create-ailk 0.24.0 → 0.25.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (599) hide show
  1. package/README.md +42 -20
  2. package/component-catalog.json +3 -3
  3. package/component-catalog.md +3 -3
  4. package/dist/add-module.js +4 -2
  5. package/dist/add-route.d.ts +12 -1
  6. package/dist/add-route.js +31 -3
  7. package/dist/cli.js +12 -7
  8. package/dist/derive-architecture.d.ts +3 -4
  9. package/dist/derive-architecture.js +65 -29
  10. package/dist/lib/design-checks.d.ts +9 -4
  11. package/dist/lib/design-checks.js +13 -7
  12. package/dist/lib/extract-module-bundle.js +29 -2
  13. package/dist/lib/fetch-template-snapshot.d.ts +1 -1
  14. package/dist/lib/fetch-template-snapshot.js +7 -3
  15. package/dist/lib/import-graph.d.ts +1 -1
  16. package/dist/lib/import-graph.js +4 -4
  17. package/dist/lib/module-license-gate.d.ts +12 -1
  18. package/dist/lib/module-license-gate.js +34 -12
  19. package/dist/module-architecture.d.ts +20 -3
  20. package/dist/module-architecture.js +117 -550
  21. package/dist/paid-sections.d.ts +25 -1
  22. package/dist/paid-sections.js +88 -3
  23. package/dist/surfaces.js +10 -2
  24. package/dist/template-record.d.ts +14 -4
  25. package/dist/template-record.js +23 -5
  26. package/dist/topology.d.ts +16 -3
  27. package/dist/topology.js +31 -19
  28. package/dist/update.d.ts +10 -1
  29. package/dist/update.js +540 -16
  30. package/package.json +3 -3
  31. package/release-scope.json +1 -1
  32. package/templates/.claude/cloudparity-repo-hooks.json +5 -0
  33. package/templates/.claude/hooks/template-guard.sh +137 -0
  34. package/templates/.claude/rules/extending.md +106 -0
  35. package/templates/.claude/rules/loop-contract.md +2 -2
  36. package/templates/.claude/settings.json +11 -0
  37. package/templates/.env.example +5 -5
  38. package/templates/.github/workflows/ci.yml +7 -4
  39. package/templates/CLAUDE.md +11 -1
  40. package/templates/CONVENTIONS.md +8 -10
  41. package/templates/README.md +14 -13
  42. package/templates/apps/api/.env.example +2 -2
  43. package/templates/apps/api/CLAUDE.md +102 -76
  44. package/templates/apps/api/jest.config.cjs +15 -5
  45. package/templates/apps/api/package.json +16 -20
  46. package/templates/apps/api/src/__tests__/trusted-origins.server.test.ts +2 -2
  47. package/templates/apps/api/src/__tests__/vercel-handler.test.ts +4 -4
  48. package/templates/apps/api/src/index.ts +1 -1
  49. package/templates/apps/api/src/lib/__mocks__/prisma.ts +3 -3
  50. package/templates/apps/api/src/modules/commerce.ts +10 -0
  51. package/templates/apps/api/src/modules/content-write.ts +10 -0
  52. package/templates/apps/api/src/modules/multi-tenant.ts +10 -0
  53. package/templates/apps/api/src/modules/scheduling.ts +10 -0
  54. package/templates/apps/api/src/modules/signal-collectors.ts +10 -0
  55. package/templates/apps/api/src/modules/workspace.ts +10 -0
  56. package/templates/apps/api/src/server.ts +117 -1882
  57. package/templates/apps/api/vercel.json +2 -2
  58. package/templates/apps/mcp/CLAUDE.md +67 -20
  59. package/templates/apps/mcp/__tests__/app-entry.test.ts +4 -254
  60. package/templates/apps/mcp/__tests__/boot-file.test.ts +92 -0
  61. package/templates/apps/mcp/jest.config.cjs +6 -1
  62. package/templates/apps/mcp/package.json +5 -13
  63. package/templates/apps/mcp/src/app.ts +8 -7
  64. package/templates/apps/mcp/src/index.ts +6 -34
  65. package/templates/apps/mcp/src/lib/paid-tools.generated.ts +10 -0
  66. package/templates/apps/mcp/src/lib/topology.generated.ts +2 -2
  67. package/templates/apps/mcp/src/site.ts +12 -0
  68. package/templates/apps/web/.env.example +1 -1
  69. package/templates/apps/web/CLAUDE.md +10 -3
  70. package/templates/apps/web/app/.well-known/mcp.json/route.ts +9 -3
  71. package/templates/apps/web/app/[locale]/contact/intake-analytics.ts +1 -1
  72. package/templates/apps/web/app/[locale]/flows/[slug]/__tests__/magnet-page.test.tsx +22 -1
  73. package/templates/apps/web/app/[locale]/flows/[slug]/magnet-page.tsx +7 -3
  74. package/templates/apps/web/app/[locale]/pricing/__tests__/unconnected.test.tsx +43 -0
  75. package/templates/apps/web/app/[locale]/pricing/page.tsx +7 -3
  76. package/templates/apps/web/app/api/offerings/checkout/[lookupKey]/__tests__/route.test.ts +222 -0
  77. package/templates/apps/web/app/api/offerings/checkout/[lookupKey]/route.ts +10 -3
  78. package/templates/apps/web/app/api/revalidate/route.ts +3 -3
  79. package/templates/apps/web/auth.ts +2 -2
  80. package/templates/apps/web/jest.config.cjs +1 -0
  81. package/templates/apps/web/lib/auth-email.ts +1 -1
  82. package/templates/apps/web/lib/relay.ts +2 -2
  83. package/templates/apps/web/lib/release-scope.ts +47 -0
  84. package/templates/apps/web/lib/server-api.ts +1 -1
  85. package/templates/apps/web/src/lib/commerce-claim.ts +1 -1
  86. package/templates/customizations.yaml +37 -0
  87. package/templates/database/prisma.config.ts +10 -14
  88. package/templates/database/seed-test.ts +2 -2
  89. package/templates/database/seed.ts +5 -5
  90. package/templates/package.json +12 -6
  91. package/templates/pnpm-workspace.yaml +0 -1
  92. package/templates/project.yaml +16 -8
  93. package/templates/tools/jest/reporters.cjs +65 -0
  94. package/templates/tools/lint-architecture.ts +553 -7
  95. package/templates/tsconfig.json +1 -2
  96. package/versions.json +48 -35
  97. package/templates/apps/api/src/__tests__/commerce-claim-registration.test.ts +0 -409
  98. package/templates/apps/api/src/__tests__/factories/agent-caller.ts +0 -102
  99. package/templates/apps/api/src/__tests__/factories/content-fixture.ts +0 -138
  100. package/templates/apps/api/src/__tests__/factories/in-memory-prisma.ts +0 -441
  101. package/templates/apps/api/src/__tests__/factories/index.ts +0 -70
  102. package/templates/apps/api/src/__tests__/factories/lead-fixture.ts +0 -82
  103. package/templates/apps/api/src/__tests__/leads-forwarded-rate-limit.test.ts +0 -135
  104. package/templates/apps/api/src/__tests__/services/enrichment-shim.test.ts +0 -126
  105. package/templates/apps/api/src/__tests__/stripe-boot.test.ts +0 -132
  106. package/templates/apps/api/src/__tests__/support/hub-sign-in-fake-db.ts +0 -362
  107. package/templates/apps/api/src/bin/__tests__/rate-limit-probe.test.ts +0 -184
  108. package/templates/apps/api/src/bin/abandon-sweep.ts +0 -42
  109. package/templates/apps/api/src/bin/rate-limit-probe.ts +0 -53
  110. package/templates/apps/api/src/bin/spokes.ts +0 -198
  111. package/templates/apps/api/src/bin/stripe-connections-rekey.ts +0 -45
  112. package/templates/apps/api/src/config/__tests__/hub-require-spoke-key.test.ts +0 -196
  113. package/templates/apps/api/src/config/__tests__/index.test.ts +0 -233
  114. package/templates/apps/api/src/config/__tests__/modules.test.ts +0 -76
  115. package/templates/apps/api/src/config/__tests__/stripe-connection-key.test.ts +0 -185
  116. package/templates/apps/api/src/config/__tests__/trusted-origins.test.ts +0 -238
  117. package/templates/apps/api/src/config/index.ts +0 -596
  118. package/templates/apps/api/src/config/modules.ts +0 -83
  119. package/templates/apps/api/src/lib/__tests__/agent-store.test.ts +0 -581
  120. package/templates/apps/api/src/lib/__tests__/auth-email-budget.test.ts +0 -143
  121. package/templates/apps/api/src/lib/__tests__/consent-ledger-double.ts +0 -237
  122. package/templates/apps/api/src/lib/__tests__/consent-store.test.ts +0 -353
  123. package/templates/apps/api/src/lib/__tests__/content-adapter.test.ts +0 -201
  124. package/templates/apps/api/src/lib/__tests__/deliverable-asset-store.test.ts +0 -224
  125. package/templates/apps/api/src/lib/__tests__/error-serializer.test.ts +0 -120
  126. package/templates/apps/api/src/lib/__tests__/errors.test.ts +0 -94
  127. package/templates/apps/api/src/lib/__tests__/file-fallback.test.ts +0 -144
  128. package/templates/apps/api/src/lib/__tests__/fixtures/HomePage/home.mdx +0 -8
  129. package/templates/apps/api/src/lib/__tests__/flow-completion-store.test.ts +0 -149
  130. package/templates/apps/api/src/lib/__tests__/flow-rename-race.db.test.ts +0 -116
  131. package/templates/apps/api/src/lib/__tests__/hub-sign-in-store.test.ts +0 -209
  132. package/templates/apps/api/src/lib/__tests__/lead-capture-store.test.ts +0 -257
  133. package/templates/apps/api/src/lib/__tests__/lead-delivery.test.ts +0 -96
  134. package/templates/apps/api/src/lib/__tests__/outbound-http.test.ts +0 -125
  135. package/templates/apps/api/src/lib/__tests__/prisma.test.ts +0 -165
  136. package/templates/apps/api/src/lib/__tests__/require-commerce-claim.test.ts +0 -317
  137. package/templates/apps/api/src/lib/__tests__/require-paid-tier.test.ts +0 -129
  138. package/templates/apps/api/src/lib/__tests__/site.test.ts +0 -308
  139. package/templates/apps/api/src/lib/__tests__/slice-load.test.ts +0 -89
  140. package/templates/apps/api/src/lib/__tests__/spoke-store.test.ts +0 -202
  141. package/templates/apps/api/src/lib/__tests__/stripe-admission.test.ts +0 -217
  142. package/templates/apps/api/src/lib/__tests__/stripe.test.ts +0 -82
  143. package/templates/apps/api/src/lib/agent-store.ts +0 -613
  144. package/templates/apps/api/src/lib/auth-email-budget.ts +0 -161
  145. package/templates/apps/api/src/lib/consent-store.ts +0 -363
  146. package/templates/apps/api/src/lib/content-adapter.ts +0 -112
  147. package/templates/apps/api/src/lib/deliverable-asset-store.ts +0 -96
