create-ailk 0.24.0 → 0.26.0

package/dist/module-architecture.js

@@ -110,7 +110,7 @@ export const ARCHITECTURE_BASE = {
     version: 1,
     composition_model: {
         tiers: {
-            data: "database/ — Prisma schema + migrations",
+            data: "database/ — Prisma config + seed; schema and migrations ship in @working-theory/database",
             api: "apps/api (public HTTP API) + apps/mcp (agent tools)",
             presentation: "apps/web — frontend surfaces",
         },
@@ -150,82 +150,6 @@ export const ARCHITECTURE_BASE = {
         },
     ],
 };
-/**
- * The member area's apps/api files (#7877 D9, D11), co-owned by `workspace`
- * and `multi-tenant`: server.ts registers all five routes under the
- * `workspace || multi-tenant` disjunction, so both bundles must deliver every
- * file behind it — the three operator route files, the two member route
- * files, the member resolution (`services/member-area.ts`) and the member
- * data boundary (`lib/member-store.ts`).
- *
- * #8169 D9 adds the five Phase 1 member reads registered under that same
- * disjunction. Its two other reads — `routes/member/meeting-types.ts` and
- * `availability.ts` — reach `services/scheduling/`, so they are the
- * `scheduling` slice's, not listed here.
- *
- * #8170 D11 adds the four member writes registered under that same
- * disjunction (the message POST rides `messages.ts`). The fifth —
- * `routes/member/bookings.ts` — reaches `services/scheduling/`, so it is the
- * `scheduling` slice's.
- */
-const MEMBER_AREA_FILES = [
-    "apps/api/src/routes/workspaces/pieces.ts",
-    "apps/api/src/routes/workspaces/plan.ts",
-    "apps/api/src/routes/workspaces/messages-out.ts",
-    // #8171 D8 — the workspace Requests read; imports only pieces.ts,
-    // lib/tenant-db.ts and @working-theory/validation.
-    "apps/api/src/routes/workspaces/requests.ts",
-    "apps/api/src/routes/member/pieces.ts",
-    "apps/api/src/routes/member/messages.ts",
-    "apps/api/src/routes/member/purchases.ts",
-    "apps/api/src/routes/member/appointments.ts",
-    "apps/api/src/routes/member/artifacts.ts",
-    "apps/api/src/routes/member/request-form.ts",
-    "apps/api/src/routes/member/billing.ts",
-    "apps/api/src/routes/member/requests.ts",
-    // #8515 D13 — the client's onboarding read and write.
-    "apps/api/src/routes/member/onboarding.ts",
-    "apps/api/src/routes/member/artifact-review.ts",
-    "apps/api/src/routes/member/profile.ts",
-    "apps/api/src/routes/member/deletion-request.ts",
-    // #8438 D6 — the member's own consents; the same gate as the writes above.
-    "apps/api/src/routes/member/consents.ts",
-    "apps/api/src/services/member-area.ts",
-    // #8516 D8 — whether proposal payment runs, and the Checkout Session;
-    // imported only by member-area files (pieces.ts and the two member
-    // artifact routes), and itself imports only base files.
-    "apps/api/src/services/proposal-payments.ts",
-    "apps/api/src/lib/member-store.ts",
-    // #8226 D12 — the member-request match CLI; both import member-store.ts,
-    // which a build without the member slice does not carry.
-    "apps/api/src/lib/member-request-match.ts",
-    "apps/api/src/bin/member-request-match.ts",
-];
-/**
- * The workspace asset store (#5854), CO-OWNED by the `workspace` and
- * `multi-tenant` slices.
- *
- * `server.ts` registers both of its routes under
- * `isModuleEnabled("workspace") || isModuleEnabled("multi-tenant")`, and a file
- * behind a two-module disjunction must be deliverable by BOTH bundles — or
- * whichever module lacks it throws ERR_MODULE_NOT_FOUND during `build()`. One
- * array spread into both `ownedFiles` lists makes the two copies incapable of
- * drifting, which matters because a drift only surfaces in a scaffolded
- * customer repo rather than here.
- *
- * `routes/assets/index.ts` is listed although it registers nothing: the
- * template-exclusion closure runs over IMPORTERS, so a shared-constants module
- * that is imported BY the routes and imports neither of them is never reached
- * from them, and an unlisted one would ship into the keyless Free starter.
- */
-const ASSET_STORE_FILES = [
-    "apps/api/src/routes/assets/index.ts",
-    "apps/api/src/routes/assets/upload.ts",
-    "apps/api/src/routes/assets/read.ts",
-    // The manage routes — list, PATCH, DELETE (#6093 D16).
-    "apps/api/src/routes/assets/manage.ts",
-    "apps/api/src/lib/asset-store.ts",
-];
 /**
  * The auth-adapter exception (#587 in the AILK repo's own architecture.yaml):
  * the base apps/web hands Better Auth its Prisma client from
@@ -548,7 +472,7 @@ export const MODULE_SLICES = {
         apps: {
             admin: {
                 path: "apps/admin",
-                description: "Next.js — authed Admin app (Organization → Workspace → Membership). Hosts the organization-plugin Better Auth handlers; imports the database only via lib/prisma-for-auth.ts (auth-adapter exception); all domain data via apps/api's workspace-scoped routes over HTTP.",
+                description: "Next.js — the Admin shell (Organization → Workspace → Membership): boots @working-theory/admin, which carries the pages, components, lib and auth, through generated route re-exports (#9570). Hosts the organization-plugin Better Auth route; the database read sits in that package (its lib/prisma-for-auth.ts, the auth-adapter exception); all domain data via apps/api's workspace-scoped routes over HTTP.",
                 may_import_from: [
                     "database",
                     "packages/templates",
@@ -699,12 +623,17 @@ export const MODULE_SLICES = {
         // ownedFiles (S1, #5088). Verified against the current filesystem and
         // server.ts's module-conditional registration (isModuleEnabled('multi-tenant')).
         //
-        // apps-paid/admin/** is a single glob — the whole app (43 files as of
-        // this pass, excluding __tests__/node_modules), just moved here from
-        // apps/workspace by a parallel workstream on this same branch. Later
-        // renamed in place from its former Workspace-prefixed directory name by
-        // #5637, the Admin-vocabulary rename. Unlike every other entry below,
-        // this one is intentionally a glob, not an enumeration.
+        // apps-paid/admin/** is a single glob — the whole app, originally moved
+        // here from apps/workspace by a parallel workstream on this same branch,
+        // later renamed in place from its former Workspace-prefixed directory
+        // name by #5637, the Admin-vocabulary rename. Since #9570 the app under
+        // the glob is the Next SHELL (@working-theory/admin-shell): its configs,
+        // root layout, stylesheet, icons, Better Auth route, a re-exporting
+        // auth.ts and the generated re-exports of the package's routes — the
+        // pages, components, lib and auth implementation live in
+        // @working-theory/admin (packages-paid/admin), which the staged shell
+        // depends on, so the bundle carries no Admin source. Unlike every other
+        // entry below, this one is intentionally a glob, not an enumeration.
