@akanjs/cli 3.0.0-alpha.67 → 3.0.0-alpha.69

package/.build-stamp

@@ -1 +1 @@
-249086bcf505dc7322c8aa6cb51a76fe4c44d489ec19c4ebb0aaf15634915db8
+f854deee45ba7fb5cde828e62164657386dfc13e55f0b7da760161ad709daa32

package/{agent.command-0p7p9ba8.js → agent.command-964bf8qg.js}

@@ -1,15 +1,15 @@
 // @bun
 import {
   AgentScript
-} from "./index-fc98hz1w.js";
-import"./index-n2sz0qq3.js";
-import"./index-4h99bj2e.js";
+} from "./index-rbnpe8cp.js";
+import"./index-va15r8h5.js";
+import"./index-ytaqtc04.js";
 import"./index-j37qq1f2.js";
 import {
   Workspace,
   command
-} from "./index-4e84gbad.js";
-import"./index-vfnmsp1a.js";
+} from "./index-e31ghfp5.js";
+import"./index-nkwmnqwn.js";
 import"./index-f39512t6.js";
 import"./index-mxvakhsm.js";
 import"./index-xys926f2.js";

package/{application.command-5bafqeva.js → application.command-n45n18sc.js}

@@ -4,8 +4,8 @@ import {
 } from "./index-0wae5ebk.js";
 import {
   ApplicationScript
-} from "./index-hjh8czbk.js";
-import"./index-77s16neb.js";
+} from "./index-mkn5qagt.js";
+import"./index-p681w089.js";
 import {
   getMobileTargetChoices
 } from "./index-76rn3g2c.js";
@@ -15,10 +15,10 @@ import {
   Sys,
   Workspace,
   command
-} from "./index-4e84gbad.js";
+} from "./index-e31ghfp5.js";
 import"./index-fgc8r6dj.js";
 import"./index-5vy2jzar.js";
-import"./index-vfnmsp1a.js";
+import"./index-nkwmnqwn.js";
 import"./index-f39512t6.js";
 import"./index-mxvakhsm.js";
 import"./index-1577bej2.js";

package/{applicationBuildRunner-jnjag4ay.js → applicationBuildRunner-af0wtspv.js}

@@ -2,9 +2,10 @@
 import {
   AllRoutesBuilder,
   CsrArtifactBuilder,
+  FontPruner,
   SsrBaseArtifactBuilder,
   precompressArtifacts
-} from "./index-xesyg6bc.js";
+} from "./index-abyjt72y.js";
 import"./index-xjd3rqzj.js";
 import"./index-qnv0aqmm.js";
 import"./index-5vy2jzar.js";
@@ -23,6 +24,7 @@ var BUILD_PHASE_EMOJIS = {
   backend: "\uD83D\uDCE6",
   ssr: "\uD83E\uDDED",
   csr: "\uD83C\uDFA8",
+  assets: "\u2702\uFE0F",
   compress: "\uD83D\uDDDC\uFE0F",
   metadata: "\uD83D\uDCDD"
 };
@@ -58,7 +60,7 @@ class ApplicationBuildRunner {
   }
   async build({ spinner = false } = {}) {
     const phaseOptions = { spinner };
-    const { web } = await this.#app.getConfig();
+    const { web, assets } = await this.#app.getConfig();
     await this.#runPhase("prepare", "Preparing output directory", () => this.#app.prepareCommand("build"), undefined, {
       spinner
     });
@@ -67,6 +69,7 @@ class ApplicationBuildRunner {
     await this.#runPhase("backend", "Compiling backend", () => this.#buildBackend(), (result) => `${result.entrypoints} entrypoints, ${result.outputs} outputs`, phaseOptions);
     await this.#runPhase("ssr", "Building SSR route artifacts", async () => web.ssr ? await this.#buildSsr() : null, (result) => result ? `${result.allRoutes.manifest.routeIds.length} routes, ${result.allRoutes.manifest.knownEntries.length} entries` : web.ssr ? "skipped" : "disabled by akan.config.ts web.ssr", phaseOptions);
     await this.#runPhase("csr", "Building CSR assets", async () => web.csr ? await this.#buildCsr() : null, (result) => result?.outputDir ?? (web.csr ? "skipped" : "disabled by akan.config.ts web.csr"), phaseOptions);
+    await this.#runPhase("assets", "Trimming unread static assets", async () => assets.pruneFonts ? await new FontPruner(this.#app, assets).prune() : null, (result) => result ? `${result.removed.length} font file(s) dropped, ${ApplicationBuildRunner.formatBytes(result.freedBytes)} freed; ${result.kept.length} kept` : "disabled by akan.config.ts assets.pruneFonts", phaseOptions);
     await this.#runPhase("compress", "Compressing static assets", () => precompressArtifacts(this.#app), (result) => result.files > 0 ? `${result.files} files, ${ApplicationBuildRunner.formatBytes(result.inputBytes)} -> gzip ${ApplicationBuildRunner.formatBytes(result.outputBytes)} / br ${ApplicationBuildRunner.formatBytes(result.brotliBytes)}` : "no files", phaseOptions);
     await this.#runPhase("metadata", "Writing production metadata", () => this.#buildAppMeta(), undefined, {
       spinner

