@beignet/cli 0.0.48 → 0.0.50

package/src/templates/agents.ts

@@ -41,6 +41,9 @@ https://beignetjs.com (agent-friendly index at https://beignetjs.com/llms.txt).
 README.md covers setup and the app map; this file covers what is not
 discoverable from the code.
 
+This app requires Node.js 22.12 or newer. Bun 1.3.14 or newer is supported for
+Beignet commands.
+
 ## Registration is explicit
 
 Hand-writing an artifact file does not wire it into the app. Non-registration
@@ -54,8 +57,15 @@ is a silent failure — the file exists but never runs:
 - Tasks must be added to \`defineTasks([...])\` in \`server/tasks.ts\`.
 - Outbox events and jobs must be registered in \`defineOutboxRegistry({...})\`
   in \`server/outbox.ts\`.
+- An outbox registry containing jobs also requires \`jobs: JobDispatcherPort\`
+  to be bound directly or deferred to a provider. \`${cli} make job\` installs
+  an app-owned inline dispatcher only when no dispatcher is already wired;
+  adding an Inngest or BullMQ preset later replaces only that marked generated
+  fallback and rejects unmarked custom inline wiring as a conflict.
 - Listeners must be added to the \`listeners\` array in \`server/listeners.ts\`
   and wired through a \`registerListeners(...)\` call in server provider wiring.
+  Register them in \`start()\`, await \`registration.ready\`, and await
+  \`registration.unsubscribe()\` in \`stop()\`.
 - Apps using Inngest must also spread feature job registries into
   \`inngestJobs\` in \`server/inngest.ts\`.
 - Apps using runtime integrity must list workflow registries in
@@ -106,6 +116,7 @@ apps have reimplemented by accident:
 
 | Need | Use |
 | --- | --- |${capabilityClientRow}
+| Query parameters on an HTTP contract | Pass both the Standard Schema and an explicit \`defineQueryTransport({ ... })\` to \`.query(schema, transport)\`. Use \`query.string()\`, \`query.number()\`, \`query.integer()\`, \`query.boolean()\`, \`query.dateTime()\`, \`query.date()\`, repeated scalar arrays, or one flat \`deepObject\`; never make schema coercion define the URL format. |
 | App context outside HTTP — agents, queues, scripts, backfills | \`server.createServiceContext(input)\`, or \`server.runServiceContext(input, fn)\` in one-off scripts. Never hand-assemble a context or call \`gate.attach(...)\` — the server owns gate attachment. |
 | Ports outside a request — auth callbacks, module-level helpers | \`const { ports } = await getServer()\` (dynamic \`import("@/server")\` breaks module cycles). Do not construct parallel provider clients or fall back to \`console.*\` when \`ports.logger\` exists. |
 | Routes that cannot be contracts — webhooks, third-party callbacks, streaming | \`createWebhookRoute\`, \`createPaymentWebhookRoute\`, \`createScheduleRoute\`, \`createOutboxDrainRoute\` from \`@beignet/next\`; \`server.rawRoute(...)\` for anything else. All run the hooks pipeline — never hand-enforce rate limits in a route body. |
@@ -133,6 +144,13 @@ formatting. The individual commands (\`${lint}\`, \`${cli} lint\`,
 \`${cli} doctor --strict\`, \`${test}\`, \`${typecheck}\`) still work when you
 need one check alone.
 
+Beignet's architecture lint parses TypeScript imports and re-exports,
+\`require()\`, import assignments, and literal dynamic imports, then follows
+local value imports through feature-root helpers. When lint cannot verify a
+computed module reference inside a constrained layer, use a string-literal
+specifier or move runtime loading behind an allowed boundary. Move near-miss
+feature layers to the canonical path named in the diagnostic.
+
 Before exploring unfamiliar code, run \`${cli} map\` for the human inventory
 or \`${cli} map --json --feature <name>\` for an evidence-backed graph scoped
 to one feature. The graph honors the app's complete TypeScript \`baseUrl\` and
@@ -141,6 +159,15 @@ to one feature. The graph honors the app's complete TypeScript \`baseUrl\` and
 edges as proof that no relationship exists. Registration diagnostics expose
 the declaration as \`subject.file\` and \`subject.exportName\`.
 
+After editing in a Git worktree, run \`${cli} map --changed\` before the full
+check. It reports direct changes, reverse imports, one-hop semantic consumers,
+feature context, and unresolved evidence without claiming that the change is
+correct. Use \`--base <local-ref>\` for branch-wide impact from the merge base;
+Beignet never fetches the ref. Recognized guide files and
+root documentation-directory content stay non-impacting; other \`.mdx\` and
+\`.txt\` paths remain application changes. Changed files with no mapped concept
+appear as explicit gaps.
+
 ## Package skills
 
 This app trusts Beignet's package-shipped agent skills through
@@ -157,6 +184,12 @@ skill-loading block.
 