  148. package/templates/apps/api/src/lib/error-serializer.ts +0 -164
  149. package/templates/apps/api/src/lib/errors.ts +0 -95
  150. package/templates/apps/api/src/lib/file-fallback.ts +0 -87
  151. package/templates/apps/api/src/lib/flow-completion-store.ts +0 -136
  152. package/templates/apps/api/src/lib/hub-sign-in-store.ts +0 -455
  153. package/templates/apps/api/src/lib/lead-capture-store.ts +0 -122
  154. package/templates/apps/api/src/lib/lead-delivery.ts +0 -52
  155. package/templates/apps/api/src/lib/license-key-store.ts +0 -45
  156. package/templates/apps/api/src/lib/locales.ts +0 -201
  157. package/templates/apps/api/src/lib/outbound-http.ts +0 -127
  158. package/templates/apps/api/src/lib/prisma.ts +0 -21
  159. package/templates/apps/api/src/lib/proposal-paid-store.ts +0 -66
  160. package/templates/apps/api/src/lib/rate-limit-probe.ts +0 -165
  161. package/templates/apps/api/src/lib/rate-limit-store.ts +0 -142
  162. package/templates/apps/api/src/lib/require-commerce-claim.ts +0 -250
  163. package/templates/apps/api/src/lib/require-paid-tier.ts +0 -53
  164. package/templates/apps/api/src/lib/site.ts +0 -257
  165. package/templates/apps/api/src/lib/slice-load.ts +0 -90
  166. package/templates/apps/api/src/lib/spoke-store.ts +0 -180
  167. package/templates/apps/api/src/lib/stripe.ts +0 -321
  168. package/templates/apps/api/src/lib/webhook-idempotency.ts +0 -156
  169. package/templates/apps/api/src/middleware/__tests__/adversarial/bearer-token-format.test.ts +0 -111
  170. package/templates/apps/api/src/middleware/__tests__/adversarial/cookie-or-bearer-precedence.test.ts +0 -172
  171. package/templates/apps/api/src/middleware/__tests__/adversarial/csrf-bearer-skip.test.ts +0 -119
  172. package/templates/apps/api/src/middleware/__tests__/adversarial/csrf-cookie-path.test.ts +0 -138
  173. package/templates/apps/api/src/middleware/__tests__/adversarial/csrf-trusted-origins.test.ts +0 -142
  174. package/templates/apps/api/src/middleware/__tests__/adversarial/session-fixation.test.ts +0 -155
  175. package/templates/apps/api/src/middleware/__tests__/adversarial/session-timeout.test.ts +0 -139
  176. package/templates/apps/api/src/middleware/__tests__/auth.bearer-path.test.ts +0 -562
  177. package/templates/apps/api/src/middleware/__tests__/auth.both-present-precedence.test.ts +0 -76
  178. package/templates/apps/api/src/middleware/__tests__/auth.cookie-path.test.ts +0 -220
  179. package/templates/apps/api/src/middleware/__tests__/auth.database-not-configured.test.ts +0 -97
  180. package/templates/apps/api/src/middleware/__tests__/auth.hub-session-path.test.ts +0 -557
  181. package/templates/apps/api/src/middleware/__tests__/auth.neither-present.test.ts +0 -72
  182. package/templates/apps/api/src/middleware/__tests__/auth.optional-cookie.test.ts +0 -140
  183. package/templates/apps/api/src/middleware/__tests__/default-tenant.test.ts +0 -721
  184. package/templates/apps/api/src/middleware/__tests__/rate-limit-cross-isolate.db.test.ts +0 -220
  185. package/templates/apps/api/src/middleware/__tests__/rate-limit-store.test.ts +0 -430
  186. package/templates/apps/api/src/middleware/__tests__/rate-limit.test.ts +0 -1409
  187. package/templates/apps/api/src/middleware/__tests__/write-budget.test.ts +0 -174
  188. package/templates/apps/api/src/middleware/auth.ts +0 -864
  189. package/templates/apps/api/src/middleware/default-tenant.ts +0 -166
  190. package/templates/apps/api/src/middleware/rate-limit.ts +0 -983
  191. package/templates/apps/api/src/openapi/__tests__/openapi.test.ts +0 -391
  192. package/templates/apps/api/src/openapi/__tests__/spec-identity.test.ts +0 -182
  193. package/templates/apps/api/src/openapi/index.ts +0 -18
  194. package/templates/apps/api/src/openapi/spec.ts +0 -2148
  195. package/templates/apps/api/src/openapi/surface-drift.ts +0 -195
  196. package/templates/apps/api/src/routes/aeo/__tests__/index.test.ts +0 -175
  197. package/templates/apps/api/src/routes/aeo/index.ts +0 -107
  198. package/templates/apps/api/src/routes/auth/__tests__/auth-tokens.functional.test.ts +0 -196
  199. package/templates/apps/api/src/routes/auth/__tests__/auth-user.functional.test.ts +0 -249
  200. package/templates/apps/api/src/routes/auth/__tests__/hub-sign-in.test.ts +0 -532
  201. package/templates/apps/api/src/routes/auth/__tests__/tokens.test.ts +0 -313
  202. package/templates/apps/api/src/routes/auth/__tests__/transactional-email.test.ts +0 -413
  203. package/templates/apps/api/src/routes/auth/__tests__/user.test.ts +0 -609
  204. package/templates/apps/api/src/routes/auth/hub-sign-in.ts +0 -242
  205. package/templates/apps/api/src/routes/auth/tokens.ts +0 -211
  206. package/templates/apps/api/src/routes/auth/transactional-email.ts +0 -301
  207. package/templates/apps/api/src/routes/auth/user.ts +0 -305
  208. package/templates/apps/api/src/routes/billing/plan-checkout.ts +0 -332
  209. package/templates/apps/api/src/routes/checkout/__tests__/live-key.test.ts +0 -178
  210. package/templates/apps/api/src/routes/checkout/__tests__/offerings-authorization.test.ts +0 -1426
  211. package/templates/apps/api/src/routes/checkout/__tests__/session.test.ts +0 -448
  212. package/templates/apps/api/src/routes/checkout/__tests__/sessions.test.ts +0 -1742
  213. package/templates/apps/api/src/routes/checkout/index.ts +0 -34
  214. package/templates/apps/api/src/routes/checkout/session.ts +0 -171
  215. package/templates/apps/api/src/routes/checkout/sessions.ts +0 -540
  216. package/templates/apps/api/src/routes/consent/__tests__/account.test.ts +0 -386
  217. package/templates/apps/api/src/routes/consent/__tests__/sign-up-rate-limit.test.ts +0 -160
  218. package/templates/apps/api/src/routes/consent/account.ts +0 -268
  219. package/templates/apps/api/src/routes/consent/cookie.ts +0 -90
  220. package/templates/apps/api/src/routes/consent/index.ts +0 -26
  221. package/templates/apps/api/src/routes/consent/unsubscribe.ts +0 -127
  222. package/templates/apps/api/src/routes/content/__tests__/get-page.test.ts +0 -853
  223. package/templates/apps/api/src/routes/content/__tests__/list-pages.test.ts +0 -230
  224. package/templates/apps/api/src/routes/content/__tests__/list-types.test.ts +0 -44
  225. package/templates/apps/api/src/routes/content/__tests__/locale.test.ts +0 -118
  226. package/templates/apps/api/src/routes/content/__tests__/offerings.test.ts +0 -731
  227. package/templates/apps/api/src/routes/content/__tests__/pricing.test.ts +0 -753
  228. package/templates/apps/api/src/routes/content/__tests__/rate-limit.test.ts +0 -51
  229. package/templates/apps/api/src/routes/content/__tests__/search.test.ts +0 -450
  230. package/templates/apps/api/src/routes/content/__tests__/shown-offerings.test.ts +0 -762
  231. package/templates/apps/api/src/routes/content/get-page.ts +0 -183
  232. package/templates/apps/api/src/routes/content/index.ts +0 -49
  233. package/templates/apps/api/src/routes/content/list-pages.ts +0 -74
  234. package/templates/apps/api/src/routes/content/list-types.ts +0 -19
  235. package/templates/apps/api/src/routes/content/offerings.ts +0 -184
  236. package/templates/apps/api/src/routes/content/pricing.ts +0 -176
  237. package/templates/apps/api/src/routes/content/rate-limit.ts +0 -22
  238. package/templates/apps/api/src/routes/content/search.ts +0 -100
  239. package/templates/apps/api/src/routes/content/shown-offerings.ts +0 -229
  240. package/templates/apps/api/src/routes/leads/__tests__/capture.test.ts +0 -88
  241. package/templates/apps/api/src/routes/leads/__tests__/list.test.ts +0 -171
  242. package/templates/apps/api/src/routes/leads/__tests__/magnet-completion.test.ts +0 -515
  243. package/templates/apps/api/src/routes/leads/__tests__/spoke.test.ts +0 -392
  244. package/templates/apps/api/src/routes/leads/__tests__/track.test.ts +0 -165
  245. package/templates/apps/api/src/routes/leads/index.ts +0 -639
  246. package/templates/apps/api/src/routes/leads/list.ts +0 -104
  247. package/templates/apps/api/src/routes/project-listings/__tests__/configured-application.test.ts +0 -626
  248. package/templates/apps/api/src/routes/project-listings/__tests__/drafts.test.ts +0 -1268
  249. package/templates/apps/api/src/routes/project-listings/__tests__/founder-identity.test.ts +0 -847
  250. package/templates/apps/api/src/routes/project-listings/__tests__/me.test.ts +0 -491
  251. package/templates/apps/api/src/routes/project-listings/__tests__/public.test.ts +0 -476
  252. package/templates/apps/api/src/routes/project-listings/__tests__/resume-email.test.ts +0 -872
  253. package/templates/apps/api/src/routes/project-listings/__tests__/site-answers.test.ts +0 -1022
  254. package/templates/apps/api/src/routes/project-listings/__tests__/site-key.test.ts +0 -484
  255. package/templates/apps/api/src/routes/project-listings/__tests__/structured-address.test.ts +0 -535
  256. package/templates/apps/api/src/routes/project-listings/index.ts +0 -164
  257. package/templates/apps/api/src/routes/project-listings/me.ts +0 -87
  258. package/templates/apps/api/src/routes/project-listings/patch-copy.ts +0 -224
  259. package/templates/apps/api/src/routes/project-listings/patch-draft.ts +0 -102
  260. package/templates/apps/api/src/routes/project-listings/public.ts +0 -98
  261. package/templates/apps/api/src/routes/project-listings/respond.ts +0 -48
