create-ailk 0.9.0 → 0.10.0

package/README.md

@@ -52,9 +52,9 @@ pnpm create ailk@latest my-site --shape organization-service --license <key>
 
 `--design minimalism` picks the other look and needs a Pro or Pro Plus key;
 `standard` (the default) needs none. `--template <alias>` scaffolds one of the
-four named aliases (`marketing-site-free`, `marketing-site`, `saas-product`,
-`minimalism-site`) — each fixes a shape, a design and its own module list — and
-cannot be combined with `--shape` or `--design`.
+three named aliases (`marketing-site-free`, `marketing-site`, `saas-product`) —
+each fixes a shape, a design and its own module list — and cannot be combined
+with `--shape` or `--design`.
 
 ### Add a purchased module to an existing site
 

package/dist/cli.js

@@ -43,6 +43,7 @@ import { ADD_ROUTE_HELP, AddRouteRefusedError, addRouteToScaffold, formatAddRout
 import { APPLY_DESIGN_HELP, applyDesign, formatApplyDesignReport, parseApplyDesignArgs, } from "./apply-design.js";
 import { CLAUDE_MD_CHECK_PATH } from "./claude-md.js";
 import { buildScaffoldMarkers } from "./copy.js";
+import { assertReleased } from "./lib/module-license-gate.js";
 import { FREE_PREREQUISITES_NOTE, LICENSED_PREREQUISITES_NOTE, isLicensedInstall, proCallout, } from "./lib/pro-callout.js";
 import { LICENSE_SET_HELP, runLicenseSet } from "./license-set.js";
 import { helpText, parseCliArgs, parseModules, resolveCliShape, toScaffoldOptions, } from "./parse-args.js";
@@ -207,7 +208,17 @@ async function main() {
     }
     // No silent default (#6754 D2/D3): a scaffold run naming neither --shape
     // nor --template asks for a shape on a terminal and is refused without one.
-    const opts = await resolveCliShape(parseCliArgs(argv, { interactive: process.stdin.isTTY === true }), { input: process.stdin, output: process.stdout });
+    // A --design or --modules outside the release scope is refused before that
+    // prompt asks anything (#6984); scaffold() checks the full run again.
+    const parsed = parseCliArgs(argv, { interactive: process.stdin.isTTY === true });
+    if (parsed.needsShapePrompt && !parsed.help && !parsed.version) {
+        assertReleased("designs", [parsed.design]);
+        assertReleased("modules", parsed.modules ?? []);
+    }
+    const opts = await resolveCliShape(parsed, {
+        input: process.stdin,
+        output: process.stdout,
+    });
     // Deprecation notice for a retired `--surfaces` id (#5563 D2). `surfaces.ts`
     // stays pure — `canonicalizeSurface` only resolves the alias — so this is
     // the one place that prints: compare the raw `--surfaces` argv token

