create-ailk 0.24.0 → 0.25.1

package/templates/apps/web/lib/release-scope.ts

@@ -0,0 +1,47 @@
+/**
+ * Whether create-ailk's release scope marks the Free level released (#9534).
+ *
+ * `/.well-known/mcp.json` leaves `create_project` out while Free is held, in
+ * step with `apps/mcp`, whose `isFreeLevelReleased()` (`src/tools/
+ * create_project.ts`) registers the tool on the same read. apps/web cannot
+ * import apps/mcp, so this is the same predicate over the same file:
+ * `<cwd>/packages/create-ailk/release-scope.json` — present only in a
+ * monorepo checkout started from the repo root, which is also the only place
+ * the MCP server can spawn the CLI. The scope FILE alone decides (the CLI's
+ * `AILK_RELEASE_SCOPE=ignore` bypass is not honoured); a missing or
+ * unreadable file fails closed, with one line on stderr.
+ */
+
+import { readFileSync } from "node:fs";
+import { join } from "node:path";
+
+let releaseScopeFileOverride: string | undefined;
+
+export function isFreeLevelReleased(): boolean {
+  const file =
+    releaseScopeFileOverride ??
+    join(process.cwd(), "packages/create-ailk/release-scope.json");
+  try {
+    const scope = JSON.parse(readFileSync(file, "utf8")) as {
+      levels?: Record<string, unknown>;
+    };
+    return scope.levels?.["free"] === "released";
+  } catch (err) {
+    console.warn(
+      `[web] create_project is left out of /.well-known/mcp.json: release scope ${file} could not be read (${
+        err instanceof Error ? err.message : String(err)
+      })`,
+    );
+    return false;
+  }
+}
+
+/** Test-only: point {@link isFreeLevelReleased} at a scope copy. */
+export function __setReleaseScopeFileForTest(file: string | undefined): void {
+  if (process.env["NODE_ENV"] !== "test") {
+    throw new Error(
+      "__setReleaseScopeFileForTest is test-only and cannot run outside a test",
+    );
+  }
+  releaseScopeFileOverride = file;
+}

package/templates/apps/web/lib/server-api.ts

@@ -17,7 +17,7 @@
  * hand-rolled `fetch`. This module supplies exactly the two things that
  * namespace doesn't own: the cookie/origin-forwarding `init` (B0's additive
  * `init?: { headers }` on `http.get`) and the envelope→`ApiError` unwrap
- * (mirrors `apps-paid/admin/lib/api-error.ts`'s `unwrapEnvelope`, adapted to
+ * (mirrors `packages-paid/admin/lib/api-error.ts`'s `unwrapEnvelope`, adapted to
  * the `@working-theory/api-client` `ApiResult<T>` shape B0 already returns
  * rather than re-parsing the wire envelope by hand).
  */

package/templates/apps/web/src/lib/commerce-claim.ts

@@ -6,7 +6,7 @@
  * only its import line moves. `/purchase/success` and `/purchase/cancel`
  * need the identical check (D12's shape-2 gate: the pages ship BASE TREE
  * and gate at REQUEST time on this claim, exactly as the checkout
- * primitives do — `apps/api/src/lib/require-commerce-claim.ts`), so this is
+ * primitives do — `packages/api/src/lib/require-commerce-claim.ts`), so this is
  * extracted ONCE and imported three times rather than copied a third time.
  *
  * Fail-closed (NFR-3 mirror): anything short of a positively-held,

