@beignet/cli 0.0.50 → 0.0.52

package/src/lint.ts

@@ -6,6 +6,10 @@ import {
   classifySourcePath as classifyPath,
   type SourceLayer,
 } from "./analysis/layers.js";
+import {
+  isAnalysisSourceFile,
+  stripSourceFileExtension,
+} from "./analysis/source-files.js";
 import {
   type ModuleReference,
   moduleReferences,
@@ -202,10 +206,7 @@ export function formatLintGithub(result: LintAppResult): string {
 }
 
 function lintSourceFiles(files: string[]): string[] {
-  return files.filter((file) => {
-    if (/\.d\.(c|m)?ts$/.test(file)) return false;
-    return /\.(c|m)?tsx?$/.test(file);
-  });
+  return files.filter(isAnalysisSourceFile);
 }
 
 async function parseImports(
@@ -237,7 +238,7 @@ function packageName(importPath: string): string {
 }
 
 function stripKnownExtension(filePath: string): string {
-  return filePath.replace(/\.(c|m)?tsx?$/, "");
+  return stripSourceFileExtension(filePath);
 }
 
 function lintImport(

package/src/make.ts

@@ -2225,7 +2225,6 @@ async function updateOutboxDrainProvider(
 \t\t\tdefer: after,
 \t\t\tcreateContext: () => createServiceContext(undefined),
 \t\t\tregistry: async () => (await import("${outboxModule}")).outboxRegistry,
-\t\t\tbatchSize: 100,
 \t\t});
 
 \t\treturn {
@@ -5921,7 +5920,6 @@ export const { GET, POST } = createOutboxDrainRoute({
 \tserver: getServer,
 \tregistry: outboxRegistry,
 \tsecret: env.CRON_SECRET,
-\tbatchSize: 100,
 });
 `;
 }

package/src/mcp.ts

@@ -285,6 +285,7 @@ const outboxRunInputSchema = z.discriminatedUnion("operation", [
   z.object({
     operation: z.literal("drain"),
     batchSize: z.number().int().positive().optional(),
+    concurrency: z.number().int().positive().optional(),
     module: operationalModuleSchema,
     timeoutMs: operationalTimeoutSchema,
   }),
@@ -349,17 +350,36 @@ function jsonResult(value: unknown): McpToolResult {
   };
 }
 
-function operationalJsonResult(value: unknown): McpToolResult {
+function operationalJsonResult(
+  value: unknown,
+  options: { isError?: boolean } = {},
+): McpToolResult {
   const formatted = JSON.stringify(value, null, 2);
   const text =
     Buffer.byteLength(formatted) <= defaultOperationalResultMaxBytes
       ? formatted
       : JSON.stringify(value);
   return {
+    ...(options.isError ? { isError: true } : {}),
     content: [{ type: "text", text }],
   };
 }
 
+function isUncertainOutboxDrainReport(value: unknown): boolean {
+  if (typeof value !== "object" || value === null || !("result" in value)) {
+    return false;
+  }
+  const result = value.result;
+  if (typeof result !== "object" || result === null) return false;
+  const settlementFailed =
+    "settlementFailed" in result ? result.settlementFailed : undefined;
+  const leaseLost = "leaseLost" in result ? result.leaseLost : undefined;
+  return (
+    (typeof settlementFailed === "number" && settlementFailed > 0) ||
+    (typeof leaseLost === "number" && leaseLost > 0)
+  );
+}
+
 function errorResult(error: unknown): McpToolResult {
   return {
     isError: true,
@@ -667,7 +687,7 @@ export function buildBeignetMcpServer(options: McpServerOptions): McpServer {
     "check",
     {
       description:
-        "Run the full Beignet app validation loop: Beignet lint, strict doctor, optional disconnected or connected preflight, and the app's lint, typecheck, and test scripts. Returns the same versioned JSON as beignet check --json, including every step, bounded failure output, durations, and overall ok status. Does not apply Beignet fixes, but app-owned scripts run with their normal side effects.",
+        "Run the full Beignet app validation loop: Beignet lint, strict doctor, optional disconnected or connected preflight, and the app's lint, typecheck, and test scripts. Returns the same versioned JSON as beignet check --json, including every step, bounded failure output, durations, source-state provenance, and overall ok status. An ending fingerprint that differs from the baseline makes the result stale and unsuccessful. Does not apply Beignet fixes, but app-owned scripts run with their normal side effects.",
       inputSchema: {
         preflight: z
           .boolean()
@@ -972,7 +992,7 @@ export function buildBeignetMcpServer(options: McpServerOptions): McpServer {
     "outbox_run",
     {
       description:
-        "Run a state-changing outbox drain, requeue, purge, or prune operation and return exactly the matching versioned beignet outbox <operation> --json report. Purge and prune support dryRun. Runs in an isolated process with bounded structured output, cancellation, and a timeout.",
+        "Run a state-changing outbox drain, requeue, purge, or prune operation and return exactly the matching versioned beignet outbox <operation> --json report. Drain supports bounded unordered concurrency and returns an error-bearing report when settlement or lease state is uncertain. Purge and prune support dryRun. Runs in an isolated process with bounded structured output, cancellation, and a timeout.",
       inputSchema: outboxRunInputSchema,
       annotations: {
         readOnlyHint: false,
@@ -988,6 +1008,7 @@ export function buildBeignetMcpServer(options: McpServerOptions): McpServer {
             ? {
                 command: "outbox:drain" as const,
                 batchSize: input.batchSize,
+                concurrency: input.concurrency,
                 modulePath: input.module,
               }
             : input.operation === "requeue"
@@ -1014,14 +1035,16 @@ export function buildBeignetMcpServer(options: McpServerOptions): McpServer {
                     dryRun: input.dryRun,
                     modulePath: input.module,
                   };
-        return operationalJsonResult(
-          await runIsolatedOperationalCommand({
-            cwd,
-            request,
-            signal: ctx.mcpReq.signal,
-            timeoutMs: input.timeoutMs ?? defaultOperationalCommandTimeoutMs,
-          }),
-        );
+        const result = await runIsolatedOperationalCommand({
+          cwd,
+          request,
+          signal: ctx.mcpReq.signal,
+          timeoutMs: input.timeoutMs ?? defaultOperationalCommandTimeoutMs,
+        });
+        return operationalJsonResult(result, {
+          isError:
+            input.operation === "drain" && isUncertainOutboxDrainReport(result),
+        });
       }),
   );
 

package/src/operational-process.ts

@@ -44,6 +44,7 @@ export type OperationalCommandRequest =
   | {
       command: "outbox:drain";
       batchSize?: number;
+      concurrency?: number;
       modulePath?: string;
     }
   | {

package/src/operational-runner.ts

@@ -47,6 +47,7 @@ async function runOperationalRequest(input: OperationalRunnerInput) {
       return runOutboxDrain({
         cwd,
         batchSize: request.batchSize,
+        concurrency: request.concurrency,
         modulePath: request.modulePath,
       });
     case "outbox:list":

package/src/outbox.ts

@@ -10,6 +10,7 @@ import type {
   OutboxMessageStatus,
   OutboxRegistry,
 } from "@beignet/core/outbox";
+import type { TracingPort } from "@beignet/core/tracing";
 import { createJiti } from "jiti";
 import { loadBeignetConfig, normalizePath } from "./config.js";
 import {
@@ -26,6 +27,7 @@ export type RunOutboxDrainOptions = {
   cwd?: string;
   modulePath?: string;
   batchSize?: number;
+  concurrency?: number;
 };
 
 /**
@@ -175,6 +177,7 @@ type OutboxDrainPorts = {
   logger?: OutboxDrainLogger;
   devtools?: OutboxDrainInstrumentation;
   instrumentation?: OutboxDrainInstrumentation;
+  tracing?: TracingPort;
   errorReporter?: ErrorReporterPort;
 };
 