package/dist/lib/module-license-gate.d.ts

@@ -1,26 +1,3 @@
-/**
- * Paid-module license gate (K1, #5089 — Flavor 3). Orchestrates
- * `module-tier.ts`'s classification + `fetch-module.ts`'s authenticated
- * fetch into the three honest states the CLI must surface:
- *
- *   (a) no key + a paid module requested  → conversion hint, non-zero, ZERO
- *       network (mirrors `install-skill.ts`'s free-tier short-circuit).
- *   (b) a lapsed/invalid key + a paid module → "your licence does not cover
- *       this", non-zero (the module distribution's own 401 — see
- *       `fetch-module.ts`'s file doc for why there is no local JWT
- *       pre-check here).
- *   (c) a valid key → every requested paid module's bundle bytes, ready for
- *       `extract-module-bundle.ts` to merge into the scaffold.
- *
- * A Free-only request (no paid modules) never reaches the key check at all —
- * `resolvePaidModules` returns immediately, before touching `process.env` or
- * the network, so a bare/all-Free scaffold is provably unaffected by this
- * gate (K1's regression floor).
- *
- * Also carries the design gate (#6760): `assertDesignAllowed` refuses a
- * non-`standard` design at the `free` level, naming the design and the
- * run's level, before `scaffold()`'s first disk write.
- */
 import type { ModuleName } from "../parse-args.js";
 import { type Level } from "./module-tier.js";
 /**
@@ -38,6 +15,35 @@ export declare const CONVERSION_HINT_URL = "https://ailaunchkit.ai/pricing";
 export declare class LicenseRequiredError extends Error {
     constructor(message: string);
 }
+/** The five axes `release-scope.json` declares (spec 6977 D3). */
+export type ReleaseAxis = "templates" | "shapes" | "designs" | "modules" | "levels";
+/** `gated` and `deferred` are both refused; only a `gated` one gets negative checks. */
+export type ReleaseStatus = "released" | "gated" | "deferred";
+export type ReleaseScope = Readonly<Record<ReleaseAxis, Readonly<Record<string, ReleaseStatus>>>>;
+/**
+ * The package-root `release-scope.json` (shipped in `files`). A static JSON
+ * import, not an `import.meta.url` read, for `fetch-module.ts`'s reason: jest
+ * loads this module directly. `release-scope.test.ts` pins every registry
+ * name to an entry here (R5).
+ */
+export declare const RELEASE_SCOPE: ReleaseScope;
+/** Thrown for a surface outside the release scope — a refusal, not a licence state. */
+export declare class ReleaseScopeError extends Error {
+    constructor(message: string);
+}
+/**
+ * Refuse any of `names` that `scope[axis]` marks `gated` or `deferred`, with
+ * the not-available message `parse-args.ts` gives a reserved shape. A name
+ * the scope does not list (a customer's own design, say) is not refused.
+ * Bypassed when `AILK_RELEASE_SCOPE=ignore` — this package's jest setup and
+ * an operator's own run; a published CLI never sets it.
+ *
+ * Called on the scaffold path only (`scaffold()`, `cli.ts`, and the level
+ * check in `resolveModuleSet`) — never from `parseModules`, so `add-module`
+ * and `--sync-architecture` keep working on a site that already carries a
+ * gated module.
+ */
+export declare function assertReleased(axis: ReleaseAxis, names: readonly (string | undefined)[], scope?: ReleaseScope): void;
 /**
  * Design names every level renders (#6760 D1). Anything else in
  * `STARTER_DESIGNS` is Pro and up. A path design's Free-ness is decided by

