@beignet/cli 0.0.49 → 0.0.51

package/src/lib.ts

@@ -25,6 +25,23 @@ export {
   mapApp,
   projectAppMap,
 } from "./app-map.js";
+export type {
+  AppChangedFile,
+  AppChangeFileScope,
+  AppChangeGap,
+  AppChangeImpact,
+  AppChangeImpactedNode,
+  AppChangeImpactResult,
+  AppChangeReason,
+  AppChangeRelationship,
+  AppMapChangesOptions,
+  BoundedAppChangeGapSection,
+  BoundedAppChangeSection,
+} from "./app-map-changes.js";
+export {
+  formatAppChangeImpact,
+  mapAppChanges,
+} from "./app-map-changes.js";
 export type { CreateOptions } from "./create.js";
 export { createProject } from "./create.js";
 export type {
@@ -71,6 +88,10 @@ export {
   explainTargetKinds,
   formatExplain,
 } from "./explain.js";
+export type {
+  GitChangeComparison,
+  GitChangedFileStatus,
+} from "./git-changes.js";
 export { main } from "./index.js";
 export type {
   ApplyDoctorFixPlanOptions,

package/src/make/shared.ts

@@ -453,36 +453,40 @@ export function wireListenersProviderSource(
 >()({
 \tname: "app-listeners",
 \tsetup({ ports, createServiceContext }) {
-\t\tconst unregister = registerListeners(ports.eventBus, listeners, {
-\t\t\tctx: () =>
-\t\t\t\tcreateServiceContext({
-\t\t\t\t\tactor: createServiceActor("beignet-listener"),
-\t\t\t\t}),
-\t\t\tonError(error, listener) {
-\t\t\t\tports.logger.error("Event listener failed", {
-\t\t\t\t\terror,
-\t\t\t\t\tlistenerName: listener.name,
-\t\t\t\t});
-\t\t\t\tvoid tryReportException({
-\t\t\t\t\treporter: ports.errorReporter,
-\t\t\t\t\terror,
-\t\t\t\t\treportOptions: {
-\t\t\t\t\t\tlevel: "error",
-\t\t\t\t\t\tmechanism: "beignet.listener",
-\t\t\t\t\t\thandled: false,
-\t\t\t\t\t\ttags: {
-\t\t\t\t\t\t\t"beignet.kind": "listener",
-\t\t\t\t\t\t\t"beignet.listener": listener.name,
-\t\t\t\t\t\t},
-\t\t\t\t\t\tcontexts: { listener: { name: listener.name } },
+\t\tlet registration: ReturnType<typeof registerListeners> | undefined;
+
+\t\treturn {
+\t\t\tasync start() {
+\t\t\t\tregistration = registerListeners(ports.eventBus, listeners, {
+\t\t\t\t\tctx: () =>
+\t\t\t\t\t\tcreateServiceContext({
+\t\t\t\t\t\t\tactor: createServiceActor("beignet-listener"),
+\t\t\t\t\t\t}),
+\t\t\t\t\tonError(error, listener) {
+\t\t\t\t\t\tports.logger.error("Event listener failed", {
+\t\t\t\t\t\t\terror,
+\t\t\t\t\t\t\tlistenerName: listener.name,
+\t\t\t\t\t\t});
+\t\t\t\t\t\tvoid tryReportException({
+\t\t\t\t\t\t\treporter: ports.errorReporter,
+\t\t\t\t\t\t\terror,
+\t\t\t\t\t\t\treportOptions: {
+\t\t\t\t\t\t\t\tlevel: "error",
+\t\t\t\t\t\t\t\tmechanism: "beignet.listener",
+\t\t\t\t\t\t\t\thandled: false,
+\t\t\t\t\t\t\t\ttags: {
+\t\t\t\t\t\t\t\t\t"beignet.kind": "listener",
+\t\t\t\t\t\t\t\t\t"beignet.listener": listener.name,
+\t\t\t\t\t\t\t\t},
+\t\t\t\t\t\t\t\tcontexts: { listener: { name: listener.name } },
+\t\t\t\t\t\t\t},
+\t\t\t\t\t\t});
 \t\t\t\t\t},
 \t\t\t\t});
+\t\t\t\tawait registration.ready;
 \t\t\t},
-\t\t});
-
-\t\treturn {
-\t\t\tstop() {
-\t\t\t\tunregister();
+\t\t\tasync stop() {
+\t\t\t\tawait registration?.unsubscribe();
 \t\t\t},
 \t\t};
 \t},

package/src/make.ts

@@ -2225,7 +2225,6 @@ async function updateOutboxDrainProvider(
 \t\t\tdefer: after,
 \t\t\tcreateContext: () => createServiceContext(undefined),
 \t\t\tregistry: async () => (await import("${outboxModule}")).outboxRegistry,
-\t\t\tbatchSize: 100,
 \t\t});
 
 \t\treturn {
@@ -5921,7 +5920,6 @@ export const { GET, POST } = createOutboxDrainRoute({
 \tserver: getServer,
 \tregistry: outboxRegistry,
 \tsecret: env.CRON_SECRET,
-\tbatchSize: 100,
 });
 `;
 }

package/src/mcp.ts

@@ -4,6 +4,7 @@ import { McpServer, ResourceTemplate } from "@modelcontextprotocol/server";
 import { StdioServerTransport } from "@modelcontextprotocol/server/stdio";
 import { z } from "zod/v4";
 import { mapApp, projectAppMap } from "./app-map.js";
+import { mapAppChanges } from "./app-map-changes.js";
 import { appMapNodeKinds } from "./app-map-schema.js";
 import { checkApp } from "./check.js";
 import {
@@ -284,6 +285,7 @@ const outboxRunInputSchema = z.discriminatedUnion("operation", [
   z.object({
     operation: z.literal("drain"),
     batchSize: z.number().int().positive().optional(),
+    concurrency: z.number().int().positive().optional(),
     module: operationalModuleSchema,
     timeoutMs: operationalTimeoutSchema,
   }),
@@ -348,17 +350,36 @@ function jsonResult(value: unknown): McpToolResult {
   };
 }
 
-function operationalJsonResult(value: unknown): McpToolResult {
+function operationalJsonResult(
+  value: unknown,
+  options: { isError?: boolean } = {},
+): McpToolResult {
   const formatted = JSON.stringify(value, null, 2);
   const text =
     Buffer.byteLength(formatted) <= defaultOperationalResultMaxBytes
       ? formatted
       : JSON.stringify(value);
   return {
+    ...(options.isError ? { isError: true } : {}),
     content: [{ type: "text", text }],
   };
 }
 
