create-ailk 0.3.0 → 0.5.0

package/dist/module-architecture.js

@@ -253,18 +253,47 @@ export const MODULE_SLICES = {
             // The module's own /llms.txt variant; the bundle installs it onto
             // app/llms.txt/route.ts (#5365 D9, install-path mapping owned by #5373).
             "apps/web/lib/slices/docs-blog/llms-route.ts",
-            // The two shells and the six components, each off its public barrel and
-            // reachable only from the slice barrel that leaves with them (D-45, D5).
-            "packages/templates/src/shells/BlogShell.tsx",
-            "packages/templates/src/shells/DocsShell.tsx",
-            "packages/templates/src/shells/slices/docs-blog.ts",
-            "packages/ui/src/blocks/DocsActionBar.tsx",
-            "packages/ui/src/blocks/DocsArticleHeader.tsx",
-            "packages/ui/src/blocks/DocsFeedback.tsx",
-            "packages/ui/src/blocks/DocsSearch.tsx",
-            "packages/ui/src/blocks/DocsTocButton.tsx",
-            "packages/ui/src/chrome/DocsSidebar.tsx",
-            "packages/ui/src/chrome/slices/docs-blog.ts",
+            // The two shells and the six components moved to packages-paid/ui-docs-blog
+            // (#5581) — that package is a physical part of the tree, not a listed
+            // ownedFiles entry, and is installed via this slice's `patches` block below.
+        ],
+        // pageContributions (spec 5478; parent § D6 shape 1) — the two route
+        // surfaces this module mounts, each with the seed MDX it renders. The
+        // nine MDX files are exactly the nine on the tree and cannot come from
+        // the `templates/` snapshot: `apps/web/content` is in build-templates.mjs's
+        // EXCLUDE_TEMPLATE_DIRS and `template-overlay/` carries no blog or docs
+        // stub. They ride this module's own bundle, consistent with the route
+        // files above: `collectModuleFiles` in build-module-bundles.mjs stages
+        // every `pageContributions[].content` entry alongside `ownedFiles` and
+        // the `installMap` keys, and `copyTree` lands each at this same path.
+        //
+        // #5618 D6.2 — the module OWNS its sample content (Rule B): the blog
+        // listing, four sample posts and the three docs pages moved here out of
+        // `site-templates/marketing-site/`, so any template requiring docs-blog
+        // gets the samples and a keyed `--modules docs-blog` scaffold with no
+        // template lands them too. `launching-ailk.mdx` stays the module's fifth
+        // seed post; the Pro template maps its own post 05 ONTO that path as a
+        // copy override (D6.2a — spec § 7 finding 9 carries the seed's fate).
+        pageContributions: [
+            {
+                route: "/blog",
+                content: [
+                    "apps/web/content/en/blog/index.mdx",
+                    "apps/web/content/en/blog/01-8-things-that-prove-coding-skills-are-directly-linked-to-successfully-assembling-ikea-furniture.mdx",
+                    "apps/web/content/en/blog/02-5-ways-to-guarantee-your-startup-goes-nowhere-fast.mdx",
+                    "apps/web/content/en/blog/03-10-ideas-that-will-guarantee-1000x-growth.mdx",
+                    "apps/web/content/en/blog/04-7-keys-to-saas-success-the-elite-doesnt-want-you-to-know.mdx",
+                    "apps/web/content/en/blog/launching-ailk.mdx",
+                ],
+            },
+            {
+                route: "/docs",
+                content: [
+                    "apps/web/content/en/docs/getting-started.mdx",
+                    "apps/web/content/en/docs/configure.mdx",
+                    "apps/web/content/en/docs/deploy.mdx",
+                ],
+            },
         ],
         // patches (spec 5418 § 3 D1, Group G) — every Group G row that edits a
         // file the buyer's scaffold already has. Values transcribed verbatim
@@ -308,6 +337,8 @@ export const MODULE_SLICES = {
                             "fumadocs-core": "^16.10.4",
                             "fumadocs-mdx": "^15.0.12",
                             "@working-theory/fumadocs-schema": "workspace:*",
+                            // #5581 — the docs-blog module's paid component package (D5).
+                            "@working-theory/ui-docs-blog": "workspace:*",
                         },
                     },
                     {
@@ -374,19 +405,25 @@ export const MODULE_SLICES = {
     //
     // The FEAT-042 Organization → Workspace → Membership tenancy layer:
     // schema (auth/content namespaces) + workspace-scoped API (apps/api) +
-    // the authed workspace app surface (apps/workspace). Single-tenant sites
+    // the authed Admin app surface (apps/admin). Single-tenant sites
     // (module absent) ship none of this — same base apps/web, fixed scope.