package/dist/lib/module-license-gate.js

@@ -1,3 +1,31 @@
+/**
+ * Paid-module license gate (K1, #5089 — Flavor 3). Orchestrates
+ * `module-tier.ts`'s classification + `fetch-module.ts`'s authenticated
+ * fetch into the three honest states the CLI must surface:
+ *
+ *   (a) no key + a paid module requested  → conversion hint, non-zero, ZERO
+ *       network (mirrors `install-skill.ts`'s free-tier short-circuit).
+ *   (b) a lapsed/invalid key + a paid module → "your licence does not cover
+ *       this", non-zero (the module distribution's own 401 — see
+ *       `fetch-module.ts`'s file doc for why there is no local JWT
+ *       pre-check here).
+ *   (c) a valid key → every requested paid module's bundle bytes, ready for
+ *       `extract-module-bundle.ts` to merge into the scaffold.
+ *
+ * A Free-only request (no paid modules) never reaches the key check at all —
+ * `resolvePaidModules` returns immediately, before touching `process.env` or
+ * the network, so a bare/all-Free scaffold is provably unaffected by this
+ * gate (K1's regression floor).
+ *
+ * Also carries the design gate (#6760): `assertDesignAllowed` refuses a
+ * non-`standard` design at the `free` level, naming the design and the
+ * run's level, before `scaffold()`'s first disk write.
+ *
+ * And the release-scope gate (#6984, spec 6977 D3): `assertReleased` refuses
+ * a template, shape, design, module or level that `release-scope.json` marks
+ * `gated` or `deferred`, on the scaffold path only.
+ */
+import releaseScopeJson from "../../release-scope.json" with { type: "json" };
 import { FetchModuleError, fetchModule } from "./fetch-module.js";
 import { assertLicenseKeyShape } from "./license-key-files.js";
 import { ADD_ONS, LEVEL_LABEL, LEVEL_MODULES, OPT_IN_MODULES, PAID_MODULES, classifyModules, composeModuleSet, levelOf, } from "./module-tier.js";
@@ -19,6 +47,74 @@ export class LicenseRequiredError extends Error {
         this.name = "LicenseRequiredError";
     }
 }
+/**
+ * The package-root `release-scope.json` (shipped in `files`). A static JSON
+ * import, not an `import.meta.url` read, for `fetch-module.ts`'s reason: jest
+ * loads this module directly. `release-scope.test.ts` pins every registry
+ * name to an entry here (R5).
+ */
+export const RELEASE_SCOPE = releaseScopeJson;
+const AXIS_NOUN = {
+    templates: "template",
+    shapes: "shape",
+    designs: "design",
+    modules: "module",
+    levels: "level",
+};
+/** Thrown for a surface outside the release scope — a refusal, not a licence state. */
+export class ReleaseScopeError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "ReleaseScopeError";
+    }
+}
+const RELEASE_STATUSES = ["released", "gated", "deferred"];
+/**
+ * Refuse a scope carrying a status other than `released`, `gated` or
+ * `deferred` — fail closed: a misspelled status never reads as released.
+ */
+function assertValidScope(scope) {
+    for (const [axis, statuses] of Object.entries(scope)) {
+        for (const [name, status] of Object.entries(statuses)) {
+            if (!RELEASE_STATUSES.includes(status)) {
+                throw new ReleaseScopeError(`release-scope.json ${axis}."${name}" is "${String(status)}" — expected one of: ${RELEASE_STATUSES.join(", ")}`);
+            }
+        }
+    }
+}
+/**
+ * Refuse any of `names` that `scope[axis]` marks `gated` or `deferred`, with
+ * the not-available message `parse-args.ts` gives a reserved shape. A name
+ * the scope does not list (a customer's own design, say) is not refused.
+ * Bypassed when `AILK_RELEASE_SCOPE=ignore` — this package's jest setup and
+ * an operator's own run; a published CLI never sets it.
+ *
+ * Called on the scaffold path only (`scaffold()`, `cli.ts`, and the level
+ * check in `resolveModuleSet`) — never from `parseModules`, so `add-module`
+ * and `--sync-architecture` keep working on a site that already carries a
+ * gated module.
+ */
+export function assertReleased(axis, names, scope = RELEASE_SCOPE) {
+    if (process.env["AILK_RELEASE_SCOPE"] === "ignore")
+        return;
+    assertValidScope(scope);
+    const statuses = scope[axis];
+    for (const name of names) {
+        if (name === undefined)
+            continue;
+        const status = statuses[name];
+        if (status !== "gated" && status !== "deferred")
+            continue;
+        const released = Object.keys(statuses).filter((n) => statuses[n] === "released");
+        // A level comes from the key, never a flag — so it points at what the run CAN choose.
+        const choose = axis === "levels"
+            ? `Your licence key's level is ${name}; name the modules you want with --modules (one of: ${Object.keys(scope.modules)
+                .filter((m) => scope.modules[m] === "released")
+                .join(", ")}).`
+            : `Choose one of: ${released.join(", ")}.`;
+        throw new ReleaseScopeError(`${AXIS_NOUN[axis]} "${name}" is not available yet. ${choose}`);
+    }
+}
 /**
  * Design names every level renders (#6760 D1). Anything else in
  * `STARTER_DESIGNS` is Pro and up. A path design's Free-ness is decided by
@@ -223,6 +319,8 @@ export async function resolveModuleSet(options) {
         return { modules, bundles };
     }
     const { level, bundles } = await deriveLevel(options);
+    // #6984 — a gated level (Pro Plus) is refused before its defaults compose.
+    assertReleased("levels", [level]);
     const modules = composeModuleSet(namedList, level);
     const { paid } = classifyModules(modules);
     const missing = paid.filter((m) => !bundles.has(m));

package/dist/module-architecture.js

@@ -1503,8 +1503,8 @@ export const MODULE_SLICES = {
         // module's own `pageContributions`/`starter-grid.ts` rows respectively,
         // so this module installs its own seeds for them directly, unlike the
         // sample rows above. `/referral`'s seed and flow move here the same way,
-        // moved out of the retired `minimalism-site` tree (spec 6892 D3), which
-        // owned no code of its own for either route.
+        // moved out of a retired template tree (spec 6892 D3), which owned no
+        // code of its own for either route.
         // `generate-sample-report.py` keeps its root-level destination
         // (finding 1 — AC7 forbids changing the Pro file set).
         installMap: {
@@ -1661,7 +1661,7 @@ export const MODULE_SLICES = {
         // it sits outside build-templates.mjs's SNAPSHOT_DIRS/overlay, so
         // ownedFiles/paidModuleTemplateExclusions cannot reach it) to
         // `module-templates/commerce/.claude/skills/scaffold-commerce/`, and
-        // delivered into a keyed scaffold by `installMap` instead. Ten literal
+        // delivered into a keyed scaffold by `installMap` instead. Eleven literal
         // entries, not one directory entry: `extractModuleBundle`'s
         // `validateInstallMap` requires every source to be a FILE the bundle
         // produced (`extract-module-bundle.ts`'s `!sourceStat.isFile()` check) —
@@ -1677,10 +1677,11 @@ export const MODULE_SLICES = {
             "packages/create-ailk/module-templates/commerce/.claude/skills/scaffold-commerce/templates/portal-route.template.ts": ".claude/skills/scaffold-commerce/templates/portal-route.template.ts",
             "packages/create-ailk/module-templates/commerce/.claude/skills/scaffold-commerce/templates/stripe-config.template.ts": ".claude/skills/scaffold-commerce/templates/stripe-config.template.ts",
             "packages/create-ailk/module-templates/commerce/.claude/skills/scaffold-commerce/templates/subscription-route.template.ts": ".claude/skills/scaffold-commerce/templates/subscription-route.template.ts",
+            "packages/create-ailk/module-templates/commerce/.claude/skills/scaffold-commerce/scripts/stripe-catalog.ts": ".claude/skills/scaffold-commerce/scripts/stripe-catalog.ts",
             // The commerce-boundary rule (#6039/#6070, this entry #6041): ships to
             // a commerce-keyed scaffold's project root so an agent working there
             // reads the money/live-mode/personal-data classification before it
-            // acts. One more literal entry alongside the ten scaffold-commerce
+            // acts. One more literal entry alongside the eleven scaffold-commerce
             // skill entries above, for the same reason — a directory source is
             // rejected by `validateInstallMap`.
             "packages/create-ailk/module-templates/commerce/.claude/rules/commerce-boundary.md": ".claude/rules/commerce-boundary.md",

package/dist/programmatic.js

@@ -31,7 +31,7 @@ import { writeAuthSecretFile } from "./lib/auth-secret-file.js";
 import { extractModuleBundle, installBundleTree, } from "./lib/extract-module-bundle.js";
 import { fetchTemplate } from "./lib/fetch-template.js";
 import { assertLicenseKeyShape, writeLicenseKeyFiles, } from "./lib/license-key-files.js";
-import { assertDesignAllowed, deriveLevel, resolveModuleSet, resolvePaidModules, } from "./lib/module-license-gate.js";
+import { assertDesignAllowed, assertReleased, deriveLevel, resolveModuleSet, resolvePaidModules, } from "./lib/module-license-gate.js";
 import { classifyModules } from "./lib/module-tier.js";
 import { normalizeModules } from "./module-architecture.js";
 import { RECOGNIZED_SHAPES, RESERVED_SHAPES, } from "./parse-args.js";
@@ -235,11 +235,16 @@ export async function scaffold(opts) {
     if (opts.template !== undefined && opts.shape !== undefined) {
         throw new TemplateError("pass a template or a shape, not both");
     }
+    // #6984 — a surface `release-scope.json` does not release is refused here,
+    // after parsing and before the licence gate, fetch or write (spec 6977 D3).
+    assertReleased("templates", [opts.template]);
+    assertReleased("shapes", [opts.shape]);
     const template = opts.template !== undefined
         ? resolveTemplate(opts.template)
         : opts.shape !== undefined
             ? resolveShapeTemplate(opts.shape)
             : undefined;
+    assertReleased("modules", [...(opts.modules ?? []), ...(template?.requires ?? [])]);
     // #6813 D8 step 3 — the design this scaffold renders, resolved from its
     // package ONCE, before any fetch or write: the caller's override, else the
     // template's own. Unset for a scaffold naming neither. Replaces the
@@ -250,6 +255,8 @@ export async function scaffold(opts) {
     const resolvedDesign = designRef !== undefined
         ? resolveDesign(designRef, { designsDir: DESIGNS_DIR })
         : undefined;
+    // By registry name, so a byte-identical copy of a gated design is refused too.
+    assertReleased("designs", [resolvedDesign?.recorded]);
     // #6816 D6 step 3b — a design's section presets are validated here, before
     // any fetch or write, against the look groups the shipped catalog carries
     // (D2): a non-look field or unknown variant throws `DesignPackageError`
@@ -313,8 +320,8 @@ export async function scaffold(opts) {
         // answers, never a key claim (D2) — only when the caller CHOSE a
         // non-Free design alongside the template (`opts.design`, #6813 D7). An
         // alias's own declared design is never gated (#6778 option (c)), so a
-        // plain `--template minimalism-site` run makes no extra network call and
-        // is never refused on its design.
+        // plain `--template <alias>` run makes no extra network call and is
+        // never refused on its design.
         if (chosenDesign !== undefined && !chosenDesign.free) {
             ({ level } = await deriveLevel({
                 licenseKey,
@@ -557,7 +564,8 @@ export async function scaffold(opts) {
         writeFileSync(join(result.targetDir, NAV_CONFIG_PATH), renderNavConfig(result.surfaces, { serviceSlugs }));
         pruneUnrosteredSeeds(result.targetDir, mergeRoster(template, template.requires), result.surfaces, ownership);
         // spec 6892 D4 — the resolved design's own sample (the minimalism design's
-        // nine-slide deck home + its SVGs today), installed AFTER the template
+        // nine-slide deck home + its SVGs; no template declares `minimalism`
+        // since #6976, so none installs it today), installed AFTER the template
         // layer so it wins over the shape's `HomePage/home.mdx`, and ONLY when
         // the resolved design is the template's OWN declared design: a caller
         // combination like `--shape organization-product --design minimalism`

package/dist/starter-grid.d.ts

@@ -31,9 +31,8 @@ export interface AliasDifferences {
     /**
      * Further positioned groups (#6757 D7): each group's rows go before its
      * own `before` route, applied group by group in array order, AFTER `add`
-     * is placed. The one alias that needs more than one anchor
-     * (`minimalism-site`, which interleaves rows at two separate points in the
-     * shape's row order) uses this; every other alias leaves it unset.
+     * is placed — for an alias that interleaves rows at more than one point
+     * in the shape's row order. No alias in the table below needs it today.
      */
     readonly insert?: readonly {
         readonly before: string;
@@ -58,8 +57,8 @@ export interface TemplateAlias {
     readonly differences?: AliasDifferences;
     /**
      * Whether this alias ships its own `site-templates/<name>/` tree (spec 6892
-     * D1). Absent means `true` — every alias but `minimalism-site` keeps its
-     * own directory. `false` declares that the alias resolves purely from the
+     * D1). Absent means `true` — every alias today keeps its own directory.
+     * `false` declares that the alias resolves purely from the
      * grid: its seed layer is its shape's tree (`templateTreeDir`), and its
      * generated roster record lives under `site-templates/aliases/` rather
      * than a directory of its own (`shippedManifestPath`).
@@ -152,68 +151,6 @@ export declare const ALIASES: Readonly<{
             readonly before: "/portfolio";
         };
     };
-    /**
-     * The second Pro template (#5589) — the reports-first, scroll-snap deck
-     * site. NOT `marketing-site` plus a module: its `modules` omit `docs-blog`,
-     * so the two Pro templates are siblings under `_base` (#5618 D2), never a
-     * lineage. Level still derives from `modules`: `scheduling` and
-     * `signal-collectors` are paid, so `templateDelivery` returns `"paid"`
-     * exactly as it does for `marketing-site`.
-     *
-     * It composes the `organization-service` shape roster (#6757) rather than
-     * the organization-product one: the deck home replaces the document-scroll
-     * home, and `/how-it-works`, the product page, `/pricing` and `/sign-in`
-     * are not pages this site has. The roster is what the
-     * template IS, so an unrostered page has neither a route directory
-     * (`rosterSurfaces`) nor its `_base`/overlay seed (#6646 D1).
-     *
-     * It declares NO `layout` block (#6638): the deck home, mark-only nav and
-     * centered footer are the `minimalism` design's own `layout` (its
-     * `DESIGN.md`, resolved by `resolveDesign` off `design:` — #6813 D4) — the
-     * look any shape can wear. This alias ships no tree of its own (`ownTree:
-     * false`, spec 6892 D1); its GENERATED roster record (no narrative `.md`,
-     * D5) lives at `site-templates/aliases/minimalism-site.TEMPLATE-MANIFEST.json`.
-     *
-     * `/reports` (a `ReportsList` hub over `ReportPage`) and `/referral` (a
-     * flow landing page) are signal-collectors module samples (spec 6892 D3);
-     * neither carries a `GATEABLE_SURFACES` entry: `/referral` is a
-     * single-segment `LandingPage` slug served by the generic `[slug]` route
-     * (#5469 D2), the same mechanism Free's `/how-it-works` uses, and `/reports`
-     * is its own routes-map row. `/reports/[slug]` (the reader) is the
-     * signal-collectors module's own contributed row.
-     *
-     * `/services/[slug]` declares its seed DIRECTORY as `contentDir`
-     * (`content/en/Service`, as `routes-map.ts` records it). The three
-     * samples ride the template tree unmapped, landing at that directory.
-     *
-     * Since #6757, `organization-service` carries a real standard roster
-     * (D1), so this alias's `differences` is additions and drops only: it
-     * drops the `/blog` teaser (a Pro alias does not upsell its own level,
-     * D8), the portfolio pair (the reports are the proof, not a
-     * portfolio) and the two auth code routes the shape rosters (#6797 —
-     * this site has no `/sign-in`, above), adds the signal-collectors
-     * samples, and INSERTS its two own
-     * rows — `/reports` before `/about`, `/referral` before `/faq` (D7) — to
-     * reproduce its pre-#6757 row order (§ 1.2) exactly.
-     */
-    readonly "minimalism-site": {
-        readonly shape: "organization-service";
-        readonly design: "minimalism";
-        readonly modules: readonly ["marketing", "scheduling", "signal-collectors"];
-        readonly categories: readonly ["real-estate", "technology", "legal"];
-        readonly ownTree: false;
-        readonly differences: {
-            readonly drop: readonly ["/sign-in", "/sign-up", "/blog", "/meet", "/meet/[slug]", "/portfolio", "/portfolio/[slug]"];
-            readonly add: readonly import("./module-architecture.js").PageRosterRow[];
-            readonly insert: readonly [{
-                readonly before: "/about";
-                readonly rows: readonly [import("./module-architecture.js").PageRosterRow];
-            }, {
-                readonly before: "/faq";
-                readonly rows: readonly [import("./module-architecture.js").PageRosterRow];
-            }];
-        };
-    };
 }>;
 /**
  * The coordinates a keyless `--shape S` builds (#6757 D5) — the composed

