create-ailk 0.25.1 → 0.26.0

package/dist/update.js

@@ -1,6 +1,7 @@
 /**
  * `create-ailk update [<target-dir>]` — bring template fixes into a site's
- * already-copied `apps/web`, `apps/api` and `apps/mcp` code (#8522).
+ * already-copied `apps/web`, `apps/api` and `apps/mcp` code (#8522), and
+ * the root `tools/` files their jest configs require (#9654).
  *
  * Reads `.ailk-template-files.json` (`template-record.ts`) to tell an
  * untouched copy from an owner's edit. An untouched file whose template
@@ -44,7 +45,7 @@ import { ParseError } from "./parse-args.js";
 import { SITE_ROSTER_PATH } from "./site-roster.js";
 import { SPOKE_CHECKOUT_TEMPLATE_PATHS } from "./spoke-checkout.js";
 import { excludedRoutePaths } from "./surfaces.js";
-import { DATABASE_BOOT_FILES, TEMPLATE_RECORD_PATH, isRecordable, parseTemplateRecord, serializeTemplateRecord, sha256Hex, } from "./template-record.js";
+import { DATABASE_BOOT_FILES, ROOT_TOOL_FILES, TEMPLATE_RECORD_PATH, isRecordable, parseTemplateRecord, serializeTemplateRecord, sha256Hex, } from "./template-record.js";
 import { MCP_SEAM_PATH, MCP_SERVER_HUB, TopologyError, isSpokeExcluded, readSpokeShape, spokeExclusions, } from "./topology.js";
 /** A refusal the CLI exits 2 on, thrown before anything is written. */
 export class UpdateRefusedError extends Error {
@@ -77,12 +78,12 @@ function versionOlder(a, b) {
 const DATABASE_PACKAGE_GUARD = "database/ is still a package here — convert it to the thin consumer first";
 /**
  * Every file under `templatesDir`'s three app trees, plus each of the
- * `DATABASE_BOOT_FILES` present there (#9569 DD8), raw bytes keyed by
- * destination path (D3).
+ * `DATABASE_BOOT_FILES` (#9569 DD8) and `ROOT_TOOL_FILES` (#9654) present
+ * there, raw bytes keyed by destination path (D3).
  */
 function walkLocalTemplates(templatesDir) {
     const out = new Map();
-    for (const boot of DATABASE_BOOT_FILES) {
+    for (const boot of [...DATABASE_BOOT_FILES, ...ROOT_TOOL_FILES]) {
         const abs = join(templatesDir, ...boot.split("/"));
         if (existsSync(abs))
             out.set(boot, readFileSync(abs));
@@ -236,6 +237,155 @@ const BUNDLED_MCP_TOOLS = new Set([
     "proposals",
     "submit_flow_step",
 ].map((name) => `${MCP_SRC}/tools/${name}.ts`));
+/**
+ * The sha256 of every `apps/mcp/src` file a create-ailk template shipped
+ * before #9460 — the published tarballs 0.1.0 to 0.24.0, each one a blob in
+ * git history before the #9460 merge (#9654). A file under `apps/mcp/src`
+ * whose bytes hash into this set is a template copy, never a site edit, so
+ * the move removes it even where the record names another copy or none.
+ * Frozen as of #9460; never extend: no template ships a server file under
+ * `apps/mcp/src` any more.