 ## Placement rules
 
+- Checked-in SQL migrations and Drizzle metadata live in root \`drizzle/\`.
+- Seed generators compose feature seeds through the optional
+  \`server/seed.ts\` entrypoint.
+- Long-running runtime entrypoints such as BullMQ workers live under optional
+  \`server/workers/\`; never start worker loops in lifecycle providers or
+  serverless route modules.
 - Feature artifacts live under \`features/<feature>/\`, with tests in
   \`features/<feature>/tests/\` (not \`__tests__/\`).
 - Feature-specific client data-fetching helpers, query options, mutation
@@ -188,7 +221,10 @@ stable operation IDs, hashes, exact patches, and current diagnostics before
 passing its \`planId\` and optional \`fixIds\` to \`doctor_fix\`. Guarded
 apply returns the same plan metadata and inspection payload as the CLI. Use
 \`app_map\` before broad code search and pass a feature
-or node kinds to keep context focused. Use \`explain\` for source-backed
+or node kinds to keep context focused. After edits, pass
+\`{ changed: true, base?: string }\` for the same report as
+\`${cli} map --changed --json\`; changed mode rejects projection and diagnostic
+inputs. Use \`explain\` for source-backed
 relationships, conventions, findings, and suggested files for any mapped
 concept or diagnostic; its kinds match the app map. Use \`check\` after edits
 to run the complete validation loop; it returns the same versioned result as

package/src/templates/base.ts

@@ -111,6 +111,9 @@ export function packageJson(ctx: TemplateContext): string {
     version: "0.1.0",
     private: true,
     type: "module",
+    engines: {
+      node: ">=22.12.0",
+    },
     scripts,
     intent: {
       skills: intentSkillPackages(ctx),
@@ -244,6 +247,9 @@ route groups such as \`app/(app)\` are not part of the URL.
 
 Beignet app scaffolded with \`@beignet/cli\`.
 
+Node.js 22.12 or newer is required. Bun 1.3.14 or newer is supported for
+Beignet commands.
+
 ## Getting started
 
 \`\`\`bash
@@ -282,7 +288,9 @@ use cases, workflows, ports, providers, and tests connect. \`check\` runs the
 whole validation loop in one pass: \`${cli} lint\` (dependency direction),
 \`${cli} doctor --strict\` (route, OpenAPI, and resource drift), and the
 \`lint\`, \`typecheck\`, and \`test\` package scripts. Use \`${format}\` to
-apply Biome formatting.
+apply Biome formatting. Beignet lint uses the TypeScript import graph, follows
+feature-root helpers, and reports unverifiable computed module references in
+constrained layers.
 ${testingNotes}
 ## Coding agents
 
@@ -316,7 +324,10 @@ Use \`${cli} make feature projects --recipe full-slice\` when you want a richer
 
 Run \`${cli} map\` for the current architecture or \`${cli} map --json\` for
 the versioned graph used by coding agents. Add \`--feature todos\` to focus on
-one slice and its direct relationships.
+one slice and its direct relationships. After editing in a Git worktree, run
+\`${cli} map --changed\` to inspect direct changes, potential semantic
+consumers, feature context, and unresolved evidence before \`${cli} check\`.
+The changed map is report-only and does not prove correctness.
 
 - \`features/todos/contracts.ts\` owns the HTTP contract and reuses shared feature schemas.
 - \`features/todos/schemas.ts\` owns shared DTO and validation schemas used by contracts, use cases, ports, tests, and clients.

package/src/templates/server.ts

@@ -696,6 +696,8 @@ export const { GET, POST } = createDevtoolsRoute(
 	{
 		basePath: "/api/devtools",
 		enabled: env.DEVTOOLS_ENABLED,
+		authorize: async (req) =>
+			Boolean(await (await getServer()).ports.auth.getSession(req)),
 	},
 );
 `,

package/src/templates/shared.ts

@@ -37,7 +37,7 @@ export const externalVersions = {
   reactDom: "^19.2.5",
   tsx: "^4.22.4",
   typescript: "^5.3.0",
-  typesNode: "^20.10.0",
+  typesNode: "^22.0.0",
   typesReact: "^19.0.0",
   typesReactDom: "^19.0.0",
   zod: "^4.0.0",
@@ -62,7 +62,8 @@ export const externalVersions = {
   openFeatureServerSdk: "^1.22.0",
   typesPg: "^8.11.0",
   ioredis: "^5.0.0",
-  awsSdkS3: "^3.955.0",
+  awsSdkS3: "^3.1050.0",
+  awsSdkLibStorage: "3.1050.0",
   upstashRateLimit: "^2.0.0",
   upstashRedis: "^1.0.0",
 };