create-ailk 0.23.0 → 0.25.1

package/dist/template-record.js

@@ -18,7 +18,7 @@
 import { createHash } from "node:crypto";
 import { existsSync, readFileSync } from "node:fs";
 import { join } from "node:path";
-import { MODULE_FLAGS_PATH, PAID_SECTIONS_PATH } from "./paid-sections.js";
+import { MODULE_FLAGS_PATH, PAID_MCP_TOOLS_PATH, PAID_SECTIONS_PATH } from "./paid-sections.js";
 import { SITE_CHROME_PATH } from "./site-chrome.js";
 import { SITE_FONTS_PATH } from "./site-fonts.js";
 import { SPOKE_CHECKOUT_CONFIG_PATH } from "./spoke-checkout.js";
@@ -29,7 +29,8 @@ export const TEMPLATE_RECORD_PATH = ".ailk-template-files.json";
 /**
  * The app paths a generator rewrites after `copyTemplate` lands its copy
  * (§1): the nav, the site chrome, the site fonts, the paid-sections
- * registry and its module-presence flags (#8843 D10), the four spoke seams, and a commerce spoke's checkout config,
+ * registry and its module-presence flags (#8843 D10), the paid MCP tool
+ * registry (#9460 DD6; `update` rewrites it every run, #9567), the four spoke seams, and a commerce spoke's checkout config,
  * which the checkout writer stamps and the site owns from then on (#8748
  * D2). Composed from each writer's own exported path constant, so a renamed
  * constant carries its path along here too (#8522 D2).
@@ -40,18 +41,35 @@ export const REGENERATED_APP_PATHS = [
     SITE_FONTS_PATH,
     PAID_SECTIONS_PATH,
     MODULE_FLAGS_PATH,
+    PAID_MCP_TOOLS_PATH,
     ...SPOKE_SEAM_FILES,
     SPOKE_CHECKOUT_CONFIG_PATH,
 ];
 const REGENERATED_SET = new Set(REGENERATED_APP_PATHS);
 const RECORDABLE_APP_ROOT = /^apps\/(web|api|mcp)\//;
+/**
+ * A hub's thin `database/` (#9569 DD1/DD8): the Prisma config that points at
+ * the installed `@working-theory/database`, and the two seeds the package
+ * does not publish. Recorded and carried by `update` like an app file; the
+ * module data files beside them (`database/flows/`, `database/waitlist/`)
+ * are bundle output, never recorded.
+ */
+export const DATABASE_BOOT_FILES = [
+    "database/prisma.config.ts",
+    "database/seed.ts",
+    "database/seed-test.ts",
+];
+const DATABASE_BOOT_SET = new Set(DATABASE_BOOT_FILES);
 /**
  * Whether a destination path (`/`-separated, as `templateDestination`
- * returns it) is one `update` ever records or touches (#8522 D2): under one
- * of the three app trees, not a `package.json`, not an `.env*` file, no
- * `.claude` segment, and not a path a generator rewrites after the copy.
+ * returns it) is one `update` ever records or touches (#8522 D2): one of
+ * the three `DATABASE_BOOT_FILES`, or under one of the three app trees, not
+ * a `package.json`, not an `.env*` file, no `.claude` segment, and not a
+ * path a generator rewrites after the copy.
  */
 export function isRecordable(destRel) {
+    if (DATABASE_BOOT_SET.has(destRel))
+        return true;
     if (!RECORDABLE_APP_ROOT.test(destRel))
         return false;
     const segments = destRel.split("/");

package/dist/topology.d.ts

@@ -150,13 +150,26 @@ export declare function renderWebSeam(topology: Topology, signIn?: SignInMode, o
  * @throws TopologyError for a spoke in the default mode.
  */
 export declare function renderAuthedGateSeam(topology: Topology, signIn?: SignInMode): string;
+/** The hub seam's source of its workspace resolution and licence store (#9460 DD7). */
+export declare const MCP_SERVER_HUB = "@working-theory/mcp-server/hub";
 /** `apps/mcp/src/lib/topology.generated.ts` for `topology` (D5). */
 export declare function renderMcpSeam(topology: Topology): string;
 /** `apps/web/lib/api-origin.generated.ts` for `topology` (#7874 D12). */
 export declare function renderApiOriginSeam(topology: Topology): string;
-/** `pnpm-workspace.yaml` without its `database` package entry. */
-export declare function transformWorkspaceYaml(text: string): string;
-/** The root `package.json` without its `db:*` scripts. */
+/**
+ * The packages a hub's root `package.json` declares for its thin `database/`
+ * (#9569 DD3): the two the boot files import, and the three the `db:*`
+ * scripts run. `build-templates.mjs` writes them into the snapshot's root
+ * `devDependencies`; the spoke transform below strips the same five.
+ */
+export declare const DATABASE_CONSUMER_DEPENDENCIES: readonly string[];
+/**
+ * The root `package.json` without its `db:*` scripts and without the
+ * `DATABASE_CONSUMER_DEPENDENCIES` lines (#9569 DD6): a spoke has no
+ * `database/`, so it runs no database script and installs no Prisma.
+ * @throws TopologyError when the `scripts` block or the
+ *   `@working-theory/database` declaration is absent.
+ */
 export declare function transformRootPackageJson(text: string): string;
 /** The spoke's declared-env script (#7874 D11) — named apart from the monorepo's `env:check`. */
 export declare const ENV_DECLARED_SCRIPT = "env:declared";