+ */
+const PRIOR_MCP_TEMPLATE_HASHES = new Set([
+    "02789f25139dd78952a77c2d6f7a7057d73d18cdf45845913ad4d35964ad0e16",
+    "035a4f5eda5d7a00046f6f3446100dd1e34f85f894f000b04a931e094799c03e",
+    "06fe9518a954091284571ec253abea979c738ee3556b73f8993c759607eb3c4b",
+    "0702b6d5012dab15d4030be01923ed8da8b0a237028e6c88053c8fdcee63e155",
+    "09fedce92b189911964733f6a2535d0d3b0f0104ac18a1ff76abf5fd96261922",
+    "0d42d4c17a35867245fc86c48efa5b6dd2c0f89a03c564f68b7661cde98dddf4",
+    "0dc43a72c6d2fd1a5f36f037d9b01abcb9a11d1653a04fb033b5b6b223fcfbd8",
+    "0fb7cd858e7cd3c1f8757824184519f2494f9c12ec49290d7b97ee7656a7f405",
+    "115ac6b648a45e5e1b22193097e92a8ee4da844be5853ca202cb624651ef4c56",
+    "16cefcfebbcadb2505b8d8253c853b2d2098209fa4bac84fe39dc7f6b38c02c3",
+    "16eaefbceb5edcc3a8039d8ef55776d1a1e317521ecca17386673b87852c4099",
+    "17c6e5115ba947d53dcbb632990f6b66d570ea1657d022c51bf62e09c0b58194",
+    "17cc5d3eed8849a33f2eebd0d12ffa72c9ffebcccf5a4818aaf8f94fca05aa0f",
+    "18185d6f4e4777a7b0856a971c509ce0e094f8ccb8206eb6a1e78d38030c3763",
+    "1c5f0f0cdd304b3aff3934e6f0878adb18fc6555be030cb81e3d4a0764d65c43",
+    "1d328a242845e31426f28c33d58bf5be7be76f526e066858f77916ef2b28af41",
+    "1d5810272869e6a2f66941f862ec7c39a54af82e13ff33d4bff4a19e0d52f1a4",
+    "1ddc5b3a79b4a6453a0ac1f6e60ef3463b58221fb5ee313d52c57e9928ea8cdc",
+    "2131309a986b964e99a9a9589a0c236d5d830b14d66653e2008289eae2e2cf94",
+    "21cd9825d4b7ae057c10b5ca7d01c83387be20be66bf8c38814e7db592a7517e",
+    "21d28634fc19f15389ec99a3e6005490faff1c1d364bc7bd3a1f387edab09434",
+    "22c245c92b973d86f425b934bd65229c0017801e738a80db19aa0a174d7142c0",
+    "23d1318bb8b9aaf489c62ce667d8ba56110f48c8b7c401713a3ac4849c0978bb",
+    "2d901fec3ca30024d39274b9dc27156b4d366c86a5c3fb2897a8ca9b97b6d2d9",
+    "2dfe47a0e1d6904b5b183fc4aeb067e492127f3ee39058677895a9cc5e270b9e",
+    "2eeb3c272e60e1dbf87f868fecac8526f265a4f5327afbeb5ee4c3ecebb848db",
+    "3110e5b85f764e39e0e9c7164290cd62a1be51b90e49ed38611a004143a6b130",
+    "31afce85a1982d17c9e1d8069e54913b0bdb295010104541ea04b061084b314e",
+    "36bc7bea57167851ae81b4baa57daee2fad4f2db9b96b730a72e2ca0c69d75b7",
+    "38fab15821f26449c149c12851ff7a857db89d55c4722f797b15274e31a4a4bf",
+    "39ef3340a53926a8e8dd77f78924d1975fa5284ab7ae2b99bb8602b20bb7e7a8",
+    "3bb46c8ea91349d7551a66c13462f99910ead5b813f0aa51a1b7ab1671f3576a",
+    "3cc84368f3eaaf7e875a145fabf7ac644ee4ef1fa785cf548c9639a69985661e",
+    "40a538c6a84a95690dc810a5249b74e67c234fc5cf4f6cc6476d7961f67ecbdd",
+    "426e33baaeed2bb51a720fce286dba4da00d94418d3554c628c87b3d14e03116",
+    "428c570d20f07c9069578c8729c2dcf7eb6eab3b956f8c20eccbabae2f518272",
+    "436fc6ed239cf5b4612ee4dbf102debaf5384a3872a30a834d1042e521e318f3",
+    "443a31b8af758901d5685134d5046cf4880b534268a9e9cc2ea85185cb5f54ee",
+    "443c60fd527c7703b5f3af9ad9b6efd49c359fdde717228254961ea9e7815117",
+    "4b28c6e6a6799eb9548720a9f16bafd93a15baa04cacbec950c23e2e5be0f1aa",
+    "4b8e654da8220df69a4c4457c1527c2bea9f5aed73d67458c4ce2a14f1b87e8f",
+    "4d01e1fcdda1f941789894a6a54d2940f47096c39f37609a5e908c0aa84789db",
+    "52583caf9f8946c36133949278449dceeb0ac8f74360534ca91b96938d80446c",
