@akanjs/cli 3.0.0-beta.17 → 3.0.0-beta.19

package/templates/appSample/lib/task/task.signal.spec.ts

@@ -1,16 +1,26 @@
 import type { AppInfo, LibInfo } from "akanjs";
 
-export default function getContent(scanInfo: AppInfo | LibInfo | null, dict: { appName: string }) {
-  return `import { expect } from "bun:test";
-import type { DocumentModel } from "akanjs/constant";
-import { getOrSetupSignalTestFetch, sampleOf } from "akanjs/test";
+export default function getContent(
+  scanInfo: AppInfo | LibInfo | null,
+  dict: { appName: string },
+  options: { libs?: string[] } = {},
+) {
+  // Task writes are guarded by SignedIn, so the fixtures sign a user in through libs/shared when it is installed.
+  const signsIn = options.libs?.includes("shared") ?? false;
+  return `${
+    signsIn
+      ? `import * as userSpec from "@libs/shared/lib/user/user.signal.spec";
+`
+      : ""
+  }import type { DocumentModel } from "akanjs/constant";
+import { ${signsIn ? "" : "getOrSetupSignalTestFetch, "}sampleOf } from "akanjs/test";
 
 import * as cnst from "../cnst";
 import type { fetch as appFetch } from "../useServer";
 
 type AppFetch = typeof appFetch;
 
-const getFetch = async () => await getOrSetupSignalTestFetch<AppFetch>();
+const getFetch = async () => ${signsIn ? "(await userSpec.getUserAgentWithPassword<AppFetch>()).fetch" : "await getOrSetupSignalTestFetch<AppFetch>()"};
 
 export interface TaskAgent {
   task: cnst.Task;
@@ -27,13 +37,6 @@ export const createTask = async (overrides: Partial<DocumentModel<cnst.TaskInput
 
   const task = await fetch.createTask(taskInput);
 
-  expect(task).toMatchObject({
-    title: taskInput.title,
-    content: taskInput.content,
-    status: "todo",
-  });
-  expect(task.workHistory.map((entry) => entry.action)).toEqual(["created"]);
-
   return {
     task,
     fetch,
@@ -45,9 +48,6 @@ export const getStartedTask = async (overrides: Partial<DocumentModel<cnst.TaskI
   const agent = await createTask(overrides);
   const task = await agent.fetch.startTask(agent.task.id);
 
-  expect(task.status).toBe("inProgress");
-  expect(task.workHistory.map((entry) => entry.action)).toEqual(["created", "started"]);
-
   return {
     ...agent,
     task,
@@ -58,9 +58,6 @@ export const getCompletedTask = async (overrides: Partial<DocumentModel<cnst.Tas
   const agent = await getStartedTask(overrides);
   const task = await agent.fetch.completeTask(agent.task.id);
 
-  expect(task.status).toBe("completed");
-  expect(task.workHistory.map((entry) => entry.action)).toEqual(["created", "started", "completed"]);
-
   return {
     ...agent,
     task,

package/templates/appSample/lib/task/task.signal.test.ts

@@ -6,9 +6,23 @@ import { configureSignalTest } from "akanjs/test";
 
 import * as taskSpec from "./task.signal.spec";
 
-configureSignalTest({ databaseMode: "memory" });
+configureSignalTest({ storage: "memory" });
 
 describe("Task signal smoke", () => {
+  test("creates a task in todo", async () => {
+    const { task, taskInput } = await taskSpec.createTask({ title: "Signal smoke task" });
+
+    expect(task).toMatchObject({ title: taskInput.title, content: taskInput.content, status: "todo" });
+    expect(task.workHistory.map((entry) => entry.action)).toEqual(["created"]);
+  });
+
+  test("starts a task", async () => {
+    const { task } = await taskSpec.getStartedTask({ title: "Signal smoke task" });
+
+    expect(task.status).toBe("inProgress");
+    expect(task.workHistory.map((entry) => entry.action)).toEqual(["created", "started"]);
+  });
+
   test("exposes custom task mutations over fetch", async () => {
     const { task } = await taskSpec.getCompletedTask({ title: "Signal smoke task" });
 