  262. package/templates/apps/api/src/routes/project-listings/resume-token.ts +0 -27
  263. package/templates/apps/api/src/routes/project-listings/start.ts +0 -140
  264. package/templates/apps/api/src/routes/project-listings/submit.ts +0 -130
  265. package/templates/apps/api/src/routes/project-listings/verify-email.ts +0 -150
  266. package/templates/apps/api/src/routes/requests/__tests__/confirm.test.ts +0 -686
  267. package/templates/apps/api/src/routes/requests/confirm.ts +0 -601
  268. package/templates/apps/api/src/routes/requests/index.ts +0 -54
  269. package/templates/apps/api/src/routes/test/auth/__tests__/session.test.ts +0 -306
  270. package/templates/apps/api/src/routes/test/auth/session.ts +0 -143
  271. package/templates/apps/api/src/routes/webhooks/README.md +0 -398
  272. package/templates/apps/api/src/routes/webhooks/__tests__/stripe-checkout-consent.test.ts +0 -649
  273. package/templates/apps/api/src/routes/webhooks/__tests__/stripe-dunning.test.ts +0 -749
  274. package/templates/apps/api/src/routes/webhooks/__tests__/stripe-flow-checkout.test.ts +0 -449
  275. package/templates/apps/api/src/routes/webhooks/__tests__/stripe-idempotency.test.ts +0 -264
  276. package/templates/apps/api/src/routes/webhooks/__tests__/stripe-livemode-live.test.ts +0 -159
  277. package/templates/apps/api/src/routes/webhooks/__tests__/stripe-livemode.test.ts +0 -158
  278. package/templates/apps/api/src/routes/webhooks/__tests__/stripe-offerings.test.ts +0 -814
  279. package/templates/apps/api/src/routes/webhooks/__tests__/stripe-org-billing.test.ts +0 -301
  280. package/templates/apps/api/src/routes/webhooks/__tests__/stripe-proposal-paid.test.ts +0 -369
  281. package/templates/apps/api/src/routes/webhooks/__tests__/stripe-rate-limit.test.ts +0 -215
  282. package/templates/apps/api/src/routes/webhooks/__tests__/stripe-request-paid.test.ts +0 -301
  283. package/templates/apps/api/src/routes/webhooks/__tests__/stripe-site-filter.test.ts +0 -809
  284. package/templates/apps/api/src/routes/webhooks/__tests__/stripe.test.ts +0 -1155
  285. package/templates/apps/api/src/routes/webhooks/index.ts +0 -141
  286. package/templates/apps/api/src/routes/webhooks/stripe-offerings.ts +0 -384
  287. package/templates/apps/api/src/routes/webhooks/stripe.ts +0 -2028
  288. package/templates/apps/api/src/services/__tests__/abandon-email.test.ts +0 -645
  289. package/templates/apps/api/src/services/__tests__/answer-distributions.test.ts +0 -132
  290. package/templates/apps/api/src/services/__tests__/audit-log.test.ts +0 -1028
  291. package/templates/apps/api/src/services/__tests__/checkout-plan.test.ts +0 -313
  292. package/templates/apps/api/src/services/__tests__/consent-ledger.test.ts +0 -503
  293. package/templates/apps/api/src/services/__tests__/consent-migration.test.ts +0 -65
  294. package/templates/apps/api/src/services/__tests__/consent.test.ts +0 -299
  295. package/templates/apps/api/src/services/__tests__/default-tenant.test.ts +0 -147
  296. package/templates/apps/api/src/services/__tests__/deliverable-fulfillment.test.ts +0 -877
  297. package/templates/apps/api/src/services/__tests__/deliverable-resend.test.ts +0 -379
  298. package/templates/apps/api/src/services/__tests__/dunning-policy.test.ts +0 -368
  299. package/templates/apps/api/src/services/__tests__/entitlements.test.ts +0 -142
  300. package/templates/apps/api/src/services/__tests__/hub-sign-in.test.ts +0 -854
  301. package/templates/apps/api/src/services/__tests__/keyless-workspace-predicate.test.ts +0 -234
  302. package/templates/apps/api/src/services/__tests__/lead-accept-user.test.ts +0 -251
  303. package/templates/apps/api/src/services/__tests__/lead-routing.test.ts +0 -2660
  304. package/templates/apps/api/src/services/__tests__/listing-config.test.ts +0 -166
  305. package/templates/apps/api/src/services/__tests__/magnet-completion.test.ts +0 -389
  306. package/templates/apps/api/src/services/__tests__/person.test.ts +0 -1204
  307. package/templates/apps/api/src/services/__tests__/plan-offerings.test.ts +0 -450
  308. package/templates/apps/api/src/services/__tests__/project-listings.counts.test.ts +0 -202
  309. package/templates/apps/api/src/services/__tests__/project-listings.fence.test.ts +0 -151
  310. package/templates/apps/api/src/services/__tests__/public-site-resolver.test.ts +0 -137
  311. package/templates/apps/api/src/services/__tests__/request-confirm.test.ts +0 -531
  312. package/templates/apps/api/src/services/__tests__/revalidation.test.ts +0 -372
  313. package/templates/apps/api/src/services/__tests__/slack-notify.test.ts +0 -348
  314. package/templates/apps/api/src/services/__tests__/spoke-resolution.test.ts +0 -660
  315. package/templates/apps/api/src/services/__tests__/usage-aggregation.test.ts +0 -941
  316. package/templates/apps/api/src/services/__tests__/usage-credits.test.ts +0 -588
  317. package/templates/apps/api/src/services/__tests__/verified-email.test.ts +0 -78
  318. package/templates/apps/api/src/services/abandon-email.ts +0 -336
  319. package/templates/apps/api/src/services/aeo-score.ts +0 -325
  320. package/templates/apps/api/src/services/answer-distributions.ts +0 -138
  321. package/templates/apps/api/src/services/audit-log.ts +0 -961
  322. package/templates/apps/api/src/services/checkout-buyer.ts +0 -168
  323. package/templates/apps/api/src/services/consent.ts +0 -834
  324. package/templates/apps/api/src/services/default-tenant.ts +0 -416
  325. package/templates/apps/api/src/services/deliverable-fulfillment.ts +0 -750
  326. package/templates/apps/api/src/services/dunning-policy.ts +0 -294
  327. package/templates/apps/api/src/services/enrichment-shim.ts +0 -53
  328. package/templates/apps/api/src/services/entitlements.ts +0 -338
  329. package/templates/apps/api/src/services/hub-sign-in.ts +0 -472
  330. package/templates/apps/api/src/services/lead-accept-user.ts +0 -126
  331. package/templates/apps/api/src/services/lead-promotion.ts +0 -160
  332. package/templates/apps/api/src/services/lead-routing.ts +0 -1372
  333. package/templates/apps/api/src/services/leads-inbox.ts +0 -312
  334. package/templates/apps/api/src/services/listing-config.ts +0 -178
  335. package/templates/apps/api/src/services/magnet-completion.ts +0 -242
  336. package/templates/apps/api/src/services/offerings/__tests__/catalog.test.ts +0 -348
  337. package/templates/apps/api/src/services/offerings/__tests__/checkout-session-record.test.ts +0 -268
  338. package/templates/apps/api/src/services/offerings/__tests__/connection.test.ts +0 -975
  339. package/templates/apps/api/src/services/offerings/__tests__/fixtures.ts +0 -416
  340. package/templates/apps/api/src/services/offerings/__tests__/org-products.test.ts +0 -400
  341. package/templates/apps/api/src/services/offerings/__tests__/readers.test.ts +0 -685
  342. package/templates/apps/api/src/services/offerings/__tests__/source.test.ts +0 -231
  343. package/templates/apps/api/src/services/offerings/catalog.ts +0 -318
  344. package/templates/apps/api/src/services/offerings/checkout-authorization.ts +0 -403
  345. package/templates/apps/api/src/services/offerings/checkout-session-record.ts +0 -192
  346. package/templates/apps/api/src/services/offerings/connection.ts +0 -1083
  347. package/templates/apps/api/src/services/offerings/index.ts +0 -614
  348. package/templates/apps/api/src/services/offerings/source.ts +0 -140
  349. package/templates/apps/api/src/services/offerings/store.ts +0 -150
  350. package/templates/apps/api/src/services/owner-workspaces.ts +0 -132
  351. package/templates/apps/api/src/services/person.ts +0 -1211
  352. package/templates/apps/api/src/services/plan-offerings.ts +0 -125
  353. package/templates/apps/api/src/services/project-listing-resume-email.ts +0 -326
  354. package/templates/apps/api/src/services/project-listings.ts +0 -2085
  355. package/templates/apps/api/src/services/public-site-resolver.ts +0 -396
  356. package/templates/apps/api/src/services/request-confirm.ts +0 -698
  357. package/templates/apps/api/src/services/revalidation.ts +0 -235
  358. package/templates/apps/api/src/services/slack-notify.ts +0 -291
  359. package/templates/apps/api/src/services/usage-aggregation.ts +0 -516
  360. package/templates/apps/api/src/services/usage-credits.ts +0 -340
  361. package/templates/apps/api/src/services/verified-email.ts +0 -71
  362. package/templates/apps/mcp/__tests__/abuse/daily-cap.test.ts +0 -52
  363. package/templates/apps/mcp/__tests__/abuse/email-validator.test.ts +0 -46
  364. package/templates/apps/mcp/__tests__/abuse/guard.test.ts +0 -198
  365. package/templates/apps/mcp/__tests__/abuse/honeypot.test.ts +0 -36
  366. package/templates/apps/mcp/__tests__/abuse/user-agent-deny.test.ts +0 -54
  367. package/templates/apps/mcp/__tests__/aeo-cli-parity.test.ts +0 -116
  368. package/templates/apps/mcp/__tests__/audit-single-page.test.ts +0 -299
  369. package/templates/apps/mcp/__tests__/boot.test.ts +0 -280
  370. package/templates/apps/mcp/__tests__/catalog-drift.test.ts +0 -359
  371. package/templates/apps/mcp/__tests__/config/modules.test.ts +0 -78
  372. package/templates/apps/mcp/__tests__/get_business_hours.test.ts +0 -82
  373. package/templates/apps/mcp/__tests__/get_faq.test.ts +0 -80
  374. package/templates/apps/mcp/__tests__/get_locations.test.ts +0 -65
  375. package/templates/apps/mcp/__tests__/get_offerings.test.ts +0 -557