+    "5364243db73f8687c1c0ec9cc2516e95efb43a756e295ae8b6469fd55f940649",
+    "578dd3161d2dc283011a069a4d426037ba665f0f787a317779115b570a74269f",
+    "59882d160c82e5be765102c13dd3c05fbd7e48673408f89c194c8e021ae29797",
+    "5ae7a51f8d439d331c5a02229b4109daa5299de6c12d821b78bbc14feda8413f",
+    "5ed07e4eed1e6cc7d19185669a14b8df974ea640d283676f33f4db8566fb8cdc",
+    "5f60e2bd4fb529c02e195b1aef3bf2ebfa55db05212ae9888e265f3f2f9fade8",
+    "6022594cc246c8f3453935781607fa3750b7c8e5b29fab9c841f13364cc9d08a",
+    "60b1ed4e37ecc2e045726f2fd93ef90cc9dea33718532a90e365d6d64d803047",
+    "659248c6e0c85075142c6a86395fb2b6b2bdf36895dfb2aeb5ab5e044528f11b",
+    "66d95e135f59ff1ccdcf3480bd22eac81a559ef0a4439d9a34ce6c25a6885ada",
+    "68976a1295acc8ed025a8a3ab30d78492c7e40e4320ac5acecc53f9e7f2aa04f",
+    "69cebf99ae494a0fd06b4b9408587f230def919dceb4fbcf3ef950f243bbf486",
+    "6b919aa697e9785f175201193e498b17b6c64ffe08c34a9a3ff728d660aa68cf",
+    "6da43872f0bee03f3028183795d41ea257c6102928175efe162ffb0fd37849c8",
+    "6e86925727a045268249248e9dffd7e8869f2604af43fda27c8acf75982988de",
+    "6e8f01a9c1f20f580e2dec7fe8a4c811ffd88621612aac03604aedeaeb9b7c90",
+    "715ed89d03445103ca05c0686c8f6fc7cef0c61b18767c285777bb65122fa81a",
+    "74a2c97adba8e0390a281fddbc5dce3ec7f9e97577b2fcb9abcf0bdcee01b63c",
+    "75abc78c74f28259d817cf159b3969c548395131de6255978b9df4d275aa1544",
+    "77d1aacb454904eded6d9a043de7f95922d53bae9693df48b106a74de7405e98",
+    "78826164442493682a624ba492f6e39b3479208d93a7aa2fdfca70005333255f",
+    "792e6b2cf89272fe9860d585a23687e14881533f3644dd5b1e8e30ea89e6f4a2",
+    "7afb50314471ab4e8f31099db49e29a96e56efd83ba960a42732e177654c874d",
+    "7b7d5053aaa6358eb66042cfca9e2fe6280d354e23a303c129f08a413bf94c4c",
+    "7ed1787f0d71fceb92fb687a8d4e6a5ffc49896ee586303b4311035ba60ba2d2",
+    "81dd15a6b1479896458106b946edc0ac76f6c0acf4d525307b092ed11d2f4596",
+    "83eaa71438882dde8edf0d7978644a93c802a08a50804f5b2c62d01eaeb4edc9",
+    "8441a52d587584cccd6f1fbe3ba5204c9c49a9c6d452d9f844d34dcc0448ad76",
+    "847d648346ea4bd0d2f349399527f5a907e05367c6764696b724f3382090089e",
+    "85df33660e2291ffe1e77b7103e4705c31b93dd7a294872b6c0fca52a3bd3079",
+    "8a9eea9c23a94ff9df729a4aa423e62b02c0632e398bf01524f1caeed61944b9",
+    "8e7d112d48976c7ae66203b6c45e8c20708f60a4486411a30af7857e214b8d27",
+    "91945c6e325758d09d7f70586f63bda0758f187247e4a8cfab05d9ed45c1e25b",
+    "960723d00c54a88af4142cde66b77c5e70cd3b39f59dce462fdf8d153846a9cf",
+    "9623a2f691777ea1fea280782240837b24b8202082bf98dbaa2ea48c670774b8",
+    "9ebfb38044ad35af8156803be6bb975a7c6b1624fa511037d56beb7b9e0d3579",
+    "9ede34ab75c67dc0fe134d7bf64d040e250cec85111ef9fb11be745af5e90277",
+    "a03fd2d78e6e4982209e193ad27f0732035c2c2eb5edfcdd8e3093a42e5334a4",
+    "a14cf80e8cfc09105cd856bc5723a4b1a231f6ad8f08e5a443360c480a6b483b",
+    "a17f89416b31fb883dc9a5c389b021332b2b40e5052fe344e1aec96872475d5f",
+    "a20b034a648c2b9daaf3ca817a2229ce7e0136b0fc7487c7fed5fe0cdf1e9e7b",
+    "a4495346b79124d1b17f6082f0c1f1f99d3845f4f98cfde83543f2eadf600666",
+    "a6d6d6be76cff255bbf77d529dee8775817dae75725bf24964febbbc7cf8d508",
+    "a7421e1949c4f3671cfb0d758fecb3b87aab3df03d0feaed0259443ebb2a4353",