     "multi-tenant": {
         apps: {
-            workspace: {
-                path: "apps/workspace",
-                description: "Next.js — authed workspace app (Organization → Workspace → Membership). Hosts the organization-plugin Better Auth handlers; imports the database only via lib/prisma-for-auth.ts (auth-adapter exception); all domain data via apps/api's workspace-scoped routes over HTTP.",
+            admin: {
+                path: "apps/admin",
+                description: "Next.js — authed Admin app (Organization → Workspace → Membership). Hosts the organization-plugin Better Auth handlers; imports the database only via lib/prisma-for-auth.ts (auth-adapter exception); all domain data via apps/api's workspace-scoped routes over HTTP.",
                 may_import_from: [
                     "database",
                     "packages/templates",
                     "packages/theme",
                     "packages/ui",
                     "packages/validation",
+                    // The `workspace` module's shared settings components (#5371 req. 6)
+                    // — the scaffolded-site twin of the root architecture.yaml grant on
+                    // `apps_paid.admin`. Pro Plus inherits Pro's module set, so a
+                    // saas-product scaffold carries both modules and this app composes
+                    // the identical panels apps/web does, with no forked copy.
+                    "packages/admin-ui",
                 ],
                 may_not_import_from: [
                     "apps/api",
@@ -458,12 +495,12 @@ export const MODULE_SLICES = {
                 description: "Stripe SDK wrapper + webhook signature verification",
                 may_import_from: ["packages/validation"],
             },
-            // apps/workspace presentation deps. templates is net-new here; theme/ui/
+            // apps/admin presentation deps. templates is net-new here; theme/ui/
             // validation duplicate the marketing slice's definitions VERBATIM so the
             // Object.assign merge in deriveArchitecture is order-independent (a
             // multi-tenant-only selection stays self-consistent).
             templates: {
-                description: "Shell/Chrome composition — AppShell (tier-5 shell); WorkspaceShell + ArtifactEditorShell ship inside this module itself, not the public package (D-45)",
+                description: "Shell/Chrome composition — AppShell (tier-5 shell); AdminShell + ArtifactEditorShell ship inside this module itself, not the public package (D-45)",
                 may_import_from: ["packages/theme", "packages/ui", "packages/validation"],
             },
             theme: {
@@ -525,11 +562,12 @@ export const MODULE_SLICES = {
         // ownedFiles (S1, #5088). Verified against the current filesystem and
         // server.ts's module-conditional registration (isModuleEnabled('multi-tenant')).
         //
-        // apps-paid/workspace/** is a single glob — the whole app (43 files as of
+        // apps-paid/admin/** is a single glob — the whole app (43 files as of
         // this pass, excluding __tests__/node_modules), just moved here from
-        // apps/workspace by a parallel workstream on this same branch. Unlike
-        // every other entry below, this one is intentionally a glob, not an
-        // enumeration.
+        // apps/workspace by a parallel workstream on this same branch. Later
+        // renamed in place from its former Workspace-prefixed directory name by
+        // #5637, the Admin-vocabulary rename. Unlike every other entry below,
+        // this one is intentionally a glob, not an enumeration.
         //
         // apps/api/src/routes/project-listings/ is MIXED (free anonymous surface
         // + tenant dashboard sharing one directory) — only the tenant-guarded
@@ -646,7 +684,112 @@ export const MODULE_SLICES = {
             "apps/web/app/[locale]/(authed)/waitlist/components/SignupsTable.tsx",
             "apps/web/app/[locale]/(authed)/waitlist/components/WaitlistComparisonTabs.tsx",
             "apps/web/app/[locale]/(authed)/waitlist/components/status-badges.tsx",
-            "apps-paid/workspace/**",
+            "apps-paid/admin/**",
+        ],
+        // The whole-app glob above lands its files at their REPO-relative path
+        // unless something re-roots them (`installBundleTree`'s `copyTree`
+        // excludes only `installMap` KEYS from its verbatim copy), so without a
+        // rename rule a keyed install left a stray source-tree-relative
+        // directory in the scaffold instead of the working `apps/admin` app
+        // this slice's own `apps.admin.path` (and `paid-paths.ts`'s
+        // `introducedAppPaths()`) already declares (#5626 D3/D4). The fix lives
+        // here, on the module, so `--modules multi-tenant` alone is fixed too —
+        // never as a per-template workaround.
+        //
+        // `installRoot`, not a literal `installMap` (#5644 D1): a committed
+        // 58-entry literal map — one line per staged file's proprietary source
+        // path — put every one of those paths into this OSS-shipped file's
+        // SOURCE TEXT, the exact leak class `scripts/check-oss-strip.sh` exists
+        // to catch. `build-module-bundles.mjs`'s `deriveGlobInstallMap` derives
+        // the equivalent per-file `installMap` at bundle-build time instead —
+        // one entry per file `expandEntry` yields for the glob entry above,
+        // byte-identical to the literal map it replaces — and the mock registry
+        // fixture calls the same derivation so it cannot drift from the
+        // producer's. See `installRoot`'s own doc on `ModuleSlice` above.
+        installRoot: "apps/admin/",
+    },
+    // ── workspace — Pro module: the single-workspace settings shell (D-27/D-49)
+    //
+    // `/admin` in apps/web's `(authed)` segment — General (rename), Site
+    // (identity / SEO / theme, over the already-shipped apps/api config routes)
+    // and Team (a read-only roster). The three panels live in the shared
+    // `packages/admin-ui` package so the multi-tenant Admin app (the
+    // Pro Plus app) composes the identical components rather than a fork.