package/buildBatch.proc.js

@@ -5,14 +5,14 @@ import {
   FontOptimizer,
   PagesBundleBuilder,
   SsrBaseArtifactBuilder
-} from "./index-xesyg6bc.js";
+} from "./index-abyjt72y.js";
 import"./index-xjd3rqzj.js";
 import"./index-qnv0aqmm.js";
 import"./index-5vy2jzar.js";
 import {
   AppExecutor,
   WorkspaceExecutor
-} from "./index-vfnmsp1a.js";
+} from "./index-nkwmnqwn.js";
 import"./index-f39512t6.js";
 import"./index-mxvakhsm.js";
 import"./index-1577bej2.js";

package/{capacitorApp-6mcsqh9k.js → capacitorApp-vnvnvdhf.js}

@@ -25,9 +25,9 @@ import {
   selectLocalDevHost,
   sortIosRunTargets,
   writeRootCapacitorConfig
-} from "./index-pbb97b16.js";
+} from "./index-hee7egtm.js";
 import"./index-76rn3g2c.js";
-import"./index-vfnmsp1a.js";
+import"./index-nkwmnqwn.js";
 import"./index-f39512t6.js";
 import"./index-mxvakhsm.js";
 import"./index-1577bej2.js";

package/{cloud.command-d111e7st.js → cloud.command-kx1bh5yq.js}

@@ -1,22 +1,22 @@
 // @bun
 import {
   CloudScript
-} from "./index-x8d7krmm.js";
-import"./index-9kbervcd.js";
-import"./index-sfbb92q2.js";
+} from "./index-8gybxemv.js";
+import"./index-4rw4qhe6.js";
+import"./index-0ngvvgry.js";
 import {
   GlobalConfig
 } from "./index-sh01r3pm.js";
-import"./index-hjh8czbk.js";
-import"./index-77s16neb.js";
+import"./index-mkn5qagt.js";
+import"./index-p681w089.js";
 import"./index-76rn3g2c.js";
 import {
   Workspace,
   command
-} from "./index-4e84gbad.js";
+} from "./index-e31ghfp5.js";
 import"./index-fgc8r6dj.js";
 import"./index-5vy2jzar.js";
-import"./index-vfnmsp1a.js";
+import"./index-nkwmnqwn.js";
 import"./index-f39512t6.js";
 import"./index-mxvakhsm.js";
 import"./index-1577bej2.js";