+function isUncertainOutboxDrainReport(value: unknown): boolean {
+  if (typeof value !== "object" || value === null || !("result" in value)) {
+    return false;
+  }
+  const result = value.result;
+  if (typeof result !== "object" || result === null) return false;
+  const settlementFailed =
+    "settlementFailed" in result ? result.settlementFailed : undefined;
+  const leaseLost = "leaseLost" in result ? result.leaseLost : undefined;
+  return (
+    (typeof settlementFailed === "number" && settlementFailed > 0) ||
+    (typeof leaseLost === "number" && leaseLost > 0)
+  );
+}
+
 function errorResult(error: unknown): McpToolResult {
   return {
     isError: true,
@@ -579,8 +600,21 @@ export function buildBeignetMcpServer(options: McpServerOptions): McpServer {
     "app_map",
     {
       description:
-        "Return a deterministic graph of this Beignet app: features, contracts, routes, use cases, authorization, workflows, ports, providers, OpenAPI, tests, dependency edges, and validation findings. Project by feature or node kind to keep agent context focused.",
+        "Return a deterministic graph of this Beignet app, or map the current Git change set to bounded, source-backed concepts with changed=true. Changed mode is report-only and exposes unresolved evidence without claiming verification.",
       inputSchema: {
+        changed: z
+          .boolean()
+          .optional()
+          .describe(
+            "Map the current Git change set instead of returning the complete app graph.",
+          ),
+        base: z
+          .string()
+          .min(1)
+          .optional()
+          .describe(
+            "Include committed changes since the merge base of this already-local Git ref. Requires changed=true; Beignet never fetches it.",
+          ),
         feature: z
           .string()
           .optional()
@@ -598,6 +632,22 @@ export function buildBeignetMcpServer(options: McpServerOptions): McpServer {
     },
     async (input) =>
       safeToolResult(async () => {
+        if (input.base !== undefined && !input.changed) {
+          throw new Error("app_map base requires changed=true.");
+        }
+        if (
+          input.changed &&
+          (input.feature !== undefined ||
+            input.kinds !== undefined ||
+            input.includeDiagnostics !== undefined)
+        ) {
+          throw new Error(
+            "app_map changed=true cannot be combined with feature, kinds, or includeDiagnostics.",
+          );
+        }
+        if (input.changed) {
+          return jsonResult(await mapAppChanges({ cwd, base: input.base }));
+        }
         const result = await mapApp({ cwd, strict: true });
         return jsonResult(
           projectAppMap(result, {
@@ -942,7 +992,7 @@ export function buildBeignetMcpServer(options: McpServerOptions): McpServer {
     "outbox_run",
     {
       description:
-        "Run a state-changing outbox drain, requeue, purge, or prune operation and return exactly the matching versioned beignet outbox <operation> --json report. Purge and prune support dryRun. Runs in an isolated process with bounded structured output, cancellation, and a timeout.",
+        "Run a state-changing outbox drain, requeue, purge, or prune operation and return exactly the matching versioned beignet outbox <operation> --json report. Drain supports bounded unordered concurrency and returns an error-bearing report when settlement or lease state is uncertain. Purge and prune support dryRun. Runs in an isolated process with bounded structured output, cancellation, and a timeout.",
       inputSchema: outboxRunInputSchema,
       annotations: {
         readOnlyHint: false,
@@ -958,6 +1008,7 @@ export function buildBeignetMcpServer(options: McpServerOptions): McpServer {
             ? {
                 command: "outbox:drain" as const,
                 batchSize: input.batchSize,
+                concurrency: input.concurrency,
                 modulePath: input.module,
               }
             : input.operation === "requeue"
@@ -984,14 +1035,16 @@ export function buildBeignetMcpServer(options: McpServerOptions): McpServer {
                     dryRun: input.dryRun,
                     modulePath: input.module,
                   };
-        return operationalJsonResult(
-          await runIsolatedOperationalCommand({
-            cwd,
-            request,
-            signal: ctx.mcpReq.signal,
-            timeoutMs: input.timeoutMs ?? defaultOperationalCommandTimeoutMs,
-          }),
-        );
+        const result = await runIsolatedOperationalCommand({
+          cwd,
+          request,
+          signal: ctx.mcpReq.signal,
+          timeoutMs: input.timeoutMs ?? defaultOperationalCommandTimeoutMs,
+        });
+        return operationalJsonResult(result, {
+          isError:
+            input.operation === "drain" && isUncertainOutboxDrainReport(result),
+        });
       }),
   );
 
@@ -1166,7 +1219,7 @@ export function buildBeignetMcpServer(options: McpServerOptions): McpServer {
 async function readAppGuidance(cwd: string): Promise<string> {
   const guidancePath = await resolveAppGuidancePath(cwd);
   if (!guidancePath) {
-    return "# Beignet app guidance\n\nNo app-local AGENTS.md was found. Use the app_map and explain tools before editing, prefer Beignet generators, and run check after changes.\n";
+    return "# Beignet app guidance\n\nNo app-local AGENTS.md was found. Use app_map and explain before editing, prefer Beignet generators, use app_map with changed=true to inspect potential consumers after editing in Git, and then run check.\n";
   }
 
   let file: Awaited<ReturnType<typeof open>>;

package/src/operational-process.ts

@@ -44,6 +44,7 @@ export type OperationalCommandRequest =
   | {
       command: "outbox:drain";
       batchSize?: number;
+      concurrency?: number;
       modulePath?: string;
     }
   | {

package/src/operational-runner.ts

@@ -47,6 +47,7 @@ async function runOperationalRequest(input: OperationalRunnerInput) {
       return runOutboxDrain({
         cwd,
         batchSize: request.batchSize,
+        concurrency: request.concurrency,
         modulePath: request.modulePath,
       });
     case "outbox:list":

package/src/outbox.ts

@@ -10,6 +10,7 @@ import type {
   OutboxMessageStatus,
   OutboxRegistry,
 } from "@beignet/core/outbox";
+import type { TracingPort } from "@beignet/core/tracing";
 import { createJiti } from "jiti";
 import { loadBeignetConfig, normalizePath } from "./config.js";
 import {
@@ -26,6 +27,7 @@ export type RunOutboxDrainOptions = {
   cwd?: string;
   modulePath?: string;
   batchSize?: number;
+  concurrency?: number;
 };
 
 /**
@@ -175,6 +177,7 @@ type OutboxDrainPorts = {
   logger?: OutboxDrainLogger;
   devtools?: OutboxDrainInstrumentation;
   instrumentation?: OutboxDrainInstrumentation;
+  tracing?: TracingPort;
   errorReporter?: ErrorReporterPort;
 };
 
@@ -187,6 +190,7 @@ type OutboxDrainContext = {
 type OutboxDrainContextArgs = {
   registry: OutboxRegistry;
   batchSize?: number;
+  concurrency?: number;
 };
 
 type OutboxAdminOperation = "list" | "show" | "requeue" | "purge" | "prune";
@@ -219,7 +223,11 @@ export async function runOutboxDrain(
   const config = await loadBeignetConfig(cwd);
   const modulePath = normalizePath(options.modulePath ?? config.paths.outbox);
   const batchSize = options.batchSize;
+  const concurrency = options.concurrency;
   if (batchSize !== undefined) assertPositiveInteger("batchSize", batchSize);
+  if (concurrency !== undefined) {
+    assertPositiveInteger("concurrency", concurrency);
+  }
 
   const startedAt = performance.now();
   const outboxModule = await loadOutboxModule(cwd, modulePath);
@@ -227,7 +235,7 @@ export async function runOutboxDrain(
     outboxModule.outboxRegistry,
     modulePath,
   );
-  const contextArgs = { registry, batchSize };
+  const contextArgs = { registry, batchSize, concurrency };
   const rawContext = outboxModule.createOutboxDrainContext
     ? await outboxModule.createOutboxDrainContext(contextArgs)
     : undefined;
@@ -247,7 +255,11 @@ export async function runOutboxDrain(
           eventBus: ctx.ports.eventBus,
           jobs: ctx.ports.jobs,
           batchSize,
-          instrumentation: ctx.ports.instrumentation ?? ctx.ports.devtools,
+          concurrency,
+          instrumentation: {
+            instrumentation: ctx.ports.instrumentation ?? ctx.ports.devtools,
+            tracing: ctx.ports.tracing,
+          },
           instrumentationContext: {
             requestId: ctx.requestId,
             traceId: ctx.traceId,
@@ -288,27 +300,65 @@ export async function runOutboxDrain(
               },
             });
           },
-          onSettlementError(settlementError, message) {
+          onLeaseError(failure) {
+            const outcome =
+              failure.state === "lost"
+                ? "leaseLost"
+                : failure.state === "recovered"
+                  ? "leaseRecovered"
+                  : "leaseDegraded";
             return reportOperationalFailure({
               ctx,
-              error: settlementError,
+              error: failure.error,
+              reportOptions: {
+                level: failure.state === "lost" ? "error" : "warning",
+                mechanism: "beignet.outbox.cli",
+                handled: failure.state !== "lost",
+                tags: {
+                  "beignet.kind": "outbox",
+                  "beignet.outbox.kind": failure.message.kind,
+                  "beignet.outbox.name": failure.message.name,
+                  "beignet.outbox.outcome": outcome,
+                },
+                contexts: {
+                  outbox: {
+                    messageId: failure.message.id,
+                    kind: failure.message.kind,
+                    name: failure.message.name,
+                    attempts: failure.message.attempts,
+                    maxAttempts: failure.message.maxAttempts,
+                    operation: failure.operation,
+                    state: failure.state,
+                    confirmedLost: failure.confirmedLost,
+                    outcome,
+                  },
+                },
+              },
+            });
+          },
+          onSettlementError(failure) {
+            return reportOperationalFailure({
+              ctx,
+              error: failure.error,
               reportOptions: {
                 level: "error",
                 mechanism: "beignet.outbox.cli",
                 handled: false,
                 tags: {
                   "beignet.kind": "outbox",
-                  "beignet.outbox.kind": message.kind,
-                  "beignet.outbox.name": message.name,
+                  "beignet.outbox.kind": failure.message.kind,
+                  "beignet.outbox.name": failure.message.name,
                   "beignet.outbox.outcome": "settlementFailed",
                 },
                 contexts: {
                   outbox: {
-                    messageId: message.id,
-                    kind: message.kind,
-                    name: message.name,
-                    attempts: message.attempts,
-                    maxAttempts: message.maxAttempts,
+                    messageId: failure.message.id,
+                    kind: failure.message.kind,
+                    name: failure.message.name,
+                    attempts: failure.message.attempts,
+                    maxAttempts: failure.message.maxAttempts,
+                    operation: failure.operation,
+                    deliverySucceeded: failure.deliverySucceeded,
                     outcome: "settlementFailed",
                   },
                 },
@@ -620,6 +670,7 @@ function isOutboxPort(value: unknown): value is DrainOutboxOptions["outbox"] {
     isRecord(value) &&
     typeof value.enqueue === "function" &&
     typeof value.claimBatch === "function" &&
+    typeof value.renewClaim === "function" &&
     typeof value.markDelivered === "function" &&
     typeof value.markFailed === "function"
   );
@@ -677,7 +728,7 @@ async function recordOutboxDrain(
       watcher: "outbox",
       name: "outbox.drain",
       label: "Outbox drain",
-      summary: `${result.delivered} delivered, ${result.retried} retried, ${result.deadLettered} dead-lettered`,
+      summary: `${result.delivered} delivered, ${result.retried} retried, ${result.deadLettered} dead-lettered, ${result.settlementFailed} settlement-uncertain, ${result.leaseLost} lease-lost`,
       requestId: ctx.requestId,
       traceId: ctx.traceId,
       details: result,

package/src/templates/agents.ts

@@ -64,6 +64,8 @@ is a silent failure — the file exists but never runs:
   fallback and rejects unmarked custom inline wiring as a conflict.
 - Listeners must be added to the \`listeners\` array in \`server/listeners.ts\`
   and wired through a \`registerListeners(...)\` call in server provider wiring.
+  Register them in \`start()\`, await \`registration.ready\`, and await
+  \`registration.unsubscribe()\` in \`stop()\`.
 - Apps using Inngest must also spread feature job registries into
   \`inngestJobs\` in \`server/inngest.ts\`.
 - Apps using runtime integrity must list workflow registries in
@@ -105,7 +107,9 @@ re-exports and \`db\` for \`generate\`, \`migrate\`, \`seed\`, or \`reset\`
 instead of falling back to a shell. Use the read-only \`db_status\` tool before
 deploying. Use \`task_run\`, \`schedule_run\`,
 \`outbox_inspect\`, and \`outbox_run\` for registered operational workflows
-and outbox recovery.
+and outbox recovery. Treat a drain with nonzero \`settlementFailed\` or
+\`leaseLost\` as an operational failure. Parallel delivery is opt-in and does
+not preserve message order.
 