+    //
+    // No `apps` / `namespaces` / `forbiddenPatterns` block: this module
+    // contributes to already-declared apps only (apps/web is BASE; apps/api is
+    // declared by multi-tenant / scheduling / commerce and is snapshotted whole).
+    workspace: {
+        // A PERMISSION, not a physical slice (#5371 D1a) — the identical shape
+        // docs-blog uses for `packages/fumadocs-schema`. `packages/` is never in
+        // SNAPSHOT_DIRS, so the package reaches a buyer as an npm/bundle
+        // dependency under `node_modules/`, never as a `packages/admin-ui`
+        // source sibling; the `patches` entry below is what puts it in the
+        // buyer's apps/web/package.json.
+        webImports: ["packages/admin-ui"],
+        packages: {
+            "admin-ui": {
+                description: "Shared Admin-settings components — the settings shell plus the General / Site / Team panels, presentational only (data + save callbacks as props)",
+                // packages/templates is required because AdminSettingsShell
+                // composes AppShell from @working-theory/templates/shells — the same
+                // composition apps/web's own account page uses.
+                may_import_from: [
+                    "packages/templates",
+                    "packages/theme",
+                    "packages/ui",
+                    "packages/validation",
+                ],
+            },
+        },
+        // SOURCE files only, and only the ones this module physically owns: the
+        // three apps/web route files and the two apps/api route files.
+        //
+        // `packages/admin-ui/**` is deliberately NOT listed (D1a). It is a
+        // whole package that is paid end to end, whose strip disposition is
+        // carried by architecture.yaml's `commercial_tier_moves_to` field (its
+        // future paid-tree home) rather than by a per-file inventory —
+        // exactly the disposition `packages/fumadocs-schema` carries for
+        // docs-blog. `multi-tenant`'s whole-app glob (above) works because
+        // SNAPSHOT_DIRS physically copies apps wholesale; a package is never in a
+        // snapshot root, so an ownedFiles enumeration would add nothing.
+        //
+        // `packages/api-client/src/workspace.ts` is NOT listed either (D1b):
+        // api-client is a base package every scaffold receives regardless of
+        // `--modules`, and the field doc above names it by name as a shared
+        // package deliberately left out even when genuinely single-purpose. The
+        // wrapper is harmless on a scaffold without this module — its calls 404,
+        // the same non-event any client wrapper produces against an unregistered
+        // route.
+        //
+        // Test companions (`__tests__/`) are never listed — the SOURCE-files-only
+        // rule above.
+        ownedFiles: [
+            "apps/web/app/[locale]/(authed)/admin/page.tsx",
+            "apps/web/app/[locale]/(authed)/admin/site/page.tsx",
+            "apps/web/app/[locale]/(authed)/admin/team/page.tsx",
+            "apps/api/src/routes/workspaces/general.ts",
+            "apps/api/src/routes/workspaces/members.ts",
+        ],
+        // patches — the dependency add that delivers the shared package to the
+        // buyer's apps/web, mirroring docs-blog's own fumadocs-schema merge-keys
+        // op. No next.config.mjs `add-transpile-package` op: the package ships
+        // compiled ESM in dist/ the same way every other @working-theory/*
+        // dependency apps/web already consumes does, and docs-blog's transpile op
+        // exists for the fumadocs SDK boundary, not for the dependency add itself.
+        patches: [
+            {
+                target: "apps/web/package.json",
+                kind: "json",
+                ops: [
+                    {
+                        op: "merge-keys",
+                        path: ["dependencies"],
+                        entries: {
+                            "@working-theory/admin-ui": "workspace:*",
+                        },
+                    },
+                ],
+            },
         ],
     },
     // ── scheduling — full-stack module (provider + routes + booker pages) ────
@@ -658,8 +801,10 @@ export const MODULE_SLICES = {
     //                 the ONLY holder of the scheduling credential.
     //   api           apps/api's own /v1/schedule/availability + /v1/schedule/book.
     //   presentation  the `booker` section (packages/ui, no iframe) rendered by
-    //                 the `schedule` route surface, plus the module-owned
-    //                 confirmation page at /schedule/confirmed.
+    //                 the `meet` route surface, plus the per-booking-type page
+    //                 and the module-owned confirmation page at /meet/:slug and
+    //                 /meet/confirmed (renamed from the schedule/ directory by
+    //                 #5563).
     //
     // The four forbidden patterns below are the module's whole security
     // argument, restated as boundary rules rather than left in a comment: the
@@ -752,16 +897,19 @@ export const MODULE_SLICES = {
         // consumer — unlike packages/validation below, a strip tool CAN delete
         // exactly these files without touching anything another module needs.
         //
-        // BOTH apps/web/app/[locale]/schedule pages are listed (#5182 Q9, disposed
-        // 2026-09-11). confirmed/page.tsx says outright in its own doc comment that
-        // "The module OWNS this page... a scaffold without the module has no such
-        // route", and its sibling page.tsx is the SOLE production constructor of a
-        // `booker` section: it builds the section literally in TypeScript
-        // (page.tsx:60, `type: "booker"`) rather than reading it from content, and
-        // its own header calls the route API-backed with "no content file that
-        // could disagree with the calendar". The create-ailk scaffolder already
-        // gates the whole `schedule` route surface (src/surfaces.ts), so the two
-        // pages arrive and depart together.