package/{context.command-ypb8e1yj.js → context.command-g1a65x6j.js}

@@ -1,25 +1,25 @@
 // @bun
 import {
   ContextScript
-} from "./index-h33m7gbq.js";
-import"./index-kvqvzgjq.js";
-import"./index-5nj96dm3.js";
-import"./index-bgjyden1.js";
-import"./index-w626d6zw.js";
-import"./index-w627vcya.js";
+} from "./index-qt4nfr0n.js";
+import"./index-nj3w0r34.js";
+import"./index-fahkq20v.js";
+import"./index-v5fdxdre.js";
+import"./index-rb65xnw9.js";
+import"./index-yg3hxk2k.js";
 import"./index-ss469dec.js";
-import"./index-amghj6k5.js";
-import"./index-pbb97b16.js";
+import"./index-bqqts262.js";
+import"./index-hee7egtm.js";
 import"./index-sh01r3pm.js";
-import"./index-n2sz0qq3.js";
-import"./index-4h99bj2e.js";
+import"./index-va15r8h5.js";
+import"./index-ytaqtc04.js";
 import"./index-j37qq1f2.js";
 import"./index-76rn3g2c.js";
 import {
   Workspace,
   command
-} from "./index-4e84gbad.js";
-import"./index-vfnmsp1a.js";
+} from "./index-e31ghfp5.js";
+import"./index-nkwmnqwn.js";
 import"./index-f39512t6.js";
 import"./index-mxvakhsm.js";
 import"./index-xys926f2.js";

package/{guideline.command-g6nfb85d.js → guideline.command-xphyhvwh.js}

@@ -10,8 +10,8 @@ import {
   command,
   runner,
   script
-} from "./index-4e84gbad.js";
-import"./index-vfnmsp1a.js";
+} from "./index-e31ghfp5.js";
+import"./index-nkwmnqwn.js";
 import"./index-f39512t6.js";
 import"./index-mxvakhsm.js";
 import {

package/guidelines/conventions/conventions.instruction.md

@@ -366,6 +366,40 @@ const config: AppConfig = { docker: "FROM oven/bun:1-slim\n…" }; // verbatim,
 - `AkanAppConfig.docker` is the resolved declaration; `AkanAppConfig.dockerfile` is the text `akan build` writes
   to `dist/apps/<app>/Dockerfile`.
 
+## Shipped Assets — `assets` In `akan.config.ts`
+
+`akan build` copies the whole `public/` tree into `dist`, lib assets dereferenced, and that copy is the image.
+**`assets: { pruneFonts, keepFonts }`** trims the fonts out of it that nothing reads. **Source trees are never
+touched** — an app's and a lib's own `public/` keep every file, because one shared font folder is picked over
+differently by every app that mounts it and by other repos.
+
+```ts
+const config: LibConfig = { assets: { keepFonts: ["fonts/Assistant-*.woff2"] } }; // libs/<lib>/akan.config.ts
+const config: AppConfig = { assets: { pruneFonts: false } }; // emergency valve, not the normal escape hatch
+```
+
+- **A font with `optimize` on is a build input, not a runtime asset.** `FontOptimizer` subsets it into
+  `.akan/artifact/fonts` and the emitted CSS points at `/_akan/fonts/*`, which `WebRouter` serves from the
+  artifact — so the source in `public/` is never opened again. That is the bulk of what this drops, and it
+  applies to the fonts the app *does* use, not only the ones it does not.
+- **The keep-set is derived per app, per build; there is no list of fonts to drop.** An exclude list would rot
+  the moment another app or repo started using one of them, and nobody would know to update it. A font survives
+  because ① its font declares `optimize: false`, so `FontCss.getRuntimeCss` emits the raw src; ② something
+  references its filename — anything under `public/`, the compiled stylesheet, a client/server bundle, the CSR
+  shell; or ③ a `keepFonts` glob names it.
+- **`keepFonts` belongs to the `akan.config.ts` that owns the font**, written against that lib's or app's own
+  `public/` (`"fonts/X.woff2"`, resolved to `libs/<lib>/fonts/X.woff2`). A lib shared across repos carries the
+  reason its own CSS needs a font, instead of every mounting app rediscovering it in production.
+- **A reference from a build bundle is ignored for an already-subset font.** Every route file's `fonts`
+  declaration is inlined into the pages bundle, the client chunks and the CSR shell, so a declared source is in
+  all three whether or not anything loads it. `public/` and the compiled CSS are read as authoritative.
+- **A generated manifest that lists every public asset keeps every font it names** — a service-worker precache
+  file is the usual one. That is a real reference, not a false positive, so the build reports it at `info`:
+  read the `[font-prune] kept …` line before concluding the prune does nothing.
+- Matching is by filename, including the percent-encoded spelling, so a `url()` survives however it is written.
+- The phase is `assets`, between `csr` and `compress`. An api-only build (`web: false`) copies no `public/` and
+  the phase finds nothing to do.
+
 ## React Components And Styling (`**/*.tsx`)
 