package/templates/customizations.yaml

@@ -0,0 +1,37 @@
+# customizations.yaml — every source file under apps/ this site authored,
+# mapped to the issue that asked for it and the build-in decision.
+#
+# A customization is the exception: AILK builds it in unless AILK decides not
+# to. `pnpm architecture` (and the PostToolUse hook) refuses a code file under
+# apps/ the scaffold did not ship when no entry's paths match it. Record the
+# entry BEFORE you write the file.
+#
+# An entry:
+#   - id: booking-embed                 # unique; lowercase letters, digits, hyphens
+#     paths:                            # one or more; under apps/; ** spans
+#       - "apps/web/components/booking/**"   # segments, * stays inside one;
+#     request: "acme/acme-site#12"      # the issue that asked; <owner/repo>#N or #N
+#     decision: "build-in: ailk#9300 — removed when the bump lands"
+#
+# The decision is exactly one of:
+#   build-in: ailk#<N>[ — <text>]      AILK builds it; the site takes the bump,
+#                                      and this copy and its tests go then.
+#                                      An entry whose paths still match test
+#                                      files is refused: tests belong in AILK.
+#   build-in: site — <decider>, <YYYY-MM-DD>, <reason>
+#                                      AILK decided not to; the site keeps it.
+#   undecided                          only while the grace line below is in
+#                                      the future (strictly after today, UTC):
+#                                        undecided_ok_until: 2027-01-31
+#
+# Seeding an existing site:
+#   1. Copy tools/lint-architecture.ts (and this file, if absent) from a fresh
+#      scaffold of this create-ailk version.
+#   2. Run `create-ailk --sync-architecture <the modules in architecture.yaml's
+#      header>`.
+#   3. If .ailk-template-files.json is missing, run `create-ailk update`.
+#   4. Set `undecided_ok_until` to the groundskeeper's deadline.
+#   5. Change the last line of this file to `customizations:` and append the
+#      output of `pnpm exec tsx tools/lint-architecture.ts --seed-customizations`.
+#   6. Run `pnpm architecture`, which prints `architecture: OK`.
+customizations: []

package/templates/database/prisma.config.ts

@@ -1,20 +1,16 @@
-// Prisma 7 CLI config.
+// The schema and every migration ship in the installed @working-theory/database;
+// this site carries none. Take new migrations by bumping that dependency, then
+// run `pnpm db:migrate:deploy`. Never add a migration or a .prisma file here.
 //
-// Runtime DB URL (DATABASE_URL, pooled) is injected into the driver adapter at
-// PrismaClient construction in apps/api and apps/web — it does NOT appear here.
-// Migrate-time DB URL (DATABASE_URL_NON_POOLED, direct) is read here and
-// consumed by `prisma migrate`. The two-env-var contract from the migration
-// brief's D2 is preserved.
-//
-// `dotenv/config` is imported because the Prisma 7 CLI runs in its own process
-// and does not inherit .env values from a parent shell.
-
+// DATABASE_URL_NON_POOLED is the direct connection `prisma migrate` uses; the
+// apps' pooled DATABASE_URL is read at runtime, never here.
 import "dotenv/config";
 import { defineConfig } from "prisma/config";
 
+const pkg = "../node_modules/@working-theory/database";
+
 export default defineConfig({
-  schema: ".",
-  datasource: {
-    url: process.env.DATABASE_URL_NON_POOLED,
-  },
+  schema: pkg,
+  migrations: { path: `${pkg}/migrations` },
+  datasource: { url: process.env.DATABASE_URL_NON_POOLED },
 });

package/templates/database/seed-test.ts

@@ -16,7 +16,7 @@
  * `update: {}` clause leaves existing rows untouched).
  *
  * Run via:
- *   pnpm --filter @working-theory/database db:seed:test
+ *   pnpm db:seed:test
  *
  * Environment variables read:
  *   AILK_TEST_AUTH_ENABLED   — must be the literal string "true" or this
@@ -27,7 +27,7 @@ import "dotenv/config";
 
 import { PrismaPg } from "@prisma/adapter-pg";
 
-import { PrismaClient } from "./generated/client/client.js";
+import { PrismaClient } from "@working-theory/database";
 
 // Fixed, well-known ids from the ADR-0031 reserved sentinel range (zero
 // timestamp + version 7 + variant 8 + counter) — valid-shaped ids the

package/templates/database/seed.ts

@@ -19,7 +19,7 @@
  * and a multi-tenant deployment that already has real Workspaces.
  *
  * Run via:
- *   pnpm --filter @working-theory/database db:seed
+ *   pnpm db:seed
  */
 import "dotenv/config";
 
@@ -47,14 +47,14 @@ import {
   trialFlowConfig,
 } from "@working-theory/validation";
 