package/templates/appSample/lib/task/task.signal.ts

@@ -25,7 +25,7 @@ export class TaskInternal extends internal(srv.task, ({ interval }) => ({})) {}
 // Guards, per key: root = the generated admin API (runs any filter with caller-supplied args), get = reads,
 // cru = create/update/remove. root and cru are never Public; None here means "nobody until you name a guard".
 export class TaskSlice extends slice(srv.task, { guards: { root: None, get: Public, cru: SignedIn } }, (init) => ({
-  inPublic: init().exec(function () {
+  inPublic: init({ guards: [Public] }).exec(function () {
     return this.taskService.queryAny();
   }),
 })) {}

package/templates/appSample/srvkit/AuthGuard.ts

@@ -21,7 +21,10 @@ export class SignedIn implements Guard {
 
   canPass(context: SignalContext): boolean {
     // Reads the account the middleware resolved, so the same guard answers over HTTP, a websocket and MCP alike.
-    return !!context.get<{ id?: string }>("account");
+    // A guest still has an account — libs/shared resolves one to \`{ appName, environment }\` — so only an
+    // identity on it proves a sign-in: your own middleware's \`id\`, or libs/shared's \`self\` (user) / \`me\` (admin).
+    const account = context.get<{ id?: string; self?: { id?: string }; me?: { id?: string } }>("account");
+    return !!(account?.id ?? account?.self?.id ?? account?.me?.id);
   }
 }
 

package/templates/appSample/srvkit/SessionInternalArg.ts

@@ -17,7 +17,9 @@ export class CurrentUserId implements InternalArg<string | null> {
   getArg(context: SignalContext): string | null {
     // \`context.get\` reads what the account middleware resolved, on every transport. Branching on
     // \`getHttpContext()\` would return null for the same caller arriving over a websocket or MCP.
-    return context.get<{ id?: string }>("account")?.id ?? null;
+    // An app's own middleware may put the id on the account itself; libs/shared puts it on \`self\` or \`me\`.
+    const account = context.get<{ id?: string; self?: { id?: string }; me?: { id?: string } }>("account");
+    return account?.id ?? account?.self?.id ?? account?.me?.id ?? null;
   }
 }
 

package/templates/crudPages/[__model__Id]/edit/page.tsx

@@ -4,12 +4,13 @@ interface Dict {
   Model: string;
   model: string;
   appName: string;
+  clientPath: string;
 }
 export default function getContent(scanInfo: AppInfo | LibInfo | null, dict: Dict) {
   return {
     filename: "_index.tsx",
     content: `
-import { ${dict.Model}, fetch, usePage } from "@apps/${dict.appName}/client";
+import { ${dict.Model}, fetch, usePage } from "${dict.clientPath}";
 import { ID } from "akanjs/base";
 import { page } from "akanjs/client";
 import { Load } from "akanjs/ui";

package/templates/crudPages/[__model__Id]/page.tsx

@@ -4,12 +4,13 @@ interface Dict {
   Model: string;
   model: string;
   appName: string;
+  clientPath: string;
 }
 export default function getContent(scanInfo: AppInfo | LibInfo | null, dict: Dict) {
   return {
     filename: "_index.tsx",
     content: `
-import { ${dict.Model}, fetch, usePage } from "@apps/${dict.appName}/client";
+import { ${dict.Model}, fetch, usePage } from "${dict.clientPath}";
 import { ID } from "akanjs/base";
 import { page } from "akanjs/client";
 import { buttonRecipe, Link } from "akanjs/ui";

package/templates/crudPages/new/page.tsx

@@ -4,12 +4,13 @@ interface Dict {
   Model: string;
   model: string;
   appName: string;
+  clientPath: string;
 }
 export default function getContent(scanInfo: AppInfo | LibInfo | null, dict: Dict) {
   return {
     filename: "_index.tsx",
     content: `
-import { type cnst, fetch, usePage, ${dict.Model} } from "@apps/${dict.appName}/client";
+import { type cnst, fetch, usePage, ${dict.Model} } from "${dict.clientPath}";
 import { page } from "akanjs/client";
 import { Load } from "akanjs/ui";
 