 - Components are `export const X = ({ … }: XProps) => { return (…); };` — arrow const with a block body. `export default` is reserved for pages, layouts, and `lazy()` targets.
@@ -657,12 +691,26 @@ that declares a real guard is published; one that declares none is refused, and
 `Public`. The guards are already the authorization decision, so a second switch would say nothing they do not —
 while guaranteeing that every endpoint added later is invisible to agents until somebody remembers it.
 
+- **`mcp: false` keeps an endpoint off the shelf without touching its guards.** Guards answer "may an agent call
+  this"; they cannot answer "does this belong on a shelf", and a step of a UI-driven state machine
+  (`requestPhoneCodeForSignin`) is perfectly guarded and still a mistake for a model to reach. Write it in the
+  signal option (`mutation(Boolean, { guards: [Every], mcp: false })`, `init({ guards: [SignedIn], mcp: false })`
+  — which covers that slice's list and insight together), or as an `mcp` map on `slice()` that **mirrors the
+  `guards` map key for key** (`mcp: { cru: false }`), with the same `cru` fallbacks and the same scope: the root
+  slice and generated CRUD only, never a named slice or a custom endpoint. It is an opt-**out**, so everything
+  added later still publishes. **It is curation, not authorization — HTTP serves the endpoint exactly as before.**
+- **Narrow by cost, and read the boot log first.** MCP has no shared component section and forbids a `$ref` across
+  entries, so every entry inlines the full schema of every model it mentions, and the listing is re-sent whole to
+  every agent that connects. `MCP catalogue: … · listing 214KB` plus a per-signal `MCP catalogue cost:` line says
+  where it went. A plain 21-field model costs 12.6KB over eight entries; `mcp: { cru: false }` takes it to 4.7KB,
+  because the generated writes carry the input *and* the full model.
 - Settings live in the app's `lib/option.ts` — `option.setMcp({ enabled, readOnly, path, version, instructions,
   allowedOrigins, pageSize, language, auth })`, **not `main.ts`**. Every lib's option is read in mount order with
   the app's last, and each field has an `AKAN_MCP_*` env spelling the option overrides.
-- **The refusals are fail-closed**: an endpoint with no `guards`, a mutation with no real guard (`[Public]` is
-  having none), `pubsub` and `message`, an `Any` or `Upload` return, a file upload, and a required `Any` argument.
-  A `prompt` also refuses a list argument and any `Any` argument.
+- **The refusals are fail-closed**: a declared `mcp: false`, an endpoint with no `guards`, a mutation with no real guard (`[Public]` is
+  having none), `pubsub` and `message`, an `Any` or `Upload` return, a file upload, a required `Any` argument, and
+  the generated `light<Model>` read — it is `<Model>` in a smaller shape, so one read never costs two entries of
+  every listing. A `prompt` also refuses a list argument and any `Any` argument.
 - **Every refusal is named in the boot log**, with a `MCP catalogue: tools=… prompts=…` count. Read that line
   first when a tool you expected is missing — with no opt-in to notice, it is the only place the answer exists.
   The boot log also names every published entry with no dictionary `.desc()`: an agent picks a tool by its

package/guidelines/mcpRule/mcpRule.instruction.md

@@ -14,6 +14,36 @@ authorization decision and `filterForAccount` re-reads them per caller on every
 switch says nothing the guards do not — while guaranteeing that every endpoint added later is invisible to agents
 until somebody remembers it.
 