+        // ALL THREE apps/web/app/[locale]/meet pages are listed (#5182 Q9, disposed
+        // 2026-09-11; directory renamed from schedule/ to meet/ by #5563).
+        // confirmed/page.tsx says outright in its own doc comment that "The module
+        // OWNS this page... a scaffold without the module has no such route", and
+        // its sibling page.tsx is the SOLE production constructor of a `booker`
+        // section: it builds the section literally in TypeScript (page.tsx:60,
+        // `type: "booker"`) rather than reading it from content, and its own
+        // header calls the route API-backed with "no content file that could
+        // disagree with the calendar". [slug]/page.tsx is the third — the
+        // per-booking-type page #5563 added, composing its calLink from the same
+        // configured owner rather than reading one of its own. The create-ailk
+        // scaffolder already gates the whole `meet` route surface (src/surfaces.ts),
+        // so all three pages arrive and depart together.
         //
         // packages/sections-registry/src/registry.ts (the `booker:` entry) and
         // packages/validation/src/schemas/page-sections.ts (BookerSectionDataSchema,
@@ -790,13 +938,14 @@ export const MODULE_SLICES = {
         // scheduling-specific. This is a judgment call, not covered by this
         // card's explicit checklist: flagged for reviewer confirmation.
         //
-        // `packages/ui/src/sections/slices/scheduling.ts` (#5214) is the slice's own
-        // registration entry point: it statically imports Booker and registers it as
-        // the `booker` renderer, so it is the one file inside packages/ui that may
-        // reach a scheduling component — because it strips alongside them. The three
-        // files that path added on the OSS side — `SectionRenderer.tsx`,
-        // `slice-renderers.ts` and `ModuleAbsent.tsx` — are deliberately NOT listed
-        // here: they ship, and listing one would take the whole dispatch table with it.
+        // The Booker components and the slice's registration entry point (#5214)
+        // moved to packages-paid/ui-scheduling (#5581 U3); that package is a
+        // physical part of the tree, not a listed ownedFiles entry, and reaches a
+        // keyed scaffold through this slice's `patches` block below (D5). The
+        // three files the old in-packages/ui path added on the OSS side —
+        // `SectionRenderer.tsx`, `slice-renderers.ts` and `ModuleAbsent.tsx` — are
+        // deliberately NOT listed here: they ship, and listing one would take the
+        // whole dispatch table with it.
         ownedFiles: [
             "apps/api/src/routes/schedule/index.ts",
             "apps/api/src/services/scheduling/index.ts",
@@ -805,16 +954,36 @@ export const MODULE_SLICES = {
             "apps/mcp/src/tools/list_availability.ts",
             "apps/mcp/src/tools/get_event_meta.ts",
             "apps/mcp/src/tools/create_booking.ts",
-            "packages/ui/src/sections/Booker.tsx",
-            "packages/ui/src/sections/BookerIsland.tsx",
-            "packages/ui/src/blocks/BookerPanel.tsx",
-            "packages/ui/src/blocks/BookerSlotGrid.tsx",
-            "packages/ui/src/blocks/BookerAttendeeFields.tsx",
-            "packages/ui/src/blocks/BookerEventHeader.tsx",
-            "packages/ui/src/blocks/BookerDateStrip.tsx",
-            "packages/ui/src/sections/slices/scheduling.ts",
-            "apps/web/app/[locale]/schedule/page.tsx",
-            "apps/web/app/[locale]/schedule/confirmed/page.tsx",
+            "apps/web/app/[locale]/meet/page.tsx",
+            "apps/web/app/[locale]/meet/[slug]/page.tsx",
+            "apps/web/app/[locale]/meet/confirmed/page.tsx",
+        ],
+        // pageContributions (spec 5478; parent § D6 shape 1) — the booker, the
+        // per-booking-type page and the confirmation page, whose route files
+        // `ownedFiles` above already carries. No row names seed content: all
+        // three render from the /v1/schedule/* routes, not from an MDX file.
+        pageContributions: [
+            { route: "/meet" },
+            { route: "/meet/[slug]" },
+            { route: "/meet/confirmed" },
+        ],
+        // patches (#5581 U3, D5) — delivers the extracted component package to a
+        // keyed scaffold's apps/web, mirroring the signal-collectors slice's
+        // identical merge-keys op below.
+        patches: [
+            {
+                target: "apps/web/package.json",
+                kind: "json",
+                ops: [
+                    {
+                        op: "merge-keys",
+                        path: ["dependencies"],
+                        entries: {
+                            "@working-theory/ui-scheduling": "workspace:*",
+                        },
+                    },
+                ],
+            },
         ],
     },
     // ── signal-collectors — flows, deliverables, project listings, waitlist
@@ -898,10 +1067,23 @@ export const MODULE_SLICES = {
     // packages/ui: eleven components (D8) plus the NEW slice registration
     // entry point (D8a, mirroring sections/slices/scheduling.ts). Four of the
     // eleven (ProjectListingShelves, ListingPrivacyNotice, ProjectListingCard,
-    // ResultsReveal) have no consumer anywhere in the repo today — grep-
-    // confirmed orphaned exports, not a module-boundary fact; D8 places them
-    // here by subject (project-listing / results-reveal UI) rather than by
-    // reachability, since reachability cannot place an unreached file either.
