@ultimat3/cli 25.1.0 → 26.0.0

package/src/templates/scaffold-claude-agents.ts

@@ -40,7 +40,7 @@ stop; that answer is worth more than a plan built on a shape the app cannot hold
 |---|---|
 | \`apps/web/site/<path>/page.tsx\` | public, SEO-critical, 0kb JS |
 | \`apps/web/app/<slice>/\` | the feature slice: entity, repo, policy, actions, queries, jobs, UI |
-| \`apps/web/api/<name>/route.ts\` | HTTP surface for actions |
+| \`apps/web/api/index.ts\` | the one \`defineApi()\` collecting every action and query — no route file lives under \`api/\` |
 | \`apps/web/shared/\` | tokens, primitives, the actor type — a leaf, imports nothing of yours |
 | \`packages/db/\` | schema, migrations, seed |
 | \`packages/ui/\` | components with no feature knowledge |
@@ -79,7 +79,7 @@ feature slice. Nothing else. A change outside that set is a collision — report
 | Money | \`{ minor, currency }\` — integer minor units and an ISO code, both, always. Never a float |
 | Time | store UTC; a formatted date always names an explicit IANA time zone |
 
-Inspect before you change: \`x entities list\`, \`x entities describe <name>\`, both with \`--json\`.
+Inspect before you change: \`x entities list\`, \`x entities show <name>\`, both with \`--json\`.
 
 Checks: \`bun test <path>/entity.test.ts\`, \`bunx biome check --write <paths>\`, and \`bun run typecheck\`
 once when you are otherwise done. Never \`x verify\` — that belongs to whoever coordinates you.
@@ -105,7 +105,7 @@ renders. A change outside that set is a collision — report it, do not make it.
 | Tasks name a time zone | a cron schedule with an ambient zone is a different time twice a year |
 | No \`any\` | \`unknown\` plus a schema parse |
 
-Inspect before you change: \`x actions describe <name>\`, \`x queries describe <name>\`, \`x jobs ls\`,
+Inspect before you change: \`x actions show <name>\`, \`x queries show <name>\`, \`x jobs list\`,
 \`x tasks list\`, \`x policy explain <subject>\` — every one takes \`--json\`.
 
 Checks: \`bun test <path>/<file>.test.ts\`, \`bunx biome check --write <paths>\`, and \`bun run typecheck\`
@@ -126,7 +126,7 @@ calls. A change outside that set is a collision — report it, do not make it.
 |---|---|
 | \`site/\` is 0kb JS | and may not import from \`app/\`. One interactive control on a static page is an island: \`x g island <name> --at <dir>\` |
 | \`shared/\` is a leaf | tokens, primitives, the actor type. It imports nothing of yours |
-| The directory is the URL | \`page.tsx\` under \`site/\`/\`app/\`, \`route.ts\` under \`api/\`. The filename is never the path |
+| The directory is the URL | \`page.tsx\` under \`site/\`/\`app/\`; \`api/\` holds no route file, only \`defineApi()\`'s actions and queries. The filename is never the path |
 | Every string through \`t()\` | a literal in a component is a string no locale can ever translate |
 | Semantic tokens only | never a raw hex, in a component or a stylesheet |
 | Dates name a zone | explicit IANA time zone at every call site, no ambient default |

package/src/templates/scaffold-claude-commands.ts

@@ -66,12 +66,12 @@ SQL into \`packages/db/migrations/\`.
 |---|---|---|
 | \`apps/web/site/\` | 0kb JS, may not import \`apps/web/app/\` | the static path pays the app's bundle |
 | \`apps/web/app/\` | authed, streaming, hydrated | — |
-| \`apps/web/api/\` | actions only, \`route.ts\` | a second HTTP surface |
+| \`apps/web/api/\` | actions and queries only, collected by \`defineApi()\` — no route file | a second HTTP surface |
 | \`apps/web/shared/\` | a leaf: imports nothing of yours | an import cycle across surfaces |
 | \`repo.ts\` | the only file that touches the database | authz bypassed by a raw read |
 | routes | call actions and queries, never a repo | policy skipped |
 
-Route files: \`page.tsx\` under \`site/\`/\`app/\`, \`route.ts\` under \`api/\`. **The directory is the URL** —
+Route files: \`page.tsx\` under \`site/\`/\`app/\`, and none under \`api/\`. **The directory is the URL** —
 the filename never is. One interactive control on a 0kb page is an island: \`x g island <name> --at <dir>\`.
 
