create-ailk 0.23.0 → 0.25.1

package/templates/apps/mcp/src/tools/index.ts

@@ -1,137 +0,0 @@
-/**
- * MCP tool registry — re-exports every tool module.
- *
- * Add new tool modules here as they land in Phase 3+.
- */
-
-export {
-  purchaseInputSchema,
-  purchaseOutputSchema,
-  ailkPurchase,
-  type PurchaseInput,
-  type PurchaseOutput,
-} from "./purchase.js";
-
-export {
-  listPagesInputSchema,
-  listPagesOutputSchema,
-  ailkListPages,
-  type ListPagesInput,
-  type ListPagesOutput,
-} from "./list_pages.js";
-
-export {
-  readContentInputSchema,
-  readContentOutputSchema,
-  ailkReadContent,
-  type ReadContentInput,
-  type ReadContentOutput,
-} from "./read_content.js";
-
-export {
-  searchContentInputSchema,
-  searchContentOutputSchema,
-  ailkSearchContent,
-  type SearchContentInput,
-  type SearchContentOutput,
-} from "./search_content.js";
-
-export {
-  getSiteInfoInputSchema,
-  getSiteInfoOutputSchema,
-  ailkGetSiteInfo,
-  type GetSiteInfoInput,
-  type GetSiteInfoOutput,
-} from "./get_site_info.js";
-
-export {
-  getBusinessHoursInputSchema,
-  getBusinessHoursOutputSchema,
-  ailkGetBusinessHours,
-  type GetBusinessHoursInput,
-  type GetBusinessHoursOutput,
-} from "./get_business_hours.js";
-
-export {
-  getLocationsInputSchema,
-  getLocationsOutputSchema,
-  ailkGetLocations,
-  type GetLocationsInput,
-  type GetLocationsOutput,
-} from "./get_locations.js";
-
-export {
-  getOfferingsInputSchema,
-  getOfferingsOutputSchema,
-  ailkGetOfferings,
-  type GetOfferingsInput,
-  type GetOfferingsOutput,
-} from "./get_offerings.js";
-
-export {
-  getPricingInputSchema,
-  getPricingOutputSchema,
-  ailkGetPricing,
-  type GetPricingInput,
-  type GetPricingOutput,
-} from "./get_pricing.js";
-
-export {
-  getFaqInputSchema,
-  getFaqOutputSchema,
-  ailkGetFaq,
-  type GetFaqInput,
-  type GetFaqOutput,
-} from "./get_faq.js";
-
-export {
-  auditInputSchema,
-  auditOutputSchema,
-  ailkAudit,
-  type AuditInput,
-  type AuditOutput,
-} from "./audit.js";
-
-export {
-  submitLeadInputSchema,
-  submitLeadOutputSchema,
-  ailkCaptureLead,
-  type SubmitLeadInput,
-  type SubmitLeadOutput,
-} from "./capture_lead.js";
-
-export {
-  subscribeNewsletterInputSchema,
-  subscribeNewsletterOutputSchema,
-  ailkSubscribeNewsletter,
-  type SubscribeNewsletterInput,
-  type SubscribeNewsletterOutput,
-} from "./subscribe_newsletter.js";
-
-export {
-  requestCallbackInputSchema,
-  requestCallbackOutputSchema,
-  ailkRequestCallback,
-  type RequestCallbackInput,
-  type RequestCallbackOutput,
-} from "./request_callback.js";
-
-export {
-  scaffoldInputSchema,
-  scaffoldOutputSchema,
-  ailkCreateProject,
-  type ScaffoldInput,
-  type ScaffoldOutput,
-} from "./create_project.js";
-
-// The scheduling tools (list_availability, get_event_meta, create_booking)
-// and the signal-collectors flow tools (get_flow, submit_flow_step) are
-// deliberately NOT re-exported here. (The content-write tools that used to sit
-// in this list — create_page, update_page, delete_page — no longer exist at
-// all: #5853 retired them with their HTTP twins.)
-// Both remaining groups are module-conditional slice files
-// (#5182): a re-export from this barrel is a static path into a file the OSS
-// strip removes, which reds the public tree's type-check. They are reached
-// only through `createMcpServer`'s per-module loader in ../server.ts.
-// The rule this barrel now follows: it re-exports exactly the tools no module
-// gate can remove.

