create-ailk 0.8.0 → 0.10.0

package/site-templates/shapes/person-service/TEMPLATE-MANIFEST.json

@@ -4,7 +4,7 @@
   "categories": ["consulting"],
   "shape": "person-service",
   "design": "standard",
-  "generatedHash": "21c12a9cd50e661a56ca51d56b33a4750a8aae92a13ebd1127f7530eb7cb0d72",
+  "generatedHash": "a763acef14c0c36649ad99dd4a4fea566ebdf64257bddb2f553ab8823349c309",
   "layout": {
     "nav": "full",
     "footer": "columns",
@@ -111,6 +111,61 @@
       "chrome": "on",
       "sections": []
     },
+    {
+      "route": "/for",
+      "kind": "page",
+      "pageType": "UseCasesList",
+      "schema": "UseCasesList",
+      "shell": "MarketingShell",
+      "chrome": "on",
+      "sections": [
+        {
+          "type": "hero",
+          "component": "Hero"
+        },
+        {
+          "type": "items",
+          "component": "Items",
+          "options": {
+            "columns": 3
+          }
+        },
+        {
+          "type": "logoCloud",
+          "component": "LogoCloud",
+          "options": {
+            "layout": "inline"
+          }
+        },
+        {
+          "type": "testimonials",
+          "component": "Testimonials"
+        },
+        {
+          "type": "cta",
+          "component": "CTA"
+        },
+        {
+          "type": "faq",
+          "component": "FAQ"
+        }
+      ]
+    },
+    {
+      "route": "/for/[slug]",
+      "kind": "page",
+      "contentDir": "content/en/UseCase",
+      "seeds": [
+        "content/en/UseCase/persona-1.mdx",
+        "content/en/UseCase/persona-2.mdx",
+        "content/en/UseCase/persona-3.mdx"
+      ],
+      "pageType": "UseCase",
+      "schema": "UseCase",
+      "shell": "MarketingShell",
+      "chrome": "on",
+      "sections": []
+    },
     {
       "route": "/about",
       "kind": "page",
@@ -143,6 +198,13 @@
         {
           "type": "hero",
           "component": "Hero"
+        },
+        {
+          "type": "items",
+          "component": "Items",
+          "options": {
+            "columns": 2
+          }
         }
       ]
     },
@@ -208,25 +270,22 @@
       ]
     },
     {
-      "route": "/book-a-call",
-      "kind": "page",
-      "pageType": "BookCall",
-      "schema": "BookCall",
+      "route": "/sign-in",
+      "kind": "route",
+      "pageType": null,
+      "schema": null,
       "shell": "MarketingShell",
       "chrome": "on",
-      "sections": [
-        {
-          "type": "hero",
-          "component": "Hero"
-        },
-        {
-          "type": "items",
-          "component": "Items",
-          "options": {
-            "columns": 3
-          }
-        }
-      ]
+      "sections": []
+    },
+    {
+      "route": "/sign-up",
+      "kind": "route",
+      "pageType": null,
+      "schema": null,
+      "shell": "MarketingShell",
+      "chrome": "on",
+      "sections": []
     },
     {
       "route": "/purchase-policy",
@@ -311,6 +370,56 @@
         }
       ]
     },
+    {
+      "route": "/meet",
+      "kind": "page",
+      "pageType": "LandingPage",
+      "schema": "WebPage",
+      "shell": "MarketingShell",
+      "chrome": "on",
+      "sections": [
+        {
+          "type": "hero",
+          "component": "Hero"
+        },
+        {
+          "type": "items",
+          "component": "Items",
+          "options": {
+            "columns": 2
+          }
+        }
+      ]
+    },
+    {
+      "route": "/meet/[slug]",
+      "kind": "page",
+      "pageType": "BookCall",
+      "schema": "BookCall",
+      "shell": "MarketingShell",
+      "chrome": "on",
+      "sections": [
+        {
+          "type": "hero",
+          "component": "Hero"
+        },
+        {
+          "type": "cta",
+          "component": "CTA"
+        },
+        {
+          "type": "items",
+          "component": "Items",
+          "options": {
+            "columns": 3
+          }
+        },
+        {
+          "type": "content-block",
+          "component": "ContentBlock"
+        }
+      ]
+    },
     {
       "route": "/portfolio",
       "kind": "page",