package/templates/crudPages/page.tsx

@@ -4,12 +4,13 @@ interface Dict {
   Model: string;
   model: string;
   appName: string;
+  clientPath: string;
 }
 export default function getContent(scanInfo: AppInfo | LibInfo | null, dict: Dict) {
   return {
     filename: "_index.tsx",
     content: `
-import { ${dict.Model}, fetch, usePage } from "@apps/${dict.appName}/client";
+import { ${dict.Model}, fetch, usePage } from "${dict.clientPath}";
 import { page } from "akanjs/client";
 import { buttonRecipe, Link } from "akanjs/ui";
 

package/templates/crudSinglePage/page.tsx

@@ -4,12 +4,13 @@ interface Dict {
   Model: string;
   model: string;
   appName: string;
+  clientPath: string;
 }
 export default function getContent(scanInfo: AppInfo | LibInfo | null, dict: Dict) {
   return {
     filename: "_index.tsx",
     content: `
-import { ${dict.Model}, fetch, usePage } from "@apps/${dict.appName}/client";
+import { ${dict.Model}, fetch, usePage } from "${dict.clientPath}";
 import { page } from "akanjs/client";
 import { buttonRecipe, Model } from "akanjs/ui";
 

package/templates/localDev/docker-compose.yaml.template

@@ -1,29 +1,18 @@
-version: "3.8"
 networks:
   <%= repoName %>-network:
     driver: bridge
 services:
   redis:
     container_name: <%= repoName %>-redis
-    image: redis
+    image: redis:8
     restart: unless-stopped
     ports:
       - 6379:6379
     networks:
       - <%= repoName %>-network
-  libsql:
-    container_name: <%= repoName %>-libsql
-    image: ghcr.io/tursodatabase/libsql-server:latest
-    restart: unless-stopped
-    ports:
-      - 8080:8080
-    volumes:
-      - ./libsql:/var/lib/sqld
-    networks:
-      - <%= repoName %>-network
   postgres:
     container_name: <%= repoName %>-postgres
-    image: postgres:17
+    image: postgres:18
     restart: unless-stopped
     ports:
       - 5432:5432
@@ -32,6 +21,6 @@ services:
       - POSTGRES_USER=akan
       - POSTGRES_PASSWORD=akan
     volumes:
-      - ./postgres:/var/lib/postgresql/data
+      - ./postgres:/var/lib/postgresql
     networks:
       - <%= repoName %>-network

package/templates/module/__model__.signal.ts

@@ -6,16 +6,24 @@ interface Dict {
   models: string;
   sysName: string;
 }
-export default function getContent(scanInfo: AppInfo | LibInfo | null, dict: Dict) {
+interface Options {
+  sharedGuards?: boolean;
+}
+export default function getContent(scanInfo: AppInfo | LibInfo | null, dict: Dict, options: Options = {}) {
+  // Admin lives in libs/shared; without it root and cru stay None, shut until the app names a guard of its own.
+  const guardImports = options.sharedGuards
+    ? `import { Admin } from "@libs/shared/srvkit";\nimport { endpoint, internal, Public, slice } from "akanjs/signal";`
+    : `import { endpoint, internal, None, Public, slice } from "akanjs/signal";`;
+  const writeGuard = options.sharedGuards ? "Admin" : "None";
   return `
-import { endpoint, internal, None, Public, slice } from "akanjs/signal";
+${guardImports}
 
 import * as srv from "../srv";
 
 export class ${dict.Model}Internal extends internal(srv.${dict.model}, ({ interval }) => ({})) {}
 
-export class ${dict.Model}Slice extends slice(srv.${dict.model}, { guards: { root: None, get: Public, cru: Public } }, (init) => ({
-  inPublic: init()
+export class ${dict.Model}Slice extends slice(srv.${dict.model}, { guards: { root: ${writeGuard}, get: Public, cru: ${writeGuard} } }, (init) => ({
+  inPublic: init({ guards: [Public] })
     .exec(function () {
       return this.${dict.model}Service.queryAny();
     }),

package/templates/pkgRoot/tsconfig.json.template

@@ -1,10 +1,5 @@
 {
-  "extends": "../../tsconfig.json",
+  "extends": "<%= workspaceRootPath %>/tsconfig.json",
   "files": [],
-  "include": ["**/*.ts", "**/*.tsx"],
-  "references": [
-    {
-      "path": "./tsconfig.spec.json"
-    }
-  ]
+  "include": ["**/*.ts", "**/*.tsx"]
 }