package/dist/starter-grid.js

@@ -171,14 +171,10 @@ const PORTFOLIO_ROWS = [
     { route: "/portfolio/[slug]", contentDir: "content/en/PortfolioItem" },
 ];
 /**
- * `minimalism-site`'s two OWN rows (#5589, shrunk from its own 17-row roster
- * by #6757 once the `organization-service` shape carried a standard roster of
- * its own): the deck's two `LandingPage` slugs, positioned by `insert` (D7)
- * at the two points this alias interleaves them into the shape's row order
- * (§ 1.2) — `/reports` before `/about`, `/referral` before `/faq`. Neither
- * carries a `GATEABLE_SURFACES` entry: both are single-segment slugs served
- * by the generic `[slug]` route (#5469 D2), the same mechanism Free's
- * `/how-it-works` used.
+ * The two report/referral sample rows. Neither carries a `GATEABLE_SURFACES`
+ * entry: `/referral` is a single-segment `LandingPage` slug served by the
+ * generic `[slug]` route (#5469 D2), the same mechanism Free's
+ * `/how-it-works` used, and `/reports` is its own routes-map row.
  */
 const REPORTS_ROW = {
     route: "/reports",
@@ -193,8 +189,7 @@ const REFERRAL_ROW = {
  * `/reports`, a `ReportsList` hub over the module's four `ReportPage` seeds,
  * and `/referral`, a sample flow landing page. `marketing-site` and
  * `saas-product` add these before `/portfolio`, alongside
- * `SIGNAL_COLLECTORS_SAMPLE_ROWS`; `minimalism-site` keeps its own two
- * `insert` groups instead (its pre-existing row order, D1).
+ * `SIGNAL_COLLECTORS_SAMPLE_ROWS`.
  */
 const SIGNAL_COLLECTORS_REPORT_ROWS = [
     REPORTS_ROW,
@@ -206,8 +201,7 @@ const SIGNAL_COLLECTORS_REPORT_ROWS = [
  * --registry packages/schema/src/registry/entries.ts` at harness commit
  * `7bdaf148e1b0e639cd90a80008955e55cc4aa2b5`, edited only by the deviations
  * `site-templates/shapes/organization-service/TEMPLATE-MANIFEST.md` § 3a
- * records with their reasons. Row order matches `minimalism-site`'s (D3), so
- * that alias's `differences` are additions and drops only.
+ * records with their reasons.
  */
 const ORGANIZATION_SERVICE_ROWS = [
     { route: "/", content: ["content/en/HomePage/home.mdx"] },
@@ -429,78 +423,6 @@ export const ALIASES = Object.freeze({
             before: "/portfolio",
         },
     },
-    /**
-     * The second Pro template (#5589) — the reports-first, scroll-snap deck
-     * site. NOT `marketing-site` plus a module: its `modules` omit `docs-blog`,
-     * so the two Pro templates are siblings under `_base` (#5618 D2), never a
-     * lineage. Level still derives from `modules`: `scheduling` and
-     * `signal-collectors` are paid, so `templateDelivery` returns `"paid"`
-     * exactly as it does for `marketing-site`.
-     *
-     * It composes the `organization-service` shape roster (#6757) rather than
-     * the organization-product one: the deck home replaces the document-scroll
-     * home, and `/how-it-works`, the product page, `/pricing` and `/sign-in`
-     * are not pages this site has. The roster is what the
-     * template IS, so an unrostered page has neither a route directory
-     * (`rosterSurfaces`) nor its `_base`/overlay seed (#6646 D1).
-     *
-     * It declares NO `layout` block (#6638): the deck home, mark-only nav and
-     * centered footer are the `minimalism` design's own `layout` (its
-     * `DESIGN.md`, resolved by `resolveDesign` off `design:` — #6813 D4) — the