+    // ResultsReveal) had no consumer anywhere IN THIS REPO at D8 authoring
+    // time — grep-confirmed, a module-boundary fact only in-repo. Three of the
+    // four (ProjectListingShelves, ProjectListingCard, ListingPrivacyNotice —
+    // plus the ListingWindowBand type ProjectListingCard exports) are, in
+    // fact, consumed CROSS-ORG: the samhenry site (salessmyth org) imports all
+    // four from the signal-collectors slice's re-export entry point
+    // (packages/ui/src/sections/slices/signal-collectors.ts, rules/cross-org-
+    // sharing.md), which #5488 additionally re-exports them from so that
+    // consumer can reach them by subpath. "No consumer anywhere in the repo"
+    // was therefore true in-repo and false across the org boundary — not a
+    // reachability fact a repo-scoped grep can see. ResultsReveal remains the
+    // one component of the four with no known consumer anywhere (in-repo or
+    // out) and is NOT re-exported by #5488 — it is not this card's claim to
+    // make it non-orphaned. D8's placement rule (by subject — project-listing
+    // / results-reveal UI — rather than by reachability, since reachability
+    // cannot place an unreached file either) is unchanged and still governs
+    // where all eleven live.
     "signal-collectors": {
         ownedFiles: [
             "apps/api/src/routes/flows/index.ts",
@@ -956,6 +1138,72 @@ export const MODULE_SLICES = {
             "apps/api/src/bin/seed-waitlist-experiments.ts",
             "apps/mcp/src/tools/get_flow.ts",
             "apps/mcp/src/tools/submit_flow_step.ts",
+            // ── The review surface (#5677) — CO-OWNED with multi-tenant ──────────
+            //
+            // Every path below is ALSO a multi-tenant `ownedFiles` entry and stays
+            // one. Listing a file under two modules is additive, not a transfer:
+            // `paidModuleTemplateExclusions()` unions every paid module's entries,
+            // so the `templates/` snapshot is unchanged, and a multi-tenant scaffold
+            // keeps receiving these from the multi-tenant bundle exactly as before.
+            // What changes is that a signal-collectors bundle now carries them too.
+            //
+            // WHY THEY MUST BE HERE. #5677 widened `server.ts`'s review-surface
+            // registration from `multi-tenant` to `multi-tenant || signal-collectors`,
+            // because signal-collectors is the module that SELLS the instruments
+            // these routes read back. Registration and DELIVERY are separate layers:
+            // the widened gate calls `sliceRoutePlugin("waitlistExperimentRoutes")`
+            // and imports `projectListingTenantRoutes`, so on a scaffold whose
+            // `AILK_ENABLED_MODULES` names signal-collectors but whose tree lacks
+            // these files, `loadSlice` throws ERR_MODULE_NOT_FOUND during `build()`
+            // — construction, so EVERY route 500s rather than one. That is not a
+            // feature gap; it is the outage shape `lib/slice-load.ts` exists to
+            // diagnose.
+            //
+            // It is not hypothetical: `marketing-site` — the Pro flagship in
+            // `template-manifest.ts` — declares
+            // `requires: ["marketing", "docs-blog", "scheduling", "signal-collectors"]`,
+            // i.e. signal-collectors WITHOUT multi-tenant. That is exactly the
+            // configuration that would crash, which is why the gate and the delivery
+            // land together rather than the delivery being deferred.
+            //
+            // The closure is tight, verified by grep rather than assumed: none of
+            // these files imports `lib/tenant-db.ts` or `services/tenant-context.ts`
+            // (both multi-tenant-only). #5677 retargeted `waitlist-dashboard.ts`'s
+            // type import of `tenant-context.js` to the base `services/default-tenant.ts`,
+            // which severed the one cross-slice edge that existed.
+            //
+            // `routes/project-listings/{start,patch-draft,submit,public,me,respond,
+            // resume-token,patch-copy}.ts` are NOT listed — they are the free
+            // anonymous surface and the mixed barrel, covered by the note above this
+            // array, and they already ship unconditionally.
+            "apps/api/src/routes/waitlist-experiments/index.ts",
+            "apps/api/src/routes/waitlist-experiments/list.ts",
+            "apps/api/src/routes/waitlist-experiments/comparison.ts",
+            "apps/api/src/routes/waitlist-experiments/signup.ts",
+            "apps/api/src/routes/waitlist-experiments/signups.ts",
+            "apps/api/src/routes/waitlist-experiments/respond.ts",
+            "apps/api/src/services/waitlist-dashboard.ts",
+            "apps/api/src/routes/project-listings/get.ts",
+            "apps/api/src/routes/project-listings/list.ts",
+            "apps/api/src/routes/project-listings/patch.ts",
+            // The dashboard itself. Without these the Pro scaffold would boot with
+            // reachable review routes and no UI to read them through, and the two
+            // files that DO already ship into every scaffold
+            // (`waitlist/format.ts`, `waitlist/components/ForbiddenState.tsx` — never
+            // owned by any module) would stay orphaned. They import only
+            // `@working-theory/api-client`, `@working-theory/ui` and
+            // `@working-theory/validation`, all base packages, so this pulls in no
+            // multi-tenant dependency.