@@ -187,6 +190,7 @@ type OutboxDrainContext = {
 type OutboxDrainContextArgs = {
   registry: OutboxRegistry;
   batchSize?: number;
+  concurrency?: number;
 };
 
 type OutboxAdminOperation = "list" | "show" | "requeue" | "purge" | "prune";
@@ -219,7 +223,11 @@ export async function runOutboxDrain(
   const config = await loadBeignetConfig(cwd);
   const modulePath = normalizePath(options.modulePath ?? config.paths.outbox);
   const batchSize = options.batchSize;
+  const concurrency = options.concurrency;
   if (batchSize !== undefined) assertPositiveInteger("batchSize", batchSize);
+  if (concurrency !== undefined) {
+    assertPositiveInteger("concurrency", concurrency);
+  }
 
   const startedAt = performance.now();
   const outboxModule = await loadOutboxModule(cwd, modulePath);
@@ -227,7 +235,7 @@ export async function runOutboxDrain(
     outboxModule.outboxRegistry,
     modulePath,
   );
-  const contextArgs = { registry, batchSize };
+  const contextArgs = { registry, batchSize, concurrency };
   const rawContext = outboxModule.createOutboxDrainContext
     ? await outboxModule.createOutboxDrainContext(contextArgs)
     : undefined;
@@ -247,7 +255,11 @@ export async function runOutboxDrain(
           eventBus: ctx.ports.eventBus,
           jobs: ctx.ports.jobs,
           batchSize,
-          instrumentation: ctx.ports.instrumentation ?? ctx.ports.devtools,
+          concurrency,
+          instrumentation: {
+            instrumentation: ctx.ports.instrumentation ?? ctx.ports.devtools,
+            tracing: ctx.ports.tracing,
+          },
           instrumentationContext: {
             requestId: ctx.requestId,
             traceId: ctx.traceId,
@@ -288,27 +300,65 @@ export async function runOutboxDrain(
               },
             });
           },
-          onSettlementError(settlementError, message) {
+          onLeaseError(failure) {
+            const outcome =
+              failure.state === "lost"
+                ? "leaseLost"
+                : failure.state === "recovered"
+                  ? "leaseRecovered"
+                  : "leaseDegraded";
             return reportOperationalFailure({
               ctx,
-              error: settlementError,
+              error: failure.error,
+              reportOptions: {
+                level: failure.state === "lost" ? "error" : "warning",
+                mechanism: "beignet.outbox.cli",
+                handled: failure.state !== "lost",
+                tags: {
+                  "beignet.kind": "outbox",
+                  "beignet.outbox.kind": failure.message.kind,
+                  "beignet.outbox.name": failure.message.name,
+                  "beignet.outbox.outcome": outcome,
+                },
+                contexts: {
+                  outbox: {
+                    messageId: failure.message.id,
+                    kind: failure.message.kind,
+                    name: failure.message.name,
+                    attempts: failure.message.attempts,
+                    maxAttempts: failure.message.maxAttempts,
+                    operation: failure.operation,
+                    state: failure.state,
+                    confirmedLost: failure.confirmedLost,
+                    outcome,
+                  },
+                },
+              },
+            });
+          },
+          onSettlementError(failure) {
+            return reportOperationalFailure({
+              ctx,
+              error: failure.error,
               reportOptions: {
                 level: "error",
                 mechanism: "beignet.outbox.cli",
                 handled: false,
                 tags: {
                   "beignet.kind": "outbox",
-                  "beignet.outbox.kind": message.kind,
-                  "beignet.outbox.name": message.name,
+                  "beignet.outbox.kind": failure.message.kind,
+                  "beignet.outbox.name": failure.message.name,
                   "beignet.outbox.outcome": "settlementFailed",
                 },
                 contexts: {
                   outbox: {
-                    messageId: message.id,
-                    kind: message.kind,
-                    name: message.name,
-                    attempts: message.attempts,
-                    maxAttempts: message.maxAttempts,
+                    messageId: failure.message.id,
+                    kind: failure.message.kind,
+                    name: failure.message.name,
+                    attempts: failure.message.attempts,
+                    maxAttempts: failure.message.maxAttempts,
+                    operation: failure.operation,
+                    deliverySucceeded: failure.deliverySucceeded,
                     outcome: "settlementFailed",
                   },
                 },
@@ -620,6 +670,7 @@ function isOutboxPort(value: unknown): value is DrainOutboxOptions["outbox"] {
     isRecord(value) &&
     typeof value.enqueue === "function" &&
     typeof value.claimBatch === "function" &&
+    typeof value.renewClaim === "function" &&
     typeof value.markDelivered === "function" &&
     typeof value.markFailed === "function"
   );
@@ -677,7 +728,7 @@ async function recordOutboxDrain(
       watcher: "outbox",
       name: "outbox.drain",
       label: "Outbox drain",
-      summary: `${result.delivered} delivered, ${result.retried} retried, ${result.deadLettered} dead-lettered`,
+      summary: `${result.delivered} delivered, ${result.retried} retried, ${result.deadLettered} dead-lettered, ${result.settlementFailed} settlement-uncertain, ${result.leaseLost} lease-lost`,
       requestId: ctx.requestId,
       traceId: ctx.traceId,
       details: result,

package/src/templates/agents.ts

@@ -41,8 +41,8 @@ https://beignetjs.com (agent-friendly index at https://beignetjs.com/llms.txt).
 README.md covers setup and the app map; this file covers what is not
 discoverable from the code.
 
-This app requires Node.js 22.12 or newer. Bun 1.3.14 or newer is supported for
-Beignet commands.
+This app requires Node.js 22.12 or newer. Bun is optional; npm, pnpm, Yarn, and
+Bun can run Beignet commands.
 
 ## Registration is explicit
 
@@ -71,6 +71,12 @@ is a silent failure — the file exists but never runs:
 - Apps using runtime integrity must list workflow registries in
   \`defineRuntimeManifest({...})\`.
 
+Event schemas must output canonical JSON transport data. Use null, strings,
+finite numbers, booleans, arrays, and plain objects. Keep validation
+deterministic and side-effect-free, keep transforms idempotent, and represent
+timestamps as strings or numbers rather than \`Date\` objects.
+Beignet rejects payloads that would change when decoded and validated again.
+
 The starter ships no workflow registries — generators create them on first
 use, so their absence is fine. \`${cli} make event\`, \`${cli} make job\`,
 \`${cli} make listener\`, \`${cli} make schedule\`, \`${cli} make task\`,
@@ -107,7 +113,9 @@ re-exports and \`db\` for \`generate\`, \`migrate\`, \`seed\`, or \`reset\`
 instead of falling back to a shell. Use the read-only \`db_status\` tool before
 deploying. Use \`task_run\`, \`schedule_run\`,
 \`outbox_inspect\`, and \`outbox_run\` for registered operational workflows
-and outbox recovery.
+and outbox recovery. Treat a drain with nonzero \`settlementFailed\` or
+\`leaseLost\` as an operational failure. Parallel delivery is opt-in and does
+not preserve message order.
 
 ## The framework already solves these
 
@@ -144,20 +152,37 @@ formatting. The individual commands (\`${lint}\`, \`${cli} lint\`,
 \`${cli} doctor --strict\`, \`${test}\`, \`${typecheck}\`) still work when you
 need one check alone.
 
-Beignet's architecture lint parses TypeScript imports and re-exports,
-\`require()\`, import assignments, and literal dynamic imports, then follows
-local value imports through feature-root helpers. When lint cannot verify a
-computed module reference inside a constrained layer, use a string-literal
-specifier or move runtime loading behind an allowed boundary. Move near-miss
-feature layers to the canonical path named in the diagnostic.
+Inside a Git worktree, \`${cli} check\` fingerprints HEAD, the index, the
+worktree, and non-ignored untracked files before and after validation. If the
+ending fingerprint differs from the baseline, the result is stale and
+unsuccessful even when every step passed; rerun the check against the resulting
+source. Outside Git, the same validation runs with source provenance marked
+unavailable; report that limitation instead of describing the result as
+source-current.
+
+Beignet's architecture lint parses JavaScript and TypeScript imports and
+re-exports, \`require()\`, import assignments, and literal dynamic imports, then
+follows local value imports through feature-root helpers. This includes JSX
+and the \`.mts\`, \`.cts\`, \`.mjs\`, and \`.cjs\` module variants. When lint
+cannot verify a computed module reference inside a constrained layer, use a
+string-literal specifier or move runtime loading behind an allowed boundary.
+Move near-miss feature layers to the canonical path named in the diagnostic.
 