-     * look any shape can wear. This alias ships no tree of its own (`ownTree:
-     * false`, spec 6892 D1); its GENERATED roster record (no narrative `.md`,
-     * D5) lives at `site-templates/aliases/minimalism-site.TEMPLATE-MANIFEST.json`.
-     *
-     * `/reports` (a `ReportsList` hub over `ReportPage`) and `/referral` (a
-     * flow landing page) are signal-collectors module samples (spec 6892 D3);
-     * neither carries a `GATEABLE_SURFACES` entry: `/referral` is a
-     * single-segment `LandingPage` slug served by the generic `[slug]` route
-     * (#5469 D2), the same mechanism Free's `/how-it-works` uses, and `/reports`
-     * is its own routes-map row. `/reports/[slug]` (the reader) is the
-     * signal-collectors module's own contributed row.
-     *
-     * `/services/[slug]` declares its seed DIRECTORY as `contentDir`
-     * (`content/en/Service`, as `routes-map.ts` records it). The three
-     * samples ride the template tree unmapped, landing at that directory.
-     *
-     * Since #6757, `organization-service` carries a real standard roster
-     * (D1), so this alias's `differences` is additions and drops only: it
-     * drops the `/blog` teaser (a Pro alias does not upsell its own level,
-     * D8), the portfolio pair (the reports are the proof, not a
-     * portfolio) and the two auth code routes the shape rosters (#6797 —
-     * this site has no `/sign-in`, above), adds the signal-collectors
-     * samples, and INSERTS its two own
-     * rows — `/reports` before `/about`, `/referral` before `/faq` (D7) — to
-     * reproduce its pre-#6757 row order (§ 1.2) exactly.
-     */
-    "minimalism-site": {
-        shape: "organization-service",
-        design: "minimalism",
-        modules: ["marketing", "scheduling", "signal-collectors"],
-        categories: ["real-estate", "technology", "legal"],
-        // Spec 6892 D1 — this alias ships no `site-templates/minimalism-site/`
-        // tree of its own: it resolves purely from the grid. Its seed layer is
-        // its shape's tree (`templateTreeDir`), its deck home + SVGs are a
-        // sample the `minimalism` design installs (D4), and its `/reports` +
-        // `/referral` rows are signal-collectors module samples (D3).
-        ownTree: false,
-        differences: {
-            drop: [
-                "/sign-in",
-                "/sign-up",
-                "/blog",
-                "/meet",
-                "/meet/[slug]",
-                "/portfolio",
-                "/portfolio/[slug]",
-            ],
-            add: SIGNAL_COLLECTORS_SAMPLE_ROWS,
-            insert: [
-                { before: "/about", rows: [REPORTS_ROW] },
-                { before: "/faq", rows: [REFERRAL_ROW] },
-            ],
-        },
-    },
 });
 /**
  * The coordinates a keyless `--shape S` builds (#6757 D5) — the composed

package/dist/template-manifest.d.ts

@@ -183,7 +183,7 @@ export declare function templateTreeDir(name: string): string;
 /**
  * Whether `name` ships its own `site-templates/<name>/` directory (spec 6892
  * D1) — `false` only for a declared `--template` alias whose `ownTree` is
- * `false` (`minimalism-site` today). A `SHAPE_STARTERS` key owns its
+ * `false` (none today). A `SHAPE_STARTERS` key owns its
  * `shapes/<name>` tree outright, so it is never treeless by this predicate
  * even though `templateTreeDir` also renames its directory.
  *