+            "apps/web/app/[locale]/(authed)/waitlist/page.tsx",
+            "apps/web/app/[locale]/(authed)/waitlist/[experimentId]/page.tsx",
+            "apps/web/app/[locale]/(authed)/waitlist/[experimentId]/signups/[leadId]/page.tsx",
+            "apps/web/app/[locale]/(authed)/waitlist/components/ExperimentsTable.tsx",
+            "apps/web/app/[locale]/(authed)/waitlist/components/OfferFunnelTable.tsx",
+            "apps/web/app/[locale]/(authed)/waitlist/components/RollupTicker.tsx",
+            "apps/web/app/[locale]/(authed)/waitlist/components/ScoreTrace.tsx",
+            "apps/web/app/[locale]/(authed)/waitlist/components/SignupsTable.tsx",
+            "apps/web/app/[locale]/(authed)/waitlist/components/WaitlistComparisonTabs.tsx",
+            "apps/web/app/[locale]/(authed)/waitlist/components/status-badges.tsx",
             // apps/web/app/[locale]/flows/** deliberately NOT listed here (unlike
             // the docs-blog precedent's own `blog`/`docs` page.tsx entries above),
             // even though every file under it is signal-collectors territory and
@@ -982,18 +1230,103 @@ export const MODULE_SLICES = {
             // `NESTED_FOREIGN_MODULE_ENTRIES` for the companion fix that keeps its
             // presence from falsely reading as "projects carried".
             "apps/web/app/[locale]/projects/apply/ListingApplicationClient.tsx",
-            "packages/ui/src/sections/ListingApplicationFlow.tsx",
-            "packages/ui/src/sections/ProjectListingShelves.tsx",
-            "packages/ui/src/sections/FlowStepper.tsx",
-            "packages/ui/src/blocks/FlowSidePanel.tsx",
-            "packages/ui/src/blocks/ListingFullPreview.tsx",
-            "packages/ui/src/blocks/ListingQuestionReview.tsx",
-            "packages/ui/src/blocks/ListingTilePreview.tsx",
-            "packages/ui/src/blocks/ListingPrivacyNotice.tsx",
-            "packages/ui/src/blocks/ProjectListingCard.tsx",
-            "packages/ui/src/blocks/ResponseChart.tsx",
-            "packages/ui/src/blocks/ResultsReveal.tsx",
-            "packages/ui/src/sections/slices/signal-collectors.ts",
+            // #5581 U4 — the eleven signal-collectors components + the slice's own
+            // re-export entry point moved to packages-paid/ui-signal-collectors;
+            // the package is delivered to a keyed scaffold via `patches` below,
+            // not via `ownedFiles`/`installMap` (D5).
+            // #5562 — the report reader at `/reports/<slug>`. UNLIKE the flow routes
+            // above, this one DOES belong in `ownedFiles`, and for the same reason
+            // `projects/apply/ListingApplicationClient.tsx` does: `/reports` is a URL
+            // segment `MODULE_SURFACES["signal-collectors"] = ["flows"]` does not gate,
+            // so `excludedRoutePaths()` would leave it in a keyless scaffold. It has no
+            // upgrade-path fixture to protect either — it is net-new here, so nothing
+            // in `templates/` can regress by its absence.
+            "apps/web/app/[locale]/reports/[slug]/page.tsx",
+            //
+            // The two sections that route composes — `report-header` and
+            // `reports-list` — are deliberately NOT owned here. They are
+            // `SectionRenderer` DISPATCH entries with static imports, so stripping
+            // them would leave the renderer with dangling imports in a keyless
+            // scaffold; the escape hatch for a slice-owned dispatch entry is the
+            // `ModuleAbsent` placeholder (`booker`, `payment-receipt`), which is
+            // machinery neither of these needs. `document-viewer` (#5270) — the
+            // reader this route is built around, and the section with the strongest
+            // claim to being deliverables-only — is likewise unowned base
+            // `packages/ui`. A section is vocabulary; the ROUTE is the module.
+        ],
+        // pageContributions (spec 5478; parent § D6 shape 2) — the three flow
+        // routes, named exactly as `surfaces.ts`'s ROUTE_SINCE keys name them.
+        // ROWS AND SEED ONLY: unlike docs-blog and scheduling above, this module's
+        // route code is deliberately NOT in `ownedFiles` (see the comment inside
+        // that array). The first two rows' code reaches a scaffold from the
+        // `templates/` snapshot, retained because the `flows` surface is enabled;
+        // the results row's code is `commerce`'s (`commerce.ownedFiles` carries
+        // `results/[payload]/page.tsx` + its two client files below, and
+        // `paidModuleTemplateExclusions` strips every paid module's owned files
+        // from the snapshot unconditionally), so that one row rides a DIFFERENT
+        // module's bundle — recorded in spec 5478 § 8 item 1, whose delivery
+        // consequence is #5481's and #5464's. Declaring the rows here changes none
+        // of it: a contribution is data, and which delivery shape carries the code
+        // is a property of the module, not of the contribution.