package/dist/topology.js

@@ -67,9 +67,6 @@ export const SPOKE_REMOVAL_SEEDS = [
     "apps/web/app/api/auth",
     "apps/web/app/[locale]/(auth)",
     "apps/web/app/[locale]/(authed)",
-    "apps/mcp/src/lib/prisma.ts",
-    "apps/mcp/src/lib/public-workspace.ts",
-    "apps/mcp/src/lib/license-key-store.ts",
     ...SPOKE_HUB_CHECKOUT_SEEDS,
 ];
 /**
@@ -618,6 +615,8 @@ export function SignedOutGate({
  * create-ailk carries no runtime dependency.
  */
 const CONTENT_ADAPTERS_PACKAGE = "@working-theory/content-adapters";
+/** The hub seam's source of its workspace resolution and licence store (#9460 DD7). */
+export const MCP_SERVER_HUB = "@working-theory/mcp-server/hub";
 /** `apps/mcp/src/lib/topology.generated.ts` for `topology` (D5). */
 export function renderMcpSeam(topology) {
     if (topology === "hub") {
@@ -626,9 +625,9 @@ import {
   initMcpPublicWorkspace,
   mcpPublicWorkspace,
   type McpWorkspaceResolution,
-} from "./public-workspace.js";
+} from "${MCP_SERVER_HUB}";
 
-export { registerLicenseKeyStore } from "./license-key-store.js";
+export { registerLicenseKeyStore } from "${MCP_SERVER_HUB}";
 export type { McpWorkspaceResolution };
 
 export const TOPOLOGY: "hub" | "spoke" = "hub";
@@ -709,22 +708,37 @@ function dropLines(text, drop, label, json) {
     }
     return next;
 }
-/** `pnpm-workspace.yaml` without its `database` package entry. */
-export function transformWorkspaceYaml(text) {
-    const entry = /^\s*-\s*["']?database["']?\s*$/;
-    if (!text.split("\n").some((line) => entry.test(line))) {
-        throw new TopologyError(`pnpm-workspace.yaml: no "database" package entry to remove`);
-    }
-    return dropLines(text, (line) => entry.test(line), "pnpm-workspace.yaml", false);
-}
-/** The root `package.json` without its `db:*` scripts. */
+/**
+ * The packages a hub's root `package.json` declares for its thin `database/`
+ * (#9569 DD3): the two the boot files import, and the three the `db:*`
+ * scripts run. `build-templates.mjs` writes them into the snapshot's root
+ * `devDependencies`; the spoke transform below strips the same five.
+ */
+export const DATABASE_CONSUMER_DEPENDENCIES = [
+    "@working-theory/database",
+    "@working-theory/validation",
+    "@prisma/adapter-pg",
+    "prisma",
+    "dotenv",
+];
+/**
+ * The root `package.json` without its `db:*` scripts and without the
+ * `DATABASE_CONSUMER_DEPENDENCIES` lines (#9569 DD6): a spoke has no
+ * `database/`, so it runs no database script and installs no Prisma.
+ * @throws TopologyError when the `scripts` block or the
+ *   `@working-theory/database` declaration is absent.
+ */
 export function transformRootPackageJson(text) {
     const pkg = JSON.parse(text);
     if (pkg.scripts === undefined) {
         throw new TopologyError(`package.json: no "scripts" block to remove the db:* scripts from`);
     }
     const scriptLine = /^\s*"db:[^"]*"\s*:/;
-    return dropLines(text, (line) => scriptLine.test(line), "package.json", true);
+    const depLine = new RegExp(`^\\s*"(${DATABASE_CONSUMER_DEPENDENCIES.map((name) => name.replace(/[/@.]/g, "\\$&")).join("|")})"\\s*:`);
+    if (!text.split("\n").some((line) => /^\s*"@working-theory\/database"\s*:/.test(line))) {
+        throw new TopologyError(`package.json: no "@working-theory/database" dependency to remove`);
+    }
+    return dropLines(text, (line) => scriptLine.test(line) || depLine.test(line), "package.json", true);
 }
 /** The spoke's declared-env script (#7874 D11) — named apart from the monorepo's `env:check`. */
 export const ENV_DECLARED_SCRIPT = "env:declared";
@@ -825,7 +839,6 @@ export function applySpokeTransforms(targetDir, opts) {
         if (next !== text)
             writeFileSync(path, next);
     };
-    edit("pnpm-workspace.yaml", transformWorkspaceYaml);
     edit("package.json", (text) => addEnvCheckScripts(transformRootPackageJson(text)));
     edit(".github/workflows/ci.yml", transformCiWorkflow);
     edit("tsconfig.json", (text) => transformRootTsconfig(text, opts));
@@ -937,9 +950,8 @@ export function renderSpokeHardFloors(opts) {
             ? "    reason: sign-in paths — this spoke signs in through its hub; every change requires human review"
             : "    reason: sign-in paths — absent on a spoke; their return requires human review",
     ];
-    if (opts.mcp) {
-        lines.push("  - paths:", '      - "apps/mcp/src/tools/**"', "    reason: MCP tool surface — signatures require human review");
-    }
+    // No MCP tool floor (#9567): a spoke's `apps/mcp/src` is the boot set, and
+    // the tool surface lives in `@working-theory/mcp-server`.
     return `${lines.join("\n")}\n`;
 }
 /** `project.yaml` with its `hard_floors:` block replaced by the spoke's (D9). */