  376. package/templates/apps/mcp/__tests__/get_pricing.test.ts +0 -524
  377. package/templates/apps/mcp/__tests__/get_site_info.test.ts +0 -81
  378. package/templates/apps/mcp/__tests__/http-transport.test.ts +0 -1232
  379. package/templates/apps/mcp/__tests__/index.test.ts +0 -195
  380. package/templates/apps/mcp/__tests__/lib/audit-single-page-readiness-scan.test.ts +0 -191
  381. package/templates/apps/mcp/__tests__/lib/commerce-claim.test.ts +0 -531
  382. package/templates/apps/mcp/__tests__/lib/content-adapter-parity.test.ts +0 -70
  383. package/templates/apps/mcp/__tests__/lib/content-adapter.test.ts +0 -162
  384. package/templates/apps/mcp/__tests__/lib/content-root.test.ts +0 -93
  385. package/templates/apps/mcp/__tests__/lib/errors.test.ts +0 -75
  386. package/templates/apps/mcp/__tests__/lib/fail-closed-tools.test.ts +0 -180
  387. package/templates/apps/mcp/__tests__/lib/public-workspace.test.ts +0 -124
  388. package/templates/apps/mcp/__tests__/list_pages.test.ts +0 -268
  389. package/templates/apps/mcp/__tests__/locale.test.ts +0 -120
  390. package/templates/apps/mcp/__tests__/module-exclusion.test.ts +0 -175
  391. package/templates/apps/mcp/__tests__/purchase-disabled.test.ts +0 -101
  392. package/templates/apps/mcp/__tests__/rate-limit-write.test.ts +0 -189
  393. package/templates/apps/mcp/__tests__/read_content.test.ts +0 -511
  394. package/templates/apps/mcp/__tests__/request_callback.test.ts +0 -160
  395. package/templates/apps/mcp/__tests__/search_content.test.ts +0 -271
  396. package/templates/apps/mcp/__tests__/server.test.ts +0 -388
  397. package/templates/apps/mcp/__tests__/start_purchase.test.ts +0 -448
  398. package/templates/apps/mcp/__tests__/submit_lead.test.ts +0 -222
  399. package/templates/apps/mcp/__tests__/subscribe_newsletter.test.ts +0 -152
  400. package/templates/apps/mcp/__tests__/tools/create_project.test.ts +0 -243
  401. package/templates/apps/mcp/__tests__/tools/purchase.test.ts +0 -451
  402. package/templates/apps/mcp/src/abuse/daily-cap.ts +0 -47
  403. package/templates/apps/mcp/src/abuse/email-validator.ts +0 -25
  404. package/templates/apps/mcp/src/abuse/honeypot.ts +0 -21
  405. package/templates/apps/mcp/src/abuse/index.ts +0 -349
  406. package/templates/apps/mcp/src/abuse/user-agent-deny.ts +0 -58
  407. package/templates/apps/mcp/src/boot.ts +0 -167
  408. package/templates/apps/mcp/src/config/modules.ts +0 -43
  409. package/templates/apps/mcp/src/http-transport.ts +0 -564
  410. package/templates/apps/mcp/src/lib/audit-single-page.ts +0 -308
  411. package/templates/apps/mcp/src/lib/commerce-claim.ts +0 -263
  412. package/templates/apps/mcp/src/lib/content-adapter.ts +0 -116
  413. package/templates/apps/mcp/src/lib/empty-content-adapter.ts +0 -140
  414. package/templates/apps/mcp/src/lib/errors.ts +0 -61
  415. package/templates/apps/mcp/src/lib/license-key-store.ts +0 -45
  416. package/templates/apps/mcp/src/lib/locales.ts +0 -171
  417. package/templates/apps/mcp/src/lib/prisma.ts +0 -39
  418. package/templates/apps/mcp/src/lib/public-workspace.ts +0 -133
  419. package/templates/apps/mcp/src/lib/resolve-locale.ts +0 -30
  420. package/templates/apps/mcp/src/lib/shown-offerings.ts +0 -105
  421. package/templates/apps/mcp/src/lib/site-config.ts +0 -53
  422. package/templates/apps/mcp/src/lib/stripe-tax-signal.ts +0 -59
  423. package/templates/apps/mcp/src/request-context.ts +0 -52
  424. package/templates/apps/mcp/src/server.ts +0 -343
  425. package/templates/apps/mcp/src/serverless-app.ts +0 -88
  426. package/templates/apps/mcp/src/tools/audit.ts +0 -127
  427. package/templates/apps/mcp/src/tools/capture_lead.ts +0 -66
  428. package/templates/apps/mcp/src/tools/create_project.ts +0 -134
  429. package/templates/apps/mcp/src/tools/get_business_hours.ts +0 -68
  430. package/templates/apps/mcp/src/tools/get_faq.ts +0 -71
  431. package/templates/apps/mcp/src/tools/get_locations.ts +0 -88
  432. package/templates/apps/mcp/src/tools/get_offerings.ts +0 -96
  433. package/templates/apps/mcp/src/tools/get_pricing.ts +0 -94
  434. package/templates/apps/mcp/src/tools/get_site_info.ts +0 -86
  435. package/templates/apps/mcp/src/tools/index.ts +0 -138
  436. package/templates/apps/mcp/src/tools/list_pages.ts +0 -68
  437. package/templates/apps/mcp/src/tools/person_notes.ts +0 -25
  438. package/templates/apps/mcp/src/tools/proposals.ts +0 -27
  439. package/templates/apps/mcp/src/tools/purchase.ts +0 -205
  440. package/templates/apps/mcp/src/tools/read_content.ts +0 -81
  441. package/templates/apps/mcp/src/tools/request_callback.ts +0 -52
  442. package/templates/apps/mcp/src/tools/search_content.ts +0 -63
  443. package/templates/apps/mcp/src/tools/subscribe_newsletter.ts +0 -54
  444. package/templates/apps/mcp/src/workspace-server.ts +0 -224
  445. package/templates/database/CHANGELOG.md +0 -981
  446. package/templates/database/LICENSE +0 -202
  447. package/templates/database/NOTICE +0 -2
  448. package/templates/database/README.md +0 -243
  449. package/templates/database/__tests__/agents.db.test.ts +0 -320
  450. package/templates/database/__tests__/appointment.db.test.ts +0 -106
  451. package/templates/database/__tests__/artifact-content-store.db.test.ts +0 -316
  452. package/templates/database/__tests__/composite-fence.db.test.ts +0 -206
  453. package/templates/database/__tests__/consent-ledger.db.test.ts +0 -345
  454. package/templates/database/__tests__/consent-source-checkout-migration.test.ts +0 -79
  455. package/templates/database/__tests__/fence-fan-out.db.test.ts +0 -715
  456. package/templates/database/__tests__/fixtures/appointment-create-probe.ts +0 -79
  457. package/templates/database/__tests__/fixtures/person-backfill.json +0 -264
  458. package/templates/database/__tests__/fixtures/person-contact-backfill.json +0 -182
  459. package/templates/database/__tests__/fixtures/project-listing-consent-probe.ts +0 -100
  460. package/templates/database/__tests__/flow-completion-migration.test.ts +0 -115
  461. package/templates/database/__tests__/flow-completion.db.test.ts +0 -136
  462. package/templates/database/__tests__/flow-workspace-key.db.test.ts +0 -263
  463. package/templates/database/__tests__/flows-listing-diagnostic.test.ts +0 -392
  464. package/templates/database/__tests__/flows-presets.test.ts +0 -173
  465. package/templates/database/__tests__/in-page-magnets-migration.test.ts +0 -161
  466. package/templates/database/__tests__/lead-idempotency-key.db.test.ts +0 -92
  467. package/templates/database/__tests__/member-area.db.test.ts +0 -257
  468. package/templates/database/__tests__/member-contract-migration.test.ts +0 -85
  469. package/templates/database/__tests__/member-contract.db.test.ts +0 -413
  470. package/templates/database/__tests__/offerings-checkout-session.db.test.ts +0 -270
  471. package/templates/database/__tests__/offerings-migration.test.ts +0 -197
  472. package/templates/database/__tests__/offerings-shown-price-ids-migration.test.ts +0 -86
  473. package/templates/database/__tests__/offerings.db.test.ts +0 -303
  474. package/templates/database/__tests__/outbound-message-action.db.test.ts +0 -80
  475. package/templates/database/__tests__/person-contact.db.test.ts +0 -563
  476. package/templates/database/__tests__/person-notes.db.test.ts +0 -249
  477. package/templates/database/__tests__/person.db.test.ts +0 -586
  478. package/templates/database/__tests__/piece-kind-migration.test.ts +0 -67
  479. package/templates/database/__tests__/piece-kind.db.test.ts +0 -208
  480. package/templates/database/__tests__/prefixed-ids.db.test.ts +0 -222
  481. package/templates/database/__tests__/project-listing-consent-at.db.test.ts +0 -111
  482. package/templates/database/__tests__/seed.test.ts +0 -272
  483. package/templates/database/__tests__/spoke-registry.db.test.ts +0 -191
  484. package/templates/database/__tests__/tenancy.test.ts +0 -141
  485. package/templates/database/__tests__/trial-magnet-migration.test.ts +0 -186
  486. package/templates/database/__tests__/user-cascade.test.ts +0 -140
  487. package/templates/database/_gitignore +0 -8
  488. package/templates/database/auth/.gitkeep +0 -0
  489. package/templates/database/auth/schema.prisma +0 -641
  490. package/templates/database/config/.gitkeep +0 -0
  491. package/templates/database/config/schema.prisma +0 -441
  492. package/templates/database/content/.gitkeep +0 -0
  493. package/templates/database/content/schema.prisma +0 -339
  494. package/templates/database/eslint.config.mjs +0 -69
  495. package/templates/database/flows/listing-diagnostic.ts +0 -182
  496. package/templates/database/flows/presets.ts +0 -315
  497. package/templates/database/inbox/.gitkeep +0 -0
  498. package/templates/database/inbox/README.md +0 -3
  499. package/templates/database/inbox/__tests__/schema.test.ts +0 -44
  500. package/templates/database/inbox/schema.prisma +0 -1447
  501. package/templates/database/jest.config.cjs +0 -36
  502. package/templates/database/migrations/20260508000000_add_inbox_namespace/migration.sql +0 -328
  503. package/templates/database/migrations/20260513000000_better_auth_migration/migration.sql +0 -100
  504. package/templates/database/migrations/20260515000000_add_user_billing_fields/migration.sql +0 -28
  505. package/templates/database/migrations/20260516000000_add_user_tier_care_plan_seat/migration.sql +0 -25
  506. package/templates/database/migrations/20260518000000_add_telemetry_records/migration.sql +0 -42
