create-ailk 0.26.0 → 0.27.0

package/templates/apps/web/messages/en.json

@@ -1058,7 +1058,8 @@
       "site": "Site",
       "team": "Team",
       "magnets": "Magnets",
-      "meetings": "Meetings"
+      "meetings": "Meetings",
+      "integrations": "Integrations"
     },
     "general": {
       "heading": "General",
@@ -1250,6 +1251,90 @@
         "privateOffToast": "Private: off for {title}",
         "errorToast": "Couldn't update"
       }
+    },
+    "integrations": {
+      "heading": "Integrations",
+      "lead": "Connect the services your site works with.",
+      "slack": {
+        "title": "Slack",
+        "credentialsHeading": "App credentials",
+        "connectedBadge": "Connected",
+        "notConnectedBadge": "Not connected",
+        "lead": "Connect your Slack app so each booked prospect gets a shared channel.",
+        "botTokenLabel": "Bot token",
+        "signingSecretLabel": "Signing secret",
+        "botTokenInvalid": "A bot token starts with xoxb- and holds only letters, digits and hyphens.",
+        "signingSecretInvalid": "A signing secret is 32 to 128 letters and digits.",
+        "scopesLead": "The Slack app needs these bot scopes:",
+        "connect": "Connect Slack",
+        "connecting": "Connecting…",
+        "cancel": "Cancel",
+        "replace": "Replace",
+        "disconnect": "Disconnect",
+        "workspaceName": "Slack workspace",
+        "connectedOn": "Connected",
+        "ownerOnly": "Only the site's owner can change the Slack connection.",
+        "askOwner": "Slack isn't connected. Ask the site's owner to connect it.",
+        "unavailable": "The Slack connection couldn't be read. Try again later.",
+        "tokenRefused": {
+          "tokenRefused": "Slack refused this token. Check it and try again.",
+          "notBotToken": "This isn't a bot token. Copy the Bot User OAuth Token (xoxb-).",
+          "enterpriseInstall": "Enterprise Grid installs aren't supported yet."
+        },
+        "scopesMissing": "The Slack app is missing these scopes:",
+        "paidPlanRequired": "Slack Connect needs a paid Slack plan.",
+        "teamConnectedElsewhere": "This Slack workspace is already connected to another site.",
+        "slackUnreachable": "Slack couldn't be reached. Try again in a moment.",
+        "connectFailed": "Couldn't connect Slack. Try again.",
+        "disconnectFailed": "Couldn't disconnect Slack. Try again.",
+        "confirmReplace": {
+          "title": "Replace the Slack connection?",
+          "description": "Prospect channels will open in the new Slack workspace.",
+          "action": "Replace"
+        },
+        "confirmDisconnect": {
+          "title": "Disconnect Slack?",
+          "description": "New bookings will stop opening prospect channels until Slack is connected again.",
+          "action": "Disconnect"
+        }
+      },
+      "prospectChannel": {
+        "heading": "Prospect channels",
+        "lead": "Open a shared Slack channel with each prospect who books a meeting.",
+        "enabled": "Open a channel for each booking",
+        "members": "Members",
+        "ownerAlwaysInvited": "The site's owner is always invited. Add anyone else by Slack member id.",
+        "addMemberLabel": "Slack member id",
+        "addMember": "Add",
+        "removeMember": "Remove {memberId}",
+        "welcomeTemplate": "Welcome message",
+        "welcomeDefaultNote": "Leave blank to send the default welcome.",
+        "mergeFieldsHeading": "Merge fields",
+        "mergeFields": {
+          "firstName": "The prospect's first name",
+          "hostName": "The host's name",
+          "callTime": "The meeting's time",
+          "interest": "What the prospect is interested in",
+          "timeline": "The prospect's timeline",
+          "meetingLink": "The meeting link"
+        },
+        "channelPrefix": "Channel name prefix",
+        "archiveDays": "Archive after (days)",
+        "save": "Save",
+        "saving": "Saving…",
+        "saved": "Saved",
+        "saveError": "Couldn't save. Try again.",
+        "slackNotConnected": "Slack isn't connected, so these settings can't be changed.",
+        "connectSlackLink": "Connect Slack",
+        "errors": {
+          "memberIds": "Enter a new Slack member id, like U012AB3CD (up to 50).",
+          "welcomeTemplate": "Use only the merge fields listed, in up to 4,000 characters.",
+          "channelPrefix": "Use lowercase letters, digits, - and _, starting with a letter or digit (up to 21).",
+          "archiveDays": "Enter a whole number of days from 1 to 365."
+        },
+        "unavailableHeadline": "Prospect channel settings couldn't be read",
+        "unavailableDescription": "Reload the page to try again, or come back later."
+      }
     }
   },
   "edit": {

