@akanjs/cli 3.0.0-beta.32 → 3.0.0-beta.33

package/.build-stamp

@@ -1 +1 @@
-77b0a64e9eb50e1874e7999dae93ff4b583b816ed3d996834a3ee44fd9ec81ad
+1bb6283347f650f636a203ca35f7b9f6592d8435f39d08d74d90acdedbb5ce91

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@akanjs/cli",
-  "version": "3.0.0-beta.32",
+  "version": "3.0.0-beta.33",
   "sourceType": "module",
   "type": "module",
   "publishConfig": {
@@ -39,7 +39,7 @@
     "@earendil-works/pi-tui": "0.86.1",
     "@inquirer/prompts": "^8.4.3",
     "@tailwindcss/node": "^4.3.0",
-    "akanjs": "3.0.0-beta.32",
+    "akanjs": "3.0.0-beta.33",
     "chalk": "^5.6.2",
     "commander": "^14.0.3",
     "dayjs": "^1.11.20",

package/templates/appSample/lib/task/task.signal.spec.ts

@@ -1,26 +1,15 @@
 import type { AppInfo, LibInfo } from "akanjs";
 
-export default function getContent(
-  scanInfo: AppInfo | LibInfo | null,
-  dict: { appName: string },
-  options: { libs?: string[] } = {},
-) {
-  // Task writes are guarded by SignedIn, so the fixtures sign a user in through libs/shared when it is installed.
-  const signsIn = options.libs?.includes("shared") ?? false;
-  return `${
-    signsIn
-      ? `import * as userSpec from "@libs/shared/lib/user/user.signal.spec";
-`
-      : ""
-  }import type { DocumentModel } from "akanjs/constant";
-import { ${signsIn ? "" : "getOrSetupSignalTestFetch, "}sampleOf } from "akanjs/test";
+export default function getContent(scanInfo: AppInfo | LibInfo | null, dict: { appName: string }) {
+  return `import type { DocumentModel } from "akanjs/constant";
+import { getOrSetupSignalTestFetch, sampleOf } from "akanjs/test";
 
 import * as cnst from "../cnst";
 import type { fetch as appFetch } from "../useServer";
 
 type AppFetch = typeof appFetch;
 
-const getFetch = async () => ${signsIn ? "(await userSpec.getUserAgentWithPassword<AppFetch>()).fetch" : "await getOrSetupSignalTestFetch<AppFetch>()"};
+const getFetch = async () => await getOrSetupSignalTestFetch<AppFetch>();
 
 export interface TaskAgent {
   task: cnst.Task;

package/templates/appSample/lib/task/task.signal.ts

@@ -1,8 +1,7 @@
 import type { AppInfo, LibInfo } from "akanjs";
 
 export default function getContent(scanInfo: AppInfo | LibInfo | null, dict: { appName: string }) {
-  return `import { SignedIn } from "@apps/${dict.appName}/srvkit";
-import { endpoint, internal, None, Public, slice } from "akanjs/signal";
+  return `import { endpoint, internal, None, Public, slice } from "akanjs/signal";
 
 import * as cnst from "../cnst";
 import * as srv from "../srv";
@@ -23,23 +22,26 @@ import * as srv from "../srv";
 export class TaskInternal extends internal(srv.task, ({ interval }) => ({})) {}
 
 // Guards, per key: root = the generated admin API (runs any filter with caller-supplied args), get = reads,
-// cru = create/update/remove. root and cru are never Public; None here means "nobody until you name a guard".
-export class TaskSlice extends slice(srv.task, { guards: { root: None, get: Public, cru: SignedIn } }, (init) => ({
+// cru = create/update/remove. None here means "nobody until you name a guard".
+// The sample lets guests write so it works before the app has sign-in. Once it does, swap Public for SignedIn
+// (srvkit/guards.ts) on cru and on the mutations below — a real app never leaves writes Public.
+export class TaskSlice extends slice(srv.task, { guards: { root: None, get: Public, cru: Public } }, (init) => ({
   inPublic: init({ guards: [Public] }).exec(function () {
     return this.taskService.queryAny();
   }),
 })) {}
 
 // Every custom endpoint names its own guards array — the slice's map above only covers generated CRUD.
-// It is also the MCP decision: an endpoint declaring no guard is not published to agents at all.
+// It is also the MCP decision: an endpoint declaring no guard, or a mutation guarded only by Public, is not
+// published to agents at all.
 export class TaskEndpoint extends endpoint(srv.task, ({ mutation }) => ({
-  startTask: mutation(cnst.Task, { guards: [SignedIn] })
+  startTask: mutation(cnst.Task, { guards: [Public] })
     .param("taskId", String)
     .exec(async function (taskId) {
       return await this.taskService.startTask(taskId);
     }),
 
-  completeTask: mutation(cnst.Task, { guards: [SignedIn] })
+  completeTask: mutation(cnst.Task, { guards: [Public] })
     .param("taskId", String)
     .exec(async function (taskId) {
       return await this.taskService.completeTask(taskId);

package/templates/workspaceRoot/AGENTS.md.template

@@ -6,6 +6,12 @@ the framework generate the repeated surfaces.
 For agent-neutral documentation that Claude Code, Codex, Devin, GitHub Copilot Coding Agent, and other tools can
 also read, see `docs/AI-DEVELOPMENT.md` and `docs/GENERATED.md`.
 
+## Framework Bugs And Feature Requests
+
+If you hit an Akan.js bug, or a fix that one framework change would solve more easily than app-level workarounds,
+draft a GitHub issue for <https://github.com/akan-team/akanjs/issues> (version, repro, expected vs actual) and ask
+the user before filing it. Keep any interim workaround small and marked `// TODO: <issue url>`.
+
 ## Generated Context
 
 The section below is regenerated by `akan agent install` (run `bun run setup:agent`). It lists this