@akanjs/cli 3.0.0-alpha.10 → 3.0.0-alpha.12

package/{repair.command-6fphxfwj.js → repair.command-p9ey6mkm.js}

@@ -1,15 +1,15 @@
 // @bun
 import {
   RepairRunner
-} from "./index-jf2ya7r2.js";
-import"./index-774gcx29.js";
-import"./index-rxkpk7n4.js";
+} from "./index-yzmqvg23.js";
+import"./index-e4b2ae6b.js";
+import"./index-kcsa1zff.js";
 import {
   Workspace,
   command,
   script
-} from "./index-kdh76j26.js";
-import"./index-z8ptfkzv.js";
+} from "./index-etwh7sd3.js";
+import"./index-yzsxc30b.js";
 import"./index-mxvakhsm.js";
 import"./index-xys926f2.js";
 import"./index-1577bej2.js";

package/{scalar.command-xfer69s6.js → scalar.command-9dhmqhtm.js}

@@ -1,18 +1,18 @@
 // @bun
 import {
   ScalarScript
-} from "./index-y4vkyhvv.js";
+} from "./index-4mgkgba3.js";
 import"./index-ss469dec.js";
 import"./index-0cj2zxbm.js";
 import {
   renderPrimitiveReport
-} from "./index-rxkpk7n4.js";
+} from "./index-kcsa1zff.js";
 import"./index-j37qq1f2.js";
 import {
   Sys,
   command
-} from "./index-kdh76j26.js";
-import"./index-z8ptfkzv.js";
+} from "./index-etwh7sd3.js";
+import"./index-yzsxc30b.js";
 import"./index-mxvakhsm.js";
 import"./index-1577bej2.js";
 import"./index-67546d0j.js";

package/templates/appSample/srvkit/AuthGuard.ts

@@ -3,7 +3,7 @@ import type { AppInfo, LibInfo } from "akanjs";
 export default function getContent(scanInfo: AppInfo | LibInfo | null, dict: { appName: string }) {
   return {
     filename: "AuthGuard.ts",
-    content: `import type { Guard, SignalContext } from "akanjs/signal";
+    content: `import type { Guard, GuardScope, SignalContext } from "akanjs/signal";
 
 // ===== AuthGuard.ts =====
 // Convention: srvkit/ folder — server-only helpers, cannot import from client code.
@@ -14,10 +14,14 @@ export default function getContent(scanInfo: AppInfo | LibInfo | null, dict: { a
 
 export class SignedIn implements Guard {
   static name = "SignedIn";
+  // "account" — the verdict reads the caller and nothing about the call, so an MCP catalogue can evaluate it with
+  // no arguments and hide what this caller certainly cannot use. Unmarked means "resource", which is never
+  // evaluated for a listing: a guard like this one would then filter nothing.
+  static scope: GuardScope = "account";
 
   canPass(context: SignalContext): boolean {
-    const user = context.getHttpContext<{ user?: { id: string } }>().req.user;
-    return !!user;
+    // Reads the account the middleware resolved, so the same guard answers over HTTP, a websocket and MCP alike.
+    return !!context.get<{ id?: string }>("account");
   }
 }
 
@@ -25,9 +29,9 @@ export class SignedIn implements Guard {
 // Role-based guard: only allow users with a specific role
 // export class IsAdmin implements Guard {
 //   static name = "IsAdmin";
+//   static scope: GuardScope = "account";
 //   canPass(context: SignalContext): boolean {
-//     const user = context.getHttpContext<{ user?: { role: string } }>().req.user;
-//     return user?.role === "admin";
+//     return context.get<{ role?: string }>("account")?.role === "admin";
 //   }
 // }
 `,

package/templates/appSample/srvkit/SessionInternalArg.ts

@@ -15,8 +15,9 @@ export default function getContent(scanInfo: AppInfo | LibInfo | null, dict: { a
 
 export class CurrentUserId implements InternalArg<string | null> {
   getArg(context: SignalContext): string | null {
-    const user = context.getHttpContext<{ user?: { id: string } }>().req.user;
-    return user?.id ?? null;
+    // \`context.get\` reads what the account middleware resolved, on every transport. Branching on
+    // \`getHttpContext()\` would return null for the same caller arriving over a websocket or MCP.
+    return context.get<{ id?: string }>("account")?.id ?? null;
   }
 }
 