package/templates/apps/mcp/src/tools/list_pages.ts

@@ -1,74 +0,0 @@
-/**
- * list_pages — returns published content pages, optionally filtered by type.
- *
- * Pure read: resolves its adapter through `getMcpContentAdapter()` — the one
- * resolver seam (#5805, ADR 0011), MDX by default.
- * No auth, no side effects, no network. The adapter reads from the filesystem.
- *
- * Phase 3 S3: optional `locale` parameter. Validated against `readLocales()`
- * allowlist; invalid or unknown values silently fall back to the project's
- * default locale (AC-i18n-07). Lists are locale-scoped — pages must exist in
- * the requested locale's directory to be enumerated.
- *
- * Input:  { type?: SchemaOrgType, locale?: string }
- * Output: { pages: Array<{ slug, type, title, description? }> }
- * Session/scope: none — read-only public content.
- */
-
-import {
-  SCHEMA_ORG_TYPES,
-  type SchemaOrgType,
-} from "@working-theory/content-adapters";
-import {
-  listPagesInputSchema,
-  listPagesOutputSchema,
-  type ListPagesInput,
-  type ListPagesOutput,
-} from "@working-theory/validation";
-
-import {
-  getMcpContentAdapter,
-  mcpContentRoot,
-} from "../lib/content-adapter.js";
-import { resolveLocale } from "../lib/resolve-locale.js";
-
-export { listPagesInputSchema, listPagesOutputSchema };
-export type { ListPagesInput, ListPagesOutput };
-
-/**
- * list_pages handler.
- *
- * Accepts an optional `contentRoot` override for testing (avoids coupling
- * unit tests to the deployed filesystem layout). When omitted, resolves it
- * through `mcpContentRoot()` (#8070 D3).
- */
-export async function ailkListPages(
-  input: ListPagesInput,
-  contentRoot?: string,
-): Promise<ListPagesOutput> {
-  listPagesInputSchema.parse(input);
-
-  // Default: the one content-root resolver (#8070 D3).
-  const root = contentRoot ?? mcpContentRoot();
-  const locale = resolveLocale(input.locale);
-  const adapter = getMcpContentAdapter({ contentRoot: root, locale });
-
-  const types: readonly SchemaOrgType[] = input.type
-    ? [input.type]
-    : SCHEMA_ORG_TYPES;
-
-  const perType = await Promise.all(
-    types.map((type) => adapter.listPages(type, locale)),
-  );
-
-  const pages: ListPagesOutput["pages"] = perType.flatMap((results) =>
-    results.map((page) => ({
-      slug: page.slug,
-      type: page.type,
-      title: page.title,
-      ...(page.description !== undefined && { description: page.description }),
-    })),
-  );
-
-  return listPagesOutputSchema.parse({ pages });
-}

package/templates/apps/mcp/src/tools/person_notes.ts

@@ -1,25 +0,0 @@
-// oss: false
-/**
- * The signed-in workspace surface's People notes tools (#8514 D8) — the twins
- * of `apps/api/src/routes/workspaces/people.ts`'s notes pair:
- *
- *   get_person_notes  GET /v1/workspaces/:workspaceId/people/:personId/notes
- *   set_person_notes  PUT /v1/workspaces/:workspaceId/people/:personId/notes
- *
- * Each takes the route's params and body (the SDK has already parsed them
- * against the catalog's input shape, which is the route's own schemas),
- * forwards the caller's agent key through `@working-theory/api-client`, and
- * returns the route's answer untouched. apps/api checks the key, the grant and
- * the workspace; this file only carries the key, and never logs or returns it.
- */
-
-import { people, type PersonRef } from "@working-theory/api-client";
-import type { PersonNotesPutInput } from "@working-theory/validation";
-
-export function ailkGetPersonNotes(key: string, input: PersonRef) {
-  return people.notes(key, input);
-}
-
-export function ailkSetPersonNotes(key: string, input: PersonRef & PersonNotesPutInput) {
-  return people.setNotes(key, input);
-}