 Before exploring unfamiliar code, run \`${cli} map\` for the human inventory
 or \`${cli} map --json --feature <name>\` for an evidence-backed graph scoped
-to one feature. The graph honors the app's complete TypeScript \`baseUrl\` and
-\`paths\` configuration. Fix \`local_import_unresolved\` and
-\`contract_declaration_unresolved\` entries rather than treating their missing
-edges as proof that no relationship exists. Registration diagnostics expose
-the declaration as \`subject.file\` and \`subject.exportName\`.
+to one feature. The graph analyzes JavaScript and TypeScript source and honors
+the app's complete \`baseUrl\` and \`paths\` configuration from
+\`tsconfig.json\`, or \`jsconfig.json\` when no TypeScript config exists. Fix
+\`local_import_unresolved\` and \`contract_declaration_unresolved\` entries
+rather than treating their missing edges as proof that no relationship exists.
+Registration diagnostics expose the declaration as \`subject.file\` and
+\`subject.exportName\`.
+
+The graph includes JavaScript and TypeScript test/spec files under canonical
+and configured app test roots. Feature tests retain feature ownership;
+adjacent app, infra, server, and top-level tests remain app-level nodes and can
+appear as reverse-import consumers in changed mode. Treat that as impact
+evidence, not proof of behavioral coverage.
 
 After editing in a Git worktree, run \`${cli} map --changed\` before the full
 check. It reports direct changes, reverse imports, one-hop semantic consumers,
@@ -242,7 +267,10 @@ and reports the script without executing it; it does not simulate SQL or data
 changes. Use \`task_run\` and \`schedule_run\` for registered operational
 workflows, \`outbox_inspect\` for read-only \`list\` and \`show\`, and
 \`outbox_run\` for \`drain\`, \`requeue\`, \`purge\`, or \`prune\`; purge and
-prune support \`dryRun\`. Operational commands run in isolated process trees
+prune support \`dryRun\`. A drain with nonzero \`settlementFailed\` or
+\`leaseLost\` remains a complete JSON report but is an error result; inspect
+storage health and clock synchronization before retrying. Operational commands
+run in isolated process trees
 with bounded results, cancellation, and timeouts. Optional \`module\` overrides
 must remain inside the app root where the MCP server started. Cancellation and
 timeouts cannot roll back side effects that already completed. Inspect app

package/src/templates/base.ts

@@ -247,8 +247,8 @@ route groups such as \`app/(app)\` are not part of the URL.
 
 Beignet app scaffolded with \`@beignet/cli\`.
 
-Node.js 22.12 or newer is required. Bun 1.3.14 or newer is supported for
-Beignet commands.
+Node.js 22.12 or newer is required. Bun is optional; npm, pnpm, Yarn, and Bun
+can run Beignet commands.
 
 ## Getting started
 
@@ -288,9 +288,9 @@ use cases, workflows, ports, providers, and tests connect. \`check\` runs the
 whole validation loop in one pass: \`${cli} lint\` (dependency direction),
 \`${cli} doctor --strict\` (route, OpenAPI, and resource drift), and the
 \`lint\`, \`typecheck\`, and \`test\` package scripts. Use \`${format}\` to
-apply Biome formatting. Beignet lint uses the TypeScript import graph, follows
-feature-root helpers, and reports unverifiable computed module references in
-constrained layers.
+apply Biome formatting. Beignet lint analyzes JavaScript and TypeScript import
+graphs, follows feature-root helpers, and reports unverifiable computed module
+references in constrained layers.
 ${testingNotes}
 ## Coding agents
 

package/src/templates/db/mysql.ts

@@ -15,7 +15,7 @@
 // lives outside the app schema, so `db generate` never diffs against it.
 //
 // The Better Auth tables were generated with
-// `bunx @better-auth/cli generate` against a scratch app configured with
+// `bunx auth generate` against a scratch app configured with
 // drizzleAdapter(db, { provider: "mysql" }), then normalized to the starter's
 // conventions (tabs, no relations, no extra indexes, no column defaults).
 // MySQL cannot put UNIQUE constraints on bare text columns, so identity
@@ -60,6 +60,7 @@ export function closeDatabaseClient(): Promise<void> {
 	mysqlTable,
 	text,
 	timestamp,
+	uniqueIndex,
 	varchar,
 } from "drizzle-orm/mysql-core";
 
@@ -86,23 +87,33 @@ export const session = mysqlTable("session", {
 		.references(() => user.id, { onDelete: "cascade" }),
 });
 