+        pageContributions: [
+            { route: "/flows/[slug]" },
+            { route: "/flows/[slug]/start" },
+            { route: "/flows/[slug]/results/[payload]" },
+            // #5562 — the report reader. Unlike the three rows above, this row's
+            // code IS this module's own `ownedFiles` (see the note beside it), so
+            // the contribution and the delivery shape carrying it agree here.
+            { route: "/reports/[slug]" },
+        ],
+        // installMap (#5618 D6.3) — the module's ten sample files, moved here out
+        // of `site-templates/marketing-site/` so the module OWNS its samples
+        // (Rule B) and a keyed `--modules signal-collectors` scaffold with no
+        // template lands them. Their in-repo home is
+        // `packages/create-ailk/module-templates/signal-collectors/**`, mirroring
+        // `commerce.installMap` below — the only other slice-level map — because
+        // an `installMap` KEY is a repo-relative source the producer copies
+        // literally, and `content/en/ProjectsList/projects.mdx` is ALSO this
+        // repo's own live marketing copy (a different file), which
+        // build-templates.mjs keeps out of every scaffold: under
+        // `module-templates/` the two never meet.
+        //
+        // Four entries are real renames (the flow and waitlist seeds the API
+        // reads, and the report PDF under apps/web/public/); the six MDX entries
+        // are self-addressed because no `pageContributions` row declares
+        // `/projects`, `/projects/[slug]` or `/thanks/[slug]` yet (spec § 7
+        // finding 7 — declaring them changes the enabled-surface set and so the
+        // Pro scaffold's file set, a separate decision). Once those rows exist
+        // the six move to `pageContributions[].content` with no further
+        // migration. `generate-sample-report.py` keeps its root-level
+        // destination (finding 1 — AC7 forbids changing the Pro file set).
+        installMap: {
+            "packages/create-ailk/module-templates/signal-collectors/content/en/ProjectsList/projects.mdx": "content/en/ProjectsList/projects.mdx",
+            "packages/create-ailk/module-templates/signal-collectors/content/en/Project/fit-check-funnel.mdx": "content/en/Project/fit-check-funnel.mdx",
+            "packages/create-ailk/module-templates/signal-collectors/content/en/Project/launch-site-in-fourteen-days.mdx": "content/en/Project/launch-site-in-fourteen-days.mdx",
+            "packages/create-ailk/module-templates/signal-collectors/content/en/ThankYouPage/contact.mdx": "content/en/ThankYouPage/contact.mdx",
+            "packages/create-ailk/module-templates/signal-collectors/content/en/ThankYouPage/newsletter.mdx": "content/en/ThankYouPage/newsletter.mdx",
+            "packages/create-ailk/module-templates/signal-collectors/content/en/ThankYouPage/apply.mdx": "content/en/ThankYouPage/apply.mdx",
+            "packages/create-ailk/module-templates/signal-collectors/flows/fit-check.flow.json": "database/flows/fit-check.flow.json",
+            "packages/create-ailk/module-templates/signal-collectors/waitlist/launch-waitlist.experiment.json": "database/waitlist/launch-waitlist.experiment.json",
+            "packages/create-ailk/module-templates/signal-collectors/reports/sample-report.pdf": "apps/web/public/reports/sample-report.pdf",
+            "packages/create-ailk/module-templates/signal-collectors/reports/generate-sample-report.py": "reports/generate-sample-report.py",
+        },
+        // patches (#5581 U4, D5) — delivers the extracted component package to a
+        // keyed scaffold's apps/web, mirroring the workspace slice's identical
+        // merge-keys op above.