+    "ac7cd310467561330d3cc2914fd29c9a16ecd27d7f8413dd1120e28ce9ee3ad7",
+    "add424a2fbb1027d67270dca6e5e1e0e384dd37a729ba5c091022bc30b3d85c1",
+    "af5c4f3113285a137019f7bcbb905c04f0de3b6917d709a0fc8df3f0f39beda9",
+    "b0c8bc973e3b9f7fdaf95cb02ca111cb685db2ac98559c859071b4f26f600bf4",
+    "b455cd835c1769af463b4ebd91fa6716effbad6f8210df12d47637977b34c6e2",
+    "b7140dd15cac5f55309991e7ce1b438a9514a4b289c9ef807f75ed576246fc26",
+    "b7198546881c491e233018dadd3fbdb6378694e8a15b762b56c17a1c61d10c91",
+    "b7d1e33111a13249d6bc4d0a9334074430bc94f1a0c79d94f5c6f5907b76ae30",
+    "b9bd1f23c0e84f91cf7d46db46cab4cb1232574b0f6c9d6f5926fa0bab110570",
+    "ba7e5b4db4fd020b0aadace2083aacfb9ffafa63465d2026e4a79804eb8cd493",
+    "bb321afe40c6d7495676f9157bc80bbab9d5241fa84340133770b1ba3006d166",
+    "bced6c526cd757d87b4d725e247497b6e1286192b758421786c645719c3b4dfd",
+    "bf398a05bdbdb85a8034ecfd9f4d865587b7d25352a06f3c9f3ca1c0deed6787",
+    "bf4a2222b34a4fdabccd696341f6168104d3d7d74df036187347650ecf350d32",
+    "c1513e2317857959145d66659c3b147cc885ca46f4c239ed85f52a833d058971",
+    "c371bdde5f7ace2448c46a0e009d799bdb90d3351d42131234181d1efd2b486f",
+    "c57ccbaddda8c7d538d103c2b2d96889a815cbcc4469f5f6780b0883d99b4006",
+    "c5a448c17e6bba3379ee938b17309c02eb851cbf5fb54dcd6ec490503b70b121",
+    "c5d35895a261227c6cf537daeac4b24a98d91ea65e8322d7ca5c47d05c83570c",
+    "c64f4b1a9dba4d1fa76f8aea664c81e35961dca2e3f44f63a6783f5164951560",
+    "c676077b914411e737376f9604087aab67ba2f300aedb99e76a5839f1798827b",
+    "ca076f76130bd3e35488bfe23d7f55f1829164a4e09035459f3af2aee1d91ace",
+    "ca842e6ec1748a84fa30adde6f93a84e7b98b6211afbb3e7907e9b6b9b65fed2",
+    "ce7ada5214b23c595422399fbd10a8e95bb1b9b30a345c2117bf1954cc2163a6",
+    "d2b460eee83c40d26db73bded9ad30666fe970eb991c925727eed5e45d1a5cb4",
+    "d4cba3c71603c40bf0a8b6e1643a157e2028d3743b238fb932e059381a17deb9",
+    "d5fcd1015582870231c52f490b8daac7a89dbaa2d387f285e118fff98bf7ada2",
+    "d96ff716399aca50bd6f5c43bb37721e2d4cbb43793a453119f6e15e6eeca34b",
+    "da75ba145c8142544d6211b4eaba8485549511766e2c0d248ac2308b502cf986",
+    "dfbcfe0f30c6079153b5ab51096ef106716a713a7d6169b2ec00840423640560",
+    "e1945e3ff2b6d806fc459c90d0253ca71f2adac5bedc6c578ca21506f9dc094a",
+    "e43789a019a1c487b42cc785175f0b08b36a7e4f5ae72e40a6c1835f9d02b2d6",
+    "e482750dfb358f78b1142a8707cb007cc7a5e5c863614b05d0289f4843d10b6f",
+    "e4948f0dadc17dcae583e2d8732a1e95c8268d4e5bf68bc38e97e05a251b9fcb",
+    "e4aff38f30ca76f6da6ec4bf98c71a51d8fc41877ddcf791aeb61fcf34bb44ea",
+    "e59294cc6a47cabd5df6ab635dd3748f42610e1691b248d24b8962fc3661df43",
+    "e7c7711f3512fdd51bdd175098ffe97c1c4483b4369b2627bbf00eafd65c00af",
+    "e7feca03ec0681bee9bba97b9ee5024215899f95aad72cca08c0902b969bee5c",
+    "e97b05627ca65f8656167b5ffefb8236cce711173a98430d7ac7f063dc598223",
+    "e9ba0a0e497e5d12662a473b81e0cb09f81a094c2763266769e08f5556718f15",
+    "e9c9f8d30528a30084e58d41d93d7e4d58d07a4bd8f1e2c1d132c2525669e8a5",
+    "ec28dcc626ae59a3c5208f342ba8090c3e8640c6e4930a4b518dfdaa4ccdb773",
+    "ef7f59acd7f5de7287681786bb96f1907ac72a9cca7d49732c33320359725ef9",
+    "f37c56da121f8cba9c0a55bc69ef701e3d81c63a15f1a9ff354efc4fed58ff39",