+## Keeping An Endpoint Off The Shelf — `mcp: false`
+
+Guards answer "may an agent call this". They do not answer "does this belong on a shelf", and those are different
+questions: a step of a UI-driven state machine (`requestPhoneCodeForSignin`, `setPasswordInPrepareUser`) is
+perfectly guarded, perfectly callable, and a model would only ever call it by mistake. **`mcp: false` is that
+second answer, and it is an opt-*out*: everything still publishes by default, so an endpoint added later is
+visible without anyone remembering it.**
+
+```ts
+requestPhoneCodeForSignin: mutation(Boolean, { guards: [Every], mcp: false }),
+inTodo: init({ guards: [SignedIn], mcp: false }),           // the slice's list and insight together
+export class FileSlice extends slice(srv.file, {
+  guards: { root: Admin, get: SignedIn, cru: SignedIn },
+  mcp: { cru: false },                                       // reads yes, generated writes no
+}) {}
+```
+
+- **It is curation, not authorization.** HTTP serves the endpoint exactly as before and the guards are still the
+  only thing deciding who may call it. Never write `mcp: false` where you meant a guard.
+- **The `mcp` map on `slice()` mirrors the `guards` map above it** — same keys (`root`, `get`, `cru`, `create`,
+  `update`, `remove`), same fallbacks (`create`/`update`/`remove` inherit `cru`), and the same scope: it narrows
+  the root slice and the generated CRUD, and never reaches a named slice or a custom endpoint. Those declare
+  their own `mcp` beside their own `guards`. The bare `mcp: false` is every key at once, still within that scope.
+- **`mcp: true` is the default and is a no-op**; write it only to say out loud that an entry is deliberately on
+  the shelf. It does not override a shape refusal (an `Any` return stays refused) and it cannot publish something
+  the guard rules keep out.
+- **Reach for it by cost, not by taste.** Every entry inlines the schema of every model it mentions, so a plain
+  21-field model with one named slice costs 12.6KB across its eight entries. `mcp: { cru: false }` on that model
+  takes it to 4.7KB — the write entries carry both the input *and* the full model, and are 63% of it.
+
 ## Configuration
 Settings live in the app's `lib/option.ts` — `option.setMcp({ … })`, taking `enabled`, `readOnly`, `path`,
 `version`, `instructions`, `allowedOrigins`, `pageSize`, `language`, `legacyTextBlock`, and `auth`. **Not `main.ts`**: the gateway
@@ -67,13 +97,23 @@ export class TaskEndpoint extends endpoint(srv.task, ({ mutation, prompt }) => (
 ```
 
 ## Refusals And Wire Behaviour
+- **`mcp: false` is read first**, because it is the one answer nobody had to derive — somebody stated it. Its
+  reason says "HTTP still serves it", because that is the sentence that stops the next reader treating it as a lock.
 - **The refusals are fail-closed**: **an endpoint that declares no `guards` at all** (nobody decided who may reach
   it), **a mutation with no real `guards`** (`[Public]` is having none, spelled out — it answers true
   unconditionally), `pubsub` and `message` (their internal args read a socket an MCP request does not have), an
-  `Any` or `Upload` return, a file upload, and **an argument typed `Any` that must be filled**.
+  `Any` or `Upload` return, a file upload, **an argument typed `Any` that must be filled**, and the generated
+  **`light<Model>` read** — it returns the same document as `<Model>` under the same guards, in a shape trimmed
+  for a page's payload, so publishing both put two entries per model in a listing an agent pays for every turn
+  and gave it nothing but the word "light" to choose between them.
   A `prompt` refuses two more, because its `arguments` is one string per name with no schema beside it: a **list
   argument**, which could never carry a second value, and **any `Any` argument** — a tool leaves that out of its
   schema, and a prompt has no schema to leave it out of.
+- **The boot log sizes the catalogue and says which signals it went to** — `MCP catalogue: tools=48 … · listing