  507. package/templates/database/migrations/20260525000000_theme_wiring/migration.sql +0 -67
  508. package/templates/database/migrations/20260710000000_retire_commercial_tier/migration.sql +0 -21
  509. package/templates/database/migrations/20260712215647_add_multi_tenant_tenancy/migration.sql +0 -201
  510. package/templates/database/migrations/20260713143320_reanchor_site_config_to_workspace/migration.sql +0 -67
  511. package/templates/database/migrations/20260713174000_add_audit_logs/migration.sql +0 -46
  512. package/templates/database/migrations/20260713190000_drop_telemetry_records/migration.sql +0 -25
  513. package/templates/database/migrations/20260713192000_add_uuidv7_function/migration.sql +0 -49
  514. package/templates/database/migrations/20260713192429_prefixed_uuid_entity_ids/migration.sql +0 -197
  515. package/templates/database/migrations/20260713200000_add_org_billing/migration.sql +0 -32
  516. package/templates/database/migrations/20260714000000_add_lead_promotion_fields/migration.sql +0 -22
  517. package/templates/database/migrations/20260714010000_add_usage_billing_content_models/migration.sql +0 -151
  518. package/templates/database/migrations/20260714020000_add_usage_billing_auth_config_models/migration.sql +0 -223
  519. package/templates/database/migrations/20260714030000_credit_balance_non_negative/migration.sql +0 -22
  520. package/templates/database/migrations/20260714030000_widen_usage_billing_report_aggregates/migration.sql +0 -32
  521. package/templates/database/migrations/20260810233516_add_flow_engine_models/migration.sql +0 -40
  522. package/templates/database/migrations/20260811020000_add_flow_session_abandon_email_columns/migration.sql +0 -4
  523. package/templates/database/migrations/20260811030000_add_flow_session_abandon_email_index/migration.sql +0 -2
  524. package/templates/database/migrations/20260811040000_add_flow_session_segment/migration.sql +0 -2
  525. package/templates/database/migrations/20260811050000_add_deliverable_models/migration.sql +0 -29
  526. package/templates/database/migrations/20260812000000_add_deliverable_grant_send_columns/migration.sql +0 -6
  527. package/templates/database/migrations/20260902222948_add_waitlist_experiment_models/migration.sql +0 -39
  528. package/templates/database/migrations/20260902224500_add_waitlist_id_format_checks/migration.sql +0 -24
  529. package/templates/database/migrations/20260903004112_add_flow_session_flags_aeo_score/migration.sql +0 -3
  530. package/templates/database/migrations/20260903010000_add_playbook_instance/migration.sql +0 -33
  531. package/templates/database/migrations/20260904000000_add_waitlist_followup_send/migration.sql +0 -30
  532. package/templates/database/migrations/20260905230000_add_flow_checkout/migration.sql +0 -47
  533. package/templates/database/migrations/20260906000000_add_flow_checkout_idempotency/migration.sql +0 -16
  534. package/templates/database/migrations/20260907120000_add_project_listing/migration.sql +0 -47
  535. package/templates/database/migrations/20260907130000_add_project_listing_slack_columns/migration.sql +0 -10
  536. package/templates/database/migrations/20260907180000_add_listing_csv_send/migration.sql +0 -26
  537. package/templates/database/migrations/20260909120000_project_listings_platform/migration.sql +0 -90
  538. package/templates/database/migrations/20260909180000_listing_draft_and_fields/migration.sql +0 -174
  539. package/templates/database/migrations/20260910120000_listing_public_site_key/migration.sql +0 -14
  540. package/templates/database/migrations/20260911120000_listing_copy_edit_audit/migration.sql +0 -25
  541. package/templates/database/migrations/20260911140000_listing_structured_address/migration.sql +0 -32
  542. package/templates/database/migrations/20260911180000_consent_grants/migration.sql +0 -71
  543. package/templates/database/migrations/20260911200000_listing_site_answers/migration.sql +0 -30
  544. package/templates/database/migrations/20260912120000_listing_owner_link/migration.sql +0 -49
  545. package/templates/database/migrations/20260914120000_listing_founder_identity/migration.sql +0 -123
  546. package/templates/database/migrations/20260915120000_project_listing_solution/migration.sql +0 -15
  547. package/templates/database/migrations/20260916120000_artifact_content_store/migration.sql +0 -158
  548. package/templates/database/migrations/20260917120000_callback_request_confirm/migration.sql +0 -40
  549. package/templates/database/migrations/20260918120000_add_appointment/migration.sql +0 -67
  550. package/templates/database/migrations/20260918120000_asset_metadata_columns/migration.sql +0 -70
  551. package/templates/database/migrations/20260919120000_flow_workspace_key/migration.sql +0 -181
  552. package/templates/database/migrations/20260919130000_flow_definition_admin_columns/migration.sql +0 -172
  553. package/templates/database/migrations/20260919130000_workspace_meetings/migration.sql +0 -41
  554. package/templates/database/migrations/20260919140000_inbox_workspace_key/migration.sql +0 -185
  555. package/templates/database/migrations/20260920120000_lead_handled_at/migration.sql +0 -70
  556. package/templates/database/migrations/20260920130000_lead_workspace_source_index/migration.sql +0 -57
  557. package/templates/database/migrations/20260921120000_deliverable_grant_workspace_key/migration.sql +0 -68
  558. package/templates/database/migrations/20260922120000_tenancy_fence/migration.sql +0 -1067
  559. package/templates/database/migrations/20260923120000_listing_capturing_magnet/migration.sql +0 -210
  560. package/templates/database/migrations/20261003120000_spoke_registry/migration.sql +0 -80
  561. package/templates/database/migrations/20261003130000_scheduling_connection/migration.sql +0 -49
  562. package/templates/database/migrations/20261005120000_agents/migration.sql +0 -84
  563. package/templates/database/migrations/20261008120000_user_last_workspace/migration.sql +0 -35
  564. package/templates/database/migrations/20261008130000_lead_idempotency_key/migration.sql +0 -20
  565. package/templates/database/migrations/20261009120000_agent_grants/migration.sql +0 -33
  566. package/templates/database/migrations/20261010120000_person/migration.sql +0 -106
  567. package/templates/database/migrations/20261010121000_person_backfill/migration.sql +0 -132
  568. package/templates/database/migrations/20261010130000_agent_grants_people_read/migration.sql +0 -20
  569. package/templates/database/migrations/20261011120000_member_area/migration.sql +0 -158
  570. package/templates/database/migrations/20261011130000_agent_grants_member_pieces_manage/migration.sql +0 -21
  571. package/templates/database/migrations/20261012120000_member_contract/migration.sql +0 -192
  572. package/templates/database/migrations/20261013120000_lead_spoke_checkout/migration.sql +0 -20
  573. package/templates/database/migrations/20261014120000_consent_ledger/migration.sql +0 -122
  574. package/templates/database/migrations/20261014120000_person_contact/migration.sql +0 -231
  575. package/templates/database/migrations/20261015120000_person_notes/migration.sql +0 -77
  576. package/templates/database/migrations/20261015120000_rate_limit_counters/migration.sql +0 -43
  577. package/templates/database/migrations/20261016120000_piece_kind/migration.sql +0 -95
  578. package/templates/database/migrations/20261017120000_outbound_message_action/migration.sql +0 -30
  579. package/templates/database/migrations/20261018120000_flow_completion/migration.sql +0 -52
  580. package/templates/database/migrations/20261019120000_consent_source_checkout/migration.sql +0 -27
  581. package/templates/database/migrations/20261020120000_offerings_data_model/migration.sql +0 -146
  582. package/templates/database/migrations/20261021120000_offerings_checkout_session/migration.sql +0 -77
  583. package/templates/database/migrations/20261022120000_in_page_magnets/migration.sql +0 -45
  584. package/templates/database/migrations/20261023120000_offerings_shown_price_ids/migration.sql +0 -47
  585. package/templates/database/migrations/20261024120000_organization_plan_checkout_session/migration.sql +0 -16
  586. package/templates/database/migrations/20261025120000_trial_magnet/migration.sql +0 -28
  587. package/templates/database/migrations/20261026120000_trial_magnet_proof_line/migration.sql +0 -23
  588. package/templates/database/migrations/migration_lock.toml +0 -3
  589. package/templates/database/ops/.gitkeep +0 -0
  590. package/templates/database/ops/schema.prisma +0 -43
  591. package/templates/database/package.json +0 -89
  592. package/templates/database/schema.prisma +0 -71
  593. package/templates/database/scripts/db-generate-locked.sh +0 -80
  594. package/templates/database/scripts/person-backfill.sql +0 -132
  595. package/templates/database/tenancy.ts +0 -183
  596. package/templates/database/tsconfig.build.json +0 -16
  597. package/templates/database/tsconfig.flows.json +0 -15
  598. package/templates/database/tsconfig.json +0 -16
  599. package/templates/database/tsconfig.tenancy.json +0 -14
@@ -1,183 +0,0 @@
1
- /**
2
- * GET /v1/content/:type/:slug
3
- *
4
- * Returns a single page with its resolved schema.org JSON-LD spread at the
5
- * document root, plus the raw frontmatter under `page` for clients that need
6
- * the unrendered shape.
