create-ailk 0.9.0 → 0.11.0

package/templates/apps/web/app/.well-known/mcp.json/route.ts

@@ -12,7 +12,9 @@
  * the deployments whose MCP server registers it. Without that, a KEYED site
  * would register `start_purchase` while hiding it from its own manifest —
  * the surface disagreement `apps/mcp/__tests__/catalog-drift.test.ts` exists
- * to make impossible.
+ * to make impossible. The same single read also yields the licence features
+ * the deployment holds (#7136), which gate the five `feature`-tagged tools
+ * here exactly as they gate registration on the MCP server.
  *
  * Mirrors /.well-known/ai-plugin.json conventions: Response.json with a
  * conservative cache-control header.
@@ -23,7 +25,10 @@
  */
 
 import packageJson from "../../../package.json";
-import { resolveCommerceClaim } from "../../../src/lib/commerce-claim";
+import {
+  COMMERCE_FEATURE,
+  resolveLicenceFeatures,
+} from "../../../src/lib/commerce-claim";
 import { resolveBaseUrl } from "../../../src/lib/routes";
 
 import { buildMcpManifest } from "./build-manifest";
@@ -46,11 +51,13 @@ export async function GET(): Promise<Response> {
   // (apps/mcp running in HTTP mode). When set, the manifest includes it
   // as an additional transport descriptor for discovering agents.
   const mcpHttpUrlEnv = process.env["MCP_PUBLIC_HTTP_URL"];
+  const heldFeatures = await resolveLicenceFeatures();
 
   const manifest = buildMcpManifest({
     baseUrl: resolveBaseUrl(),
     ailkVersion: packageJson.version,
-    commerceClaimed: await resolveCommerceClaim(),
+    commerceClaimed: heldFeatures.includes(COMMERCE_FEATURE),
+    heldFeatures,
     // Spread conditional to satisfy exactOptionalPropertyTypes: omit the key
     // entirely when the env var is not set rather than passing undefined.
     ...(mcpHttpUrlEnv ? { mcpHttpUrl: mcpHttpUrlEnv } : {}),

package/templates/apps/web/src/lib/commerce-claim.ts

@@ -15,19 +15,28 @@
  * unlike `apps/mcp/src/lib/commerce-claim.ts`'s boot-time memoisation — so a
  * site that buys commerce after its last deploy starts serving immediately
  * rather than waiting on a redeploy.
+ *
+ * {@link resolveLicenceFeatures} (#7136) is the same single read, returning
+ * every licence feature the deployment holds: `/.well-known/mcp.json` gates
+ * the five `feature`-tagged MCP tools on it, from one call per request.
  */
 import { checkLicense } from "@working-theory/license";
 
 /** The licence `features[]` claim that turns the commerce add-on on. */
-const COMMERCE_FEATURE = "commerce";
+export const COMMERCE_FEATURE = "commerce";
 
-export async function resolveCommerceClaim(): Promise<boolean> {
+/** The licence features this deployment positively holds — `[]` when the
+ * licence is revoked, carries no `features` array, or cannot be read. */
+export async function resolveLicenceFeatures(): Promise<readonly string[]> {
   try {
     const result = await checkLicense();
-    return (
-      result.revoked !== true && result.features.includes(COMMERCE_FEATURE)
-    );
+    if (result.revoked === true) return [];
+    return Array.isArray(result.features) ? result.features : [];
   } catch {
-    return false;
+    return [];
   }
 }
+
+export async function resolveCommerceClaim(): Promise<boolean> {
+  return (await resolveLicenceFeatures()).includes(COMMERCE_FEATURE);
+}

package/templates/content/_site.mdx

@@ -49,11 +49,13 @@ theme:
 This file is your site's canonical configuration. Edit the frontmatter above to
 set your site name, base URL, default locale, and identity.
 
-`siteIdentity.kind` takes one of three values:
+`siteIdentity.kind` takes one of four values:
 
-  - Organization  — a company, agency, nonprofit, or team
-  - Person        — a solo practitioner, consultant, or personal site
-  - LocalBusiness — a business with a physical location customers visit
+  - Organization        — a company, agency, nonprofit, or team
+  - Person              — a solo practitioner, consultant, or personal site
+  - LocalBusiness       — a business with a physical location customers visit
+  - SoftwareApplication — a product's own site, when its maker has a site of
+                          its own (see below)
 
 `siteIdentity.secondary` (optional) names a second entity the site is about, and
 every page's structured data carries it:
@@ -73,6 +75,23 @@ For example, nested under `siteIdentity:`
       name: Acme App
       url: https://example.com/app
 
+`kind: SoftwareApplication` is the inverse of that product secondary: the
+product is the site's entity, and its maker — whose own site already declares
+it — is named as `publisher` by the stable `@id` that site publishes. It takes
+the product's `name` and `url` (optional `logo`, `description`,
+`applicationCategory`, `operatingSystem`, `sameAs`) and a required `publisher`
+with an `id` URL and an optional `name`; it takes no `secondary`. No second
+Organization is declared here — every page's structured data points at the
+maker's `@id`, and the home page's main entity is the product. For example:
+
+    siteIdentity:
+      kind: SoftwareApplication
+      name: Acme App
+      url: https://acme-app.example
+      publisher:
+        id: https://acme.example/#organization
+        name: Acme Inc.
+
 `sameAs` is the list of URLs that are unambiguously the same entity as you —
 your LinkedIn company page, your GitHub org, your X profile. Answer engines use
 it to reconcile your site with the rest of your presence, so it is worth

package/templates/database/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @working-theory/database
 
+## 0.30.0
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @working-theory/validation@0.30.0
+
 ## 0.29.0
 