package/templates/apps/web/middleware.ts

@@ -118,6 +118,13 @@ export function middleware(request: NextRequest): NextResponse {
 // og-default.png — and each 404'd (#4090 item 4). robots.txt and sitemap.xml are
 // route handlers rather than public/ files, but they carry extensions too and
 // are equally not locale-scoped, so the same rule covers them.
+//
+// BotID's proxy prefix (`withBotId`, `botid/next/config`, #9889 D7) is
+// excluded too, exactly that two-segment prefix and nothing wider, so
+// next-intl never rewrites it and the security headers never stamp
+// `frame-ancestors 'none'` on it; `withBotId` sets that prefix's own
+// `X-Frame-Options: SAMEORIGIN` and `frame-ancestors 'self'`.
 export const config = {
-  matcher: "/((?!_next/static|_next/image|_next/server|.*\\..*).*)",
+  matcher:
+    "/((?!_next/static|_next/image|_next/server|149e9513-01fa-4fb0-aad4-566afd725d1b/2d206a39-8ed7-437e-a3be-862e0f06eea3/|.*\\..*).*)",
 };

package/templates/apps/web/next.config.mjs

@@ -6,6 +6,7 @@ import { withSentryConfig } from "@sentry/nextjs";
 import createNextIntlPlugin from "next-intl/plugin";
 import { legacyRedirects } from "@working-theory/templates/routes";
 import { parseStealth } from "@working-theory/web-i18n/stealth";
+import { withBotId } from "botid/next/config";
 
 // @next/bundle-analyzer — enabled when ANALYZE=true (set by ci-bundle.yml).
 // analyzerMode 'json' writes .next/analyze/client.json (and nodejs.json,
@@ -197,7 +198,14 @@ const sentryBuildOptions = {
     : {}),
 };
 
+// #9889 D6 — `withBotId` adds BotID's two rewrites (the challenge script and
+// its proxy) and one header rule on its own proxy prefix, which middleware.ts
+// keeps out of its matcher. It is not gated on `AILK_BOOKING_BOT_CHECK`: this
+// config is read at build time, the switch at run time, and an unused rewrite
+// answers nothing. It sits directly inside Sentry so the substrings
+// (the MDX wrap and the next-intl wrap, quoted nowhere else) that create-ailk
+// edits stay intact.
 export default withSentryConfig(
-  withBundleAnalyzer(withNextIntl(nextConfig)),
+  withBotId(withBundleAnalyzer(withNextIntl(nextConfig))),
   sentryBuildOptions,
 );

package/templates/apps/web/package.json

@@ -37,8 +37,9 @@
     "@working-theory/validation": "workspace:*",
     "@working-theory/web-i18n": "workspace:*",
     "better-auth": "1.6.22",
+    "botid": "1.5.11",
     "lucide-react": "^0.577.0",
-    "next": "^16.3.8",
+    "next": "^16.4.3",
     "next-intl": "^3.26.3",
     "next-mdx-remote": "^6.0.0",
     "pg": "^8.22.0",