+    "f562f262c2b26f3e613a50aea737bf7b021d8c4ea9e769ce6b4728675fd68b9e",
+    "f6f9e117ab5d1e68b7b99baa30ab822c0126467b8941195a187bf3af20f7faa5",
+    "f8d26912ffbc7c1a7b73a0916111aa5c969d98a60b211ff7ca75d8e7828d86c1",
+    "f984b95c8a9759cdd988722b7de5be6654c69e0ceb12abc4847115f964087fc0",
+    "fc43fb068d3816a65a00144f32ebd3fb077f474090de8c1c99dd77f542c35c43",
+    "fdbdd75dc3b798c548ddf28a3c730fa61f64dc1b48d30ff65e190bbc7bb097ba",
+    "ffe3db23d21ce93dbb8b832a04318cf23aaa8b1d6db11185ebcf30a634e86e6d",
+]);
 /** The old hub seam's two relative imports; each is now `MCP_SERVER_HUB` (DD7). */
 const OLD_HUB_SEAM_IMPORTS = ['"./public-workspace.js"', '"./license-key-store.js"'];
 /** Every file under `root`, as `/`-separated paths relative to `targetDir`. */
@@ -280,18 +430,26 @@ function resolveMoveVersions(app, pkg, packages, versions) {
  * what it lists for review: a `bundled` file (bundle-delivered, never
  * recorded) is removed even at a boot-set path (#9566: the #9564→#9565
  * window's in-app module objects sit where the template's re-exports land);
- * any other boot-set file is left to the record; the rest is reviewed with
- * `reason`, never deleted.
+ * any other boot-set file is left to the record; a file whose bytes hash
+ * into `templateCopies` is a prior template copy and is removed (#9654); the
+ * rest is reviewed with `reason`, never deleted.
  */
-function classifyUnrecorded(targetDir, src, bootSet, recorded, bundled, reason) {
+function classifyUnrecorded(targetDir, src, bootSet, recorded, bundled, reason, templateCopies = new Set()) {
     const deletes = [];
     const review = [];
     for (const path of filesUnder(targetDir, src)) {
         if (recorded.has(path))
             continue;
-        if (bundled.has(path))
+        if (bundled.has(path)) {
+            deletes.push(path);
+            continue;
+        }
+        if (bootSet.has(path))
+            continue;
+        const hash = sha256Hex(readFileSync(join(targetDir, ...path.split("/"))));
+        if (templateCopies.has(hash))
             deletes.push(path);
-        else if (!bootSet.has(path))
+        else
             review.push({ path, reason });
     }
     return { deletes, review };
@@ -335,7 +493,7 @@ function planMcpMove(targetDir, modules, hub, recorded, versions) {
     if (!existsSync(join(targetDir, ...MCP_SRC.split("/")))) {
         throw new UpdateRefusedError(`${MCP_PACKAGE_JSON} is present but ${MCP_SRC}/ is not, so apps/mcp cannot be moved to ${MCP_SERVER_PACKAGE}`);
     }
-    const unrecorded = classifyUnrecorded(targetDir, MCP_SRC, MCP_BOOT_SET, recorded, BUNDLED_MCP_TOOLS, `not in the boot set apps/mcp/src is since ${MCP_SERVER_PACKAGE} (#9460); move it into a package or delete it`);
+    const unrecorded = classifyUnrecorded(targetDir, MCP_SRC, MCP_BOOT_SET, recorded, BUNDLED_MCP_TOOLS, `not in the boot set apps/mcp/src is since ${MCP_SERVER_PACKAGE} (#9460); move it into a package or delete it`, PRIOR_MCP_TEMPLATE_HASHES);
     move.deletes = unrecorded.deletes;
     move.review = unrecorded.review;
     return move;
@@ -807,6 +965,15 @@ export async function updateSite(opts) {
         }
         // Edited.