 ## The framework already solves these
 
@@ -157,6 +161,15 @@ to one feature. The graph honors the app's complete TypeScript \`baseUrl\` and
 edges as proof that no relationship exists. Registration diagnostics expose
 the declaration as \`subject.file\` and \`subject.exportName\`.
 
+After editing in a Git worktree, run \`${cli} map --changed\` before the full
+check. It reports direct changes, reverse imports, one-hop semantic consumers,
+feature context, and unresolved evidence without claiming that the change is
+correct. Use \`--base <local-ref>\` for branch-wide impact from the merge base;
+Beignet never fetches the ref. Recognized guide files and
+root documentation-directory content stay non-impacting; other \`.mdx\` and
+\`.txt\` paths remain application changes. Changed files with no mapped concept
+appear as explicit gaps.
+
 ## Package skills
 
 This app trusts Beignet's package-shipped agent skills through
@@ -173,6 +186,12 @@ skill-loading block.
 
 ## Placement rules
 
+- Checked-in SQL migrations and Drizzle metadata live in root \`drizzle/\`.
+- Seed generators compose feature seeds through the optional
+  \`server/seed.ts\` entrypoint.
+- Long-running runtime entrypoints such as BullMQ workers live under optional
+  \`server/workers/\`; never start worker loops in lifecycle providers or
+  serverless route modules.
 - Feature artifacts live under \`features/<feature>/\`, with tests in
   \`features/<feature>/tests/\` (not \`__tests__/\`).
 - Feature-specific client data-fetching helpers, query options, mutation
@@ -204,7 +223,10 @@ stable operation IDs, hashes, exact patches, and current diagnostics before
 passing its \`planId\` and optional \`fixIds\` to \`doctor_fix\`. Guarded
 apply returns the same plan metadata and inspection payload as the CLI. Use
 \`app_map\` before broad code search and pass a feature
-or node kinds to keep context focused. Use \`explain\` for source-backed
+or node kinds to keep context focused. After edits, pass
+\`{ changed: true, base?: string }\` for the same report as
+\`${cli} map --changed --json\`; changed mode rejects projection and diagnostic
+inputs. Use \`explain\` for source-backed
 relationships, conventions, findings, and suggested files for any mapped
 concept or diagnostic; its kinds match the app map. Use \`check\` after edits
 to run the complete validation loop; it returns the same versioned result as
@@ -222,7 +244,10 @@ and reports the script without executing it; it does not simulate SQL or data
 changes. Use \`task_run\` and \`schedule_run\` for registered operational
 workflows, \`outbox_inspect\` for read-only \`list\` and \`show\`, and
 \`outbox_run\` for \`drain\`, \`requeue\`, \`purge\`, or \`prune\`; purge and
-prune support \`dryRun\`. Operational commands run in isolated process trees
+prune support \`dryRun\`. A drain with nonzero \`settlementFailed\` or
+\`leaseLost\` remains a complete JSON report but is an error result; inspect
+storage health and clock synchronization before retrying. Operational commands
+run in isolated process trees
 with bounded results, cancellation, and timeouts. Optional \`module\` overrides
 must remain inside the app root where the MCP server started. Cancellation and
 timeouts cannot roll back side effects that already completed. Inspect app

package/src/templates/base.ts

@@ -324,7 +324,10 @@ Use \`${cli} make feature projects --recipe full-slice\` when you want a richer
 
 Run \`${cli} map\` for the current architecture or \`${cli} map --json\` for
 the versioned graph used by coding agents. Add \`--feature todos\` to focus on
-one slice and its direct relationships.
+one slice and its direct relationships. After editing in a Git worktree, run
+\`${cli} map --changed\` to inspect direct changes, potential semantic
+consumers, feature context, and unresolved evidence before \`${cli} check\`.
+The changed map is report-only and does not prove correctness.
 
 - \`features/todos/contracts.ts\` owns the HTTP contract and reuses shared feature schemas.
 - \`features/todos/schemas.ts\` owns shared DTO and validation schemas used by contracts, use cases, ports, tests, and clients.