package/templates/apps/mcp/src/tools/proposals.ts

@@ -1,27 +0,0 @@
-// oss: false
-/**
- * The signed-in workspace surface's proposals tools (#8516 D7) — the twins of
- * `apps/api/src/routes/workspaces/pieces.ts`'s proposals pair:
- *
- *   list_proposals   GET  /v1/workspaces/:workspaceId/people/:personId/proposals
- *   create_proposal  POST /v1/workspaces/:workspaceId/people/:personId/proposals
- *
- * Each takes the route's params and body (the SDK has already parsed them
- * against the catalog's input shape, which is the route's own schemas),
- * forwards the caller's agent key through `@working-theory/api-client`, and
- * returns the route's answer untouched. apps/api checks the key, the grant,
- * the workspace and the money gate (an agent's price is `403
- * proposal_needs_person`); this file only carries the key, and never logs or
- * returns it.
- */
-
-import { people, type PersonRef } from "@working-theory/api-client";
-import type { ProposalCreateBody } from "@working-theory/validation";
-
-export function ailkListProposals(key: string, input: PersonRef) {
-  return people.proposals(key, input);
-}
-
-export function ailkCreateProposal(key: string, input: PersonRef & ProposalCreateBody) {
-  return people.createProposal(key, input);
-}

package/templates/apps/mcp/src/tools/purchase.ts

@@ -1,205 +0,0 @@
-/**
- * AGENT TOOL — purchase (`start_purchase`)
- *
- * Starts a purchase for a named offering and returns a **Stripe-hosted
- * Checkout URL**. Nothing is charged here: the tool builds the payload the
- * HTTP twin `POST /v1/checkout/sessions` validates, and the buyer completes
- * payment on Stripe's own page. That hosted handoff is the money boundary
- * `.claude/rules/vocabulary.md` § Commerce requires — no card data reaches
- * us, and we are not a Stripe Connect platform.
- *
- * VISIBILITY — the commerce add-on claim (#5971, superseding S15a/#610).
- * This tool carries `addon: "commerce"` in the catalog, and since #5971 that
- * marker is its visibility gate: it reaches neither the discovery manifest
- * nor the running server's tool list unless the deployment positively holds
- * the `commerce` licence claim. Two gates enforce that, deliberately:
- *
- *   1. REGISTRATION — `shouldRegister()` in `../server.js` drops the entry.
- *   2. CALL TIME — the first statement below re-reads the claim.
- *
- * Gate 2 is not redundant. The HTTP transport's stateless mode builds a fresh
- * `McpServer` per request, so the gate must be re-read rather than captured;
- * `ailkPurchase` is an exported function a scaffold or a test can call
- * directly, bypassing registration entirely; and it gives "calling it by name
- * on a keyless site" a deterministic, asserted body rather than whatever the
- * SDK emits for an unregistered name. That body is `notFoundError("Not
- * found")` — the MCP twin of the checkout route's own
- * `commerceDisabledResponse()`, same code, same message, no hint that a
- * licence exists.
- *
- * REDIRECTS — never caller-supplied on this surface (#6001). An anonymous
- * caller has no way to prove it controls a redirect target, so
- * `successUrl` / `cancelUrl` are ALWAYS derived from `AILK_BASE_URL` below,
- * never accepted from the input, and `allowPromotionCodes` is never accepted
- * either. This function's own gate is `purchaseMcpInputSchema` — a
- * `.strict()` `.pick()` of the shared `purchaseInputSchema` exposing exactly
- * `productCode` + `quantity` — so a DIRECT call to `ailkPurchase` (the
- * surface this file's own tests exercise, per the note above) carrying any
- * of the three fails validation outright. A call through the registered SDK