+        patches: [
+            {
+                target: "apps/web/package.json",
+                kind: "json",
+                ops: [
+                    {
+                        op: "merge-keys",
+                        path: ["dependencies"],
+                        entries: {
+                            "@working-theory/ui-signal-collectors": "workspace:*",
+                        },
+                    },
+                ],
+            },
         ],
     },
     // ── commerce — per-site paid add-on (D-47, amending D-26) ─────────────────
@@ -1091,32 +1424,10 @@ export const MODULE_SLICES = {
             "apps/api/src/routes/flows/recommender.ts",
             "apps/api/src/services/recommender-capture.ts",
             "apps/api/src/services/flow-checkouts.ts",
-            "packages/ui/src/blocks/CheckoutForm.tsx",
-            "packages/ui/src/blocks/CheckoutForm.text.ts",
-            "packages/ui/src/blocks/CheckoutPriceCard.tsx",
-            "packages/ui/src/blocks/PaymentLinkCard.tsx",
-            "packages/ui/src/blocks/PaymentLinkCard.text.ts",
-            "packages/ui/src/blocks/PaymentLinkForm.tsx",
-            "packages/ui/src/blocks/PaymentLinkForm.text.ts",
-            "packages/ui/src/blocks/PaymentLinkList.tsx",
-            "packages/ui/src/blocks/InvoiceForm.tsx",
-            "packages/ui/src/blocks/InvoiceForm.text.ts",
-            "packages/ui/src/blocks/InvoiceList.tsx",
-            "packages/ui/src/blocks/InvoiceList.text.ts",
-            "packages/ui/src/blocks/SubscriptionStatus.tsx",
-            "packages/ui/src/blocks/SubscriptionStatus.text.ts",
-            "packages/ui/src/blocks/StripeActionButton.tsx",
-            "packages/ui/src/blocks/PaymentStatusBadge.tsx",
-            "packages/ui/src/blocks/PaymentStatusBadge.text.ts",
-            "packages/ui/src/blocks/PaymentResult.tsx",
-            "packages/ui/src/blocks/PaymentResult.text.ts",
-            "packages/ui/src/blocks/PortalEntry.tsx",
-            "packages/ui/src/panels/InvoiceDetail.tsx",
-            "packages/ui/src/panels/InvoiceDetail.text.ts",
-            "packages/ui/src/sections/PaymentReceipt.tsx",
-            "packages/ui/src/sections/PricingTable.tsx",
-            "packages/ui/src/sections/PricingTable.text.ts",
-            "packages/ui/src/sections/slices/commerce.ts",
+            // #5581 U5 — the fifteen commerce components (+ ten .text.ts extractors
+            // + the slice's own re-export entry point) moved to
+            // packages-paid/ui-commerce; the package is delivered to a keyed
+            // scaffold via `patches` below, not via `ownedFiles`/`installMap` (D5).
             "apps/web/app/[locale]/flows/[slug]/checkout.actions.ts",
             "apps/web/app/[locale]/flows/[slug]/results/[payload]/page.tsx",
             "apps/web/app/[locale]/flows/[slug]/results/[payload]/ResultsClient.tsx",
@@ -1147,6 +1458,24 @@ export const MODULE_SLICES = {
             "packages/create-ailk/module-templates/commerce/.claude/skills/scaffold-commerce/templates/stripe-config.template.ts": ".claude/skills/scaffold-commerce/templates/stripe-config.template.ts",
             "packages/create-ailk/module-templates/commerce/.claude/skills/scaffold-commerce/templates/subscription-route.template.ts": ".claude/skills/scaffold-commerce/templates/subscription-route.template.ts",
         },
+        // patches (#5581 U5, D5) — delivers the extracted component package to a
+        // keyed scaffold's apps/web, mirroring the workspace slice's identical
+        // merge-keys op above.
+        patches: [
+            {
+                target: "apps/web/package.json",
+                kind: "json",
+                ops: [
+                    {
+                        op: "merge-keys",
+                        path: ["dependencies"],
+                        entries: {
+                            "@working-theory/ui-commerce": "workspace:*",
+                        },
+                    },
+                ],
+            },
+        ],
     },
 };
 /**
@@ -1194,6 +1523,48 @@ export function normalizeModules(modules) {
  *   Passed in rather than derived from `import.meta.url`, which ts-jest cannot
  *   load — the same reason `sync-routes.ts` documents for staying pure.
  */
+/**
+ * Scaffold destinations that MORE THAN ONE module's `ownedFiles` declares —
+ * the co-ownership the `#5618 D4` install-time ownership registry must treat
+ * as intentional rather than as an overwrite (#5702 follow-up).
+ *
+ * Co-ownership is how a file reaches a scaffold under either of two modules
+ * without being transferred away from the other. #5677 needed it for the
+ * submissions review surface: the routes register under
+ * `multi-tenant || signal-collectors`, so BOTH bundles must be able to
+ * deliver them, or the module that lacks them throws
+ * `ERR_MODULE_NOT_FOUND` during `build()`.
+ *
+ * `validateLayerOwnership` (`lib/extract-module-bundle.ts`) refuses a
+ * destination an earlier layer already wrote, because a silent
+ * last-writer-wins between two modules that disagree is the bug `#5618 D4`
+ * exists to catch. Two modules that both DECLARE the same repo file are not
+ * that case: they stage the same bytes from the same source, so whichever
+ * lands second writes what is already there. Without this allowance a
+ * scaffold selecting both modules — `saas-product`, whose `requires` names
+ * `signal-collectors` AND `multi-tenant` — aborts mid-install, after the
+ * first module's files are on disk.
+ *
+ * Only a DECLARED overlap is allowed. A destination two layers collide on
+ * without both naming it in `ownedFiles` is still refused, which is the
+ * whole invariant.
+ */
+export function coOwnedModuleDestinations() {
+    const seen = new Map();
+    for (const slice of Object.values(MODULE_SLICES)) {
+        // A module's own list is deduplicated first: repetition within one slice
+        // is not co-ownership and must not license an overlap on its own.
+        for (const file of new Set(slice.ownedFiles ?? [])) {
+            seen.set(file, (seen.get(file) ?? 0) + 1);
+        }
+    }
+    const coOwned = new Set();
+    for (const [file, count] of seen) {
+        if (count > 1)
+            coOwned.add(file);
+    }
+    return coOwned;
+}
 export function paidModuleTemplateExclusions(snapshotRoots, repoRoot) {
     const roots = new Set(snapshotRoots);
     const excluded = new Set();