$RUNNER_TEMP/stripe-whsec")"
-          export STRIPE_WEBHOOK_SECRET
-          cd apps/web
-          nohup pnpm exec next start -p 3000 -H localhost > "$RUNNER_TEMP/next.log" 2>&1 &
-          echo $! > "$RUNNER_TEMP/next.pid"
-          for _ in $(seq 1 60); do
-            curl -fsS -o /dev/null http://localhost:3000/checkout/thank-you && exit 0
-            sleep 2
-          done
-          echo "::error::the site did not start on localhost:3000; run it locally with the same settings to see why"
-          exit 1
-
-      - name: Pay each offering
-        working-directory: apps/web
-        env:
-          STRIPE_SECRET_KEY: \${{ secrets.STRIPE_TEST_SECRET_KEY }}
-          OFFERINGS: \${{ inputs.offerings }}
-          SPOKE_CHECKOUT_E2E_DEPS: \${{ runner.temp }}/e2e-deps
-          STRIPE_CLI_PATH: \${{ runner.temp }}/stripe-cli/stripe
-        run: |
-          STRIPE_WEBHOOK_SECRET="$(cat "$RUNNER_TEMP/stripe-whsec")"
-          export STRIPE_WEBHOOK_SECRET
-          pnpm exec spoke-checkout-e2e --base-url http://localhost:3000 --offerings "$OFFERINGS" --out "$RUNNER_TEMP/checkout-e2e"
-
-      - name: Stop the site
-        if: always()
-        run: |
-          if [ -f "$RUNNER_TEMP/next.pid" ]; then pkill -P "$(cat "$RUNNER_TEMP/next.pid")" || true; kill "$(cat "$RUNNER_TEMP/next.pid")" || true; fi
-          rm -f "$RUNNER_TEMP/stripe-whsec"
-
-      - name: Keep the report
-        if: always()
-        ${uses("actions/upload-artifact")}
-        with:
-          name: checkout-e2e
-          path: \${{ runner.temp }}/checkout-e2e
-          if-no-files-found: ignore
-          retention-days: 7
-`;
 /**
  * The rendered part of the slice for `site` (#8748 D3): with `signIn: "hub"`
- * the billing action (#8217 D8), then the checkout e2e workflow (#7839 D8).
- * Neither depends on `site`. The rest of the slice is template source,
- * copied by `writeSpokeCheckoutSlice`. Throws `TopologyError` for an invalid
- * stamp (SEC-7838-10).
+ * the billing action (#8217 D8), else nothing. It does not depend on `site`.
+ * The rest of the slice is template source, copied by
+ * `writeSpokeCheckoutSlice`. Throws `TopologyError` for an invalid stamp
+ * (SEC-7838-10).
  */
 export function renderSpokeCheckoutFiles(site, opts = {}) {
     assertSite(site);
-    const billingActionPath = SPOKE_CHECKOUT_ROUTE_FILES[2];
-    return [
-        ...(opts.signIn === "hub"
-            ? [[billingActionPath, BILLING_ACTION]]
-            : []),
-        [SPOKE_CHECKOUT_E2E_WORKFLOW_PATH, CHECKOUT_E2E_WORKFLOW],
-    ];
+    return opts.signIn === "hub" ? [[SPOKE_BILLING_ACTION_PATH, BILLING_ACTION]] : [];
 }
 /** The one line of the template's config the writer stamps (#8748 D2). */
 const SITE_LINE = /^const SITE = "[a-z0-9-]+";$/gm;
@@ -438,9 +255,10 @@ function isOlderPin(current, wanted) {
  * action, and the web seam — generated, so always rewritten — becomes the
  * billing render: reported `patched` when it changed, not at all when equal.
  * Adds the package to `apps/web/package.json` when absent, and raises a plain
- * pin older than the one it writes (#7839): the generated checkout e2e
- * workflow runs a command a `^0.2.0` pin never reaches. Any other range —
- * newer, `workspace:`, a tag — is the site's and is kept.
+ * pin older than the one it writes (#7839): the rendered billing action
+ * calls the package's current `createSpokeCheckout` shape, which an older
+ * pin does not take (#9142). Any other range — newer, `workspace:`, a tag —
+ * is the site's and is kept.
  * Every refusal (an invalid stamp, a version map without the package, a
  * missing or malformed `apps/web/package.json`, a template missing any
  * `SPOKE_CHECKOUT_TEMPLATE_PATHS` entry, a template config without exactly
@@ -558,3 +376,22 @@ export function dropSpokeCheckoutDependency(targetDir) {
     delete deps[SPOKE_CHECKOUT_PACKAGE];
     writeFileSync(pkgPath, `${JSON.stringify(pkg, null, 2)}${before.endsWith("\n") ? "\n" : ""}`);
 }
+// ── #9142 — the retired legacy env-key checkout ─────────────────────────────
+/**
+ * What the legacy env-key checkout left in a spoke, scaffold-relative: the
+ * buy route and the Stripe webhook route (a directory entry covers the tests
+ * beside each), `lib/checkout.ts` (the fulfilment) and its test. Each was a
+ * template copy create-ailk recorded in `.ailk-template-files.json`;
+ * `create-ailk sync-routes --apply` removes the ones still byte-identical to
+ * that record.
+ */
+export const RETIRED_SPOKE_CHECKOUT_PATHS = Object.freeze([
+    "apps/web/app/api/checkout",
+    "apps/web/app/api/webhooks/stripe",
+    "apps/web/lib/checkout.ts",
+    "apps/web/lib/__tests__/checkout.test.ts",
+]);
+/** The retired checkout e2e workflow — rendered, never recorded (#7839 D8). */
+export const RETIRED_CHECKOUT_E2E_WORKFLOW_PATH = ".github/workflows/checkout-e2e.yml";
+/** The workflow's first line, which marks it as create-ailk's to remove. */
+export const RETIRED_CHECKOUT_E2E_MARKER = "# Checkout e2e — GENERATED by create-ailk (#7839). Do not edit: it changes";