         //
         // apps/api/src/routes/project-listings/ is MIXED (free anonymous surface
         // + tenant dashboard sharing one directory) — only the tenant-guarded
@@ -723,20 +652,20 @@ export const MODULE_SLICES = {
         //     patch.ts (tenant) AND ALSO by patch-draft.ts/public.ts (free) —
         //     shared within the directory across the free/paid split, so it stays.
         //
-        // apps/api/src/routes/waitlist-experiments/respond.ts, by contrast, IS
+        // routes/waitlist-experiments/respond.ts (now api-signal-collectors'), by contrast, IS
         // listed: grepped every `from "./respond.js"` importer in the repo and
         // it is used ONLY by this directory's own comparison.ts/list.ts/signup.ts/
         // signups.ts — all four tenant-scoped — so unlike its project-listings
         // namesake it is NOT shared with a free route.
         //
-        // apps/api/src/middleware/tenant.ts, services/tenant-context.ts,
+        // packages/api/src/middleware/tenant.ts, services/tenant-context.ts,
         // services/waitlist-dashboard.ts: each grepped for every importer
         // repo-wide. tenant.ts is registered only in server.ts's tenantScope;
         // tenant-context.ts backs only workspaces/tenant-guarded routes;
         // waitlist-dashboard.ts backs only the four waitlist-experiments handlers
         // above. None is reachable from a free route.
         //
-        // apps/api/src/lib/tenant-db.ts and lib/ws-token.ts are an ADDITION beyond
+        // packages/api/src/lib/tenant-db.ts and lib/ws-token.ts are an ADDITION beyond
         // this card's literal checklist, found by tracing workspaces/*.ts's own
         // imports: tenant-db.ts (the per-tenant Prisma-scoped client) is used only
         // by services/tenant-context.ts and the three workspaces/*.ts route files
@@ -790,124 +719,6 @@ export const MODULE_SLICES = {
         // not file grain, so it stays out of this literal list rather than
         // asserting a split the evidence doesn't cleanly support.
         ownedFiles: [
-            "apps/api/src/routes/workspaces/index.ts",
-            "apps/api/src/routes/workspaces/sessions.ts",
-            "apps/api/src/routes/workspaces/config.ts",
-            // #8926 D1 — the workspace Offerings routes, registered in the
-            // multi-tenant tenant scope beside the billing routes.
-            "apps/api/src/routes/workspaces/offerings.ts",
-            // #8438 D8 — the Admin owner's consents to Working Theory: registered
-            // under `isModuleEnabled("multi-tenant")` alone, the module that
-            // contributes the Admin app.
-            "apps/api/src/routes/consent/platform.ts",
-            // Co-owned with `workspace` (#5853): the content-write scope is gated on
-            // content-write AND (workspace || multi-tenant) and this file imports
-            // lib/tenant-db.ts, so each tenancy slice must deliver it.
-            "apps/api/src/routes/workspaces/content.ts",
-            ...ASSET_STORE_FILES,
-            "apps/api/src/routes/billing/index.ts",
-            "apps/api/src/routes/billing/portal.ts",
-            "apps/api/src/routes/billing/read.ts",
-            "apps/api/src/routes/billing/stripe-connection.ts",
-            "apps/api/src/routes/billing/stripe-products.ts",
-            "apps/api/src/routes/billing/usage.ts",
-            "apps/api/src/routes/waitlist-experiments/index.ts",
-            "apps/api/src/routes/waitlist-experiments/list.ts",
-            "apps/api/src/routes/waitlist-experiments/comparison.ts",
-            "apps/api/src/routes/waitlist-experiments/signup.ts",
-            "apps/api/src/routes/waitlist-experiments/signups.ts",
-            "apps/api/src/routes/waitlist-experiments/respond.ts",
-            "apps/api/src/routes/project-listings/get.ts",
-            "apps/api/src/routes/project-listings/list.ts",
-            "apps/api/src/routes/project-listings/patch.ts",
-            "apps/api/src/middleware/tenant.ts",
-            "apps/api/src/services/tenant-context.ts",
-            "apps/api/src/services/waitlist-dashboard.ts",
-            // #6258 — the file waitlist-dashboard.ts imports for the pinned
-            // platform-operator read scope. It rides BOTH slices for the same
-            // reason its importer does: an unlisted import target breaks a
-            // signal-collectors-without-multi-tenant scaffold at build() time.
-            "apps/api/src/services/waitlist-operator-reads.ts",
-            // #6204/#6280 CI fix — `listUnhandledMessages`/`markMessageHandled`
-            // (the "Needs-you" message read/write over `tenantDb(tenant).leads`)
-            // moved here off `services/leads-inbox.ts`, a BASE-tier file every
-            // scaffold ships. Importing `lib/tenant-db.ts` from that base file
-            // walked `paidModuleTemplateExclusions()`'s companion closure
-            // (`lib/import-graph.ts`) BACKWARD into `leads-inbox.ts` itself and
-            // then into every one of `apps/api/src/{server,cli,index,
-            // vercel-handler}.ts` — all of which reach it through
-            // `routes/leads/list.ts` — dropping them from a keyless scaffold
-            // (`__tests__/paid-module-exclusions.test.ts`'s `MUST_SHIP` guard,
-            // #5678's cascade shape recurring a third time).
-            //
-            // #6216 — now reached: `routes/workspaces/messages.ts` (below)
-            // consumes `getMessage` alongside the two functions above. That route
-            // registers under `isModuleEnabled("workspace") ||
-            // isModuleEnabled("multi-tenant")` — the SAME gate
-            // `workspaces/general.ts`/`members.ts` register under, NOT the
-            // multi-tenant-only family `workspaces/meetings.ts`/`config.ts` sit
-            // in — so this file and `routes/workspaces/messages.ts` are now
-            // CO-OWNED with `workspace` too (see that slice's entry below), the
-            // asset-store precedent: a file behind an OR gate must be
-            // deliverable by BOTH bundles.
-            "apps/api/src/services/inbox-messages.ts",
-            "apps/api/src/routes/workspaces/messages.ts",
-            // #7535 — the Inbox submissions and subscribers reads: the same
-            // workspace||multi-tenant gate and the same tenant-db.ts import as
-            // the two lines above, so co-owned with `workspace` for the same
-            // reason (see that slice's entry below).
-            "apps/api/src/routes/workspaces/submissions.ts",
-            "apps/api/src/routes/workspaces/subscribers.ts",
-            "apps/api/src/services/inbox-submissions.ts",
-            // #9170 — the Inbox orders read: the same gate and the same
-            // tenant-db.ts import, co-owned with `workspace` for the same reason.
-            "apps/api/src/routes/workspaces/orders.ts",
-            "apps/api/src/services/inbox-orders.ts",
-            // #9254 DD5 — the Inbox callbacks read: the same gate and the same
-            // tenant-db.ts import, co-owned with `workspace` for the same reason.
-            "apps/api/src/routes/workspaces/callbacks.ts",
-            // #9287 DD2 — Start, Get and Extend trial: the same gate and the same
-            // tenant-db.ts import, co-owned with `workspace` for the same reason.