@@ -24,7 +25,7 @@ export class CurrentUserId implements InternalArg<string | null> {
 // Inject current session language/locale
 // export class CurrentLocale implements InternalArg<string> {
 //   getArg(context: SignalContext): string {
-//     return context.getHttpContext<{ locale?: string }>().req.locale ?? "en";
+//     return context.get<string>("locale") ?? "en";
 //   }
 // }
 `,

package/templates/workspaceRoot/biome.json.template

@@ -12,6 +12,7 @@
       "!!**/node_modules",
       "!!**/dist",
       "!!**/.akan",
+      "!!**/.claude",
       "!!**/dump",
       "!!**/local",
       "!!**/ios/DerivedData"

package/{workflow.command-2ygfqt4f.js → workflow.command-ycwc6zr6.js}

@@ -1,30 +1,30 @@
 // @bun
 import {
   WorkflowRunner
-} from "./index-qzdjd4ct.js";
+} from "./index-cv9cxs5k.js";
 import {
   ScalarScript
-} from "./index-y4vkyhvv.js";
+} from "./index-4mgkgba3.js";
 import {
   PrimitiveScript
-} from "./index-3vta1tqa.js";
+} from "./index-m90fn8xe.js";
 import {
   ModuleScript
-} from "./index-jhpa13zj.js";
+} from "./index-mewacxye.js";
 import"./index-ss469dec.js";
-import"./index-xmmzf150.js";
+import"./index-65aeh789.js";
 import"./index-0cj2zxbm.js";
-import"./index-774gcx29.js";
+import"./index-e4b2ae6b.js";
 import {
   createWorkflowStepRegistry
-} from "./index-rxkpk7n4.js";
+} from "./index-kcsa1zff.js";
 import"./index-j37qq1f2.js";
 import {
   Workspace,
   command,
   script
-} from "./index-kdh76j26.js";
-import"./index-z8ptfkzv.js";
+} from "./index-etwh7sd3.js";
+import"./index-yzsxc30b.js";
 import"./index-mxvakhsm.js";
 import"./index-xys926f2.js";
 import"./index-1577bej2.js";

package/{workspace.command-vbgpjkf9.js → workspace.command-x49ekpkt.js}

@@ -1,40 +1,40 @@
 // @bun
 import {
   ContextScript
-} from "./index-5sn5w2mt.js";
-import"./index-jf2ya7r2.js";
-import"./index-qzdjd4ct.js";
-import"./index-y4vkyhvv.js";
-import"./index-3vta1tqa.js";
-import"./index-jhpa13zj.js";
+} from "./index-3789fdpg.js";
+import"./index-yzmqvg23.js";
+import"./index-cv9cxs5k.js";
+import"./index-4mgkgba3.js";
+import"./index-m90fn8xe.js";
+import"./index-mewacxye.js";
 import"./index-ss469dec.js";
-import"./index-xmmzf150.js";
+import"./index-65aeh789.js";
 import {
   CloudScript
-} from "./index-82jrh4hj.js";
+} from "./index-k8gpsrm1.js";
 import {
   getLatestPackageVersion,
   getNpmRegistryUrl
-} from "./index-4m0bphac.js";
+} from "./index-rdv33eye.js";
 import {
   PackageScript
-} from "./index-gcv8ncfh.js";
-import"./index-779ske1y.js";
+} from "./index-h5whaj26.js";
+import"./index-9va8zayb.js";
 import {
   GlobalConfig
 } from "./index-0cj2zxbm.js";
 import {
   AgentScript
-} from "./index-eyyf2149.js";
-import"./index-774gcx29.js";
-import"./index-rxkpk7n4.js";
+} from "./index-z1s5f4e0.js";
+import"./index-e4b2ae6b.js";
+import"./index-kcsa1zff.js";
 import"./index-j37qq1f2.js";
 import {
   ApplicationScript
-} from "./index-62955kn5.js";
+} from "./index-5yjc80ha.js";
 import {
   LibraryScript
-} from "./index-d43t8af2.js";
+} from "./index-8pd02prk.js";
 import"./index-76rn3g2c.js";
 import {
   Exec,
@@ -42,7 +42,7 @@ import {
   command,
   runner,
   script
-} from "./index-kdh76j26.js";
+} from "./index-etwh7sd3.js";
 import"./index-fgc8r6dj.js";
 import {
   ThemeValidator,
@@ -59,7 +59,7 @@ import {
   collectScopeRecipeSources,
   extractAgentBlock,
   renderScopeAgentBlock
-} from "./index-z8ptfkzv.js";
+} from "./index-yzsxc30b.js";
 import"./index-mxvakhsm.js";
 import {
   collectRecipeSources,
@@ -72,10 +72,6 @@ import {
 } from "./index-67546d0j.js";
 import"./index-r24hmh0q.js";
 