-import type { PrismaClient } from "./generated/client/client.js";
+import type { PrismaClient } from "@working-theory/database";
 import {
   DEFAULT_ORG_ID,
   DEFAULT_ORG_SLUG,
   DEFAULT_WORKSPACE_ID,
   DEFAULT_WORKSPACE_SLUG,
   OPERATOR_MEMBERSHIP_ID,
-} from "./tenancy.js";
+} from "@working-theory/database/tenancy";
 
 // Re-exported so existing consumers (e.g. __tests__/seed.test.ts) keep
 // importing the well-known ids from this module — `database/tenancy.ts` is
@@ -253,11 +253,11 @@ async function main(): Promise<void> {
   // (spec §5.2 Quality Constraints), matching the DI note on seed-test.ts's
   // sibling and the lazy-require pattern in apps-paid/admin/auth.ts.
   const [{ PrismaClient: RealPrismaClient }, { PrismaPg }] = await Promise.all([
-    import("./generated/client/client.js"),
+    import("@working-theory/database"),
     import("@prisma/adapter-pg"),
   ]);
   // Prisma 7 requires an explicit driver adapter (mirrors
-  // apps/api/src/lib/prisma.ts) — `new PrismaClient()` with no adapter throws.
+  // packages/api/src/lib/prisma.ts) — `new PrismaClient()` with no adapter throws.
   const adapter = new PrismaPg({ connectionString: process.env.DATABASE_URL });
   const prisma = new RealPrismaClient({ adapter });
   try {

package/templates/package.json

@@ -13,11 +13,11 @@
     "type-check": "pnpm -r --if-present type-check",
     "format": "prettier --write .",
     "format:check": "prettier --check .",
-    "db:generate": "pnpm --filter @working-theory/database run db:generate",
-    "db:migrate": "pnpm --filter @working-theory/database run db:migrate",
-    "db:migrate:deploy": "pnpm --filter @working-theory/database run db:migrate:deploy",
-    "db:seed": "pnpm --filter @working-theory/database run db:seed",
-    "db:studio": "pnpm --filter @working-theory/database run db:studio",
+    "db:generate": "prisma generate --config database/prisma.config.ts",
+    "db:migrate:deploy": "prisma migrate deploy --config database/prisma.config.ts",
+    "db:seed": "tsx database/seed.ts",
+    "db:seed:test": "tsx database/seed-test.ts",
+    "db:studio": "prisma studio --config database/prisma.config.ts",
     "architecture": "tsx tools/lint-architecture.ts",
     "claude-md:check": "tsx tools/check-claude-md.ts",
     "preflight": "pnpm architecture && pnpm claude-md:check && pnpm type-check && pnpm lint && pnpm build"
@@ -50,6 +50,7 @@
     "gray-matter": "^4.0.3",
     "http-server": "^14.1.1",
     "jest": "^30.4.2",
+    "jest-junit": "^17.0.0",
     "jiti": "^2.4.2",
     "prettier": "^3.9.4",
     "publint": "^0.3.24",
@@ -63,7 +64,12 @@
     "yaml": "^2.9.0",
     "zod": "^4.2.1",
     "zod-to-ts": "^2.1.0",
-    "@working-theory/cli": "workspace:*"
+    "@working-theory/cli": "workspace:*",
+    "@working-theory/database": "workspace:*",
+    "@working-theory/validation": "workspace:*",
+    "@prisma/adapter-pg": "^7.8.0",
+    "prisma": "^7.8.0",
+    "dotenv": "^17.4.2"
   },
   "packageManager": "pnpm@10.34.5+sha512.a4ee05f2f73658255bd6a89859c065a45c28a57daefae2c893a168ee2b73168c37b91e83e57ea67654ad03f03031746430e8bce38e362e042605fb8abc80192e",
   "engines": {

package/templates/pnpm-workspace.yaml

@@ -1,3 +1,2 @@
 packages:
   - "apps/*"
-  - "database"

package/templates/project.yaml

@@ -36,18 +36,26 @@ verification:
   preflight: pnpm preflight
   architecture_rules: architecture.yaml
 