package/site-templates/shapes/person-service/TEMPLATE-MANIFEST.md

@@ -96,6 +96,28 @@ One `page=<route>` region per roster row, generated from the seed file the compo
 _Detail route over `content/en/Service/` — 3 seed pages: `first-engagement.mdx`, `second-engagement.mdx`, `third-engagement.mdx`._
 <!-- generated:end -->
 
+`/for` (the persona hub — every shape carries the family now, #6878 D7):
+
+<!-- generated:begin page=/for -->
+
+| #   | Section                                                  | Component      | Copy (first line)                                                 |
+| --- | -------------------------------------------------------- | -------------- | ----------------------------------------------------------------- |
+| 1   | `hero` (eyebrow "Customers" · 2 CTAs)                    | `Hero`         | {Customers: who your product or service is for}                   |
+| 2   | `items` (columns=3 · items ×3)                           | `Items`        | {The jobs customers hire your product or service to do}           |
+| 3   | `logoCloud` (layout=inline · logos ×6)                   | `LogoCloud`    | Don’t just take our word for it                                   |
+| 4   | `testimonials` (quote · items ×1)                        | `Testimonials` | {A customer quote, in their own words, about the result they got} |
+| 5   | `cta` (box · checklist ×3 · 2 CTAs · closingLine)        | `CTA`          | {Switch to your product or service in time amount or less}        |
+| 6   | `faq` (accordion · items ×5 · 1 CTA · initialOpen first) | `FAQ`          | FAQs                                                              |
+
+<!-- generated:end -->
+
+`/for/[slug]`:
+
+<!-- generated:begin page=/for/[slug] -->
+
+_Detail route over `content/en/UseCase/` — 3 seed pages: `persona-1.mdx`, `persona-2.mdx`, `persona-3.mdx`._
+<!-- generated:end -->
+
 `/about`:
 
 <!-- generated:begin page=/about -->
@@ -111,9 +133,10 @@ _Detail route over `content/en/Service/` — 3 seed pages: `first-engagement.mdx
 
 <!-- generated:begin page=/contact -->
 
-| #   | Section                                                   | Component | Copy (first line)                     |
-| --- | --------------------------------------------------------- | --------- | ------------------------------------- |
-| 1   | `hero` (split · eyebrow "Contact" · checklist ×3 · 1 CTA) | `Hero`    | Get every message in your email, free |
+| #   | Section                                                   | Component | Copy (first line)                         |
+| --- | --------------------------------------------------------- | --------- | ----------------------------------------- |
+| 1   | `hero` (split · eyebrow "Contact" · checklist ×3 · 1 CTA) | `Hero`    | Get every message in your email, free     |
+| 2   | `items` (tiles · columns=2 · items ×4)                    | `Items`   | {Add appointment scheduling to your site} |
 
 <!-- generated:end -->
 
@@ -129,7 +152,7 @@ _Detail route over `content/en/Service/` — 3 seed pages: `first-engagement.mdx
 
 <!-- generated:end -->
 
-`/glossary`, `/newsletter`, `/book-a-call` (base-layer seeds every starter carries, #6658 D5 — `/newsletter` is this tree's own byte copy of the Free newsletter, D4/D9):
+`/glossary`, `/newsletter` (base-layer seeds every starter carries, #6658 D5 — `/newsletter` is this tree's own byte copy of the Free newsletter, D4/D9), plus the always-copied overlay's `/meet` hub and `/meet/[slug]` BookCall detail seeds (#6897 D3-D5):
 
 <!-- generated:begin page=/glossary -->
 
@@ -149,15 +172,38 @@ _Detail route over `content/en/Service/` — 3 seed pages: `first-engagement.mdx
 
 <!-- generated:end -->
 
-<!-- generated:begin page=/book-a-call -->
+<!-- generated:begin page=/meet -->
 
-| #   | Section                                | Component | Copy (first line)                          |
-| --- | -------------------------------------- | --------- | ------------------------------------------ |
-| 1   | `hero` (eyebrow "Book a call" · 1 CTA) | `Hero`    | {Book a call: what a visitor gets from it} |
-| 2   | `items` (columns=3 · items ×3)         | `Items`   | What happens on the call?                  |
+| #   | Section                                | Component | Copy (first line)     |
+| --- | -------------------------------------- | --------- | --------------------- |
+| 1   | `hero` (eyebrow "Meet")                | `Hero`    | {Book a time with us} |
+| 2   | `items` (tiles · columns=2 · items ×4) | `Items`   |                       |
 
 <!-- generated:end -->
 
+<!-- generated:begin page=/meet/[slug] -->
+
+| #   | Section                                | Component      | Copy (first line)                                |
+| --- | -------------------------------------- | -------------- | ------------------------------------------------ |
+| 1   | `hero` (eyebrow "Book a Call" · 1 CTA) | `Hero`         | Book a Call                                      |
+| 2   | `cta` (box · 1 CTA)                    | `CTA`          | {What booking a call would do for your visitors} |
+| 3   | `items` (columns=3 · items ×3)         | `Items`        | What happens on the call?                        |
+| 4   | `content-block` (1 CTA)                | `ContentBlock` |                                                  |
+
+<!-- generated:end -->
+
+`/sign-in`, `/sign-up` (code routes — the `SignInCard` island and the sign-up form inside the locale layout, whose header links both; listed so the manifest is a complete install record, #6797):
+
+<!-- generated:begin page=/sign-in -->
+
+_Code route — no content, no sections._
+<!-- generated:end -->
+
+<!-- generated:begin page=/sign-up -->
+
+_Code route — no content, no sections._
+<!-- generated:end -->
+
 `/purchase-policy` (this tree's own service-shape override — cancellation and refunds, D4):
 
 <!-- generated:begin page=/purchase-policy -->
@@ -199,7 +245,7 @@ _Detail route over `content/en/Service/` — 3 seed pages: `first-engagement.mdx
 
 <!-- generated:end -->
 
-`/portfolio` (this tree's own override of the `_base` seed — re-voiced for one person, both CTAs `/book-a-call` and `/contact`, D4):
+`/portfolio` (this tree's own override of the `_base` seed — re-voiced for one person, both CTAs `/meet/book-a-call` and `/contact`, D4):
 
 <!-- generated:begin page=/portfolio -->
 
@@ -230,19 +276,21 @@ The standard page set for this shape (`derive-roster.py --shape person-service -
 | `ProjectsList` · `Project`                                           | the portfolio pair (`/portfolio`) is the proof of past work; `/projects` is the paid signal-collectors sample listing        |
 | `Pricing`                                                            | a consultant sells named engagements, each priced on its own `Service` page or quoted on a call — not a pricing table        |
 | `CaseStudiesList` · `CaseStudy` · `TestimonialsList` · `ClientsList` | proof pages need real clients (#6658's reason for Free, unchanged); the portfolio pages carry placeholder before/after proof |
-| `UseCasesList` · `UseCase`                                           | each `Service` page names who it is for; the `_base` persona seeds are product copy that links `/pricing`                    |
 | `EventsList` · `Event` · `DownloadsList`                             | a placeholder starter has no events or downloads                                                                             |
 | `ResourcesHub` · `ResourceDetail` · `HowTo` · `Whitepaper`           | the Resources content system is the goal-driven default a site grows into, not a starter page                                |
 
 **Rows added:**
 
-| Row added                         | Reason                                                                                                                                                                    |
-| --------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `PurchasePolicyPage`              | every shape carries one purchase policy with its shape's sections — service: cancellation and refunds (#6646 D3, contract R2.3)                                           |
-| `PortfolioList` · `PortfolioItem` | the portfolio pair belongs to every shape's standard roster (operator, 2026-09-25; roadmap § 4)                                                                           |
-| `BlogList`                        | every Free scaffold's nav links `/blog` unconditionally (`renderNavConfig`, operator ruling 2026-09-23); the Free teaser serves it, as on organization-product (#6753 D3) |
+| Row added                         | Reason                                                                                                                                                                                                                        |
+| --------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `PurchasePolicyPage`              | every shape carries one purchase policy with its shape's sections — service: cancellation and refunds (#6646 D3, contract R2.3)                                                                                               |
+| `PortfolioList` · `PortfolioItem` | the portfolio pair belongs to every shape's standard roster (operator, 2026-09-25; roadmap § 4)                                                                                                                               |
+| `BlogList`                        | every Free scaffold's nav links `/blog` unconditionally (`renderNavConfig`, operator ruling 2026-09-23); the Free teaser serves it, as on organization-product (#6753 D3)                                                     |
+| `LandingPage`                     | the Free `/meet` meeting-types hub is a LandingPage seed, the same generic `[slug]` route serves it through (#6897 D3); the four `/meet/[slug]` BookCall detail seeds ride the `BookCall` type already in the standard roster |
+
+`|S − D| = 13` and `|R| = 18`.
 
-`|S − D| = 11` and `|R| = 15`.
+`/sign-in` and `/sign-up` are also rostered (#6797) — code routes (`kind: route`) with no page type, so they sit outside this set equation: the locale layout's header links both, and the roster of record lists every page the scaffold serves.
 
 ## 4. Roster, as the registry declares it
 
@@ -260,16 +308,21 @@ person-service:
     - { route: "/",                 kind: page, content: ["content/en/HomePage/home.mdx"] }
     - { route: "/services",         kind: page, content: ["content/en/ServicesList/services.mdx"] }
     - { route: "/services/[slug]",  kind: page, contentDir: "content/en/Service" }
+    - { route: "/for",              kind: page, content: ["content/en/UseCasesList/for.mdx"] }
+    - { route: "/for/[slug]",       kind: page, contentDir: "content/en/UseCase" }
     - { route: "/about",            kind: page, content: ["content/en/AboutPage/about.mdx"] }
     - { route: "/contact",          kind: page, content: ["content/en/ContactPage/contact.mdx"] }
     - { route: "/faq",              kind: page, content: ["content/en/FAQPage/faq.mdx"] }
     - { route: "/glossary",         kind: page, content: ["content/en/GlossaryList/glossary.mdx"] }
     - { route: "/newsletter",       kind: page, content: ["content/en/NewsletterSignup/newsletter.mdx"] }
-    - { route: "/book-a-call",      kind: page, content: ["content/en/BookCall/book-call.mdx"] }
+    - { route: "/sign-in",          kind: route }
+    - { route: "/sign-up",          kind: route }
     - { route: "/purchase-policy",  kind: page, content: ["content/en/PurchasePolicyPage/purchase-policy.mdx"] }
     - { route: "/privacy",          kind: page, content: ["content/en/PrivacyPage/privacy.mdx"] }
     - { route: "/terms",            kind: page, content: ["content/en/TermsPage/terms.mdx"] }
     - { route: "/blog",             kind: page, content: ["content/en/BlogList/blog.mdx"] }
+    - { route: "/meet",             kind: page, content: ["content/en/LandingPage/meet.mdx"] }
+    - { route: "/meet/[slug]",      kind: page, content: ["content/en/BookCall/book-a-call.mdx", "content/en/BookCall/onsite-estimate.mdx", "content/en/BookCall/start-project.mdx", "content/en/BookCall/onsite-service.mdx"] }
     - { route: "/portfolio",        kind: page, content: ["content/en/PortfolioList/portfolio.mdx"] }
     - { route: "/portfolio/[slug]", kind: page, contentDir: "content/en/PortfolioItem" }
 ```
@@ -280,11 +333,12 @@ By source:
 