-            "apps/api/src/routes/workspaces/trial.ts",
-            "apps/api/src/services/trial.ts",
-            // #852 D8 — the People reads: the same workspace||multi-tenant gate and
-            // the same tenant-db.ts import, co-owned with `workspace` for the same
-            // reason.
-            "apps/api/src/routes/workspaces/people.ts",
-            // #7877 D9, D11 — the member area: the operator's routes and the member
-            // reads register under the same workspace||multi-tenant gate, so each
-            // file behind it — the routes, the member resolution and the member
-            // data boundary — is co-owned with `workspace`, as people.ts is.
-            ...MEMBER_AREA_FILES,
-            // #7399 — the two siblings #6216 left `workspace`-only. They register
-            // under that same `workspace || multi-tenant` gate, so a scaffold with
-            // `multi-tenant` and without `workspace` loaded them with no file behind
-            // the specifier and 500'd every request at server construction. Co-owned
-            // with `workspace` (see that slice's entry below); both import only
-            // `lib/tenant-db.ts` (owned here) and base files.
-            // `__tests__/tenancy-slice-resolution.test.ts` holds the whole gate set.
-            "apps/api/src/routes/workspaces/general.ts",
-            "apps/api/src/routes/workspaces/members.ts",
-            // #3591 PR-B — the agent seat's routes, a sibling of `members.ts` under
-            // the same `workspace || multi-tenant` gate, so co-owned with
-            // `workspace` for the #7399 reason above.
-            "apps/api/src/routes/workspaces/agents.ts",
-            // #3591 PR-E — the signed-in workspace MCP tools that twin the agent
-            // context, message and submission routes above. Each registers when
-            // its twin route does (`workspace || multi-tenant`), so co-owned with
-            // `workspace` for the same reason; the application tools' file is
-            // co-owned with `signal-collectors` instead, its routes' gate.
-            "apps/mcp/src/tools/agent_context.ts",
-            "apps/mcp/src/tools/inbox_messages.ts",
-            "apps/mcp/src/tools/inbox_submissions.ts",
-            "apps/mcp/src/tools/inbox_applications.ts",
-            "apps/api/src/lib/tenant-db.ts",
-            "apps/api/src/lib/ws-token.ts",
-            // #6157 D16 — the magnet Admin authoring surface, co-owned with
-            // `signal-collectors` below for the SAME reason #5677 co-owns the
-            // review surface under both: its scope is registered under the
-            // widened `multi-tenant || signal-collectors` gate.
-            "apps/api/src/routes/magnets/index.ts",
             "apps/web/app/[locale]/(authed)/waitlist/page.tsx",
             "apps/web/app/[locale]/(authed)/waitlist/[experimentId]/page.tsx",
             "apps/web/app/[locale]/(authed)/waitlist/[experimentId]/signups/[leadId]/page.tsx",
@@ -918,25 +729,13 @@ export const MODULE_SLICES = {
             "apps/web/app/[locale]/(authed)/waitlist/components/SignupsTable.tsx",
             "apps/web/app/[locale]/(authed)/waitlist/components/WaitlistComparisonTabs.tsx",
             "apps/web/app/[locale]/(authed)/waitlist/components/status-badges.tsx",
-            // #7389 — the three api suites that enable `multi-tenant` ALONE and so
-            // reach files this slice delivers (`services/tenant-context.ts` and the
-            // `routes/workspaces/` index). Each is listed individually, never as a
-            // glob (the `scheduling` slice's § D12 property 1: a glob entry is a
-            // silent no-op), so it ships to a keyed scaffold with the slice and is
-            // stripped from a keyless one with it — instead of a keyless scaffold
-            // carrying a test that raises `createNoMappedModuleFoundError`. A suite
-            // that enables SEVERAL paid modules cannot be owned by any one of
-            // them; those are `EXCLUDE_TEMPLATE_DIRS` entries below.
-            "apps/api/src/services/__tests__/lead-promotion.test.ts",
-            "apps/api/src/services/__tests__/leads-inbox.test.ts",
-            "apps/api/src/__tests__/content-write-production-boot.test.ts",
             "apps-paid/admin/**",
         ],
         // The whole-app glob above lands its files at their REPO-relative path
         // unless something re-roots them (`installBundleTree`'s `copyTree`
         // excludes only `installMap` KEYS from its verbatim copy), so without a
         // rename rule a keyed install left a stray source-tree-relative
-        // directory in the scaffold instead of the working `apps/admin` app
+        // directory in the scaffold instead of the working `apps/admin` shell
         // this slice's own `apps.admin.path` (and `paid-paths.ts`'s
         // `introducedAppPaths()`) already declares (#5626 D3/D4). The fix lives
         // here, on the module, so `--modules multi-tenant` alone is fixed too —
@@ -953,6 +752,26 @@ export const MODULE_SLICES = {
         // fixture calls the same derivation so it cannot drift from the
         // producer's. See `installRoot`'s own doc on `ModuleSlice` above.
         installRoot: "apps/admin/",
+        // #9460 DD5/DD6 — the signed-in workspace MCP tools (#3591 PR-E) ride
+        // `@working-theory/mcp-workspace`, delivered as a dependency of the
+        // buyer's apps/mcp and reached through the generated registry; the
+        // merge-keys op is the same shape every other paid package uses.
+        paidMcpToolPackages: ["@working-theory/mcp-workspace"],
+        patches: [
+            {
+                target: "apps/mcp/package.json",
+                kind: "json",
+                ops: [
+                    {
+                        op: "merge-keys",
+                        path: ["dependencies"],
+                        entries: {
+                            "@working-theory/mcp-workspace": "workspace:*",
+                        },
+                    },
+                ],
+            },
+        ],
     },
     // ── workspace — Pro module: the single-workspace settings shell (D-27/D-49)
     //
@@ -975,7 +794,7 @@ export const MODULE_SLICES = {
         webImports: [WEB_AUTH_ADAPTER_IMPORT, "packages/admin-ui"],
         packages: {
             "admin-ui": {
-                description: "Shared Admin-settings components — the settings shell plus the General / Site / Team panels, presentational only (data + save callbacks as props)",
+                description: "Shared Admin components — the settings shell plus the General / Site / Team panels, and the Magnets (flow wizard, flow list) and Meetings (meeting types, meeting detail) screens, presentational only (data + save callbacks as props)",
                 // packages/templates is required because AdminSettingsShell
                 // composes AppShell from @working-theory/templates/shells — the same
                 // composition apps/web's own account page uses.
@@ -988,7 +807,7 @@ export const MODULE_SLICES = {
             },
         },
         // SOURCE files only, and only the ones this module physically owns: the
-        // three apps/web route files and the two apps/api route files.
+        // apps/web /admin route files and the two modules they share.