package/dist/starter-grid.d.ts

@@ -109,9 +109,6 @@ export declare const ALIASES: Readonly<{
         readonly design: "standard";
         readonly modules: readonly ["marketing"];
         readonly categories: readonly ["accounting", "legal", "technology"];
-        readonly layout: {
-            readonly announcementBanner: true;
-        };
     };
     /**
      * The Pro flagship. Its module list is OFFERINGS § 4 offering 3's tiers line

package/dist/starter-grid.js

@@ -1,13 +1,17 @@
 /**
- * The two pages every starter carries whatever its shape (#6658 D5,
+ * The pages every starter carries whatever its shape (#6658 D5,
  * `docs/decisions/starter-roster-page-set.md` D4/D7): a glossary and a
- * newsletter signup. Each is a module-less `GATEABLE_SURFACES` entry the
- * roster enables, with its seed in `_base`.
+ * newsletter signup — each a module-less `GATEABLE_SURFACES` entry the
+ * roster enables, with its seed in `_base` — and the `/unsubscribe` landing
+ * every signed link calls (#8850 D1). That one is a code route with no
+ * `content`, like `/sign-in`: a `CORE_ROUTE_DIRS` entry every scaffold
+ * already serves, never gated (#8438 D17), declared here so the roster of
+ * record lists it beside the newsletter.
  *
- * The third — `/book-a-call` — was retired by #6897 D10: every scaffold's
- * former `/book-a-call` link now points at `/meet/book-a-call`, served by
- * `FREE_MEET_PLACEHOLDER_ROWS` below (a Free placeholder) or by the
- * scheduling module's own live `/meet/[slug]` page.
+ * A former third page — `/book-a-call` — was retired by #6897 D10: every
+ * scaffold's former `/book-a-call` link now points at `/meet/book-a-call`,
+ * served by `FREE_MEET_PLACEHOLDER_ROWS` below (a Free placeholder) or by
+ * the scheduling module's own live `/meet/[slug]` page.
  */
 const SHAPE_INDEPENDENT_ROWS = [
     { route: "/glossary", content: ["content/en/GlossaryList/glossary.mdx"] },
@@ -15,6 +19,7 @@ const SHAPE_INDEPENDENT_ROWS = [
         route: "/newsletter",
         content: ["content/en/NewsletterSignup/newsletter.mdx"],
     },
+    { route: "/unsubscribe" },
 ];
 /**
  * The Free `/meet` placeholder pages (#6897 D5) — a meeting-types hub
@@ -30,10 +35,12 @@ const SHAPE_INDEPENDENT_ROWS = [
  * Every alias that takes the `scheduling` module drops `"/meet"` and
  * `"/meet/[slug]"` (D5) — otherwise `mergeRoster` refuses the duplicate
  * route the module's own rows also contribute. The ROWS go; the SEEDS stay
- * (#6942, operator 2026-09-28, partly reversing D5): until
- * `SCHEDULING_CAL_LINK` is configured the module's pages hand off to the Free
- * placeholder routes, which serve these seeds. `withMeetPlaceholderSeeds`
- * (`site-roster.ts`) folds them onto the module's rows.
+ * (#6942, operator 2026-09-28, partly reversing D5): the module's meeting
+ * page reads a `BookCall/<slug>` seed for its URL, its JSON-LD and its
+ * fallback title, never its sections (#8843 C5). `withMeetPlaceholderSeeds`
+ * (`site-roster.ts`) folds them onto the module's rows. The hub-driven
+ * `/private` index has no row here: it reaches those aliases through the
+ * module's own `pageContributions` (#8843 D8, #8850 D2).
  */
 const FREE_MEET_PLACEHOLDER_ROWS = [
     { route: "/meet", content: ["content/en/LandingPage/meet.mdx"] },
@@ -391,9 +398,12 @@ export const ALIASES = Object.freeze({
         design: "standard",
         modules: ["marketing"],
         categories: ["accounting", "legal", "technology"],
-        // The demo site carries the "Get started with this template" banner
-        // (operator ruling 2026-09-23); every other layout knob keeps its default.
-        layout: { announcementBanner: true },
+        // No `layout`: every knob keeps its default. The "Get started for free or
+        // upgrade to Pro" banner this alias carried for the demo site (operator
+        // ruling 2026-09-23) reached every keyless `organization-product`
+        // scaffold too, so Epic #8845's "no starter page ships our own brands or
+        // upsells" retires it (#8850, spec C6); a demo deployment that wants it
+        // sets it in its own config.
     },
     /**
      * The Pro flagship. Its module list is OFFERINGS § 4 offering 3's tiers line