7
- *
8
- * 404 on missing slug, 400 on unknown type. A deployment whose site cannot be
9
- * resolved (#5852) answers with the SAME 404 body as a missing slug.
10
- *
11
- * Phase 3 S3: optional `?locale=<locale>` query parameter. Validated against
12
- * `readLocales()` allowlist; invalid or unknown locale silently falls back to
13
- * the project's default locale (AC-i18n-07). The adapter applies the fallback
14
- * chain (locale → default-locale → legacy non-prefixed layout).
15
- *
16
- * #5890: optional `?include=body` adds the raw published MDX body beside
17
- * `page`. It is opt-in: without it the handler takes the path it took before
18
- * the parameter existed. An adapter with no `getPageSource` refuses the
19
- * parameter with a 400 naming it, rather than 500ing on a missing method.
20
- *
21
- * #5927: on the `?include=body` path, `page` and `body` come from ONE
22
- * `getPageSource` call — never a `getPageBySlug` call plus a second,
23
- * independent `getPageSource` call. Two independent adapter reads can
24
- * straddle a publish that lands between them (frontmatter from revision N,
25
- * body from revision N+1); one read cannot.
26
- *
27
- * #6597: a `HomePage` body keeps its `@context` + `@graph` envelope, now
28
- * composed from the deployment's `_site.mdx` identity (identity node, optional
29
- * secondary, WebSite) rather than the page title. Every other type's body is
30
- * the page's own JSON-LD, spread at the root, as before.
31
- *
32
- * #7169: the document is built by `readContentDocument` in
33
- * `@working-theory/content-adapters` — the shared seam the `read_content` MCP
34
- * tool answers through, parsing the same `@working-theory/validation` exports —
35
- * over the `_site.mdx` this route still reads (the package may not import
36
- * `@working-theory/site-config`).
37
- */
38
- import { readFileSync } from "node:fs";
39
- import { join } from "node:path";
40
-
41
- import {
42
- readContentDocument,
43
- type ContentAdapter,
44
- type MdxContentAdapter,
45
- } from "@working-theory/content-adapters";
46
- import {
47
- SiteConfigSchema,
48
- type SiteConfig,
49
- } from "@working-theory/site-config/schema";
50
- import {
51
- contentPageParamsSchema,
52
- contentPageQuerySchema,
53
- } from "@working-theory/validation";
54
- import type { FastifyPluginAsync } from "fastify";
55
- import { parse as parseYaml } from "yaml";
56
-
57
- import { getContentRoot } from "../../lib/content-adapter.js";
58
- import { resolveLocale } from "../../lib/locales.js";
59
- import { resolvePublicContentAdapter } from "../../services/public-site-resolver.js";
60
-
61
- /**
62
- * The raw-body capability, probed by the exact name the MDX adapter declares
63
- * and the database adapter borrows (#5874) — the same idiom, and the same
64
- * name, as `apps/mcp/src/lib/content-adapter.ts`.
65
- */
66
- function hasPageSource(
67
- adapter: ContentAdapter,
68
- ): adapter is ContentAdapter & Pick<MdxContentAdapter, "getPageSource"> {
69
- return (
70
- typeof (adapter as Partial<MdxContentAdapter>).getPageSource === "function"
71
- );
72
- }
73
-
74
- const FRONTMATTER_RE = /^---\r?\n([\s\S]*?)\r?\n---/;
75
-
76
- /** `_site.mdx` per content root, read once; `null` when it does not load. */
77
- const siteConfigByRoot = new Map<string, SiteConfig | null>();
78
-
79
- /**
80
- * The deployment's `_site.mdx`, validated against `SiteConfigSchema`, or
81
- * `undefined` on any failure (absent, unreadable, invalid). A local read with
82
- * the client-safe `/schema` entry: `@working-theory/site-config/server` imports
83
- * `server-only`, which throws outside a React Server Components runtime.
84
- */
85
- function readSiteConfig(contentRoot: string): SiteConfig | undefined {
86
- if (!siteConfigByRoot.has(contentRoot)) {
87
- let config: SiteConfig | null = null;
88
- try {
89
- const raw = readFileSync(join(contentRoot, "_site.mdx"), "utf8");
90
- const match = FRONTMATTER_RE.exec(raw);
91
- if (match) {
92
- const parsed = SiteConfigSchema.safeParse(parseYaml(match[1] ?? ""));
93
- if (parsed.success) config = parsed.data;
94
- }
95
- } catch {
96
- // Absent or unreadable — no site.
97
- }
98
- siteConfigByRoot.set(contentRoot, config);
99
- }
100
- return siteConfigByRoot.get(contentRoot) ?? undefined;
101
- }
102
-
103
- export const getPageRoute: FastifyPluginAsync = async (fastify) => {
104
- fastify.get<{
105
- Params: { type: string; slug: string };
106
- Querystring: { locale?: string; include?: string };
107
- }>(
108
- "/v1/content/:type/:slug",
109
- async (request, reply) => {
110
- const parsed = contentPageParamsSchema.safeParse(request.params);
111
- if (!parsed.success) {
112
- return reply.status(400).send({
113
- error: "Invalid type or slug",
114
- details: parsed.error.issues,
115
- });
116
- }
117
-
118
- const queryParsed = contentPageQuerySchema.safeParse(request.query);
119
- if (!queryParsed.success) {
120
- return reply.status(400).send({
121
- error: "Invalid query parameters",
122
- details: queryParsed.error.issues,
123
- });
124
- }
125
-
126
- const { type, slug } = parsed.data;
127
- const { include } = queryParsed.data;
128
- const locale = resolveLocale(queryParsed.data.locale);
129
-
130
- try {
131
- // Which site this read serves is resolved BEFORE any content query
132
- // (#5852). A refusal reuses the SAME not-found body a missing page
133
- // gets, below: a distinct body or code would tell an unauthenticated
134
- // caller that its slug reached tenancy, which is the enumeration
135
- // signal AC-WCE-05 denies.
136
- const adapter = await resolvePublicContentAdapter(request);
137
- if (adapter === null) {
138
- return reply.status(404).send({
139
- error: "Page not found",
140
- type,
141
- slug,
142
- });
143
- }
144
-
145
- // Refused before any content query, so a caller asking for a body this
146
- // deployment cannot serve is never charged a read whose result is then
147
- // discarded.
148
- if (include === "body" && !hasPageSource(adapter)) {
149
- return reply.status(400).send({
150
- error: "Invalid query parameters",
151
- details: [
152
- {
153
- path: ["include"],
154
- message: "body is not available from this content adapter",
155
- },
156
- ],
157
- });
158
- }
159
-
160
- // #5927: ONE adapter call supplies everything the response sends —
161
- // the builder reads `getPageSource` only when `include=body`, and
162
- // `getPageBySlug` alone otherwise, so the two halves can never
163
- // straddle a publish that lands between two independent calls.
164
- const document = await readContentDocument(
165
- adapter,
166
- { type, slug, locale, include },
167
- readSiteConfig(getContentRoot()),
168
- );
169
- if (!document) {
170
- return reply.status(404).send({
171
- error: "Page not found",
172
- type,
173
- slug,
174
- });
175
- }
176
- return reply.send(document);
177
- } catch (error) {
178
- request.log.error({ err: error }, "[Content] getPage failed");
179
- return reply.status(500).send({ error: "Internal server error" });
180
- }
181
- },
182
- );
183
- };
@@ -1,49 +0,0 @@
1
- /**
2
- * Public content API.
3
- *
4
- * Read endpoints, all GET, JSON-LD-shaped at the document root unless noted:
5
- * GET /v1/content/types — supported page types
6
- * GET /v1/content/search — keyword search (#5831)
7
- * GET /v1/content/offerings — Services + Products (#7177); answers the
8
- * `{ ok, data }` envelope, not JSON-LD
9
- * GET /v1/content/pricing — pricing tiers (#7178); answers the
10
- * `{ ok, data }` envelope, not JSON-LD
11
- * GET /v1/content/shown-offerings — the /pricing page's Offerings read
12
- * (#8924); answers the { ok, data }
13
- * envelope, not JSON-LD
14
- * GET /v1/content/:type — paginated list of pages
15
- * GET /v1/content/:type/:slug — single page with resolved JSON-LD
16
- *
17
- * READ-ONLY. There are no write endpoints at this prefix: the untenanted
18
- * `POST /v1/content/:type` and `PATCH`/`DELETE /v1/content/:type/:slug` were
19
- * RETIRED by #5853 and now answer Fastify's own 404 on every build. They
20
- * addressed a page by `(type, slug)` with no workspace in the address at all,
21
- * which is the client-supplied scope roadmap D4 rejects; the write surface
22
- * that replaces them is tenant-guarded and lives at
23
- * `apps/api/src/routes/workspaces/content.ts` —
24
- * `/v1/workspaces/:workspaceId/content/...`, scoped from the session and never
25
- * from the request.