- * transport has them stripped one layer earlier, by the SDK's own arg parse
- * against the registered shape, before this function ever runs — they are
- * simply not part of that shape. Either path is safe: the payload built
- * below can never carry a caller-supplied redirect. The shared
- * `purchaseInputSchema` (and the Server Action / API route that use it) is
- * unaffected: both keep accepting a caller-supplied redirect. The route's own
- * anonymous exposure is gated only when `OSS_API_INTERNAL_SECRET` is set
- * (`passesInternalAuthGate()` in `apps/api/src/routes/checkout/sessions.ts`);
- * unset — the OSS standalone default — the route accepts anonymous callers.
- *
- * The file stays in the BASE tree and is never added to
- * `MODULE_SLICES.commerce.ownedFiles`: `../server.js` statically imports
- * `ailkPurchase`, so a slice that deleted it from a keyless scaffold would
- * produce `ERR_MODULE_NOT_FOUND` inside the server bootstrap. A keyless
- * scaffold carries the file and registers nothing — exactly how it already
- * carries `apps/api/src/routes/checkout/sessions.ts`.
- *
- * Schemas live in `@working-theory/validation` per ADR 0013. Network calls go
- * through `@working-theory/api-client` per the architecture invariants (apps
- * may not import each other; the shared HTTP surface lives in packages/).
- *
- * THE KEY — the full Offerings lookup_key (#8935). `productCode` is a price's
- * full lookup_key (contract §3.7), the `lookupKey` `get_pricing` and
- * `get_offerings` return. After the claim and the strict schema, the one
- * §3.7 parser, `parseLookupKey`, refuses an ungrammatical key before any HTTP
- * call, with the same not-found body every route 404 maps to (A3, A5). The
- * workspace stays the server's (A1): the api-client attaches the
- * deployment's own spoke key, and the route alone decides whether the key is
- * shown and org-enabled. A spoke whose Organization has no Stripe connection
- * gets the route's same 404, never a session on the hub's own env key, so
- * this tool refuses it as the web buy route does (#9126).
- *
- * Spec: `docs/specs/5971-start-purchase-hosted-checkout-spec.md`,
- * `docs/specs/8935-start-purchase-sells-a-named-spec.md`.
- */
-
-import { checkout } from "@working-theory/api-client";
-import {
-  parseLookupKey,
-  purchaseMcpInputSchema,
-  type PurchaseMcpInput,
-  type PurchaseOutput,
-} from "@working-theory/validation";
-
-import { mcpCommerceClaim } from "../lib/commerce-claim.js";
-import {
-  notFoundError,
-  validationError,
-  type ErrorBody,
-} from "../lib/errors.js";
-
-/**
- * The module-disabled body. Identical to what a build without commerce
- * produces and to the checkout route's own `commerceDisabledResponse()` —
- * it must not leak that a licence gate is what answered.
- */
-function commerceDisabledBody(): ErrorBody {
-  return notFoundError("Not found");
-}
-
-/**
- * The one not-found body for an offering (#8935 D2, A5): an ungrammatical key
- * refused before the call and every route 404 answer this same value, and
- * neither echoes the caller's key.
- */
-function offeringNotFoundBody(): ErrorBody {
-  return notFoundError("No offering matches that product code.");
-}
-
-/**
- * Export name `ailkPurchase` satisfies the parity-test naming convention
- * (ailk<PascalVerb>) so the harness can discover it.
- *
- * Paired with `purchaseAction` Server Action in
- * apps/web/app/[locale]/dev/purchase/.
- *
- * Returns a typed error BODY rather than throwing on every failure an agent
- * can act on (FR-2) — MCP tools surface errors as their result body, the
- * pattern `lib/errors.ts`'s error bodies establish.