+  214KB` and `MCP catalogue cost: user 27/71KB · file 6/22KB · …`, heaviest first. Read it before narrowing
+  anything: the number is nobody's intuition, because MCP has no shared component section and forbids a `$ref`
+  across entries, so **every entry inlines the full schema of every model it mentions** and a listing is re-sent
+  whole to every agent that connects, before its first turn. Past 100KB it says so as a `warn`.
 - **Every refusal is named in the boot log**: one `warn` per endpoint plus a `MCP catalogue: tools=… prompts=…`
   count. Read that line first when a tool you expected is missing — and it is the *only* place the answer exists,
   because there is no absent opt-in to notice. The API explorer badges the same rule per endpoint (`MCP` /
@@ -144,10 +184,11 @@ export class TaskEndpoint extends endpoint(srv.task, ({ mutation, prompt }) => (
 - **An expired or wrongly-audienced bearer token is refused up front**, so an agent is told to authenticate rather
   than that the tool does not exist. Its **signature is not checked** — that needs your app's own secret — so a
   token signed wrong, like an opaque one, still degrades to an anonymous caller.
-- **Resource URIs**: `akan://<model>/{id}`, `akan://<model>/light/{id}`, `akan://<model>/list` for the model's own
-  list, and `akan://<model>/list/<sliceKey>` for a slice's. The root list takes no third segment on purpose — any
-  token there is one a slice could also be named. **Those four are the whole set**, so only the generated reads are
-  addressable: a custom endpoint keeps its tool and gets no resource template.
+- **Resource URIs**: `akan://<model>/{id}`, `akan://<model>/list` for the model's own list, and
+  `akan://<model>/list/<sliceKey>` for a slice's. The root list takes no third segment on purpose — any token
+  there is one a slice could also be named. **Those three are the whole set**, so only the generated reads that
+  publish are addressable: a custom endpoint keeps its tool and gets no resource template, and the refused
+  `light<Model>` read has no address either.
 - **The catalogue is one language**, `en` unless `language` says otherwise: it is built once at boot and cached by
   clients, so there is no `Accept-Language` negotiation.
 

package/incrementalBuilder.proc.js

@@ -16,7 +16,7 @@ import {
 import {
   AppExecutor,
   WorkspaceExecutor
-} from "./index-vfnmsp1a.js";
+} from "./index-nkwmnqwn.js";
 import"./index-f39512t6.js";
 import"./index-mxvakhsm.js";
 import"./index-1577bej2.js";

package/{index-sfbb92q2.js → index-0ngvvgry.js}

@@ -2,10 +2,10 @@
 import {
   runner,
   script
-} from "./index-4e84gbad.js";
+} from "./index-e31ghfp5.js";
 import {
   PkgExecutor
-} from "./index-vfnmsp1a.js";
+} from "./index-nkwmnqwn.js";
 import {
   TypeScriptDependencyScanner
 } from "./index-46tjzh6s.js";

package/{index-9kbervcd.js → index-4rw4qhe6.js}

@@ -7,14 +7,14 @@ import {
 } from "./index-sh01r3pm.js";
 import {
   openBrowser
-} from "./index-hjh8czbk.js";
+} from "./index-mkn5qagt.js";
 import {
   runner
-} from "./index-4e84gbad.js";
+} from "./index-e31ghfp5.js";
 import {
   AppExecutor,
   WorkspaceExecutor
-} from "./index-vfnmsp1a.js";
+} from "./index-nkwmnqwn.js";
 
 // pkgs/@akanjs/cli/npmRegistry.ts
 var defaultNpmRegistry = "https://registry.npmjs.org";

package/{index-x8d7krmm.js → index-8gybxemv.js}

@@ -1,10 +1,10 @@
 // @bun
 import {
   CloudRunner
-} from "./index-9kbervcd.js";
+} from "./index-4rw4qhe6.js";
 import {
   PackageScript
-} from "./index-sfbb92q2.js";
+} from "./index-0ngvvgry.js";
 import {
   AiSession,
   CloudApi,
@@ -12,13 +12,13 @@ import {
 } from "./index-sh01r3pm.js";
 import {
   ApplicationScript
-} from "./index-hjh8czbk.js";
+} from "./index-mkn5qagt.js";
 import {
   script
-} from "./index-4e84gbad.js";
+} from "./index-e31ghfp5.js";
 import {
   PkgExecutor
-} from "./index-vfnmsp1a.js";
+} from "./index-nkwmnqwn.js";
 
 // pkgs/@akanjs/cli/cloud/cloud.script.ts
 import { Logger } from "akanjs/common";