26
- *
27
- * Rate-limit, CORS, and the OpenAPI spec are wired at server level.
28
- */
29
- import type { FastifyPluginAsync } from "fastify";
30
-
31
- import { getPageRoute } from "./get-page.js";
32
- import { listPagesRoute } from "./list-pages.js";
33
- import { listTypesRoute } from "./list-types.js";
34
- import { offeringsRoute } from "./offerings.js";
35
- import { pricingRoute } from "./pricing.js";
36
- import { searchContentRoute } from "./search.js";
37
- import { shownOfferingsRoute } from "./shown-offerings.js";
38
-
39
- export const contentRoutes: FastifyPluginAsync = async (fastify) => {
40
- await fastify.register(listTypesRoute);
41
- // Before `listPagesRoute`: `search`, `offerings`, `pricing` and
42
- // `shown-offerings` must never be read as a `:type`.
43
- await fastify.register(searchContentRoute);
44
- await fastify.register(offeringsRoute);
45
- await fastify.register(pricingRoute);
46
- await fastify.register(shownOfferingsRoute);
47
- await fastify.register(listPagesRoute);
48
- await fastify.register(getPageRoute);
49
- };
@@ -1,74 +0,0 @@
1
- /**
2
- * GET /v1/content/:type
3
- *
4
- * Paginated list of pages for a given schema.org type. Defaults to page 1,
5
- * pageSize 20; pageSize is capped at 100 to keep response payloads bounded.
6
- *
7
- * Response envelope is an `ItemList` JSON-LD document carrying the page
8
- * frontmatter under `items` and pagination metadata alongside, built by
9
- * `listPagesItemList` in `@working-theory/content-adapters` — the shared seam
10
- * the `list_pages` MCP tool answers through, parsing the same
11
- * `@working-theory/validation` exports (#7168). A deployment whose site
12
- * cannot be resolved (#5852) answers 404, not an empty list.
13
- *
14
- * Phase 3 S3: optional `?locale=<locale>` query parameter. Validated against
15
- * `readLocales()` allowlist; invalid or unknown locale silently falls back to
16
- * the project's default locale (AC-i18n-07).
17
- */
18
- import { listPagesItemList } from "@working-theory/content-adapters";
19
- import {
20
- contentListParamsSchema,
21
- contentListQuerySchema,
22
- } from "@working-theory/validation";
23
- import type { FastifyPluginAsync } from "fastify";
24
-
25
- import { resolveLocale } from "../../lib/locales.js";
26
- import { resolvePublicContentAdapter } from "../../services/public-site-resolver.js";
27
-
28
- export const listPagesRoute: FastifyPluginAsync = async (fastify) => {
29
- fastify.get<{
30
- Params: { type: string };
31
- Querystring: { page?: string; pageSize?: string; locale?: string };
32
- }>("/v1/content/:type", async (request, reply) => {
33
- const params = contentListParamsSchema.safeParse(request.params);
34
- if (!params.success) {
35
- return reply.status(400).send({
36
- error: "Invalid type",
37
- details: params.error.issues,
38
- });
39
- }
40
-
41
- const query = contentListQuerySchema.safeParse(request.query);
42
- if (!query.success) {
43
- return reply.status(400).send({
44
- error: "Invalid query parameters",
45
- details: query.error.issues,
46
- });
47
- }
48
-
49
- const { type } = params.data;
50
- const { page, pageSize } = query.data;
51
- const locale = resolveLocale(query.data.locale);
52
-
53
- try {
54
- // Site resolution precedes any content query (#5852). A refusal is a 404
55
- // rather than an empty `ItemList`: a 200 would assert that this site
56
- // exists and has no pages of this type, which is false when no site
57
- // resolved.
58
- const adapter = await resolvePublicContentAdapter(request);
59
- if (adapter === null) {
60
- return reply.status(404).send({
61
- error: "Page not found",
62
- type,
63
- });
64
- }
65
-
66
- return reply.send(
67
- await listPagesItemList(adapter, { type, page, pageSize, locale }),
68
- );
69
- } catch (error) {
70
- request.log.error({ err: error }, "[Content] listPages failed");
71
- return reply.status(500).send({ error: "Internal server error" });
72
- }
73
- });
74
- };
@@ -1,19 +0,0 @@
1
- /**
2
- * GET /v1/content/types
3
- *
4
- * Returns the canonical list of supported schema.org page types. Wrapped in
5
- * an `ItemList` JSON-LD envelope so the response carries `@context` / `@type`
6
- * at the document root, consistent with the other content endpoints.
7
- */
8
- import { SCHEMA_ORG_TYPES } from "@working-theory/content-adapters";
9
- import type { FastifyPluginAsync } from "fastify";
10
-
11
- export const listTypesRoute: FastifyPluginAsync = async (fastify) => {
12
- fastify.get("/v1/content/types", async (_request, reply) => {
13
- return reply.send({
14
- "@context": "https://schema.org",
15
- "@type": "ItemList",
16
- types: [...SCHEMA_ORG_TYPES],
17
- });
18
- });
19
- };
@@ -1,184 +0,0 @@
1
- /**
2
- * GET /v1/content/offerings
3
- *
4
- * The site's Services and Products as one offerings list (#7177). The HTTP
5
- * twin of the `get_offerings` MCP tool: same arguments, parsed with the same
6
- * `@working-theory/validation` schema, and the same result, produced by the
7
- * same function — `listOfferings` in `@working-theory/content-adapters`, the
8
- * shared seam the tool also answers through. That is the API ↔ MCP parity
9
- * contract in the root CLAUDE.md; the parity guard's `get_offerings` row is a
10
- * `twin` naming this route.
11
- *
12
- * Query:
13
- * type optional — `service` or `product`; omit for both
14
- * locale optional — BCP-47 (`xx` or `xx-XX`). A well-formed tag outside the
15
- * project's allowlist silently falls back to the default locale
16
- * (AC-i18n-07), matching every other content read; a malformed one
17
- * is a 400, as the tool refuses it.
18
- *
19
- * Success: `{ ok: true, data: { offerings } }` — the API's documented
20
- * envelope, not the JSON-LD `ItemList` the older content routes answer.
21
- * Refusals: `400 validation_failed` (issues are not echoed), `404 not_found`
22
- * when no public site resolves, `500 internal_error`.
23
- *
24
- * Registered BEFORE `/v1/content/:type` in `index.ts`. Fastify's radix router
25
- * prefers a static segment over a parametric one regardless of order — the
26
- * ordering is belt-and-braces, as it is for search.
27
- *
28
- * Rate limiting is inherited: `server.ts` registers the limiter GLOBALLY with
29
- * the content ceiling, so this route is covered without one of its own.
30
- *
31
- * Which site this read serves is resolved BEFORE any content query (#5852)
32
- * through the same `resolvePublicContentAdapter(request)` seam the sibling
33
- * content reads use. The resolver reads `x-ailk-spoke-key`, so every answer
34
- * past the query parse appends that header to `Vary`: a cache keyed on the
35
- * URL alone must never share one site's answer — or one bad key's 404 — with
36
- * another (SEC-7177-C). It appends rather than sets, because `@fastify/cors`
37
- * has already written `Vary: Origin`.
38
- *
39
- * Offerings (#8933, spec D4): on a connected workspace with a current shown
40
- * set, every read but `type=service` answers the Service pages followed by
41
- * that set's Products — in place of the Product pages, since Stripe is that
42
- * site's price authority — through `readShownOfferings` (#8924's read, the
43
- * one code path every agent surface shares) and `listOfferingsWithShownSet`
44
- * in `@working-theory/content-adapters`, the mapping the tool answers through
45
- * too. Each shown Product carries `prices`: every price with its interval and
46
- * full lookup key. `type=service`, and every workspace with no connection, no
47
- * claim or no current set, answers page content exactly as before; a failed
48
- * shown-set read takes the content path too. The read refreshes, or not,
49
- * exactly as the shown-offerings route does (`options`, D5): never with the
50
- * owner's override, never per request (T7).
51
- *
52
- * Anonymous and identity-blind: no `Authorization`, cookie, session or user
53
- * id is read.
54
- */
55
- import {
56
- currentShownSet,
57
- listOfferings,
58
- listOfferingsWithShownSet,
59
- type ContentAdapter,
60
- type ListOfferingsOptions,
61
- } from "@working-theory/content-adapters";
62
- import {
63
- getOfferingsInputSchema,
64
- type GetOfferingsOutput,
65
- } from "@working-theory/validation";
66
- import type {
67
- FastifyPluginAsync,
68
- FastifyReply,
69
- FastifyRequest,
70
- } from "fastify";
71
-
72
- import { resolveLocale } from "../../lib/locales.js";
73
- import { resolvePublicContentAdapter } from "../../services/public-site-resolver.js";
74
-
75
- import {
76
- readShownOfferings,
77
- type ShownOfferingsRouteOptions,
78
- } from "./shown-offerings.js";
79
-
80
- /** The request header the resolver picks the site's workspace from. */
81
- const SPOKE_KEY_HEADER = "x-ailk-spoke-key";
82
-
83
- /** Adds the spoke-key header to `Vary`, keeping every value already there. */
84
- function varyOnSpokeKey(reply: FastifyReply): void {
85
- const existing = reply.getHeader("vary");
86
- const values = (
87
- Array.isArray(existing) ? existing.join(",") : String(existing ?? "")
88
- )
89
- .split(",")
90
- .map((value) => value.trim())
91
- .filter((value) => value !== "");
92
- if (!values.some((value) => value.toLowerCase() === SPOKE_KEY_HEADER)) {
93
- values.push(SPOKE_KEY_HEADER);
94
- }
95
- reply.header("Vary", values.join(", "));
96
- }
97
-
98
- /** An error's class name only — never its message, which may carry Stripe text. */
99
- function errName(err: unknown): string {
100
- return err instanceof Error ? err.constructor.name : typeof err;
101
- }
102
-
103
- /**
104
- * The page Services followed by the connected workspace's shown Products, or
105
- * `null` for the content path (#8933 D4). A failed read or mapping is one
106
- * fixed `warn` line and the content path, never a 500 and never an `{ err }`
107
- * line.