- */
-export async function ailkPurchase(
-  input: PurchaseMcpInput,
-): Promise<PurchaseOutput | ErrorBody> {
-  // Gate 2 — call time. Before validation, before any side effect.
-  if (mcpCommerceClaim() !== "claimed") {
-    return commerceDisabledBody();
-  }
-
-  // Validate input before any side effect (security requirement). Strict
-  // (#6001): a DIRECT call carrying successUrl, cancelUrl or
-  // allowPromotionCodes fails here — this function never accepts a
-  // caller-supplied redirect. (A call through the registered SDK transport
-  // never reaches this line with those fields present at all — see the
-  // REDIRECTS note above.) Every field this schema DOES accept mirrors the
-  // route's own validation (spec D5), so an input this accepts is an input
-  // the route accepts.
-  const parsed = purchaseMcpInputSchema.safeParse(input);
-  if (!parsed.success) {
-    return validationError("Invalid start_purchase input", {
-      issues: parsed.error.issues.map((issue) => ({
-        path: issue.path as (string | number)[],
-        message: issue.message,
-      })),
-    });
-  }
-
-  const baseUrl =
-    process.env.AILK_BASE_URL ||
-    process.env.NEXT_PUBLIC_BASE_URL ||
-    "http://localhost:3000";
-
-  const { productCode, quantity } = parsed.data;
-
-  // #8935 D2 — a key outside the §3.7 grammar can never sell, so it is
-  // refused here, before the route spends a rate-limit token on it.
-  if (parseLookupKey(productCode) === null) {
-    return offeringNotFoundBody();
-  }
-
-  // successUrl/cancelUrl are ALWAYS derived from baseUrl (#6001) — never
-  // accepted from the caller. allowPromotionCodes is never forwarded: it is
-  // not part of purchaseMcpInputSchema, so it can never be present here.
-  //
-  // #6084 D1 — `successUrl` carries Stripe's own `{CHECKOUT_SESSION_ID}`
-  // template token, substituted into the redirect at completion time. This
-  // is what lets `/purchase/success` read the session back (D1). `cancelUrl`
-  // deliberately carries NO template: that page reads nothing (D4), and
-  // Stripe's substitution contract is documented for `success_url` only.
-  const result = await checkout.createSession({
-    productCode,
-    ...(quantity !== undefined && { quantity }),
-    successUrl: `${baseUrl}/purchase/success?session_id={CHECKOUT_SESSION_ID}`,
-    cancelUrl: `${baseUrl}/purchase/cancel`,
-  });
-
-  if (!result.ok) {
-    // An unknown offering is the route's 404 `unknown-product-code`, and
-    // `packages/stripe-client` throws it BEFORE `stripe.checkout.sessions
-    // .create` — so no Checkout Session exists (FR-2).
-    if (result.status === 404) {
-      // Deliberately does NOT echo the caller's productCode. The HTTP twin
-      // states and tests that invariant ("Error responses never echo user
-      // input", apps/api/src/routes/checkout/sessions.ts), and parity means
-      // the pair answers alike.
-      return offeringNotFoundBody();
-    }
-    return validationError(
-      `checkout-unavailable: POST /v1/checkout/sessions returned ${result.status}`,
-      { status: result.status },
-    );
-  }
-
-  // Only `url` is surfaced. The route's `sessionId` is deliberately withheld:
-  // an anonymous agent has no use for it and it is the one field that
-  // identifies a specific buyer's session (spec D5).
-  return { url: result.body.url };
-}
-
-// Re-export schemas/types from @working-theory/validation for barrel consumers.
-export {
-  purchaseInputSchema,
-  purchaseMcpInputSchema,
-  purchaseOutputSchema,
-  type PurchaseInput,
-  type PurchaseMcpInput,
-  type PurchaseOutput,
-} from "@working-theory/validation";