         //
         // `packages/admin-ui/**` is deliberately NOT listed (D1a). It is a
         // whole package that is paid end to end, whose strip disposition is
@@ -1013,47 +832,16 @@ export const MODULE_SLICES = {
             "apps/web/app/[locale]/(authed)/admin/page.tsx",
             "apps/web/app/[locale]/(authed)/admin/site/page.tsx",
             "apps/web/app/[locale]/(authed)/admin/team/page.tsx",
-            // Co-owned with `multi-tenant` (#7399) — see that slice's entry: both
-            // register under the workspace||multi-tenant gate.
-            "apps/api/src/routes/workspaces/general.ts",
-            "apps/api/src/routes/workspaces/members.ts",
-            // Co-owned with `multi-tenant` (#3591 PR-B), for the reason the two
-            // lines above carry.
-            "apps/api/src/routes/workspaces/agents.ts",
-            // Co-owned with `multi-tenant` (#3591 PR-E): the signed-in MCP tools
-            // that twin the agent context, message and submission routes register
-            // under the same `workspace || multi-tenant` disjunction as those
-            // routes.
-            "apps/mcp/src/tools/agent_context.ts",
-            "apps/mcp/src/tools/inbox_messages.ts",
-            "apps/mcp/src/tools/inbox_submissions.ts",
-            // Co-owned with `multi-tenant` (#6216) — see that slice's entry: the
-            // route registers under the SAME workspace||multi-tenant gate as the
-            // two lines above, and its service function imports `lib/tenant-db.ts`
-            // (a multi-tenant-owned file), so both must be deliverable by either
-            // bundle alone.
-            "apps/api/src/routes/workspaces/messages.ts",
-            "apps/api/src/services/inbox-messages.ts",
-            // Co-owned with `multi-tenant` (#7535), for the reason the two
-            // message lines above carry.
-            "apps/api/src/routes/workspaces/submissions.ts",
-            "apps/api/src/routes/workspaces/subscribers.ts",
-            "apps/api/src/services/inbox-submissions.ts",
-            // Co-owned with `multi-tenant` (#9170), as the reads above.
-            "apps/api/src/routes/workspaces/orders.ts",
-            "apps/api/src/services/inbox-orders.ts",
-            // Co-owned with `multi-tenant` (#9254 DD5), as the reads above.
-            "apps/api/src/routes/workspaces/callbacks.ts",
-            // Co-owned with `multi-tenant` (#9287 DD2), as the reads above.
-            "apps/api/src/routes/workspaces/trial.ts",
-            "apps/api/src/services/trial.ts",
-            // Co-owned with `multi-tenant` (#852 D8), as the reads above.
-            "apps/api/src/routes/workspaces/people.ts",
-            // Co-owned with `multi-tenant` (#7877 D9, D11) — see that slice's entry.
-            ...MEMBER_AREA_FILES,
-            // Co-owned with `multi-tenant` (#5853) — see that slice's entry.
-            "apps/api/src/routes/workspaces/content.ts",
-            ...ASSET_STORE_FILES,
+            // #9746 D10 — the shared nav, the client bindings, and the Magnets and
+            // Meetings tabs. Not routes themselves (the first two), but owned the
+            // same way: a keyless scaffold drops them with the pages that import
+            // them.
+            "apps/web/app/[locale]/(authed)/admin/admin-nav.ts",
+            "apps/web/app/[locale]/(authed)/admin/admin-panels.tsx",
+            "apps/web/app/[locale]/(authed)/admin/magnets/page.tsx",
+            "apps/web/app/[locale]/(authed)/admin/magnets/new/[kind]/page.tsx",
+            "apps/web/app/[locale]/(authed)/admin/meetings/page.tsx",
+            "apps/web/app/[locale]/(authed)/admin/meetings/[slug]/page.tsx",
         ],
         // patches — the dependency add that delivers the shared package to the
         // buyer's apps/web, mirroring docs-blog's own fumadocs-schema merge-keys
@@ -1075,7 +863,23 @@ export const MODULE_SLICES = {
                     },
                 ],
             },
+            // #9460 DD5/DD6 — the signed-in workspace MCP tools (#3591 PR-E),
+            // co-owned with `multi-tenant`, ride `@working-theory/mcp-workspace`.
+            {
+                target: "apps/mcp/package.json",
+                kind: "json",
+                ops: [
+                    {
+                        op: "merge-keys",
+                        path: ["dependencies"],
+                        entries: {
+                            "@working-theory/mcp-workspace": "workspace:*",
+                        },
+                    },
+                ],
+            },
         ],
+        paidMcpToolPackages: ["@working-theory/mcp-workspace"],
     },
     // ── scheduling — full-stack module (provider + routes + booker pages) ────
     //
@@ -1183,7 +987,7 @@ export const MODULE_SLICES = {
         // server.ts's module-conditional registration (isModuleEnabled('scheduling')),
         // and a repo-wide grep of every importer of each candidate file.
         //
-        // apps/api/src/services/scheduling/index.ts, cal-provider.ts, types.ts —
+        // services/scheduling/index.ts, cal-provider.ts, types.ts (now api-scheduling's) —
         // the whole directory; grepped `services/scheduling` repo-wide and the
         // ONLY importer outside its own __tests__/ is routes/schedule/index.ts,
         // so no sibling error-type file exists elsewhere to add.
@@ -1246,19 +1050,6 @@ export const MODULE_SLICES = {
         // deliberately NOT listed here: they ship, and listing one would take the
         // whole dispatch table with it.
         ownedFiles: [
-            "apps/api/src/routes/schedule/index.ts",
-            "apps/api/src/services/scheduling/index.ts",
-            "apps/api/src/services/scheduling/cal-provider.ts",
-            "apps/api/src/services/scheduling/types.ts",
-            // #6182 (S9a) — the Cal adapter's own suite. Individually, never as a
-            // glob (§ D12 above, property 1: a glob entry is a silent no-op, so
-            // `__tests__/**` would ship no test at all to a keyed scaffold).
-            "apps/api/src/services/scheduling/__tests__/cal-provider.test.ts",
-            "apps/mcp/src/tools/list_availability.ts",
-            "apps/mcp/src/tools/get_event_meta.ts",
-            // #8843 D5 — the twin of GET /v1/schedule/meetings.
-            "apps/mcp/src/tools/list_meetings.ts",
-            "apps/mcp/src/tools/create_booking.ts",
             "apps/web/app/[locale]/meet/page.tsx",
             "apps/web/app/[locale]/meet/[slug]/page.tsx",
             "apps/web/app/[locale]/meet/confirmed/page.tsx",
@@ -1272,23 +1063,6 @@ export const MODULE_SLICES = {
             "apps/web/app/[locale]/private/page.tsx",
             "apps/web/app/[locale]/private/__tests__/page.test.tsx",
             "apps/web/app/[locale]/private/__tests__/sitemap.test.ts",
-            // #6085 (brief H7) — the six files the webhook receiver + the
-            // tenant-guarded appointments read add. Individually, never as a
-            // glob (§ D12 / this card's own comment above, property 1: a glob
-            // entry is a silent no-op, so __tests__/** would ship no test at all
-            // to a keyed scaffold). `apps/api/src/routes/webhooks/index.ts` is
-            // NOT added — it is the mixed barrel that also registers the Stripe
-            // receiver, the same "mixed barrel is never listed" precedent this
-            // slice already records for `routes/project-listings/index.ts`.