         if (newBytes === undefined) {
+            // #9654 — the bytes are a pre-#9460 template copy, just not the one
+            // the row names: not an edit, so it is retired as an untouched copy
+            // is, on the move's run or any later one.
+            if (path.startsWith(`${MCP_SRC}/`) && PRIOR_MCP_TEMPLATE_HASHES.has(diskHash)) {
+                deletes.push(path);
+                delete nextFiles[path];
+                removed.push(path);
+                continue;
+            }
             review.push({ path, reason: `edited here, removed from the template in ${version}` });
             continue;
         }
@@ -898,11 +1065,13 @@ export async function updateSite(opts) {
             if (sha256Hex(diskBytes) !== newHash) {
                 skipped.push({ path, reason: "exists, not in the record" });
             }
-            else if (DATABASE_BOOT_FILES.includes(path)) {
+            else if (DATABASE_BOOT_FILES.includes(path) || ROOT_TOOL_FILES.includes(path)) {
                 // Adoption (#9569 DD8): a thin site converted by hand, or scaffolded
                 // before the boot files were recorded, gains the row for a copy that
-                // already equals the running template's. App paths keep today's
-                // behaviour: an unrecorded, identical copy stays unrecorded.
+                // already equals the running template's — and so (#9654) does a root
+                // tools/ file a site scaffolded before tools/ was recorded, or copied
+                // by hand. App paths keep today's behaviour: an unrecorded, identical
+                // copy stays unrecorded.
                 nextFiles[path] = { sha256: newHash, version };
                 current.push(path);
             }
@@ -1106,10 +1275,11 @@ Options:
 
 Reads .ailk-template-files.json (written beside .ailk-site-manifest.json by
 every template scaffold) to tell an untouched copy from an edit. An
-untouched apps/web, apps/api or apps/mcp file whose template copy changed is
-overwritten. An edited file whose template copy also changed is three-way
-merged with \`git\` (git must be on PATH); a conflict leaves the file alone
-and is listed under "Needs review". Every template test that imports a file
+untouched apps/web, apps/api or apps/mcp file, or a root tools/jest file the
+app jest configs require, whose template copy changed is overwritten. An
+edited file whose template copy also changed is three-way merged with
+\`git\` (git must be on PATH); a conflict leaves the file alone and is
+listed under "Needs review". Every template test that imports a file
 left under "Needs review" or "Skipped" (by a relative import) is held at the
 site's version with it, its record entry is not advanced, and it is listed
 under "Held back with <file>" — reconcile the file, then run update again to

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-ailk",
-  "version": "0.25.1",
+  "version": "0.26.0",
   "description": "Scaffolder for AI Launch Kit — `pnpm create ailk@latest <dir>` produces a starter repo consuming @working-theory/* from npm (per ADR 0007).",
   "type": "module",
   "main": "./dist/index.js",
@@ -28,8 +28,8 @@
     "tar": "^7.5.21"
   },
   "devDependencies": {
-    "@working-theory/schema": "0.46.0",
-    "@working-theory/templates": "0.46.0"
+    "@working-theory/schema": "0.48.0",
+    "@working-theory/templates": "0.48.0"
   },
   "repository": {
     "type": "git",

package/release-scope.json

@@ -17,7 +17,7 @@
     "docs-blog": "released",
     "scheduling": "released",
     "signal-collectors": "released",
-    "workspace": "gated",
+    "workspace": "released",
     "multi-tenant": "gated",
     "commerce": "gated"
   },

package/site-templates/marketing-site/TEMPLATE-MANIFEST.json

@@ -1,6 +1,12 @@
 {
   "template": "marketing-site",
-  "requires": ["marketing", "docs-blog", "scheduling", "signal-collectors"],
+  "requires": [
+    "marketing",
+    "docs-blog",
+    "scheduling",
+    "signal-collectors",
+    "workspace"
+  ],
   "categories": [
     "accounting",
     "legal",
@@ -17,7 +23,7 @@
   ],
   "shape": "organization-product",
   "design": "standard",
-  "generatedHash": "f4a8f11aba42a071794585c4563015bd1c99cbe6917a36ee0629d37c6f5f476c",
+  "generatedHash": "d58492d416674a21b1358858d285b7050d14618f5e2bed2f0ae20bdbc5267d5a",
   "layout": {
     "nav": "full",
     "footer": "columns",

package/site-templates/marketing-site/TEMPLATE-MANIFEST.md

@@ -6,7 +6,7 @@
 | ---------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
 | Template               | `marketing-site`                                                                                                                                                                                                                                                                                                                                                     |