package/templates/apps/mcp/src/tools/read_content.ts

@@ -1,75 +0,0 @@
-/**
- * read_content — returns a single page's frontmatter + raw MDX body.
- *
- * Pure read: resolves its adapter through `getMcpMdxContentAdapter()` — the
- * MDX-narrowed twin of the one resolver seam (#5805, ADR 0011; needed here
- * for `getPageSource()`'s raw body, which the base `ContentAdapter` contract
- * doesn't carry), MDX by default.
- * Composes getPageBySlug (frontmatter) + getPageSource (body) into a single
- * output shape. Returns null when the slug is not found — never throws for
- * a missing page.
- *
- * Phase 3 S3: optional `locale` parameter. Validated against `readLocales()`
- * allowlist; invalid or unknown values silently fall back to the project's
- * default locale (AC-i18n-07). The adapter applies its own fallback chain.
- *
- * Input:  { type: SchemaOrgType, slug: string, locale?: string } — `type`
- *         admits the full SchemaOrgType set (#6030 D1), mirrored in
- *         @working-theory/validation's MCP_SCHEMA_ORG_TYPES.
- * Output: { slug, type, frontmatter, body } | null
- * Session/scope: none — read-only public content.
- */
-
-import {
-  readContentInputSchema,
-  readContentOutputSchema,
-  type ReadContentInput,
-  type ReadContentOutput,
-} from "@working-theory/validation";
-
-import {
-  getMcpMdxContentAdapter,
-  mcpContentRoot,
-} from "../lib/content-adapter.js";
-import { resolveLocale } from "../lib/resolve-locale.js";
-
-export { readContentInputSchema, readContentOutputSchema };
-export type { ReadContentInput, ReadContentOutput };
-
-/**
- * read_content handler.
- *
- * Accepts an optional `contentRoot` override for testing. When omitted,
- * resolves it through `mcpContentRoot()` (#8070 D3).
- */
-export async function ailkReadContent(
-  input: ReadContentInput,
-  contentRoot?: string,
-): Promise<ReadContentOutput> {
-  readContentInputSchema.parse(input);
-
-  // Default: the one content-root resolver (#8070 D3).
-  const root = contentRoot ?? mcpContentRoot();
-  const locale = resolveLocale(input.locale);
-
-  const adapter = getMcpMdxContentAdapter({ contentRoot: root, locale });
-
-  const source = await adapter.getPageSource(input.type, input.slug, locale);
-  if (source === null) return null;
-
-  return readContentOutputSchema.parse({
-    // Prefer the stored frontmatter's slug/type; fall back to the
-    // request-validated input (#5876 spec D9). On the MDX path the
-    // frontmatter always carries both — required, non-optional fields of
-    // FrontmatterSchema — so this is inert there and the mdx payload stays
-    // byte-identical. The fallback matters for cross-adapter identity: the
-    // Epic #5324 AC-WCE-04 comparison needs `read_content`'s payload to be
-    // identical across adapters, which a request-validated value guarantees
-    // and a stored-bookkeeping value only guarantees if the write path
-    // agrees.
-    slug: source.frontmatter.slug ?? input.slug,
-    type: source.frontmatter.type ?? input.type,
-    frontmatter: source.frontmatter as Record<string, unknown>,
-    body: source.body,
-  });
-}