-// pkgs/@akanjs/cli/workspace/workspace.script.ts
-import path2 from "path";
-import { Logger } from "akanjs/common";
-
 // pkgs/@akanjs/cli/workspace/workspace.runner.ts
 import path from "path";
 
@@ -99,6 +95,7 @@ var defaultWorkspacePeerDependencies = new Set([
   "tailwindcss",
   "typescript"
 ]);
+var defaultMaxDiagnostics = 200;
 
 class WorkspaceRunner extends runner("workspace") {
   async generateAgentRules(workspace, { overwrite = false, cursorRules = true } = {}) {
@@ -236,17 +233,28 @@ class WorkspaceRunner extends runner("workspace") {
     }
     throw new Error(`[workspace] failed to locate akanjs package.json from ${import.meta.dir}`);
   }
-  async lint(exec, workspace, { fix = true } = {}) {
+  async lint(exec, workspace, { fix = true, maxDiagnostics = defaultMaxDiagnostics } = {}) {
+    const configPath = await WorkspaceRunner.resolveBiomeConfigPath(workspace);
     await workspace.spawn("./node_modules/.bin/biome", [
       "check",
       ...fix ? ["--write"] : [],
       "--no-errors-on-unmatched",
+      `--max-diagnostics=${maxDiagnostics > 0 ? maxDiagnostics : "none"}`,
+      ...configPath ? ["--config-path", configPath] : [],
       exec.cwdPath
     ]);
     await this.#enforceStyleContract(exec);
     await this.#enforceRecipeGate(exec);
     await this.#enforceAgentsIndex(exec);
   }
+  static async resolveBiomeConfigPath(workspace) {
+    for (const fileName of ["biome.json", "biome.jsonc"]) {
+      const configPath = path.join(workspace.workspaceRoot, fileName);
+      if (await Bun.file(configPath).exists())
+        return configPath;
+    }
+    return null;
+  }
   async#enforceAgentsIndex(exec) {
     if (!(exec instanceof SysExecutor))
       return;
@@ -314,6 +322,8 @@ AKAN_PUBLIC_LOG_LEVEL=debug
 }
 