 ```
 starter:  / · /services · /services/<slug> · /about · /contact · /faq
-          /glossary · /newsletter · /book-a-call · /purchase-policy
-          /privacy · /terms · /blog · /portfolio · /portfolio/<slug>
+          /glossary · /newsletter · /sign-in · /sign-up
+          /purchase-policy · /privacy · /terms · /blog · /meet · /meet/<slug>
+          /portfolio · /portfolio/<slug>
 ```
 
-Every row is module-less: `requires` is `[marketing]` alone, so `mergeRoster` contributes nothing beyond this tree's own fifteen rows.
+Every row is module-less: `requires` is `[marketing]` alone, so `mergeRoster` contributes nothing beyond this tree's own seventeen rows.
 
 ## 5. Component inventory
 

package/site-templates/shapes/person-service/ailk-template.json

@@ -6,5 +6,5 @@
     "provenance.json": ".ailk-template.json",
     "TEMPLATE-MANIFEST.json": ".ailk-site-manifest.json"
   },
-  "postInstall": "Starter person-service installed. Its /faq, /contact and /blog seed pages came with the always-copied overlay; /glossary, /newsletter, /book-a-call, /privacy and /terms with the base layer it extends (content/en/). This tree's own /, /about, /services (+ three engagements), /purchase-policy and /portfolio pages are its own compositions, written for one person. Every line of copy is a placeholder — replace it before you launch."
+  "postInstall": "Starter person-service installed. Its /faq, /contact, /blog, /meet and its four /meet/<slug> seed pages came with the always-copied overlay; /glossary, /newsletter, /privacy and /terms with the base layer it extends (content/en/). This tree's own /, /about, /services (+ three engagements), /purchase-policy and /portfolio pages are its own compositions, written for one person. Every line of copy is a placeholder \u2014 replace it before you launch."
 }

package/site-templates/shapes/person-service/content/en/AboutPage/about.mdx

@@ -24,7 +24,7 @@ sections:
         {
           "variant": "minimal",
           "headline": "Work with me",
-          "primaryCta": { "label": "Book a call", "href": "/book-a-call" },
+          "primaryCta": { "label": "Book a call", "href": "/meet/book-a-call" },
           "secondaryCta":
             {
               "label": "Get in touch",

package/site-templates/shapes/person-service/content/en/HomePage/home.mdx

@@ -14,7 +14,7 @@ sections:
           "eyebrow": "{Your Name}",
           "headline": "{One line on the outcome you deliver for clients}",
           "subheadline": "{One line on who you work with and what makes working with you different.}",
-          "primaryCta": { "label": "Book a call", "href": "/book-a-call" },
+          "primaryCta": { "label": "Book a call", "href": "/meet/book-a-call" },
           "secondaryCta":
             {
               "label": "Get in touch",
@@ -82,7 +82,7 @@ sections:
           "variant": "minimal",
           "headline": "Ready to talk about your project?",
           "description": "{One line inviting the reader to start the conversation.}",
-          "primaryCta": { "label": "Book a call", "href": "/book-a-call" },
+          "primaryCta": { "label": "Book a call", "href": "/meet/book-a-call" },
           "secondaryCta":
             {
               "label": "Get in touch",

package/site-templates/shapes/person-service/content/en/PortfolioList/portfolio.mdx

@@ -20,7 +20,8 @@ sections:
           "subheadline": "{Two or three sentences on why the comparison is the honest proof — what the before cost the client, what the after changed, and how a reader can check it.}",
           "subtitleSize": "lead",
           "ctaSize": "xl",
-          "primaryCta": { "label": "{Book a call}", "href": "/book-a-call" },
+          "primaryCta":
+            { "label": "{Book a call}", "href": "/meet/book-a-call" },
           "secondaryCta": { "label": "{Get in touch}", "href": "/contact" },
         },
     },