-            // `apps/api/src/routes/schedule/index.ts` is already listed above and
-            // stays (it re-exports `listAppointmentsRoute` alongside the three
-            // anonymous routes it already re-exports).
-            "apps/api/src/routes/webhooks/calcom.ts",
-            "apps/api/src/routes/webhooks/__tests__/calcom.test.ts",
-            "apps/api/src/services/scheduling/appointments.ts",
-            "apps/api/src/services/scheduling/__tests__/appointments.test.ts",
-            "apps/api/src/routes/schedule/appointments.ts",
-            "apps/api/src/routes/schedule/__tests__/appointments.test.ts",
             // #6086 (brief H7) — the SITE's appointments page, the visible half of
             // the read above. The co-located suite is listed EXPLICITLY alongside
             // its page: `EXCLUDE_TEMPLATE_DIRS` below drops only the three
@@ -1299,80 +1073,6 @@ export const MODULE_SLICES = {
             // test for a page it does not have.
             "apps/web/app/[locale]/(authed)/appointments/page.tsx",
             "apps/web/app/[locale]/(authed)/appointments/__tests__/page.test.tsx",
-            // #6183 S9b — the enabled-meeting-slugs gate. `meetings.ts` is its own
-            // file (not folded into `routes/workspaces/config.ts`, which is
-            // `workspace`/`multi-tenant`-owned) precisely because its GET reaches
-            // `services/scheduling/` — the SAME reason `routes/schedule/
-            // appointments.ts` above is its own file rather than a row on an
-            // existing route. `lib/public-meetings-config.ts` is the public-read
-            // boundary `routes/schedule/meeting-types.ts` (the anonymous read,
-            // already reached via the already-listed `routes/schedule/index.ts`)
-            // calls into.
-            "apps/api/src/routes/workspaces/meetings.ts",
-            "apps/api/src/routes/workspaces/__tests__/meetings.test.ts",
-            "apps/api/src/lib/public-meetings-config.ts",
-            "apps/api/src/routes/schedule/meeting-types.ts",
-            "apps/api/src/routes/schedule/__tests__/meeting-types.test.ts",
-            // #8843 D1 — the meetings read's own suite; the route is in
-            // `routes/schedule/index.ts`, listed above.
-            "apps/api/src/routes/schedule/__tests__/meetings.test.ts",
-            // #7532 — a hub spoke's meeting types and booking, through the real
-            // scheduling routes; it ships and strips with them.
-            "apps/api/src/routes/schedule/__tests__/spoke.test.ts",
-            // meetings.ts is the FIRST scheduling-gated route to use the generic
-            // tenantDb() scope layer directly (its sibling, appointments.ts, does
-            // its own scoped read in services/scheduling/appointments.ts instead)
-            // — and `workspaceMeetings` is now in architecture.yaml's tenant-scope
-            // forbidden_pattern (#6183), so meetings.ts cannot bypass tenantDb()
-            // with a raw prisma call. Co-owned with `multi-tenant` below (the
-            // SAME two files, same reason `content.ts`'s own comment there
-            // records: "each tenancy slice must deliver it").
-            "apps/api/src/lib/tenant-db.ts",
-            "apps/api/src/services/tenant-context.ts",
-            // #7389 — `routes/workspaces/__tests__/meetings.test.ts` and
-            // `meetings-connection.test.ts` (listed below) register the real
-            // `tenantPreHandlerPlugin` in front of `meetings.ts`, so a scheduling
-            // scaffold without `multi-tenant` could not load them. It imports only
-            // `services/tenant-context.ts` (owned above) and the base
-            // `default-tenant.ts`, so co-owning it keeps the closure tight.
-            "apps/api/src/middleware/tenant.ts",
-            // #7533 — a scheduling connection per workspace. `connections.ts` (the
-            // cipher + the one SchedulingConnection data-access boundary) and
-            // `resolve.ts` (the workspace-aware provider resolution the meetings,
-            // schedule and webhook routes above now call), plus each new suite,
-            // individually (§ D12, property 1: a glob ships no test). The config
-            // suite is listed here although `config/index.ts` itself stays base:
-            // it tests a scheduling-only variable, so a keyless scaffold carries
-            // neither the variable's purpose nor its test.
-            "apps/api/src/services/scheduling/connections.ts",
-            "apps/api/src/services/scheduling/resolve.ts",
-            "apps/api/src/services/scheduling/__tests__/connections.test.ts",
-            "apps/api/src/services/scheduling/__tests__/provider-resolution.test.ts",
-            // #9129 — the meetings-list assembly the meetings route and the member
-            // meeting types share, plus its suite.
-            "apps/api/src/services/scheduling/meetings.ts",
-            "apps/api/src/services/scheduling/__tests__/meetings.test.ts",
-            "apps/api/src/routes/workspaces/__tests__/meetings-connection.test.ts",
-            "apps/api/src/routes/schedule/__tests__/public-connection.test.ts",
-            "apps/api/src/routes/webhooks/__tests__/calcom-connection.test.ts",
-            "apps/api/src/config/__tests__/scheduling-credential-key.test.ts",
-            // #8169 D9 — the two member reads that reach `services/scheduling/`,
-            // registered under `scheduling && (workspace || multi-tenant)`, plus
-            // the three member files they import, which this slice then CO-OWNS
-            // with the two tenancy slices (`MEMBER_AREA_FILES`) — exactly as it
-            // co-owns `lib/tenant-db.ts` for `routes/workspaces/meetings.ts` above.
-            "apps/api/src/routes/member/meeting-types.ts",
-            "apps/api/src/routes/member/availability.ts",
-            // #8170 D11 — the member booking, the same shape.
-            "apps/api/src/routes/member/bookings.ts",
-            "apps/api/src/routes/member/pieces.ts",
-            "apps/api/src/services/member-area.ts",
-            "apps/api/src/lib/member-store.ts",
-            // #7389 — the two api suites that enable `scheduling` alone, so they
-            // strip with `routes/schedule/index.ts`, which they load by a computed
-            // specifier the import-graph closure cannot follow.
-            "apps/api/src/__tests__/schedule-forwarded-rate-limit.test.ts",
-            "apps/api/src/__tests__/openapi-keyless-hub.test.ts",
         ],
         // pageContributions (spec 5478; parent § D6 shape 1) — the meeting
         // index, the meeting page, the confirmation page and the private index
@@ -1406,7 +1106,23 @@ export const MODULE_SLICES = {
                     },
                 ],
             },
+            // #9460 DD5/DD6 — the four scheduling MCP tools (#4416, #4633, #8843
+            // D5) ride `@working-theory/mcp-scheduling`.