package/templates/service/__model__.abstract.md.template

@@ -0,0 +1,8 @@
+# <%= model %> Service Abstract
+
+<One sentence: the workflow or integration this service owns, stated as fact.>
+
+## Rules
+
+- <An invariant the code obeys but cannot explain: a lifetime, a refusal, an ordering, and its reason.>
+- <Two to five of them. If the service moves something through states, end the file with one arrow line.>

package/{tunnel.command-ht2es78c.js → tunnel.command-d5jy9gk8.js}

@@ -3,20 +3,20 @@ import"./index-q0y2jq9j.js";
 import {
   GlobalConfig,
   CloudApi
-} from "./index-myj01w9r.js";
+} from "./index-srmay5jw.js";
 import {
   Workspace,
   runner,
   script,
   command
-} from "./index-6na0sd2b.js";
+} from "./index-qdgzsnhg.js";
 import {
   AppExecutor
-} from "./index-p4p9t45x.js";
+} from "./index-crmeqnmf.js";
 import"./index-6wwzs1bc.js";
 import {
   TunnelShare2
-} from "./index-gm76f0qb.js";
+} from "./index-n3cv0tm4.js";
 import {
   writeClipboard
 } from "./index-p6pbz9n5.js";

package/{workflow.command-tvz4nm9n.js → workflow.command-6tkcysmx.js}

@@ -3,28 +3,28 @@ import {
   Workspace,
   script,
   command
-} from "./index-6na0sd2b.js";
+} from "./index-qdgzsnhg.js";
 import"./index-q0y2jq9j.js";
-import"./index-p4p9t45x.js";
+import"./index-crmeqnmf.js";
 import"./index-6wwzs1bc.js";
 import {
   createWorkflowStepRegistry
-} from "./index-qhtj9y6j.js";
-import"./index-qh7brn20.js";
+} from "./index-2446k7b4.js";
+import"./index-22xtgmhn.js";
 import {
   ModuleScript
-} from "./index-xjc7gg65.js";
+} from "./index-esk82rvk.js";
 import {
   PrimitiveScript
-} from "./index-te0y1c0m.js";
+} from "./index-zqgj2rt2.js";
 import {
   ScalarScript
-} from "./index-vpx68e4x.js";
+} from "./index-4m929vvn.js";
 import"./index-by5gpp8x.js";
-import"./index-v17gj504.js";
+import"./index-18zybgkc.js";
 import {
   WorkflowRunner
-} from "./index-2pm1j01n.js";
+} from "./index-txr7dj2g.js";
 
 // pkgs/@akanjs/cli/workflow/workflow.script.ts
 import { Logger } from "akanjs/common";