@@ -126,7 +127,8 @@ sections:
           "variant": "beam",
           "headline": "{Is your project the before or the after?}",
           "description": "{One line offering the reader the same comparison for their own project.}",
-          "primaryCta": { "label": "{Book a call}", "href": "/book-a-call" },
+          "primaryCta":
+            { "label": "{Book a call}", "href": "/meet/book-a-call" },
           "secondaryCta": { "label": "{Get in touch}", "href": "/contact" },
           "chips":
             [

package/site-templates/shapes/person-service/content/en/ServicesList/services.mdx

@@ -63,7 +63,7 @@ sections:
           "variant": "minimal",
           "headline": "Not sure which one?",
           "description": "{One line inviting the reader to ask instead of guessing.}",
-          "primaryCta": { "label": "Book a call", "href": "/book-a-call" },
+          "primaryCta": { "label": "Book a call", "href": "/meet/book-a-call" },
         },
     },
   ]

package/templates/.claude/agents/web.md

@@ -22,8 +22,8 @@ upstream packages; don't try to edit them locally.
 ## Read before edit
 
 1. `.claude/rules/architecture.md` — confirm what `apps/web` may
-   import. NextAuth handlers are the only API-shaped code allowed in
-   `apps/web`; everything else server-side goes through `apps/api`.
+   import, including its one database exception (the Better Auth
+   adapter). Everything else server-side goes through `apps/api`.
 2. The page or component you're modifying, plus any sibling files in
    the same directory.
 3. Any project-local theme override file before touching styles —
@@ -46,7 +46,8 @@ Run `pnpm preflight` before opening a PR.
 - Need a new content type? Add it under `content/<TypeName>/` and
   reference the schema from `@working-theory/schema`.
 - Need a database read? Wrong layer — `apps/web` does not read the
-  database. Route through `apps/api`.
+  database outside the one exception `.claude/rules/architecture.md`
+  names. Route through `apps/api`.
 
 ## Domain conventions
 
@@ -55,23 +56,24 @@ Run `pnpm preflight` before opening a PR.
   Adding `'use client'` to a file that just renders JSX is the
   default failure mode — resist it.
 - **Tailwind tokens only.** No raw hex, rgb, or arbitrary colors.
-  Use semantic tokens from `@working-theory/theme` (`bg-canvas`, `text-fg`,
+  Use semantic tokens from `@working-theory/theme` (`bg-surface`, `text-fg`,
   `border-border`, etc.). If a token doesn't exist, extend the theme;
   don't bypass.
 - **Mobile-first responsive.** Default styles target mobile;
   `md:`/`lg:` modifiers for larger viewports.
 - **MDX rendering** uses `next-mdx-remote/rsc`, never `@next/mdx`
   (the latter requires runtime config that fights Server Components).
-- **NextAuth handlers** are the only API-shaped code in `apps/web`
-  — they live at `apps/web/app/api/auth/[...nextauth]/route.ts`.
+- **Better Auth's route handler** is the only API-shaped code in
+  `apps/web` — it lives at `apps/web/app/api/auth/[...all]/route.ts`.
   Everything else goes to `apps/api`.
 
 ## Forbidden
 
 - Importing from `apps/api` or `apps/mcp` — these are peer apps;
   speak to the API via `@working-theory/api-client`.
-- Importing `@working-theory/database` — `apps/web` does not touch the DB;
-  route through `apps/api`.
+- Importing `@working-theory/database` outside the Better Auth adapter
+  (the exception `.claude/rules/architecture.md` names) — route through
+  `apps/api`.
 - Importing `resend`, `@react-email/*` directly — wrap through
   `@working-theory/email`, server-side via `apps/api`.
 - Adding a `utils.ts`, `helpers.ts`, `common.ts`, or `misc.ts` file

package/templates/.claude/rules/architecture.md

@@ -25,13 +25,16 @@ other.
   or `@working-theory/schema` (schema.org types).
 - Need an HTTP call from `apps/web` to `apps/api`? Use
   `@working-theory/api-client`. Don't import API route handlers directly.