+ci:
+  # The status checks a pull request must pass before it merges — the contexts
+  # to make required on the default branch. `preflight` is posted by the job of
+  # that name in .github/workflows/ci.yml, which this scaffold ships. The two `hold /`
+  # contexts back the on-hold and security-review merge holds; they are posted
+  # by the merge-hold workflows a harness installs, not by this scaffold, so
+  # require them only once something on this repo posts them.
+  required_checks:
+    - preflight
+    - "hold / On Hold"
+    - "hold / Security Review Pending"
+
 hard_floors:
   # Surfaces that always require human review on merge, regardless of
   # automation level. Adjust to your repo's architecture.
   #
-  # AILK defaults assume the three-app split (web/api/mcp) and include
-  # the public-surface routes + MCP tool signatures.
-  - paths:
-      - "apps/api/src/routes/**"
-    reason: public API surface — signatures require human review
-  - paths:
-      - "apps/mcp/src/tools/**"
-    reason: MCP tool surface — signatures require human review
+  # AILK defaults assume the three-app split (web/api/mcp). Neither the API
+  # route surface nor the MCP tool surface is floored here: this site's
+  # apps/api and apps/mcp are boot files, and the routes and tools ship in
+  # @working-theory/api and @working-theory/mcp-server.
   - kind: pricing
   - kind: stripe_live_mode
 

package/templates/tools/jest/reporters.cjs

@@ -0,0 +1,65 @@
+"use strict";
+/* global process, __dirname */
+
+/**
+ * Shared Jest `reporters` — one JUnit XML file per workspace package (#9430).
+ *
+ * The heavy `Test — full` check runs every workspace's jest in one log. When
+ * `JEST_JUNIT_OUTPUT_DIR` is set (scripts/test-sharded.ts sets it and prints
+ * the directory at the top of the run), every jest run also writes
+ * `<JEST_JUNIT_OUTPUT_DIR>/<package>.xml` through jest-junit, so each
+ * package's results land in one artifact directory, named by package.
+ *
+ * Unset — a plain `jest` or `pnpm test` — this is `["default"]`, jest's own
+ * default, so nothing changes and nothing is written (and jest-junit is never
+ * loaded, which keeps the create-ailk scaffold's copied configs working).
+ *
+ * Every committed `jest.config.cjs` loads it next to its timezone pin:
+ *
+ *   reporters: require("../../tools/jest/reporters.cjs"),
+ *
+ * The package name comes from `package.json` in jest's working directory —
+ * turbo runs each workspace's `test` script there. The root contract suite
+ * runs from the repo root and is written as `root-jest.xml`. The scaffold
+ * ships this file at the same path (`SNAPSHOT_FILES` in
+ * packages/create-ailk/scripts/build-templates.mjs), as it ships
+ * `pin-timezone.cjs`.
+ */
+const { readFileSync } = require("node:fs");
+const { join, resolve } = require("node:path");
+
+const REPO_ROOT = resolve(__dirname, "..", "..");
+
+function reportName() {
+  const cwd = process.cwd();
+  if (resolve(cwd) === REPO_ROOT) return "root-jest";
+  try {
+    const { name } = JSON.parse(readFileSync(join(cwd, "package.json"), "utf8"));
+    // `@working-theory/ui` → `working-theory__ui`
+    if (name) return name.replace(/^@/, "").replace(/\//g, "__");
+  } catch {
+    // no readable package.json — fall back to the directory name
+  }
+  return cwd.split(/[\\/]/).pop() || "unknown";
+}
+
+const NAME = process.env.JEST_JUNIT_OUTPUT_DIR ? reportName() : "";
+
+module.exports = NAME
+  ? [
+      "default",
+      [
+        require.resolve("jest-junit"),
+        {
+          outputName: `${NAME}.xml`,
+          suiteName: NAME,
+          suiteNameTemplate: "{filepath}",
+          classNameTemplate: "{filepath}",
+          titleTemplate: "{title}",
+          ancestorSeparator: " › ",
+          addFileAttribute: "true",
+          reportTestSuiteErrors: "true",
+        },
+      ],
+    ]
+  : ["default"];