package/{workspace.command-txv1yv5e.js → workspace.command-gv84eh1p.js}

@@ -4,24 +4,25 @@ import {
 } from "./index-q0y2jq9j.js";
 import {
   GlobalConfig
-} from "./index-myj01w9r.js";
+} from "./index-srmay5jw.js";
 import {
   Exec,
   Workspace,
   runner,
   script,
   command
-} from "./index-6na0sd2b.js";
+} from "./index-qdgzsnhg.js";
 import {
   extractAgentBlock,
   collectScopeRecipeSources,
   renderScopeAgentBlock,
+  Linter,
   WorkspaceExecutor,
   SysExecutor,
   AppExecutor,
   LibExecutor,
   PkgExecutor
-} from "./index-p4p9t45x.js";
+} from "./index-crmeqnmf.js";
 import"./index-6wwzs1bc.js";
 import {
   countBlocking,
@@ -32,43 +33,43 @@ import {
   collectRecipeSources2,
   scanRecipes2
 } from "./index-by5gpp8x.js";
-import"./index-qhtj9y6j.js";
-import"./index-v17gj504.js";
-import"./index-twq9p2sp.js";
+import"./index-2446k7b4.js";
+import"./index-18zybgkc.js";
+import"./index-s5rhm04y.js";
 import {
   AgentScript
-} from "./index-kvzjda3v.js";
+} from "./index-bwf965h6.js";
 import {
   ApplicationScript
-} from "./index-ns128c4q.js";
+} from "./index-bftkz6cp.js";
 import {
   LibraryScript
-} from "./index-3mg4h788.js";
+} from "./index-7ep8qtvp.js";
 import"./index-hwkygn9s.js";
 import"./index-7md2g9vw.js";
-import"./index-kcxmv48c.js";
+import"./index-bhtmj233.js";
 import {
   PackageScript
-} from "./index-p0tew3fq.js";
+} from "./index-ab0c38ea.js";
 import {
   getNpmRegistryUrl,
   getLatestPackageVersion
-} from "./index-57p9p179.js";
+} from "./index-bc88j1ry.js";
 import {
   CloudScript2
-} from "./index-n8kt2wh6.js";
-import"./index-g9zghs4h.js";
-import"./index-3cymrzsb.js";
-import"./index-4cvpzkq6.js";
-import"./index-2pm1j01n.js";
-import"./index-qh7brn20.js";
-import"./index-xjc7gg65.js";
-import"./index-te0y1c0m.js";
-import"./index-vpx68e4x.js";
+} from "./index-sq2dzkzm.js";
+import"./index-3jrp517k.js";
+import"./index-vqx8bdxz.js";
+import"./index-53176s7j.js";
+import"./index-txr7dj2g.js";
+import"./index-22xtgmhn.js";
+import"./index-esk82rvk.js";
+import"./index-zqgj2rt2.js";
+import"./index-4m929vvn.js";
 import {
   ContextScript
-} from "./index-4n4821gp.js";
-import"./index-sn7dnzq4.js";
+} from "./index-10dkrrww.js";
+import"./index-kwaq3n9n.js";
 
 // pkgs/@akanjs/cli/workspace/workspace.runner.ts
 import path from "path";
@@ -232,7 +233,7 @@ class WorkspaceRunner extends runner("workspace") {
   }
   async lint(exec, workspace, { fix = true, maxDiagnostics = defaultMaxDiagnostics } = {}) {
     const configPath = await WorkspaceRunner.resolveBiomeConfigPath(workspace);
-    await workspace.spawn("./node_modules/.bin/biome", [
+    await workspace.spawn(`./node_modules/.bin/${Linter.biomeBinName}`, [
       "check",
       ...fix ? ["--write"] : [],
       "--no-errors-on-unmatched",

package/cloud.script-ch3xrw3s.js

@@ -1,20 +0,0 @@
-// @bun
-import {
-  CloudScript2
-} from "./index-n8kt2wh6.js";
-import"./index-57p9p179.js";
-import"./index-ns128c4q.js";
-import"./index-sn7dnzq4.js";
-import"./index-3mg4h788.js";
-import"./index-p0tew3fq.js";
-import"./index-myj01w9r.js";
-import"./index-6na0sd2b.js";
-import"./index-7md2g9vw.js";
-import"./index-hwkygn9s.js";
-import"./index-p4p9t45x.js";
-import"./index-6wwzs1bc.js";
-import"./index-kcxmv48c.js";
-import"./index-q0y2jq9j.js";
-export {
-  CloudScript2 as CloudScript
-};

package/context.runner-bys6ykcp.js

@@ -1,22 +0,0 @@
-// @bun
-import {
-  ContextRunner2
-} from "./index-g9zghs4h.js";
-import"./index-2pm1j01n.js";
-import"./index-vpx68e4x.js";
-import"./index-te0y1c0m.js";
-import"./index-4cvpzkq6.js";
-import"./index-xjc7gg65.js";
-import"./index-qh7brn20.js";
-import"./index-v17gj504.js";
-import"./index-qhtj9y6j.js";
-import"./index-twq9p2sp.js";
-import"./index-3cymrzsb.js";
-import"./index-6na0sd2b.js";
-import"./index-p4p9t45x.js";
-import"./index-by5gpp8x.js";
-import"./index-6wwzs1bc.js";
-import"./index-q0y2jq9j.js";
-export {
-  ContextRunner2 as ContextRunner
-};