 | Level                  | Pro                                                                                                                                                                                                                                                                                                                                                                  |
-| `requires`             | `[marketing, docs-blog, scheduling, signal-collectors]` (spec 5462 D12/D15, settled by Sam 2026-09-14)                                                                                                                                                                                                                                                               |
+| `requires`             | `[marketing, docs-blog, scheduling, signal-collectors, workspace]` (spec 5462 D12/D15, settled by Sam 2026-09-14; `workspace` since #9696)                                                                                                                                                                                                                           |
 | Delivery               | licence-checked module bundle (#5441); never in the Free tarball. Composed base → modules → template (#5618): `/pricing`, `/privacy`, `/terms` arrive from the `_base` layer it `extends`, every module sample from the docs-blog and signal-collectors bundles its `requires` names, and this tree ships one copy override (blog post 05 onto `launching-ailk.mdx`) |
 | Sample content posture | every sample report, post and flow in the demo is **public**                                                                                                                                                                                                                                                                                                         |
 
@@ -513,7 +513,7 @@ Everything in the Free manifest § 2a applies. Pro adds:
 
 ```
 marketing-site:
-  requires: [marketing, docs-blog, scheduling, signal-collectors]
+  requires: [marketing, docs-blog, scheduling, signal-collectors, workspace]
   categories: [accounting, legal, consulting, hvac, roofing, plumbing, electrical, landscaping, auto-repair, real-estate, technology, medical-specialty]
   shape: organization-product
   design: standard

package/site-templates/marketing-site/ailk-template.json

@@ -1,6 +1,12 @@
 {
   "name": "marketing-site",
-  "requires": ["marketing", "docs-blog", "scheduling", "signal-collectors"],
+  "requires": [
+    "marketing",
+    "docs-blog",
+    "scheduling",
+    "signal-collectors",
+    "workspace"
+  ],
   "extends": "_base",
   "$comment": "Pro template (#5464). installMap: bundle-relative source -> scaffold-relative destination; the stager reads only installMap/postInstall/patches. After #5618 D6 this tree holds compositions and copy overrides only: the base pages (/pricing, /privacy, /terms) arrive from the _base layer it extends, and every module sample (the blog listing and posts 01-04, the three docs pages, the projects, thank-you, flow, waitlist and report samples) ships in the docs-blog and signal-collectors bundles its requires names. Its one content file, post 05, is deliberately mapped ONTO apps/web/content/en/blog/launching-ailk.mdx (D6.2a): the template lands last and can overwrite but never remove the module's own seed post, so this is Rule B's copy-override clause with a real instance (a template-owned replacement of a seed row is a docs-blog gap on #5467, spec 5618 s7 finding 9). Unmapped content/en/** would land at the scaffold root's content/, exactly as marketing-site-free's does; today nothing is unmapped.",
   "installMap": {

package/site-templates/marketing-site/provenance.json

@@ -1,4 +1,10 @@
 {
   "template": "marketing-site",
-  "requires": ["marketing", "docs-blog", "scheduling", "signal-collectors"]
+  "requires": [
+    "marketing",
+    "docs-blog",
+    "scheduling",
+    "signal-collectors",
+    "workspace"
+  ]
 }

package/site-templates/saas-product/ailk-template.json

@@ -5,6 +5,7 @@
     "docs-blog",
     "scheduling",
     "signal-collectors",
+    "workspace",
     "multi-tenant"
   ],
   "extends": "_base",
@@ -12,5 +13,5 @@
   "installMap": {
     "provenance.json": ".ailk-template.json"
   },
-  "postInstall": "Template saas-product installed. Its Pro Plus modules - docs-blog, scheduling, signal-collectors and multi-tenant (the authed apps/admin app) - are delivered by their own module bundles. This template's own page compositions, copy and demo data are pending under #5470; until they land it contributes the provenance record and its requires cross-check only, and the scaffold renders each module's own seed content."