package/dist/update.d.ts

@@ -1,3 +1,4 @@
+import type { WorkspaceVersionMap } from "./substitute.js";
 /** A refusal the CLI exits 2 on, thrown before anything is written. */
 export declare class UpdateRefusedError extends Error {
     readonly exitCode = 2;
@@ -14,6 +15,14 @@ export interface UpdateSiteOptions {
     registryUrl?: string;
     /** Injected fetch for tests. Never a live network call in CI. */
     fetchImpl?: typeof fetch;
+    /**
+     * The running package's `versions.json` map (#9567): the versions the move
+     * of a copied `apps/mcp` declares `@working-theory/mcp-server` and each
+     * carried module's paid MCP pack at, and (#9566) the move of a copied
+     * `apps/api` declares `@working-theory/api` and the six module packages
+     * at. A site already on both boot sets, or a spoke, never reads it.
+     */
+    versions?: WorkspaceVersionMap;
 }
 export interface UpdateResult {
     targetDir: string;
@@ -48,6 +57,6 @@ export interface UpdateArgs {
     target: string | undefined;
     help: boolean;
 }
-export declare const UPDATE_HELP = "create-ailk update \u2014 bring template fixes into a site's copied app code.\n\nUsage:\n  create-ailk update [<target-dir>]\n\nArguments:\n  <target-dir>             The existing site. Defaults to the current dir.\n\nOptions:\n  --help, -h               Print this message.\n\nReads .ailk-template-files.json (written beside .ailk-site-manifest.json by\nevery template scaffold) to tell an untouched copy from an edit. An\nuntouched apps/web, apps/api or apps/mcp file whose template copy changed is\noverwritten. An edited file whose template copy also changed is three-way\nmerged with `git` (git must be on PATH); a conflict leaves the file alone\nand is listed under \"Needs review\". Every template test that imports a file\nleft under \"Needs review\" or \"Skipped\" (by a relative import) is held at the\nsite's version with it, its record entry is not advanced, and it is listed\nunder \"Held back with <file>\" \u2014 reconcile the file, then run update again to\nbring its tests forward. Every other file in the run still updates.\nA site with no record gets one on its first run, from the version its\n.ailk-site-manifest.json already records. Commit before running, and review\nthe diff after.\n";
+export declare const UPDATE_HELP = "create-ailk update \u2014 bring template fixes into a site's copied app code.\n\nUsage:\n  create-ailk update [<target-dir>]\n\nArguments:\n  <target-dir>             The existing site. Defaults to the current dir.\n\nOptions:\n  --help, -h               Print this message.\n\nReads .ailk-template-files.json (written beside .ailk-site-manifest.json by\nevery template scaffold) to tell an untouched copy from an edit. An\nuntouched apps/web, apps/api or apps/mcp file whose template copy changed is\noverwritten. An edited file whose template copy also changed is three-way\nmerged with `git` (git must be on PATH); a conflict leaves the file alone\nand is listed under \"Needs review\". Every template test that imports a file\nleft under \"Needs review\" or \"Skipped\" (by a relative import) is held at the\nsite's version with it, its record entry is not advanced, and it is listed\nunder \"Held back with <file>\" \u2014 reconcile the file, then run update again to\nbring its tests forward. Every other file in the run still updates.\nA site with no record gets one on its first run, from the version its\n.ailk-site-manifest.json already records. A site scaffolded before\n@working-theory/mcp-server has its copied apps/mcp moved to the boot set:\nthe server and each module's paid MCP pack join apps/mcp/package.json, the\ncopied server files go, and apps/mcp/src/lib/paid-tools.generated.ts is\nrewritten on every run. A site scaffolded before @working-theory/api has its\ncopied apps/api moved to the boot file: the app becomes @working-theory/app-api,\nthe package and the six @working-theory/api-<module> packages join\napps/api/package.json, its bins and build:vercel delegate to the package, and\nthe copied server files go. Run `pnpm install` after either move, since the\napp's package.json gained dependencies. Commit before running, and review the\ndiff after.\n";
 /** Parse the argv AFTER the `update` word. Strict `node:util` parseArgs, like `parseAdoptArgs`. */
 export declare function parseUpdateArgs(argv: string[]): UpdateArgs;