 ### Patch Changes

package/templates/database/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@working-theory/database",
-  "version": "0.29.0",
+  "version": "0.30.0",
   "license": "Apache-2.0",
   "publishConfig": {
     "access": "public"

package/templates/package.json

@@ -23,6 +23,7 @@
     "preflight": "pnpm architecture && pnpm claude-md:check && pnpm type-check && pnpm lint && pnpm build"
   },
   "devDependencies": {
+    "@arethetypeswrong/cli": "^0.18.5",
     "@changesets/changelog-github": "^0.7.0",
     "@changesets/cli": "^2.27.0",
     "@eslint/js": "^10.0.1",
@@ -51,6 +52,7 @@
     "jest": "^30.4.2",
     "jiti": "^2.4.2",
     "prettier": "^3.9.4",
+    "publint": "^0.3.24",
     "ts-declaration-location": "^1.0.7",
     "ts-jest": "^29.4.11",
     "tsx": "^4.22.4",

package/versions.json

@@ -1,39 +1,40 @@
 {
-  "@working-theory/admin-ui": "0.29.0",
-  "@working-theory/aeo": "0.29.0",
-  "@working-theory/agent-context": "0.29.0",
+  "@working-theory/admin-ui": "0.30.0",
+  "@working-theory/aeo": "0.30.0",
+  "@working-theory/agent-context": "0.30.0",
   "@working-theory/agent-contract": "0.1.0",
   "@working-theory/agent-memory": "0.0.0",
   "@working-theory/ai": "0.1.0",
-  "@working-theory/analytics": "0.29.0",
-  "@working-theory/api-client": "0.29.0",
+  "@working-theory/analytics": "0.30.0",
+  "@working-theory/api-client": "0.30.0",
   "@working-theory/cda-filesystem": "0.0.0",
-  "@working-theory/cli": "0.29.0",
-  "@working-theory/common": "0.29.0",
+  "@working-theory/cli": "0.30.0",
+  "@working-theory/common": "0.30.0",
   "@working-theory/consent": "0.1.0",
-  "@working-theory/content-adapters": "0.29.0",
-  "@working-theory/content-projection": "0.29.0",
-  "@working-theory/email": "0.29.0",
+  "@working-theory/content-adapters": "0.30.0",
+  "@working-theory/content-projection": "0.30.0",
+  "@working-theory/email": "0.30.0",
   "@working-theory/env": "0.0.0",
-  "@working-theory/eslint-config": "0.29.0",
-  "@working-theory/fumadocs-schema": "0.29.0",
+  "@working-theory/eslint-config": "0.30.0",
+  "@working-theory/fumadocs-schema": "0.30.0",
   "@working-theory/ids": "0.8.0",
-  "@working-theory/jsonld": "0.29.0",
-  "@working-theory/license": "0.29.0",
-  "@working-theory/metadata": "0.29.0",
-  "@working-theory/observability": "0.29.0",
-  "@working-theory/page-renderer": "0.29.0",
-  "@working-theory/schema": "0.29.0",
-  "@working-theory/schema-pack-registry": "0.29.0",
-  "@working-theory/schema-validator": "0.29.0",
-  "@working-theory/sections-registry": "0.29.0",
-  "@working-theory/site-config": "0.29.0",
-  "@working-theory/stripe-client": "0.29.0",
-  "@working-theory/templates": "0.29.0",
-  "@working-theory/theme": "0.29.0",
-  "@working-theory/ui": "0.29.0",
-  "@working-theory/validation": "0.29.0",
-  "@working-theory/web-i18n": "0.29.0",
+  "@working-theory/jsonld": "0.30.0",
+  "@working-theory/license": "0.30.0",
+  "@working-theory/metadata": "0.30.0",
+  "@working-theory/observability": "0.30.0",
+  "@working-theory/page-renderer": "0.30.0",
+  "@working-theory/plugin-mcp": "0.1.1",
+  "@working-theory/schema": "0.30.0",
+  "@working-theory/schema-pack-registry": "0.30.0",
+  "@working-theory/schema-validator": "0.30.0",
+  "@working-theory/sections-registry": "0.30.0",
+  "@working-theory/site-config": "0.30.0",
+  "@working-theory/stripe-client": "0.30.0",
+  "@working-theory/templates": "0.30.0",
+  "@working-theory/theme": "0.30.0",
+  "@working-theory/ui": "0.30.0",
+  "@working-theory/validation": "0.30.0",
+  "@working-theory/web-i18n": "0.30.0",
   "@working-theory/billing-client": "0.0.0",
   "@working-theory/branding": "0.0.0",
   "@working-theory/license-client": "0.0.0",
@@ -41,12 +42,12 @@
   "@working-theory/marketing-api-client": "0.0.0",
   "@working-theory/partner-session": "0.0.0",
   "@working-theory/preview-protocol": "0.0.0",
-  "@working-theory/ui-commerce": "0.23.6",
-  "@working-theory/ui-docs-blog": "0.23.6",
-  "@working-theory/ui-scheduling": "0.23.6",
-  "@working-theory/ui-signal-collectors": "0.24.4",
+  "@working-theory/ui-commerce": "0.23.7",
+  "@working-theory/ui-docs-blog": "0.23.7",
+  "@working-theory/ui-scheduling": "0.23.7",
+  "@working-theory/ui-signal-collectors": "0.24.5",
   "@working-theory/web": "0.0.0",
   "@working-theory/api": "1.0.0",
   "@working-theory/mcp": "0.0.0",
-  "@working-theory/database": "0.29.0"
+  "@working-theory/database": "0.30.0"
 }