Free early-access launch: LAUNCH_MODE policy, CRO, pipeline hardening, AI-SEO, ops

- launch.ts policy: LAUNCH_MODE=free_early_access default; effective access =
  published && (free || early); intended tier (access) never rewritten
- Billing off server-side: /api/subscribe 503 honest copy; subscribe CTAs
  render disabled 'قريباً' from first paint; /subscription early-access panel
  + /api/notify (LaunchNotifications) with honest 503 when mail transport off
- Signup trust: verification email at signup (Users afterChange), no
  confirm-password, 429 message fidelity, typo suggestion, live password hint
- Agent pipeline: pickFields strips access/readingMinutes, sourceId dedup,
  secret-scan 422 (pattern names only), string-content rejected (was silently
  replaced), publish stays explicit opt-in
- lexical.ts: root unwrap fix — lexicalToText/countLexicalWords returned 0
  for real serialized trees (secret scan + readingMinutes were inert)
- llms-full.txt: fetchIndexDocs(true) — bodies were never selected
- Content honesty: contentType/authorName/sourceId fields + migration,
  readingMinutes computed at write (160 wpm) + backfill script, byline,
  'حُدّث' freshness
- SEO/AI-SEO: metadata rewrite (published-only, og:image 1200x630), Article +
  BreadcrumbList + FAQPage + Organization JSON-LD, isAccessibleForFree honest,
  table renderer, robots AI-crawler policy (10 named bots), llms.txt +
  llms-full.txt, /topics/* hubs + sitemap, noindex auth pages, www 301
- Ops: backup-db.sh (restore rehearsed on VPS), docs copies (launch
  readiness + marketing audit + owner-inputs for L-03), GLOSSARY.md entries

Verified: tsc --noEmit 0, npm run build 0, local smoke (ghost VIP read,
subscribe/notify/agent APIs, signup token, 429 on 6th, llms/topics/sitemap,
og:image/JSON-LD)

web/src/app/api/notify/route.ts

@@ -0,0 +1,63 @@
+import { NextResponse } from 'next/server'
+import { getPayload } from 'payload'
+import configPromise from '@payload-config'
+import { sendMail } from '@/lib/mail'
+
+export const dynamic = 'force-dynamic'
+
+const EMAIL_RE = /^[^\s@]+@[^\s@]+\.[^\s@]+$/
+
+/* POST /api/notify — L-01 launch-notification list.
+   Idempotent: an existing email returns 200 { ok: true, alreadySubscribed: true }
+   (no duplicate row, no re-send). A fresh email is stored and a confirmation
+   is sent; if the mail transport is not wired the response is an honest 503
+   (the row is kept — no fake success). */
+export async function POST(req: Request) {
+  let body: { email?: string } | null = null
+  try {
+    body = await req.json()
+  } catch {
+    return NextResponse.json({ error: 'صيغة الطلب غير صحيحة.' }, { status: 400 })
+  }
+  const email = (body?.email ?? '').trim().toLowerCase()
+  if (!EMAIL_RE.test(email)) {
+    return NextResponse.json({ error: 'أدخل بريداً إلكترونياً صحيحاً.' }, { status: 400 })
+  }
+
+  const payload = await getPayload({ config: configPromise })
+
+  const { docs } = await payload.find({
+    collection: 'launch-notifications',
+    where: { email: { equals: email } },
+    limit: 1,
+    overrideAccess: true,
+  })
+  if (docs.length > 0) {
+    return NextResponse.json({ ok: true, alreadySubscribed: true })
+  }
+
+  try {
+    await payload.create({
+      collection: 'launch-notifications',
+      data: { email, source: 'subscription' },
+    })
+  } catch (err) {
+    // Lost a unique-constraint race against a concurrent signup → idempotent OK.
+    const message = err instanceof Error ? err.message : ''
+    if (/duplicate key|unique constraint/i.test(message)) {
+      return NextResponse.json({ ok: true, alreadySubscribed: true })
+    }
+    console.error('launch notification create failed:', err)
+    return NextResponse.json({ error: 'تعذر حفظ البريد، حاول مرة أخرى.' }, { status: 500 })
+  }
+
+  const { sent } = await sendMail(
+    email,
+    'سنعلمك عند تفعيل العضوية — أنور بي آي',
+    'مرحباً بك في أنور بي آي.\n\nسجّلنا بريدك في قائمة الإشعار، وسنراسلك قبل تفعيل العضوية بأيام.\n\nخلال الوصول المبكر كل الأدلة المنشورة متاحة مجاناً، ولن يُنشأ لك اشتراك أو يُحصَّل أي مبلغ.',
+  )
+  if (!sent) {
+    return NextResponse.json({ error: 'خدمة البريد غير مربوطة بعد.' }, { status: 503 })
+  }
+  return NextResponse.json({ ok: true })
+}