108
- */
109
- async function shownSetOfferings(
110
- request: FastifyRequest,
111
- options: ShownOfferingsRouteOptions,
112
- adapter: ContentAdapter,
113
- listOptions: ListOfferingsOptions,
114
- ): Promise<GetOfferingsOutput | null> {
115
- try {
116
- const shownSet = currentShownSet(
117
- await readShownOfferings(request, options),
118
- );
119
- return shownSet === null
120
- ? null
121
- : await listOfferingsWithShownSet(adapter, listOptions, shownSet);
122
- } catch (err) {
123
- request.log.warn(
124
- { outcome: "shown_set_failed", errName: errName(err) },
125
- "[Content] offerings: shown set unavailable, answering page content",
126
- );
127
- return null;
128
- }
129
- }
130
-
131
- export const offeringsRoute: FastifyPluginAsync<
132
- ShownOfferingsRouteOptions
133
- > = async (fastify, options) => {
134
- fastify.get<{
135
- Querystring: { type?: string; locale?: string };
136
- }>("/v1/content/offerings", async (request, reply) => {
137
- const query = getOfferingsInputSchema.safeParse(request.query);
138
- if (!query.success) {
139
- return reply.status(400).send({
140
- ok: false,
141
- error: {
142
- code: "validation_failed",
143
- message: "Invalid query parameters",
144
- },
145
- });
146
- }
147
-
148
- const locale = resolveLocale(query.data.locale);
149
- // Every answer from here on depends on the spoke key — the 404 and 500
150
- // included — so each carries the Vary.
151
- varyOnSpokeKey(reply);
152
-
153
- try {
154
- const adapter = await resolvePublicContentAdapter(request);
155
- if (adapter === null) {
156
- return reply.status(404).send({
157
- ok: false,
158
- error: { code: "not_found", message: "Page not found" },
159
- });
160
- }
161
-
162
- if (query.data.type !== "service") {
163
- const shown = await shownSetOfferings(request, options, adapter, {
164
- type: query.data.type,
165
- locale,
166
- });
167
- if (shown !== null) return reply.send({ ok: true, data: shown });
168
- }
169
-
170
- const data = await listOfferings(adapter, {
171
- type: query.data.type,
172
- locale,
173
- });
174
-
175
- return reply.send({ ok: true, data });
176
- } catch (error) {
177
- request.log.error({ err: error }, "[Content] listOfferings failed");
178
- return reply.status(500).send({
179
- ok: false,
180
- error: { code: "internal_error", message: "Internal server error" },
181
- });
182
- }
183
- });
184
- };
@@ -1,176 +0,0 @@
1
- /**
2
- * GET /v1/content/pricing
3
- *
4
- * The site's pricing tiers, read from a `Product` page's `offers` (#7178).
5
- * The HTTP twin of the `get_pricing` MCP tool: same arguments, parsed with
6
- * the same `@working-theory/validation` schema, and the same result, produced
7
- * by the same function — `getPricingTiers` in `@working-theory/content-adapters`,
8
- * the shared seam the tool also answers through. That is the API ↔ MCP parity
9
- * contract in the root CLAUDE.md; the parity guard's `get_pricing` row is a
10
- * `twin` naming this route.
11
- *
12
- * Query:
13
- * slug optional — lowercase alphanumeric and hyphens; default `pricing`
14
- * locale optional — BCP-47 (`xx` or `xx-XX`). A well-formed tag outside the
15
- * project's allowlist silently falls back to the default locale
16
- * (AC-i18n-07), matching every other content read; a malformed one
17
- * is a 400, as the tool refuses it.
18
- *
19
- * Success: `{ ok: true, data: { tiers } | null }` — the API's documented
20
- * envelope, not the JSON-LD `ItemList` the older content routes answer. "No
21
- * pricing" is a 200 with `data: null`, exactly as the tool answers it.
22
- * Refusals: `400 validation_failed` (issues are not echoed), `404 not_found`
23
- * when no public site resolves, `500 internal_error`.
24
- *
25
- * Registered BEFORE `/v1/content/:type` in `index.ts`. Fastify's radix router
26
- * prefers a static segment over a parametric one regardless of order — the
27
- * ordering is belt-and-braces, as it is for search. `/v1/content/Pricing`
28
- * (the page type, capitalised) stays the type list.
29
- *
30
- * Rate limiting is inherited: `server.ts` registers the limiter GLOBALLY with
31
- * the content ceiling, so this route is covered without one of its own.
32
- *
33
- * Which site this read serves is resolved BEFORE any content query (#5852)
34
- * through the same `resolvePublicContentAdapter(request)` seam the sibling
35
- * content reads use. The resolver reads `x-ailk-spoke-key`, so every answer
36
- * past the query parse appends that header to `Vary`: a cache keyed on the
37
- * URL alone must never share one site's answer — or one bad key's 404 — with
38
- * another. It appends rather than sets, because `@fastify/cors` has already
39
- * written `Vary: Origin`.
40
- *
41
- * Offerings (#8933, spec D4): on a connected workspace with a current shown
42
- * set, the `pricing` page (the default slug) answers that set instead — one
43
- * tier per Stripe Price, through `readShownOfferings` (#8924's read, the one
44
- * code path every agent surface shares) and `pricingTiersFromShownSet` in
45
- * `@working-theory/content-adapters`, the mapping the tool answers through
46
- * too. Each tier then also carries `interval` and the full `lookupKey`. Every
47
- * other slug, and every workspace with no connection, no claim or no current
48
- * set, answers page content exactly as before; a failed shown-set read takes
49
- * the content path too. The read refreshes, or not, exactly as the
50
- * shown-offerings route does (`options`, D5): never with the owner's
51
- * override, never per request (T7).
52
- *
53
- * Anonymous and identity-blind: no `Authorization`, cookie, session or user
54
- * id is read.
55
- */
56
- import {
57
- currentShownSet,
58
- getPricingTiers,
59
- pricingTiersFromShownSet,
60
- shownSetAnswersPricing,
61
- } from "@working-theory/content-adapters";
62
- import {
63
- getPricingInputSchema,
64
- type GetPricingOutput,
65
- } from "@working-theory/validation";
66
- import type {
67
- FastifyPluginAsync,
68
- FastifyReply,
69
- FastifyRequest,
70
- } from "fastify";
71
-
72
- import { resolveLocale } from "../../lib/locales.js";
73
- import { resolvePublicContentAdapter } from "../../services/public-site-resolver.js";
74
-
75
- import {
76
- readShownOfferings,
77
- type ShownOfferingsRouteOptions,
78
- } from "./shown-offerings.js";
79
-
80
- /** The request header the resolver picks the site's workspace from. */
81
- const SPOKE_KEY_HEADER = "x-ailk-spoke-key";
82
-
83
- /** Adds the spoke-key header to `Vary`, keeping every value already there. */
84
- function varyOnSpokeKey(reply: FastifyReply): void {
85
- const existing = reply.getHeader("vary");
86
- const values = (
87
- Array.isArray(existing) ? existing.join(",") : String(existing ?? "")
88
- )
89
- .split(",")
90
- .map((value) => value.trim())
91
- .filter((value) => value !== "");
92
- if (!values.some((value) => value.toLowerCase() === SPOKE_KEY_HEADER)) {
93
- values.push(SPOKE_KEY_HEADER);
94
- }
95
- reply.header("Vary", values.join(", "));
96
- }
97
-
98
- /** An error's class name only — never its message, which may carry Stripe text. */
99
- function errName(err: unknown): string {
100
- return err instanceof Error ? err.constructor.name : typeof err;
101
- }
102
-
103
- /**
104
- * The connected workspace's shown set as tiers, or `null` for the content
105
- * path (#8933 D4). A failed read or mapping is one fixed `warn` line and the
106
- * content path, never a 500 and never an `{ err }` line.
107
- */
108
- async function shownSetTiers(
109
- request: FastifyRequest,
110
- options: ShownOfferingsRouteOptions,
111
- ): Promise<NonNullable<GetPricingOutput> | null> {
112
- try {
113
- const shownSet = currentShownSet(
114
- await readShownOfferings(request, options),
115
- );
116
- return shownSet === null ? null : pricingTiersFromShownSet(shownSet);
117
- } catch (err) {
118
- request.log.warn(
119
- { outcome: "shown_set_failed", errName: errName(err) },
120
- "[Content] pricing: shown set unavailable, answering page content",
121
- );
122
- return null;
123
- }
124
- }
125
-
126
- export const pricingRoute: FastifyPluginAsync<
127
- ShownOfferingsRouteOptions
128
- > = async (fastify, options) => {
129
- fastify.get<{
130
- Querystring: { slug?: string; locale?: string };
131
- }>("/v1/content/pricing", async (request, reply) => {
132
- const query = getPricingInputSchema.safeParse(request.query);
133
- if (!query.success) {
134
- return reply.status(400).send({
135
- ok: false,
136
- error: {
137
- code: "validation_failed",
138
- message: "Invalid query parameters",
139
- },
140
- });
141
- }
142
-
143
- const locale = resolveLocale(query.data.locale);
144
- // Every answer from here on depends on the spoke key — the 404 and 500
145
- // included — so each carries the Vary.
146
- varyOnSpokeKey(reply);
147
-
148
- try {
149
- const adapter = await resolvePublicContentAdapter(request);
150
- if (adapter === null) {
151
- return reply.status(404).send({
152
- ok: false,
153
- error: { code: "not_found", message: "Page not found" },
154
- });
155
- }
156
-
157
- if (shownSetAnswersPricing(query.data.slug)) {
158
- const tiers = await shownSetTiers(request, options);
159
- if (tiers !== null) return reply.send({ ok: true, data: tiers });
160
- }
161
-
162
- const data = await getPricingTiers(adapter, {
163
- slug: query.data.slug,
164
- locale,
165
- });
166
-
167
- return reply.send({ ok: true, data });
168
- } catch (error) {
169
- request.log.error({ err: error }, "[Content] getPricingTiers failed");
170
- return reply.status(500).send({
171
- ok: false,
172
- error: { code: "internal_error", message: "Internal server error" },
173
- });
174
- }
175
- });
176
- };