package/dist/template-manifest.js

@@ -60,10 +60,10 @@ export class TemplateError extends Error {
  * shape's standard roster, minus the alias's `drop` routes, with its `add`
  * rows inserted before the `before` route (appended when there is none),
  * then each `insert` group's rows spliced before ITS OWN `before` route, in
- * array order — the one alias with more than one anchor point
- * (`minimalism-site`) uses this to interleave its own rows into the shape's
- * row order. Rows are pushed by reference, never cloned, so
- * `manifest.roster.includes(row)` identity checks downstream keep working.
+ * array order — for an alias that interleaves its own rows into the shape's
+ * row order at more than one anchor point. Rows are pushed by reference,
+ * never cloned, so `manifest.roster.includes(row)` identity checks
+ * downstream keep working.
  * Every refusal names the alias, so a malformed table fails at load — the
  * shipped one — or in the test that injected it.
  *
@@ -178,7 +178,7 @@ export function templateTreeDir(name) {
 /**
  * Whether `name` ships its own `site-templates/<name>/` directory (spec 6892
  * D1) — `false` only for a declared `--template` alias whose `ownTree` is
- * `false` (`minimalism-site` today). A `SHAPE_STARTERS` key owns its
+ * `false` (none today). A `SHAPE_STARTERS` key owns its
  * `shapes/<name>` tree outright, so it is never treeless by this predicate
  * even though `templateTreeDir` also renames its directory.
  *

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-ailk",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "description": "Scaffolder for AI Launch Kit — `pnpm create ailk@latest <dir>` produces a starter repo consuming @working-theory/* from npm (per ADR 0007).",
   "type": "module",
   "main": "./dist/index.js",
@@ -10,9 +10,11 @@
   },
   "files": [
     "dist",
+    "!dist/modules",
     "templates",
     "site-templates",
     "versions.json",
+    "release-scope.json",
     "component-catalog.json",
     "component-catalog.md",
     "README.md",
@@ -58,7 +60,7 @@
     "build-catalog": "node scripts/build-component-catalog.mjs",
     "check-catalog": "node scripts/build-component-catalog.mjs --check",
     "manifest:build": "node scripts/build-template-manifest.mjs --template marketing-site-free",
-    "manifest:check": "node scripts/build-template-manifest.mjs --template marketing-site-free --check && node scripts/build-template-manifest.mjs --template marketing-site --check && node scripts/build-template-manifest.mjs --template minimalism-site --check",
+    "manifest:check": "node scripts/build-template-manifest.mjs --template marketing-site-free --check && node scripts/build-template-manifest.mjs --template marketing-site --check",
     "design:gen": "tsc -b && node scripts/build-design-md.mjs",
     "page-types:build": "tsx scripts/generate-page-types-reference.ts",
     "page-types:check": "tsx scripts/generate-page-types-reference.ts --check"

package/release-scope.json

@@ -0,0 +1,25 @@
+{
+  "templates": {
+    "marketing-site-free": "released",
+    "marketing-site": "released",
+    "saas-product": "gated"
+  },
+  "shapes": {
+    "organization-product": "released",
+    "organization-service": "released",
+    "local-business-service": "released",
+    "person-service": "released",
+    "local-business-product": "deferred"
+  },
+  "designs": { "standard": "released", "minimalism": "gated" },
+  "modules": {
+    "marketing": "released",
+    "docs-blog": "released",
+    "scheduling": "released",
+    "signal-collectors": "released",
+    "workspace": "gated",
+    "multi-tenant": "gated",
+    "commerce": "gated"
+  },
+  "levels": { "free": "released", "pro": "released", "pro-plus": "gated" }
+}

package/site-templates/designs/minimalism/sample/README.md

@@ -1,7 +1,7 @@
 # The `minimalism` design's home-deck sample
 
-> Narrative moved here from the retired `site-templates/minimalism-site/TEMPLATE-MANIFEST.md`
-> when that tree retired (spec 6892 D4/D5) — `minimalism` is a design, not a template, so it
+> Narrative moved here from the retired minimalism template's `TEMPLATE-MANIFEST.md` when
+> that tree retired (spec 6892 D4/D5) — `minimalism` is a design, not a template, so it
 > carries no generated manifest of its own. This file is NOT installed onto a scaffold
 > (`installDesignSample` copies only `content/**` and `public/**`); it documents the sample for
 > maintainers of this design.

package/site-templates/designs/minimalism/sample/content/en/HomePage/home.mdx

@@ -2,7 +2,7 @@
 type: "HomePage"
 slug: "home"
 title: "Your Company"
-description: "Placeholder home for the minimalism-site template — a nine-slide scroll-snap deck. Replace every line before you launch."
+description: "Placeholder home for the minimalism design — a nine-slide scroll-snap deck. Replace every line before you launch."
 sections:
   [
     {