package/guidelines/agentRule/agentRule.generate.json

@@ -1,31 +0,0 @@
-{
-  "title": "In-Page Agent Rule",
-  "description": "How an akan screen exposes itself to an in-page agent — st.tool, subscribed keys, built-ins, and the chat",
-  "group": "core",
-  "codegenPriority": 4,
-  "deprecated": false,
-  "scans": [
-    {
-      "type": "example",
-      "description": "Components publishing an agent tool beside the control that already performs the action",
-      "path": "{apps,libs}/*/**/*.tsx",
-      "sample": 4
-    }
-  ],
-  "update": {
-    "filePath": "./agentRule.instruction.md",
-    "contents": [
-      "what a declaration publishes",
-      "mounting the chat",
-      "publishing a tool",
-      "forms and reading state",
-      "built-in tools"
-    ],
-    "rules": [
-      "Use current Akan APIs only",
-      "State the rule before the reason, and keep the reason to one clause",
-      "Never describe a store class as an exposure surface — only st.tool and subscribed keys publish",
-      "Keep it workspace-neutral — no app or repo names"
-    ]
-  }
-}

package/guidelines/componentRule/componentRule.generate.json

@@ -1,31 +0,0 @@
-{
-  "title": "Component Rule",
-  "description": "Shared component implementation rules",
-  "group": "core",
-  "docsSource": "apps/akan/page/(docs)/references/ui/overview.tsx",
-  "codegenPriority": 3,
-  "deprecated": false,
-  "scans": [
-    {
-      "type": "docs",
-      "description": "Current docs source for Component Rule",
-      "path": "apps/akan/page/(docs)/references/ui/overview.tsx"
-    },
-    {
-      "type": "example",
-      "description": "Existing Akan implementation examples",
-      "path": "{apps,libs}/*/lib/**/*.ts",
-      "sample": 4
-    }
-  ],
-  "update": {
-    "filePath": "./componentRule.instruction.md",
-    "contents": ["purpose", "file ownership", "current API patterns", "codegen rules", "validation checklist"],
-    "rules": [
-      "Use current Akan APIs only",
-      "Keep output parseable for codegen",
-      "Include ownership boundaries and review checklist"
-    ]
-  },
-  "page": "apps/akan/page/(docs)/references/ui/overview.tsx"
-}

package/guidelines/conventions/conventions.generate.json

@@ -1,25 +0,0 @@
-{
-  "title": "Workspace Conventions",
-  "description": "The tool-neutral Akan convention set rendered into every workspace AGENTS.md managed block",
-  "group": "core",
-  "codegenPriority": 1,
-  "deprecated": false,
-  "scans": [],
-  "update": {
-    "filePath": "./conventions.instruction.md",
-    "contents": [
-      "change scope",
-      "lint-enforced rules",
-      "coding style and comments",
-      "client/server boundaries and SSR",
-      "domain module, service, signal, and scalar conventions",
-      "page routing, sync layout, and layer placement"
-    ],
-    "rules": [
-      "Use current Akan APIs only",
-      "State the rule and the reason it exists, never restate a type signature",
-      "Name the .grit rule that enforces a rule wherever one does",
-      "Keep it workspace-neutral — no app or repo names, since every workspace renders this file"
-    ]
-  }
-}

package/guidelines/cssRule/cssRule.generate.json

@@ -1,31 +0,0 @@
-{
-  "title": "CSS Rule",
-  "description": "Tailwind and akanjs/ui (semantic token) styling rules",
-  "group": "core",
-  "docsSource": "apps/akan/page/(docs)/docs/arch/css.tsx",
-  "codegenPriority": 3,
-  "deprecated": false,
-  "scans": [
-    {
-      "type": "docs",
-      "description": "Current docs source for CSS Rule",
-      "path": "apps/akan/page/(docs)/docs/arch/css.tsx"
-    },
-    {
-      "type": "example",
-      "description": "Existing Akan implementation examples",
-      "path": "{apps,libs}/*/lib/**/*.ts",
-      "sample": 4
-    }
-  ],
-  "update": {
-    "filePath": "./cssRule.instruction.md",
-    "contents": ["purpose", "file ownership", "current API patterns", "codegen rules", "validation checklist"],
-    "rules": [
-      "Use current Akan APIs only",
-      "Keep output parseable for codegen",
-      "Include ownership boundaries and review checklist"
-    ]
-  },
-  "page": "apps/akan/page/(docs)/docs/arch/css.tsx"
-}