+            {
+                target: "apps/mcp/package.json",
+                kind: "json",
+                ops: [
+                    {
+                        op: "merge-keys",
+                        path: ["dependencies"],
+                        entries: {
+                            "@working-theory/mcp-scheduling": "workspace:*",
+                        },
+                    },
+                ],
+            },
         ],
+        paidMcpToolPackages: ["@working-theory/mcp-scheduling"],
     },
     // ── signal-collectors — flows, deliverables, project listings, waitlist
     // signups (D-48, #5366) ───────────────────────────────────────────────
@@ -1416,14 +1132,14 @@ export const MODULE_SLICES = {
     // and a repo-wide grep of every importer of each candidate file (an
     // independent re-grep, not carried over from the spec's own table).
     //
-    // apps/api/src/routes/project-listings/index.ts is MIXED (D4): it holds
+    // routes/project-listings/index.ts (now api-signal-collectors') is MIXED (D4): it holds
     // this module's five anonymous/founder-read re-exports (lines 1-55) AND
     // multi-tenant's TENANT_HANDLERS table + projectListingTenantRoutes
     // (lines 57-139) in one file. NOT listed here — never deleted/edited on
     // its own, exactly like the scheduling/multi-tenant precedent for a mixed
     // barrel above.
     //
-    // apps/api/src/routes/project-listings/respond.ts (`sendValidated`) IS
+    // routes/project-listings/respond.ts (`sendValidated`, now api-signal-collectors') IS
     // listed, even though it is ALSO imported directly by the tenant routes
     // get.ts/list.ts/patch.ts/patch-copy.ts (multi-tenant, Pro Plus territory
     // — grep-verified, four direct importers outside this module). Same D6
@@ -1470,13 +1186,13 @@ export const MODULE_SLICES = {
     //     selection, exactly as it did before this card (a narrower, temporary
     //     miss than the one D6 accepts on purpose for the other nine).
     //
-    // apps/api/src/services/listing-promotion.ts has ZERO production
+    // services/listing-promotion.ts (now api-signal-collectors') has ZERO production
     // importers anywhere in the repo (only its own test) — confirmed dead code
     // (spec §7 Q5). Listed anyway: it is listing code by subject, D-48 places
     // the instrument here, and a reachability grep cannot place an unreached
     // file — this is a recorded pre-existing defect, not fixed by this card.
     //
-    // apps/api/src/bin/deliverable-upload.ts imports only `prisma` (no moved
+    // bin/deliverable-upload.ts (now api-signal-collectors') imports only `prisma` (no moved
     // service) but is a deliverables CLI a Free starter should not ship —
     // listed by subject, not by the import-criterion the other six bins meet.
     //
@@ -1522,7 +1238,7 @@ export const MODULE_SLICES = {
         //   ownedFiles under apps/api/**                       dropped (removed root)
         //   ownedFiles under (authed)/waitlist/**              dropped (removal seed)
         //   ownedFiles projects/apply/ListingApplicationClient lands; no route mounts it
-        //   ownedFiles under apps/mcp/src/tools/**             lands when apps/mcp is kept
+        //   paidMcpToolPackages (apps/mcp/package.json)    lands when apps/mcp is kept
         //   installMap content/en/** (12 seeds)    lands, but for the five report seeds
         //   installMap database/flows/{referral,fit-check}.flow.json
         //                                  remapped to flows/<name>.json — declared
@@ -1535,148 +1251,14 @@ export const MODULE_SLICES = {
         // It stays a Pro module: a keyless spoke carries no flows.
         spoke: true,
         paidSectionsPackage: "@working-theory/ui-signal-collectors",
+        // #9460 DD5/DD6 — the flow tools ride `@working-theory/mcp-signal-collectors`;
+        // the listing-application tools (#3591 PR-E, co-owned with multi-tenant)
+        // ride `@working-theory/mcp-workspace`, whose one file holds them.
+        paidMcpToolPackages: [
+            "@working-theory/mcp-signal-collectors",
+            "@working-theory/mcp-workspace",
+        ],
         ownedFiles: [
-            "apps/api/src/routes/flows/index.ts",
-            // README.md documents the flows rate-limit rationale (#4730) — not a
-            // test/generated file, and its absence is exactly what left a stray
-            // apps/api/src/routes/flows/ directory in a keyless templates/ snapshot
-            // (empirically found, #5366) since the import-graph closure below only
-            // scans source extensions, never markdown.
-            "apps/api/src/routes/flows/README.md",
-            "apps/api/src/routes/deliverables/index.ts",
-            "apps/api/src/routes/slack/index.ts",
-            "apps/api/src/routes/slack/actions.ts",
-            "apps/api/src/routes/waitlist-signups/index.ts",
-            // #7479 — the listing-draft forwarded-visitor suite exercises the three
-            // project-listings draft routes through the real build(), and those
-            // routes register only under isModuleEnabled("signal-collectors"), so
-            // the suite strips with this slice (the #7389 shape for
-            // schedule-forwarded-rate-limit.test.ts under scheduling) instead of
-            // failing every keyless scaffold's apps/api jest gate.
-            "apps/api/src/__tests__/listings-forwarded-rate-limit.test.ts",
-            // apps/api/src/routes/project-listings/{start,patch-draft,submit,public,
-            // me,respond,resume-token}.ts and services/{project-listings,
-            // listing-config}.ts deliberately NOT listed — see the comment above
-            // this array (D-48/#5366 escalation: the mixed-barrel `index.ts` in
-            // that directory is reached from server.ts by a plain, literal
-            // `import()` for multi-tenant's tenant routes, and statically imports
-            // all nine of these files itself, so `paidModuleTemplateExclusions()`'s
-            // import-graph closure excluded `index.ts`, then `server.ts` itself,
-            // from every keyless scaffold (empirically found, #5366 resume pass,
-            // same failure mode as the deliverable-fulfillment.ts case below but a
-            // permanent structural one rather than a temporal gap pending another
-            // PR). This is also the ORIGINAL multi-tenant/#5088 card's own
-            // conclusion about these same nine files (lines 556-571 above) —
-            // D-48 moves their tier ownership to signal-collectors but not their
-            // must-ship-unconditionally constraint. Registration of every route
-            // that reaches them stays gated by `isModuleEnabled("signal-collectors")`
-            // in server.ts; only the source files themselves ship regardless.
-            "apps/api/src/services/flow-engine.ts",
-            "apps/api/src/services/flow-aggregate.ts",
-            "apps/api/src/services/waitlist-signups.ts",
-            "apps/api/src/services/waitlist-scoring.ts",
-            "apps/api/src/services/playbook-compile.ts",
-            "apps/api/src/services/playbook-render.ts",
-            "apps/api/src/services/listing-csv-sweep.ts",
-            "apps/api/src/services/waitlist-followup.ts",
-            "apps/api/src/services/listing-promotion.ts",
-            "apps/api/src/services/project-listing-decision.ts",
-            "apps/api/src/services/project-listing-flow.ts",
-            "apps/api/src/services/project-listing-issue.ts",
-            "apps/api/src/services/waitlist-experiments.ts",
-            // deliverable-fulfillment.ts deliberately NOT listed — see the comment
-            // above this array (spec §5.4 escalation boundary, temporary pending #5364).