package/templates/apps/mcp/src/tools/request_callback.ts

@@ -1,59 +0,0 @@
-/**
- * request_callback — schedule a callback request.
- *
- * Validates input via Zod, forwards to POST /api/leads/callback via
- * @working-theory/api-client, and shapes the response into the MCP output schema.
- * No business logic — orchestration lives in apps/api B6.
- *
- * Input:  { name, phone, preferredTime? }
- * Output: { ok: true, id, persisted } | { ok: false, error: { kind, ... } }
- * Session/scope: none — anonymous write, no auth required.
- */
-
-import { apiClient } from "@working-theory/api-client";
-import {
-  requestCallbackInputSchema,
-  requestCallbackOutputSchema,
-  type RequestCallbackInput,
-  type RequestCallbackOutput,
-} from "@working-theory/validation";
-
-import { visitorForwardHeadersForThisCall } from "../request-context.js";
-
-export { requestCallbackInputSchema, requestCallbackOutputSchema };
-export type { RequestCallbackInput, RequestCallbackOutput };
-
-export async function ailkRequestCallback(
-  input: RequestCallbackInput,
-): Promise<RequestCallbackOutput> {
-  const parsed = requestCallbackInputSchema.safeParse(input);
-  if (!parsed.success) {
-    return {
-      ok: false,
-      error: { kind: "invalid_input", issues: parsed.error.issues },
-    };
-  }
-
-  const { name, phone, preferredTime } = parsed.data;
-  const siteId = process.env.AILK_SITE_ID ?? "default";
-  const body = {
-    siteId,
-    name,
-    phone,
-    ...(preferredTime !== undefined && { preferredTime }),
-    payload: {},
-  };
-
-  // #8073 — forward the address the transport trusted (never an identity
-  // argument on this tool's own schema) so the hub counts the write in that
-  // visitor's own rate-limit bucket rather than this MCP host's.
-  const headers = visitorForwardHeadersForThisCall();
-  const res = headers
-    ? await apiClient.leads.callback(body, { headers })
-    : await apiClient.leads.callback(body);
-  if (!res.ok) {
-    return { ok: false, error: { kind: "api_error", status: res.status } };
-  }
-
-  return { ok: true, id: res.body.id, persisted: res.body.persisted };
-}

package/templates/apps/mcp/src/tools/search_content.ts

@@ -1,67 +0,0 @@
-/**
- * search_content — full-text search across published content pages.
- *
- * Pure read: resolves its adapter through `getMcpContentAdapter()` — the one
- * resolver seam (#5805, ADR 0011), MDX by default.
- * Delegates to adapter.searchPages which scores by title/description/body match.
- * Limit defaults to 10; max 50. Query capped at 200 chars (enforced by Zod).
- *
- * Phase 3 S3: optional `locale` parameter. Search is locale-scoped — only the
- * requested locale's content directory is searched. Invalid or unknown values
- * silently fall back to the project's default locale (AC-i18n-07).
- *
- * #5831: optional `category` parameter — a leaf slug from the site-category
- * registry. Unlike `locale`, an unrecognised value is a validation error, not
- * a silent fallback: the registry is closed, so a bad slug is a caller mistake.
- *
- * Input:  { query: string, type?: SchemaOrgType, category?: CategorySlug,
- *           limit?: number, locale?: string }
- * Output: { results: Array<{ slug, type, title, snippet, score }> }
- * Session/scope: none — read-only public content.
- */
-
-import {
-  searchContentInputSchema,
-  searchContentOutputSchema,
-  type SearchContentInput,
-  type SearchContentOutput,
-} from "@working-theory/validation";
-
-import {
-  getMcpContentAdapter,
-  mcpContentRoot,
-} from "../lib/content-adapter.js";
-import { resolveLocale } from "../lib/resolve-locale.js";
-
-export { searchContentInputSchema, searchContentOutputSchema };
-export type { SearchContentInput, SearchContentOutput };
-
-const DEFAULT_LIMIT = 10;
-
-/**
- * search_content handler.
- *
- * Accepts an optional `contentRoot` override for testing. When omitted,
- * resolves it through `mcpContentRoot()` (#8070 D3).
- */
-export async function ailkSearchContent(
-  input: SearchContentInput,
-  contentRoot?: string,
-): Promise<SearchContentOutput> {
-  searchContentInputSchema.parse(input);
-
-  const root = contentRoot ?? mcpContentRoot();
-  const locale = resolveLocale(input.locale);
-  const adapter = getMcpContentAdapter({ contentRoot: root, locale });
-
-  const options = {
-    limit: input.limit ?? DEFAULT_LIMIT,
-    ...(input.type !== undefined && { type: input.type }),
-    ...(input.category !== undefined && { category: input.category }),
-    locale,
-  };
-
-  const rawResults = await adapter.searchPages(input.query, options);
-
-  return searchContentOutputSchema.parse({ results: rawResults });
-}