-- Need database access? Only `apps/api` and `apps/mcp` import
-  `@working-theory/database`. `apps/web` never reads the database directly — it
-  goes through the HTTP API.
-- Cross-cutting integrations (auth, email, analytics) go through their
-  wrapper packages: `@working-theory/auth-client`, `@working-theory/email`,
-  `@working-theory/analytics`. Never import `next-auth`, `resend`, etc.
-  directly.
+- Need database access? `apps/api` and `apps/mcp` import
+  `@working-theory/database`. `apps/web` does not read the database — it goes
+  through `apps/api` via the published HTTP client. The one exception is the
+  Better Auth adapter (`apps/web/lib/prisma-for-auth.ts`, typed in
+  `apps/web/auth.ts`).
+- Cross-cutting integrations (email, analytics) go through their
+  wrapper packages: `@working-theory/email`, `@working-theory/analytics`.
+  Never import `resend`, etc. directly. Auth has no wrapper package: it is
+  Better Auth, configured in `apps/web/auth.ts` and mounted at
+  `apps/web/app/api/auth/[...all]/route.ts`.
 
 ## What you can verify, what you can't
 
@@ -61,6 +64,13 @@ These never appear in source code:
   and future prefixes included, by being absent from the list rather than
   by being named on a ban-list. Live keys live in your deployment
   platform's secrets store, never in source files or `.env`.
+  `@working-theory/stripe-client` does export one opt-in,
+  `admitLiveRestrictedKey()`: a server process that calls it once at
+  startup lets `getStripeClient()` accept a restricted live key
+  (`rk_live_`) — never `sk_live_` or `pk_live_`. Nothing in this site
+  calls it, so the default refusal stands; calling it is a deliberate
+  go-live decision, and `assertSandboxKey()` stays sandbox-only even
+  then.
 - Direct vendor SDK imports outside the wrapper packages
   (`import 'resend'` outside `@working-theory/email`, etc.).
 - Hardcoded production database URLs in committed files.

package/templates/.claude/skills/README.md

@@ -4,14 +4,15 @@ Skills are reusable Claude Code workflows scoped to this project. Each
 lives in its own subdirectory with a `SKILL.md` describing when to use
 it and how it works.
 
-The seven skills below ship with this project. Claude Code discovers
+The eight skills below ship with this project. Claude Code discovers
 them automatically at session start — nothing to install or enable.
 
 ## Available skills
 
 | Skill          | Purpose                                                                                                      |
 | -------------- | -------------------------------------------------------------------------------------------------------------- |
-| `add-page`     | Generate a new page: App Router route + MDX content stub + typed JSON-LD, in one confirm-before-write pass. Also documents the `schema:` frontmatter override for adding supplementary structured data to a page that already exists. |
+| `add-page`     | Add a page this site can serve — its content file, structured data and nav link — adding a missing route with `create-ailk add-route` first. Also documents the `schema:` frontmatter override for any page. |
+| `update-page`  | Rename a page — give it a new URL and/or a new title — in one plan-then-confirm pass: its content files, its own route folder, exact internal links and the manifest row move together, and the old URL gets a permanent redirect. |
 | `add-auth`     | Activate auth providers — magic-link via Resend, Google OAuth, GitHub OAuth.                                  |
 | `setup-deploy` | Emit deploy configuration — `vercel.json`, `.env.example`, and `RUNBOOK.md` — for a Vercel deploy. Asks where leads go (email or a database) and warns when neither is set. |
 | `setup-database` | Take the site from no database to a working lead inbox: provision Postgres, create the tables, pin the owner, and verify one test message lands in `/leads`. |