-            "apps/api/src/bin/deliverable-resend.ts",
-            "apps/api/src/bin/deliverable-upload.ts",
-            "apps/api/src/bin/session-retention-sweep.ts",
-            "apps/api/src/bin/seed-presets.ts",
-            // #7844 D7 — the operator flow-copy CLI and its service: flows code by
-            // subject, and a Free scaffold carries no flows.
-            "apps/api/src/bin/flows-copy.ts",
-            "apps/api/src/services/flow-copy.ts",
-            "apps/api/src/bin/listing-csv-sweep.ts",
-            "apps/api/src/bin/followup-sweep.ts",
-            "apps/api/src/bin/seed-waitlist-experiments.ts",
-            // #7389 — the listing-directory suite enables `signal-collectors` alone
-            // and loads `routes/waitlist-signups/index.ts` through the server it
-            // builds, so it strips with that route. Individually, never as a glob.
-            "apps/api/src/routes/project-listings/__tests__/directory.test.ts",
-            "apps/mcp/src/tools/get_flow.ts",
-            "apps/mcp/src/tools/submit_flow_step.ts",
-            // #3591 PR-E — the signed-in MCP tools that twin the tenant-scoped
-            // project-listing routes, CO-OWNED with multi-tenant: they register
-            // under the routes' own `multi-tenant || signal-collectors` gate.
-            "apps/mcp/src/tools/inbox_applications.ts",
-            // ── The review surface (#5677) — CO-OWNED with multi-tenant ──────────
-            //
-            // Every path below is ALSO a multi-tenant `ownedFiles` entry and stays
-            // one. Listing a file under two modules is additive, not a transfer:
-            // `paidModuleTemplateExclusions()` unions every paid module's entries,
-            // so the `templates/` snapshot is unchanged, and a multi-tenant scaffold
-            // keeps receiving these from the multi-tenant bundle exactly as before.
-            // What changes is that a signal-collectors bundle now carries them too.
-            //
-            // WHY THEY MUST BE HERE. #5677 widened `server.ts`'s review-surface
-            // registration from `multi-tenant` to `multi-tenant || signal-collectors`,
-            // because signal-collectors is the module that SELLS the instruments
-            // these routes read back. Registration and DELIVERY are separate layers:
-            // the widened gate calls `sliceRoutePlugin("waitlistExperimentRoutes")`
-            // and imports `projectListingTenantRoutes`, so on a scaffold whose
-            // `AILK_ENABLED_MODULES` names signal-collectors but whose tree lacks
-            // these files, `loadSlice` throws ERR_MODULE_NOT_FOUND during `build()`
-            // — construction, so EVERY route 500s rather than one. That is not a
-            // feature gap; it is the outage shape `lib/slice-load.ts` exists to
-            // diagnose.
-            //
-            // It is not hypothetical: `marketing-site` — the Pro flagship in
-            // `template-manifest.ts` — declares
-            // `requires: ["marketing", "docs-blog", "scheduling", "signal-collectors"]`,
-            // i.e. signal-collectors WITHOUT multi-tenant. That is exactly the
-            // configuration that would crash, which is why the gate and the delivery
-            // land together rather than the delivery being deferred.
-            //
-            // The closure is tight, verified by grep rather than assumed: none of
-            // these files imports `lib/tenant-db.ts` or `services/tenant-context.ts`
-            // (both multi-tenant-only). #5677 retargeted `waitlist-dashboard.ts`'s
-            // type import of `tenant-context.js` to the base `services/default-tenant.ts`,
-            // which severed the one cross-slice edge that existed.
-            //
-            // `routes/project-listings/{start,patch-draft,submit,public,me,respond,
-            // resume-token,patch-copy}.ts` are NOT listed — they are the free
-            // anonymous surface and the mixed barrel, covered by the note above this
-            // array, and they already ship unconditionally.
-            "apps/api/src/routes/waitlist-experiments/index.ts",
-            "apps/api/src/routes/waitlist-experiments/list.ts",
-            "apps/api/src/routes/waitlist-experiments/comparison.ts",
-            "apps/api/src/routes/waitlist-experiments/signup.ts",
-            "apps/api/src/routes/waitlist-experiments/signups.ts",
-            "apps/api/src/routes/waitlist-experiments/respond.ts",
-            "apps/api/src/services/waitlist-dashboard.ts",
-            // #6258 — the file waitlist-dashboard.ts imports for the pinned
-            // platform-operator read scope. It rides BOTH slices for the same
-            // reason its importer does: an unlisted import target breaks a
-            // signal-collectors-without-multi-tenant scaffold at build() time.
-            "apps/api/src/services/waitlist-operator-reads.ts",
-            // #6157 D14/D16 — the magnet Admin authoring surface's own sibling
-            // tenant scope is gated `multi-tenant || signal-collectors` (D4,
-            // the SAME expression this review-surface block co-owns files
-            // under), so both its route file AND `lib/tenant-db.ts` (the ONE
-            // data path it reads/writes through, FR3) must be delivered here
-            // too. `lib/tenant-db.ts` is ALSO listed under `multi-tenant` above
-            // — additive, not a transfer (the same reasoning this array's own
-            // header comment already states for every other file in it).
-            //
-            // The closure stays tight WITHOUT dragging in `tenant-context.ts` or
-            // the multi-tenant guard assembly behind it, because `tenant-db.ts`'s
-            // own type import was retargeted from `tenant-context.js` to the
-            // BASE-tree `services/default-tenant.js` in this same unit (D15) —
-            // the identical one-line class of move #5677 made for
-            // `waitlist-dashboard.ts` two paragraphs above this one.
-            "apps/api/src/routes/magnets/index.ts",
-            "apps/api/src/lib/tenant-db.ts",
-            "apps/api/src/routes/project-listings/get.ts",
-            "apps/api/src/routes/project-listings/list.ts",
-            "apps/api/src/routes/project-listings/patch.ts",
             // The dashboard itself. Without these the Pro scaffold would boot with
             // reachable review routes and no UI to read them through, and the two
             // files that DO already ship into every scaffold
@@ -1876,14 +1458,30 @@ export const MODULE_SLICES = {
                     },
                 ],
             },
+            // #9460 DD6 — the two MCP packs above, as apps/mcp dependencies.
+            {
+                target: "apps/mcp/package.json",
+                kind: "json",
+                ops: [
+                    {
+                        op: "merge-keys",
+                        path: ["dependencies"],
+                        entries: {
+                            "@working-theory/mcp-signal-collectors": "workspace:*",
+                            "@working-theory/mcp-workspace": "workspace:*",
+                        },
+                    },
+                ],
+            },
         ],
     },
     // ── commerce — per-site paid add-on (D-47, amending D-26) ─────────────────
     //
     // Checkout, the Stripe webhook receiver, flow checkouts and the recommender
     // (D-47's disposition sentence, verbatim). The base API keeps only
-    // `isModuleEnabled("commerce")`; every registration loads through
-    // `SLICE_PLUGINS` (server.ts). `apps.api.may_import_from` names
+    // `isModuleEnabled("commerce")`; every registration is a row of
+    // `API_MODULE_TABLE` carried by the commerce module object (#9565).