package/versions.json

@@ -1,66 +1,66 @@
 {
-  "@working-theory/admin-ui": "0.48.0",
-  "@working-theory/aeo": "0.48.0",
-  "@working-theory/agent-context": "0.48.0",
+  "@working-theory/admin-ui": "0.49.0",
+  "@working-theory/aeo": "0.49.0",
+  "@working-theory/agent-context": "0.49.0",
   "@working-theory/agent-contract": "0.1.0",
   "@working-theory/agent-memory": "0.0.0",
   "@working-theory/ai": "0.1.0",
-  "@working-theory/analytics": "0.48.0",
-  "@working-theory/api": "0.48.0",
-  "@working-theory/api-client": "0.48.0",
+  "@working-theory/analytics": "0.49.0",
+  "@working-theory/api": "0.49.0",
+  "@working-theory/api-client": "0.49.0",
   "@working-theory/cda-filesystem": "0.0.0",
-  "@working-theory/cli": "0.48.0",
-  "@working-theory/common": "0.48.0",
+  "@working-theory/cli": "0.49.0",
+  "@working-theory/common": "0.49.0",
   "@working-theory/consent": "0.1.0",
-  "@working-theory/content-adapters": "0.48.0",
-  "@working-theory/content-projection": "0.48.0",
-  "@working-theory/email": "0.48.0",
+  "@working-theory/content-adapters": "0.49.0",
+  "@working-theory/content-projection": "0.49.0",
+  "@working-theory/email": "0.49.0",
   "@working-theory/env": "0.0.0",
-  "@working-theory/eslint-config": "0.48.0",
-  "@working-theory/fumadocs-schema": "0.48.0",
+  "@working-theory/eslint-config": "0.49.0",
+  "@working-theory/fumadocs-schema": "0.49.0",
   "@working-theory/ids": "0.16.0",
-  "@working-theory/jsonld": "0.48.0",
-  "@working-theory/license": "0.48.0",
-  "@working-theory/mcp-server": "0.48.0",
-  "@working-theory/metadata": "0.48.0",
-  "@working-theory/observability": "0.48.0",
-  "@working-theory/page-renderer": "0.48.0",
+  "@working-theory/jsonld": "0.49.0",
+  "@working-theory/license": "0.49.0",
+  "@working-theory/mcp-server": "0.49.0",
+  "@working-theory/metadata": "0.49.0",
+  "@working-theory/observability": "0.49.0",
+  "@working-theory/page-renderer": "0.49.0",
   "@working-theory/plugin-mcp": "0.1.3",
-  "@working-theory/schema": "0.48.0",
-  "@working-theory/schema-pack-registry": "0.48.0",
-  "@working-theory/schema-validator": "0.48.0",
-  "@working-theory/sections-registry": "0.48.0",
-  "@working-theory/site-config": "0.48.0",
-  "@working-theory/spoke-checkout": "0.7.4",
-  "@working-theory/stripe-client": "0.48.0",
-  "@working-theory/templates": "0.48.0",
-  "@working-theory/theme": "0.48.0",
-  "@working-theory/ui": "0.48.0",
-  "@working-theory/validation": "0.48.0",
-  "@working-theory/web-i18n": "0.48.0",
-  "@working-theory/admin": "0.5.0",
-  "@working-theory/api-commerce": "0.1.2",
-  "@working-theory/api-content-write": "0.1.2",
-  "@working-theory/api-hub": "0.2.1",
-  "@working-theory/api-multi-tenant": "0.1.2",
-  "@working-theory/api-scheduling": "0.3.0",
-  "@working-theory/api-signal-collectors": "0.2.1",
-  "@working-theory/api-workspace": "0.2.1",
+  "@working-theory/schema": "0.49.0",
+  "@working-theory/schema-pack-registry": "0.49.0",
+  "@working-theory/schema-validator": "0.49.0",
+  "@working-theory/sections-registry": "0.49.0",
+  "@working-theory/site-config": "0.49.0",
+  "@working-theory/spoke-checkout": "0.7.5",
+  "@working-theory/stripe-client": "0.49.0",
+  "@working-theory/templates": "0.49.0",
+  "@working-theory/theme": "0.49.0",
+  "@working-theory/ui": "0.49.0",
+  "@working-theory/validation": "0.49.0",
+  "@working-theory/web-i18n": "0.49.0",
+  "@working-theory/admin": "0.6.0",
+  "@working-theory/api-commerce": "0.1.3",
+  "@working-theory/api-content-write": "0.1.3",
+  "@working-theory/api-hub": "0.3.0",
+  "@working-theory/api-multi-tenant": "0.1.3",
+  "@working-theory/api-scheduling": "0.4.0",
+  "@working-theory/api-signal-collectors": "0.2.2",
+  "@working-theory/api-workspace": "0.2.2",
   "@working-theory/billing-client": "0.0.0",
   "@working-theory/branding": "0.0.0",
   "@working-theory/license-client": "0.0.0",
   "@working-theory/license-manifest": "0.0.0",
-  "@working-theory/mcp-scheduling": "0.3.1",
-  "@working-theory/mcp-signal-collectors": "0.2.2",
-  "@working-theory/mcp-workspace": "0.3.1",
+  "@working-theory/mcp-scheduling": "0.3.2",
+  "@working-theory/mcp-signal-collectors": "0.2.3",
+  "@working-theory/mcp-workspace": "0.3.2",
   "@working-theory/partner-session": "0.0.0",
   "@working-theory/preview-protocol": "0.0.0",
-  "@working-theory/ui-commerce": "0.23.26",
-  "@working-theory/ui-docs-blog": "0.23.26",
-  "@working-theory/ui-scheduling": "0.25.0",
-  "@working-theory/ui-signal-collectors": "0.27.4",
+  "@working-theory/ui-commerce": "0.23.27",
+  "@working-theory/ui-docs-blog": "0.23.27",
+  "@working-theory/ui-scheduling": "0.25.1",
+  "@working-theory/ui-signal-collectors": "0.27.5",
   "@working-theory/web": "0.0.0",
   "@working-theory/app-api": "1.0.0",
   "@working-theory/mcp": "0.0.0",
-  "@working-theory/database": "0.48.0"
+  "@working-theory/database": "0.49.0"
 }