-export const account = mysqlTable("account", {
-	id: varchar("id", { length: 36 }).primaryKey(),
-	accountId: text("account_id").notNull(),
-	providerId: text("provider_id").notNull(),
-	userId: varchar("user_id", { length: 36 })
-		.notNull()
-		.references(() => user.id, { onDelete: "cascade" }),
-	accessToken: text("access_token"),
-	refreshToken: text("refresh_token"),
-	idToken: text("id_token"),
-	accessTokenExpiresAt: timestamp("access_token_expires_at", { fsp: 3 }),
-	refreshTokenExpiresAt: timestamp("refresh_token_expires_at", { fsp: 3 }),
-	scope: text("scope"),
-	password: text("password"),
-	createdAt: timestamp("created_at", { fsp: 3 }).notNull(),
-	updatedAt: timestamp("updated_at", { fsp: 3 }).notNull(),
-});
+export const account = mysqlTable(
+	"account",
+	{
+		id: varchar("id", { length: 36 }).primaryKey(),
+		issuer: varchar("issuer", { length: 255 }).notNull(),
+		accountId: varchar("account_id", { length: 255 }).notNull(),
+		providerId: text("provider_id").notNull(),
+		userId: varchar("user_id", { length: 36 })
+			.notNull()
+			.references(() => user.id, { onDelete: "cascade" }),
+		accessToken: text("access_token"),
+		refreshToken: text("refresh_token"),
+		idToken: text("id_token"),
+		accessTokenExpiresAt: timestamp("access_token_expires_at", { fsp: 3 }),
+		refreshTokenExpiresAt: timestamp("refresh_token_expires_at", { fsp: 3 }),
+		scope: text("scope"),
+		password: text("password"),
+		createdAt: timestamp("created_at", { fsp: 3 }).notNull(),
+		updatedAt: timestamp("updated_at", { fsp: 3 }).notNull(),
+	},
+	(table) => [
+		uniqueIndex("account_issuer_accountId_uidx").on(
+			table.issuer,
+			table.accountId,
+		),
+	],
+);
 
 export const verification = mysqlTable("verification", {
 	id: varchar("id", { length: 36 }).primaryKey(),
@@ -476,7 +487,8 @@ const mysqlStarterMigration = {
   // above, with the provider idempotency setup statements appended.
   starterMigrationSql: `CREATE TABLE \`account\` (
 	\`id\` varchar(36) NOT NULL,
-	\`account_id\` text NOT NULL,
+	\`issuer\` varchar(255) NOT NULL,
+	\`account_id\` varchar(255) NOT NULL,
 	\`provider_id\` text NOT NULL,
 	\`user_id\` varchar(36) NOT NULL,
 	\`access_token\` text,
@@ -488,7 +500,8 @@ const mysqlStarterMigration = {
 	\`password\` text,
 	\`created_at\` timestamp(3) NOT NULL,
 	\`updated_at\` timestamp(3) NOT NULL,
-	CONSTRAINT \`account_id\` PRIMARY KEY(\`id\`)
+	CONSTRAINT \`account_id\` PRIMARY KEY(\`id\`),
+	CONSTRAINT \`account_issuer_accountId_uidx\` UNIQUE(\`issuer\`,\`account_id\`)
 );
 --> statement-breakpoint
 CREATE TABLE \`session\` (
@@ -585,9 +598,16 @@ CREATE TABLE IF NOT EXISTS \`idempotency_records\` (
           "notNull": true,
           "autoincrement": false
         },
+        "issuer": {
+          "name": "issuer",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
         "account_id": {
           "name": "account_id",
-          "type": "text",
+          "type": "varchar(255)",
           "primaryKey": false,
           "notNull": true,
           "autoincrement": false
@@ -670,7 +690,16 @@ CREATE TABLE IF NOT EXISTS \`idempotency_records\` (
           "autoincrement": false
         }
       },
-      "indexes": {},
+      "indexes": {
+        "account_issuer_accountId_uidx": {
+          "name": "account_issuer_accountId_uidx",
+          "columns": [
+            "issuer",
+            "account_id"
+          ],
+          "isUnique": true
+        }
+      },
       "foreignKeys": {
         "account_user_id_user_id_fk": {
           "name": "account_user_id_user_id_fk",