+    // `apps.api.may_import_from` names
     // `packages/stripe-client` — the module's own package (D5) — mirroring the
     // `multi-tenant`/`scheduling` slices' identical entry, which already
     // document "checkout moved to the commerce module (D-47)" for the same
@@ -1966,30 +1564,19 @@ export const MODULE_SLICES = {
         //
         // THE PRIMITIVES LEFT THIS SLICE (D-64, epic #5770, #5796). The checkout
         // launcher, the Stripe webhook receiver, customer mapping and the
-        // `lib/stripe.ts` shim are BASE TREE now: `apps/api/src/server.ts`
+        // `lib/stripe.ts` shim are BASE TREE now: `packages/api/src/server.ts`
         // registers them unconditionally and gates them at CALL time on the JWT
-        // `commerce` claim (`apps/api/src/lib/require-commerce-claim.ts`), so a
+        // `commerce` claim (`packages/api/src/lib/require-commerce-claim.ts`), so a
         // keyless scaffold must CARRY them. Claiming them here is what deleted
         // them from that scaffold while the server still loaded them —
         // ERR_MODULE_NOT_FOUND inside build(), every route 500ing, which is the
-        // exact defect `tools/lint-slice-registration.ts` (#5701) exists to
-        // catch. The six that left: lib/stripe.ts,
+        // exact defect the slice-registration lint (#5701; retired by #9565 D8)
+        // existed to catch. The six that left: lib/stripe.ts,
         // routes/checkout/{index,sessions}.ts, routes/webhooks/{index,stripe}.ts
         // and routes/webhooks/README.md. The four below STAY — they are commerce
         // OVERLAY, still registered behind `isModuleEnabled("commerce")` and
         // still carrying their `// oss: false` markers.
         ownedFiles: [
-            "apps/api/src/routes/flow-checkouts/index.ts",
-            "apps/api/src/routes/flows/recommender.ts",
-            "apps/api/src/services/recommender-capture.ts",
-            "apps/api/src/services/flow-checkouts.ts",
-            // #6038 — the buyer-scoped subscription-status route pair (the
-            // update-your-card banner's read + portal handoff). Commerce OVERLAY,
-            // same posture as the four flow-checkouts/recommender entries above.
-            "apps/api/src/routes/subscription/index.ts",
-            "apps/api/src/routes/subscription/me.ts",
-            "apps/api/src/routes/subscription/portal.ts",
-            "apps/api/src/services/subscription.ts",
             // #5581 U5 — the fifteen commerce components (+ ten .text.ts extractors
             // + the slice's own re-export entry point) moved to
             // packages-paid/ui-commerce; the package is delivered to a keyed
@@ -2222,12 +1809,6 @@ export function coOwnedModuleDestinations() {
 //     The exclusion is per file, not a `testPathIgnorePatterns` entry in the
 //     scaffold's jest config: that would hide these suites from a keyed
 //     scaffold too, and from the suites a slice owns.
-//   - database/__tests__/build.test.ts (#7959) — the monorepo build probe
-//     (#7565). Its `beforeAll` symlinks `REPO_ROOT/packages` and copies
-//     `REPO_ROOT/tsconfig.base.json`, neither of which a scaffold has, so it
-//     red the scaffold's database jest run. Matched exactly, not by basename
-//     in `EXCLUDE_FILES`, which would drop a `build.test.ts` anywhere in the
-//     snapshot; every other database suite still ships.
 //   - the /pricing suite `monorepo-only.test.tsx` and its snapshot (#9179) —
 //     it snapshots the monorepo's own `content/en/Pricing/pricing.mdx`, which
 //     a scaffold replaces with its seed, and reads
@@ -2246,28 +1827,24 @@ export const EXCLUDE_TEMPLATE_DIRS = [
     "apps/web/app/[locale]/__tests__",
     "apps/web/app/[locale]/(authed)/edit",
     "apps/web/content",
-    "apps/api/src/__tests__/api-parity.test.ts",
-    "apps/api/src/__tests__/api-parity-paid.test.ts",
     "apps/mcp/__tests__/api-parity.test.ts",
     "apps/mcp/__tests__/pro-tool-call-gate.test.ts",
     "apps/mcp/__tests__/write-tool-guard.test.ts",
-    "apps/api/src/services/__tests__/aeo-score.test.ts",
-    "apps/api/src/routes/leads/__tests__/index.test.ts",
-    "apps/api/src/routes/workspaces/__tests__/inbox-wire-schemas.test.ts",
-    "apps/api/src/__tests__/server.test.ts",
-    "apps/api/src/__tests__/cors.test.ts",
-    "apps/api/src/__tests__/root-modules.test.ts",
-    "apps/api/src/__tests__/module-exclusion.test.ts",
-    "apps/api/src/openapi/__tests__/surface-drift.test.ts",
-    "apps/api/src/__tests__/review-surface-registration.test.ts",
-    "apps/api/src/__tests__/workspace-module-registration.test.ts",
+    "apps/mcp/__tests__/create-booking-guard.test.ts",
+    // #9564 AC-1 — pins THIS monorepo's route table and imports the six module
+    // objects; a scaffold has neither.
+    "apps/api/src/__tests__/registration-table.test.ts",
+    "apps/api/src/__tests__/fixtures",
+    // #9571 — exercises the composition's `loadInstalledHub` by `jest.doMock`-ing
+    // `@working-theory/api-hub/package.json`, a specifier a Free scaffold cannot
+    // resolve (no `virtual` mock), and it depends on the monorepo
+    // `apps/api/jest.config.cjs` mapper that `build-templates` drops; the
+    // scaffold's own boot behaviour is covered by `verify-scaffold`'s boot leg.
+    "apps/api/src/__tests__/hub-install.test.ts",
     "apps/mcp/__tests__/workspace-surface.test.ts",
     "apps/mcp/__tests__/parity.test.ts",
-    "apps/mcp/__tests__/audit.test.ts",
-    "database/__tests__/build.test.ts",
     "apps/web/app/[locale]/pricing/__tests__/monorepo-only.test.tsx",
     "apps/web/app/[locale]/pricing/__tests__/__snapshots__/monorepo-only.test.tsx.snap",
-    "apps/api/src/services/offerings/__tests__/delegate-confinement.test.ts",
 ];
 export function paidModuleTemplateExclusions(snapshotRoots, repoRoot) {
     const roots = new Set(snapshotRoots);
@@ -2283,8 +1860,8 @@ export function paidModuleTemplateExclusions(snapshotRoots, repoRoot) {
         }
     }
     // Companion closure by import graph, to a fixed point — the shared walker
-    // (`lib/import-graph.ts`), so `tools/lint-slice-registration.ts` asks the
-    // question with the same resolution this answer was computed with (#5701).
+    // (`lib/import-graph.ts`), the resolution the retired slice-registration
+    // lint (#5701, #9565 D8) asked its question with.
     return [...importClosure(repoRoot, [...roots], seeds)].sort();
 }
 /** The scaffold's architecture linter, relative to the site root (#6649). */