 // pkgs/@akanjs/cli/workspace/workspace.script.ts
+import path2 from "path";
+import { Logger } from "akanjs/common";
 class WorkspaceScript extends script("workspace", [
   WorkspaceRunner,
   ApplicationScript,
@@ -376,28 +386,29 @@ class WorkspaceScript extends script("workspace", [
       await this.agentScript.agent(workspace, "install", "agents-md", { force: overwrite });
     spinner.succeed(`Agent rules ready (${files.length} file${files.length === 1 ? "" : "s"})`);
   }
-  async lint(exec, workspace, { fix = true } = {}) {
+  async lint(exec, workspace, { fix = true, maxDiagnostics } = {}) {
     if (exec instanceof AppExecutor)
       await this.applicationScript.sync(exec);
     else if (exec instanceof LibExecutor)
       await this.libraryScript.syncLibrary(exec);
     const spinner = workspace.spinning(`Linting${fix ? " with fix" : ""}...`);
     try {
-      await this.workspaceRunner.lint(exec, workspace, { fix });
+      await this.workspaceRunner.lint(exec, workspace, { fix, maxDiagnostics });
       spinner.succeed("Lint completed with no errors");
     } catch (error) {
       spinner.fail("Lint failed with errors");
       throw error;
     }
   }
-  async lintAll(workspace, { fix = true } = {}) {
+  async lintAll(workspace, { fix = true, maxDiagnostics } = {}) {
     const [appNames, libNames, pkgNames] = await workspace.getExecs();
+    const options = { fix, maxDiagnostics };
     await Promise.all(appNames.map((appName) => this.applicationScript.sync(AppExecutor.from(workspace, appName))));
     await Promise.all(libNames.map((libName) => this.libraryScript.syncLibrary(LibExecutor.from(workspace, libName))));
     await Promise.all([
-      ...appNames.map((appName) => this.workspaceRunner.lint(AppExecutor.from(workspace, appName), workspace, { fix })),
-      ...libNames.map((libName) => this.workspaceRunner.lint(LibExecutor.from(workspace, libName), workspace, { fix })),
-      ...pkgNames.filter((pkgName) => pkgName !== "contract").map((pkgName) => this.workspaceRunner.lint(PkgExecutor.from(workspace, pkgName), workspace, { fix }))
+      ...appNames.map((appName) => this.workspaceRunner.lint(AppExecutor.from(workspace, appName), workspace, options)),
+      ...libNames.map((libName) => this.workspaceRunner.lint(LibExecutor.from(workspace, libName), workspace, options)),
+      ...pkgNames.filter((pkgName) => pkgName !== "contract").map((pkgName) => this.workspaceRunner.lint(PkgExecutor.from(workspace, pkgName), workspace, options))
     ]);
   }
   async syncAll(workspace) {
@@ -479,11 +490,17 @@ class WorkspaceCommand extends command("workspace", [WorkspaceScript], ({ public
   }).option("overwrite", Boolean, { desc: "Overwrite existing agent rule files", default: false }).option("cursorRules", Boolean, { desc: "Generate .cursor/rules/akan.mdc", default: true }).with(Workspace).exec(async function(overwrite, cursorRules, workspace) {
     await this.workspaceScript.generateAgentRules(workspace, { overwrite, cursorRules });
   }),
-  lint: target({ desc: "Lint and fix code in a specific app/lib/pkg" }).with(Exec).option("fix", Boolean, { default: true }).with(Workspace).exec(async function(exec, fix, workspace) {
-    await this.workspaceScript.lint(exec, workspace, { fix });
+  lint: target({ desc: "Lint and fix code in a specific app/lib/pkg" }).with(Exec).option("fix", Boolean, { default: true }).option("maxDiagnostics", Number, {
+    desc: "How many diagnostics Biome prints before truncating (0 for no limit)",
+    default: defaultMaxDiagnostics
+  }).with(Workspace).exec(async function(exec, fix, maxDiagnostics, workspace) {
+    await this.workspaceScript.lint(exec, workspace, { fix, maxDiagnostics });
   }),
-  lintAll: target({ desc: "Lint and fix code in all apps and libraries" }).option("fix", Boolean, { default: true }).with(Workspace).exec(async function(fix, workspace) {
-    await this.workspaceScript.lintAll(workspace, { fix });
+  lintAll: target({ desc: "Lint and fix code in all apps and libraries" }).option("fix", Boolean, { default: true }).option("maxDiagnostics", Number, {
+    desc: "How many diagnostics Biome prints before truncating (0 for no limit)",
+    default: defaultMaxDiagnostics
+  }).with(Workspace).exec(async function(fix, maxDiagnostics, workspace) {
+    await this.workspaceScript.lintAll(workspace, { fix, maxDiagnostics });
   }),
   syncAll: target({ desc: "Sync dependencies and configuration for all apps and libraries" }).with(Workspace).exec(async function(workspace) {
     await this.workspaceScript.syncAll(workspace);