+  "postInstall": "Template saas-product installed. Its Pro Plus modules - docs-blog, scheduling, signal-collectors, workspace (the /admin settings pages) and multi-tenant (the authed apps/admin app) - are delivered by their own module bundles. This template's own page compositions, copy and demo data are pending under #5470; until they land it contributes the provenance record and its requires cross-check only, and the scaffold renders each module's own seed content."
 }

package/site-templates/saas-product/provenance.json

@@ -5,6 +5,7 @@
     "docs-blog",
     "scheduling",
     "signal-collectors",
+    "workspace",
     "multi-tenant"
   ]
 }

package/templates/.env.example

@@ -188,6 +188,13 @@ CONTENT_ADAPTER=mdx
 # config declares a `followUps` block.
 # AILK_FOLLOWUP_EMAIL_FROM=
 #
+# The inbox's sender (#9690): an Admin reply emailed to the client, and the
+# Invite to sign up email. Optional — falls back to
+# AILK_LEAD_NOTIFICATION_FROM when unset; with neither, a reply is still saved
+# (its email is `not_configured`) and an invitation is refused. The links
+# start at FRONTEND_URL (https only outside development).
+# AILK_INBOX_FROM=
+#
 # The Resend Contacts audience the #4732 follow-up sweep checks before
 # sending — a lead found unsubscribed in this audience is suppressed.
 # Optional: unset degrades to "cannot verify — proceed" (never to "block all
@@ -446,6 +453,14 @@ CONTENT_ADAPTER=mdx
 # that database. Rotation and the rekey bin: apps/api/.env.example.
 # STRIPE_CONNECTION_KEY=
 # STRIPE_CONNECTION_KEY_PREVIOUS=
+# The key each Organization's Slack connection is encrypted under (#9748),
+# and the key it replaced during a rotation: 32 random bytes each, `openssl
+# rand -base64 32`, distinct from each other and from SCHEDULING_CREDENTIAL_KEY
+# and both Stripe connection keys. Unset = a connection cannot be written and
+# reads as not connected, but can be removed; any other shape stops the API.
+# No rekey walk: rotation and the leaked-key rule in apps/api/.env.example.
+# SLACK_CONNECTION_KEY=
+# SLACK_CONNECTION_KEY_PREVIOUS=
 # The Organization that owns STRIPE_SECRET_KEY (#9285): with the multi-tenant
 # module only the Organization whose id is named here sells through it; unset
 # means nobody. Without the module the single Organization owns it.

package/templates/apps/api/.env.example

@@ -125,6 +125,27 @@ STRIPE_WEBHOOK_SECRET=whsec_xxx
 # STRIPE_CONNECTION_KEY=
 # STRIPE_CONNECTION_KEY_PREVIOUS=
 #
+# An Organization's Slack connection (#9748) — the AES-256-GCM key each
+# Organization's Slack bot token and signing secret are encrypted under. The
+# same shape rule: exactly 32 random bytes in canonical standard base64
+# (`openssl rand -base64 32`), and never the same bytes as
+# SCHEDULING_CREDENTIAL_KEY, STRIPE_CONNECTION_KEY or
+# STRIPE_CONNECTION_KEY_PREVIOUS. Any other value stops the API at startup.
+# Unset means connect answers 503 credential_key_not_configured, every
+# connection reads as not connected, and disconnect still works.
+#
+# ROTATION. Set SLACK_CONNECTION_KEY_PREVIOUS to the old key and
+# SLACK_CONNECTION_KEY to a new one, and redeploy. Every connect writes under
+# the new key; a connection written under the old one reads as connected
+# while _PREVIOUS is set, and as not connected once it is unset, until its
+# owner reconnects. There is no rekey walk. A rotation made because the old
+# key LEAKED is not complete until each connected owner rotates the bot token
+# and signing secret in Slack and reconnects: the old key still opens every
+# row written under it. _PREVIOUS without a current key, or equal to it,
+# stops the API.
+# SLACK_CONNECTION_KEY=
+# SLACK_CONNECTION_KEY_PREVIOUS=
+#
 # The Organization that owns STRIPE_SECRET_KEY (#9285). On a deployment with
 # the multi-tenant module, only the Organization whose id is named here sees
 # that key as its Stripe connection and sells its Offerings through it; unset,