 ## 4. Gate it

package/src/templates/scaffold-claude.ts

@@ -32,7 +32,7 @@ const settings = (): string => `{
       "Bash(x actions:*)",
       "Bash(x queries:*)",
       "Bash(x entities:*)",
-      "Bash(x jobs ls:*)",
+      "Bash(x jobs list:*)",
       "Bash(x jobs show:*)",
       "Bash(x tasks:*)",
       "Bash(x policy:*)",

package/src/templates/scaffold-guards.ts

@@ -75,6 +75,18 @@ export const SHIPPED_GUARD_NAMES: readonly string[] = SHIPPED.map(([name]) => na
 export const shippedGuardFiles = (name: string): readonly GeneratedFile[] | undefined =>
   SHIPPED.find(([shipped]) => shipped === name)?.[1]();
 
+/**
+ * The current text of a shipped guard's rule file (`guards/<name>.ts`), or `undefined` when the
+ * name was never shipped — what `x doctor` compares an app's copy against.
+ */
+export const shippedGuardSource = (name: string): string | undefined => {
+  const contents = shippedGuardFiles(name)?.find(
+    (file) => file.path === `guards/${name}.ts`,
+  )?.contents;
+  // A guard is source text; bytes would be a template bug, and comparing them as text would hide it.
+  return typeof contents === 'string' ? contents : undefined;
+};
+
 /**
  * Every guard `x new` ships, each with its test. One module per guard, because an app deletes a
  * rule it does not want by deleting one file — and a guard the app then writes for itself is

package/src/templates/scaffold-helm-templates.ts

@@ -195,14 +195,18 @@ nobody bound. Derived here rather than stated twice in values.yaml, where the tw
 {{/*
 A role's terminationGracePeriodSeconds, in the order the kubelet's budget is spent: the preStop
 sleep (web and sync, 1.30+), the worker's opt-in retire (roles.worker.retireSeconds), the
-readiness grace (web and sync — every other role drains with none), the drain budget (app.config.ts drain.deadlineMs, every role) and the teardown margin.
+readiness grace (web and sync — every other role drains with none), the drain budget (app.config.ts drain.deadlineMs, every role;
+the worker's is drain.workerDeadlineSeconds instead when > 0, from drain.workerDeadlineMs) and the teardown margin.
 Defaults: 45s web/sync (40s below 1.30), 35s the rest. x deploy --method helm sets
-drain.deadlineSeconds and drain.readinessGraceSeconds from app.config.ts.
+drain.deadlineSeconds, drain.workerDeadlineSeconds and drain.readinessGraceSeconds from app.config.ts.
 */}}
 {{- define "${app.kebab}.terminationGracePeriodSeconds" -}}
 {{- $drain := .root.Values.drain -}}
 {{- $total := add (int $drain.deadlineSeconds) (int $drain.teardownMarginSeconds) -}}
 {{- if eq .role "worker" -}}
+{{- if gt (int $drain.workerDeadlineSeconds) 0 -}}
+{{- $total = add (int $drain.workerDeadlineSeconds) (int $drain.teardownMarginSeconds) -}}
+{{- end -}}
 {{- $total = add $total (int .cfg.retireSeconds) -}}
 {{- end -}}
 {{- if .cfg.port -}}

package/src/templates/scaffold-helm.ts

@@ -99,11 +99,14 @@ securityContext:
 #   readinessGraceSeconds  app.config.ts drain.readinessGraceMs / 1000 (web and sync only)
 #   deadlineSeconds        app.config.ts drain.deadlineMs / 1000 — x deploy --method helm sets
 #                          both from app.config.ts, so a raised budget raises the grace with it
+#   workerDeadlineSeconds  app.config.ts drain.workerDeadlineMs / 1000 — the worker's budget in place
+#                          of deadlineSeconds, up to a day; 0 means the worker uses deadlineSeconds
 #   teardownMarginSeconds  the release after the drain, the telemetry flush, the pool close
 drain:
   preStopSleepSeconds: 5
   readinessGraceSeconds: 5
   deadlineSeconds: 25
+  workerDeadlineSeconds: 0
   teardownMarginSeconds: 10
 
 # How long a new pod must stay Ready before a rollout counts it and stops an old one.
@@ -166,7 +169,7 @@ roles:
     replicas: 2
     # The retire, OFF at 0. Set to the longest a held job may run, in seconds, and the worker's
     # preStop sends its PID 1 SIGUSR2: stop claiming, finish every held job, abort nothing, exit 0
-    # — for a job whose side effect must happen at most once and may outlast drain.deadlineSeconds.
+    # — for a job whose side effect must happen at most once and may outlast its drain budget.
     # Added to this role's terminationGracePeriodSeconds, which the kubelet counts the preStop against.
     retireSeconds: 0
     resources: