@pikku/addon-console 0.12.42 → 0.12.43

package/dist/src/functions/update-agent-config.function.d.ts

@@ -1,21 +1,21 @@
 import type { AgentConfigChanges } from '../services/code-edit.service.js';
-export declare const updateAgentConfig: import("#pikku").PikkuFunctionConfig<{
+export declare const updateAgentConfig: import("#pikku/addon/function").PikkuFunctionConfig<{
     sourceFile: string;
     exportedName: string;
     changes: AgentConfigChanges;
 }, {
     success: boolean;
-}, "rpc" | "session", import("#pikku").PikkuFunction<{
+}, "rpc" | "session", import("#pikku/addon/function").PikkuFunction<{
     sourceFile: string;
     exportedName: string;
     changes: AgentConfigChanges;
 }, {
     success: boolean;
-}, "rpc" | "session", import("#pikku").WiredServices> | import("#pikku").PikkuFunctionSessionless<{
+}, "rpc" | "session", import("#pikku/addon/function").WiredServices> | import("#pikku/addon/function").PikkuFunctionSessionless<{
     sourceFile: string;
     exportedName: string;
     changes: AgentConfigChanges;
 }, {
     success: boolean;
-}, "rpc" | "session", import("#pikku").WiredServices, unknown>, undefined, undefined>;
+}, "rpc" | "session", import("#pikku/addon/function").WiredServices, unknown>, undefined, undefined>;
 //# sourceMappingURL=update-agent-config.function.d.ts.map

package/dist/src/functions/update-agent-config.function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update-agent-config.function.d.ts","sourceRoot":"","sources":["../../../src/functions/update-agent-config.function.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAA;AAE1E,eAAO,MAAM,iBAAiB;gBAEd,MAAM;kBACJ,MAAM;aACX,kBAAkB;;aAElB,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;aACX,kBAAkB;;aAElB,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;aACX,kBAAkB;;aAElB,OAAO;qFAgBlB,CAAA"}
+{"version":3,"file":"update-agent-config.function.d.ts","sourceRoot":"","sources":["../../../src/functions/update-agent-config.function.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAA;AAE1E,eAAO,MAAM,iBAAiB;gBAEd,MAAM;kBACJ,MAAM;aACX,kBAAkB;;aAElB,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;aACX,kBAAkB;;aAElB,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;aACX,kBAAkB;;aAElB,OAAO;oGAgBlB,CAAA"}

package/dist/src/functions/update-agent-config.function.js

@@ -1,5 +1,5 @@
-import { LocalEnvironmentOnlyError } from '@pikku/core/errors';
-import { pikkuFunc } from '#pikku';
+import { LocalEnvironmentOnlyError } from '#pikku/addon/error';
+import { pikkuFunc } from '#pikku/addon/function';
 export const updateAgentConfig = pikkuFunc({
     title: 'Update Agent Config',
     description: 'Updates the config properties of a pikku AI agent definition in source code and triggers a rebuild.',

package/dist/src/functions/update-agent-config.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"update-agent-config.function.js","sourceRoot":"","sources":["../../../src/functions/update-agent-config.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAGlC,MAAM,CAAC,MAAM,iBAAiB,GAAG,SAAS,CAOxC;IACA,KAAK,EAAE,qBAAqB;IAC5B,WAAW,EACT,qGAAqG;IACvG,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,6BAA6B,CAAC;IACvC,IAAI,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,EAAE;QACzE,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,yBAAyB,CACjC,0CAA0C,CAC3C,CAAA;QACH,CAAC;QACD,MAAM,eAAe,CAAC,iBAAiB,CAAC,UAAU,EAAE,YAAY,EAAE,OAAO,CAAC,CAAA;QAC1E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"update-agent-config.function.js","sourceRoot":"","sources":["../../../src/functions/update-agent-config.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AAGjD,MAAM,CAAC,MAAM,iBAAiB,GAAG,SAAS,CAOxC;IACA,KAAK,EAAE,qBAAqB;IAC5B,WAAW,EACT,qGAAqG;IACvG,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,6BAA6B,CAAC;IACvC,IAAI,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,EAAE;QACzE,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,yBAAyB,CACjC,0CAA0C,CAC3C,CAAA;QACH,CAAC;QACD,MAAM,eAAe,CAAC,iBAAiB,CAAC,UAAU,EAAE,YAAY,EAAE,OAAO,CAAC,CAAA;QAC1E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/update-dependency.function.d.ts

@@ -1,12 +1,12 @@
-import type { SecurityAuditReport } from '@pikku/core/ecosystem/types';
-export declare const updateDependency: import("#pikku").PikkuFunctionConfig<{
+import type { SecurityAuditReport } from '@pikku/core/types';
+export declare const updateDependency: import("#pikku/addon/function").PikkuFunctionConfig<{
     package: string;
     version: string;
-}, SecurityAuditReport | null, "rpc" | "session", import("#pikku").PikkuFunction<{
+}, SecurityAuditReport | null, "rpc" | "session", import("#pikku/addon/function").PikkuFunction<{
     package: string;
     version: string;
-}, SecurityAuditReport | null, "rpc" | "session", import("#pikku").WiredServices> | import("#pikku").PikkuFunctionSessionless<{
+}, SecurityAuditReport | null, "rpc" | "session", import("#pikku/addon/function").WiredServices> | import("#pikku/addon/function").PikkuFunctionSessionless<{
     package: string;
     version: string;
-}, SecurityAuditReport | null, "rpc" | "session", import("#pikku").WiredServices, unknown>, undefined, undefined>;
+}, SecurityAuditReport | null, "rpc" | "session", import("#pikku/addon/function").WiredServices, unknown>, undefined, undefined>;
 //# sourceMappingURL=update-dependency.function.d.ts.map

package/dist/src/functions/update-dependency.function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update-dependency.function.d.ts","sourceRoot":"","sources":["../../../src/functions/update-dependency.function.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAA;AAgDtE,eAAO,MAAM,gBAAgB;aAChB,MAAM;aAAW,MAAM;;aAAvB,MAAM;aAAW,MAAM;;aAAvB,MAAM;aAAW,MAAM;iHAoClC,CAAA"}
+{"version":3,"file":"update-dependency.function.d.ts","sourceRoot":"","sources":["../../../src/functions/update-dependency.function.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AAgD5D,eAAO,MAAM,gBAAgB;aAChB,MAAM;aAAW,MAAM;;aAAvB,MAAM;aAAW,MAAM;;aAAvB,MAAM;aAAW,MAAM;gIAoClC,CAAA"}

package/dist/src/functions/update-dependency.function.js

@@ -1,6 +1,6 @@
 import { existsSync, readFileSync, writeFileSync } from 'node:fs';
 import { join, dirname } from 'node:path';
-import { pikkuFunc } from '#pikku';
+import { pikkuFunc } from '#pikku/addon/function';
 import { readAuditReport, runPikkuAudit, spawnProcess, } from '../lib/audit-exec.js';
 const DEP_SECTIONS = [
     'dependencies',

package/dist/src/functions/update-dependency.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"update-dependency.function.js","sourceRoot":"","sources":["../../../src/functions/update-dependency.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AACjE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,OAAO,EACL,eAAe,EACf,aAAa,EACb,YAAY,GACb,MAAM,sBAAsB,CAAA;AAE7B,MAAM,YAAY,GAAG;IACnB,cAAc;IACd,iBAAiB;IACjB,sBAAsB;IACtB,kBAAkB;CACV,CAAA;AAEV,yEAAyE;AACzE,6EAA6E;AAC7E,SAAS,eAAe,CACtB,OAAe,EACf,GAAW,EACX,OAAe;IAEf,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;IAC3D,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,CAAA;QACxC,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,yEAAyE;YACzE,0EAA0E;YAC1E,wEAAwE;YACxE,IACE,sDAAsD,CAAC,IAAI,CAAC,OAAO,CAAC,EACpE,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,GAAG,GAAG,iCAAiC,OAAO,0BAA0B,CACzE,CAAA;YACH,CAAC;YACD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;YACvD,QAAQ,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,GAAG,GAAG,MAAM,GAAG,OAAO,EAAE,CAAA;YAC9C,aAAa,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAA;YAChE,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,8EAA8E;AAC9E,4EAA4E;AAC5E,MAAM,SAAS,GAAG,wCAAwC,CAAA;AAE1D,MAAM,CAAC,MAAM,gBAAgB,GAAG,SAAS,CAGvC;IACA,KAAK,EAAE,mBAAmB;IAC1B,WAAW,EACT,mOAAmO;IACrO,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,0BAA0B,CAAC;IACpC,IAAI,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE;QACzD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,oBAAoB,OAAO,4CAA4C,CACxE,CAAA;QACH,CAAC;QACD,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CACb,wFAAwF,CACzF,CAAA;QACH,CAAC;QACD,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAA;QAChD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAA;QAChD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,6BAA6B,OAAO,EAAE,CAAC,CAAA;QACzD,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CACb,GAAG,GAAG,sEAAsE,CAC7E,CAAA;QACH,CAAC;QACD,0EAA0E;QAC1E,yEAAyE;QACzE,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;QAC3E,qDAAqD;QACrD,MAAM,aAAa,CAAC,UAAU,CAAC,CAAA;QAC/B,OAAO,eAAe,CAAC,WAAW,CAAC,CAAA;IACrC,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"update-dependency.function.js","sourceRoot":"","sources":["../../../src/functions/update-dependency.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AACjE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AAEjD,OAAO,EACL,eAAe,EACf,aAAa,EACb,YAAY,GACb,MAAM,sBAAsB,CAAA;AAE7B,MAAM,YAAY,GAAG;IACnB,cAAc;IACd,iBAAiB;IACjB,sBAAsB;IACtB,kBAAkB;CACV,CAAA;AAEV,yEAAyE;AACzE,6EAA6E;AAC7E,SAAS,eAAe,CACtB,OAAe,EACf,GAAW,EACX,OAAe;IAEf,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;IAC3D,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,CAAA;QACxC,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,yEAAyE;YACzE,0EAA0E;YAC1E,wEAAwE;YACxE,IACE,sDAAsD,CAAC,IAAI,CAAC,OAAO,CAAC,EACpE,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,GAAG,GAAG,iCAAiC,OAAO,0BAA0B,CACzE,CAAA;YACH,CAAC;YACD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;YACvD,QAAQ,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,GAAG,GAAG,MAAM,GAAG,OAAO,EAAE,CAAA;YAC9C,aAAa,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAA;YAChE,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,8EAA8E;AAC9E,4EAA4E;AAC5E,MAAM,SAAS,GAAG,wCAAwC,CAAA;AAE1D,MAAM,CAAC,MAAM,gBAAgB,GAAG,SAAS,CAGvC;IACA,KAAK,EAAE,mBAAmB;IAC1B,WAAW,EACT,mOAAmO;IACrO,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,0BAA0B,CAAC;IACpC,IAAI,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE;QACzD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,oBAAoB,OAAO,4CAA4C,CACxE,CAAA;QACH,CAAC;QACD,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CACb,wFAAwF,CACzF,CAAA;QACH,CAAC;QACD,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAA;QAChD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAA;QAChD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,6BAA6B,OAAO,EAAE,CAAC,CAAA;QACzD,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CACb,GAAG,GAAG,sEAAsE,CAC7E,CAAA;QACH,CAAC;QACD,0EAA0E;QAC1E,yEAAyE;QACzE,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;QAC3E,qDAAqD;QACrD,MAAM,aAAa,CAAC,UAAU,CAAC,CAAA;QAC/B,OAAO,eAAe,CAAC,WAAW,CAAC,CAAA;IACrC,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/update-dependency.function.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=update-dependency.function.test.d.ts.map

package/dist/src/functions/update-dependency.function.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-dependency.function.test.d.ts","sourceRoot":"","sources":["../../../src/functions/update-dependency.function.test.ts"],"names":[],"mappings":""}

package/dist/src/functions/update-dependency.function.test.js

@@ -0,0 +1,181 @@
+import { describe, test } from 'node:test';
+import assert from 'node:assert/strict';
+import { chmodSync, existsSync, mkdirSync, mkdtempSync, readFileSync, writeFileSync, } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { updateDependency } from './update-dependency.function.js';
+/**
+ * A throwaway project with a stub `bun` and a stub `pikku` so the whole
+ * bump → install → re-audit chain runs without a registry. Both stubs record
+ * that they were called, and in which order, by appending to `calls.log`.
+ */
+const project = (manifest) => {
+    const root = mkdtempSync(join(tmpdir(), 'pikku-update-dep-'));
+    const pkgPath = join(root, 'package.json');
+    writeFileSync(pkgPath, `${JSON.stringify(manifest, null, 2)}\n`);
+    const log = join(root, 'calls.log');
+    const bin = join(root, 'bin');
+    mkdirSync(bin, { recursive: true });
+    const bun = join(bin, 'bun');
+    // Records the manifest as it stood when install ran, proving the bump landed
+    // on disk before the lockfile was resolved against it.
+    writeFileSync(bun, `#!/bin/sh\necho "bun $* $(cat '${pkgPath}' | tr -d '\\n ')" >> '${log}'\n`);
+    chmodSync(bun, 0o755);
+    const pikkuBin = join(root, 'node_modules', '.bin', 'pikku');
+    mkdirSync(join(root, 'node_modules', '.bin'), { recursive: true });
+    const report = {
+        schemaVersion: 1,
+        tool: 'bun',
+        generatedAt: '2026-08-15T00:00:00.000Z',
+        issues: [],
+        updates: [],
+        summary: {
+            totalIssues: 0,
+            critical: 0,
+            high: 0,
+            moderate: 0,
+            low: 0,
+            totalUpdates: 0,
+            major: 0,
+            minor: 0,
+            patch: 0,
+        },
+    };
+    const auditPath = join(root, '.pikku', 'audit.json');
+    writeFileSync(pikkuBin, `import { mkdirSync, writeFileSync, appendFileSync } from 'node:fs'\n` +
+        `appendFileSync(${JSON.stringify(log)}, 'pikku ' + process.argv.slice(2).join(' ') + '\\n')\n` +
+        `mkdirSync(${JSON.stringify(join(root, '.pikku'))}, { recursive: true })\n` +
+        `writeFileSync(${JSON.stringify(auditPath)}, ${JSON.stringify(JSON.stringify(report))})\n`);
+    const metaService = {
+        basePath: join(root, '.pikku'),
+        readFile: async (relativePath) => {
+            const path = join(root, '.pikku', relativePath);
+            return existsSync(path) ? readFileSync(path, 'utf-8') : null;
+        },
+    };
+    return {
+        root,
+        bin,
+        metaService,
+        manifest: () => JSON.parse(readFileSync(pkgPath, 'utf-8')),
+        calls: () => (existsSync(log) ? readFileSync(log, 'utf-8') : ''),
+    };
+};
+const invoke = async (metaService, input, bin) => {
+    const previousPath = process.env.PATH;
+    if (bin)
+        process.env.PATH = `${bin}:${previousPath}`;
+    try {
+        return (await updateDependency.func({ metaService }, input, {}));
+    }
+    finally {
+        process.env.PATH = previousPath;
+    }
+};
+describe('updateDependency version guard', () => {
+    // The version reaches `bun install` and package.json, so anything that is not
+    // a concrete semver is an install specifier the caller should not control.
+    test('refuses anything that is not a concrete semver', async () => {
+        for (const version of [
+            'latest',
+            '^1.2.3',
+            '~1.2.3',
+            '>=1.2.3',
+            '1.2',
+            '../evil',
+            'file:../evil',
+            'https://evil.test/pkg.tgz',
+            'npm:other@1.0.0',
+            '1.2.3 && rm -rf /',
+            '',
+        ]) {
+            await assert.rejects(invoke({ basePath: '/tmp/.pikku' }, { package: 'lodash', version }), /Invalid version/, version);
+        }
+    });
+    test('accepts a plain semver and a prerelease or build tag', async () => {
+        for (const version of ['1.2.3', '1.2.3-rc.1', '1.2.3+build.5']) {
+            // Rejected later for a missing package.json — but past the version guard,
+            // which is what this asserts.
+            await assert.rejects(invoke({
+                basePath: join(mkdtempSync(join(tmpdir(), 'pikku-none-')), '.pikku'),
+            }, { package: 'lodash', version }), /package.json not found/, version);
+        }
+    });
+});
+describe('updateDependency preconditions', () => {
+    test('refuses to run without a configured meta service', async () => {
+        await assert.rejects(invoke(undefined, { package: 'lodash', version: '1.2.3' }), /Meta service is not configured/);
+        await assert.rejects(invoke({}, { package: 'lodash', version: '1.2.3' }), /Meta service is not configured/);
+    });
+    test('refuses a package that is not a direct dependency', async () => {
+        const p = project({ name: 'app', dependencies: { zod: '^3.0.0' } });
+        await assert.rejects(invoke(p.metaService, { package: 'lodash', version: '4.17.21' }, p.bin), /not a direct dependency/);
+        assert.equal(p.calls(), '', 'nothing should have been installed');
+    });
+    // A workspace:/file:/git specifier carries resolution semantics that a bare
+    // version silently destroys — refusing beats clobbering the manifest.
+    test('refuses to overwrite a non-semver specifier', async () => {
+        for (const specifier of [
+            'workspace:*',
+            'file:../core',
+            'link:../core',
+            'git+https://github.com/x/y.git',
+            'github:x/y',
+            'https://example.test/x.tgz',
+            'npm:other@1.0.0',
+        ]) {
+            const p = project({ name: 'app', dependencies: { core: specifier } });
+            await assert.rejects(invoke(p.metaService, { package: 'core', version: '1.2.3' }, p.bin), /non-semver specifier/, specifier);
+            assert.equal(p.manifest().dependencies.core, specifier, specifier);
+        }
+    });
+});
+describe('updateDependency bump', () => {
+    test('bumps the version while keeping the range operator', async () => {
+        for (const [before, after] of [
+            ['^4.17.20', '^4.17.21'],
+            ['~4.17.20', '~4.17.21'],
+            ['4.17.20', '4.17.21'],
+        ]) {
+            const p = project({ name: 'app', dependencies: { lodash: before } });
+            await invoke(p.metaService, { package: 'lodash', version: '4.17.21' }, p.bin);
+            assert.equal(p.manifest().dependencies.lodash, after, before);
+        }
+    });
+    test('finds the package in whichever dependency section holds it', async () => {
+        for (const section of [
+            'dependencies',
+            'devDependencies',
+            'optionalDependencies',
+            'peerDependencies',
+        ]) {
+            const p = project({ name: 'app', [section]: { lodash: '^4.17.20' } });
+            await invoke(p.metaService, { package: 'lodash', version: '4.17.21' }, p.bin);
+            assert.equal(p.manifest()[section].lodash, '^4.17.21', section);
+        }
+    });
+    test('installs against the already-bumped manifest, then re-audits', async () => {
+        const p = project({ name: 'app', dependencies: { lodash: '^4.17.20' } });
+        await invoke(p.metaService, { package: 'lodash', version: '4.17.21' }, p.bin);
+        const calls = p.calls().trim().split('\n');
+        assert.match(calls[0], /^bun install/);
+        assert.match(calls[0], /4\.17\.21/);
+        assert.ok(!calls[0].includes('4.17.20'));
+        assert.match(calls[1], /^pikku .*audit --outdated/);
+    });
+    test('returns the report regenerated by the re-audit', async () => {
+        const p = project({ name: 'app', dependencies: { lodash: '^4.17.20' } });
+        const report = await invoke(p.metaService, { package: 'lodash', version: '4.17.21' }, p.bin);
+        assert.equal(report?.summary.totalIssues, 0);
+        assert.equal(report?.tool, 'bun');
+    });
+    // A failed install leaves the lockfile and node_modules disagreeing with the
+    // manifest, so it has to surface rather than resolve into a fresh report.
+    test('surfaces a failed install instead of reporting success', async () => {
+        const p = project({ name: 'app', dependencies: { lodash: '^4.17.20' } });
+        writeFileSync(join(p.bin, 'bun'), '#!/bin/sh\necho "error: no version matching 4.17.21" >&2\nexit 1\n');
+        chmodSync(join(p.bin, 'bun'), 0o755);
+        await assert.rejects(invoke(p.metaService, { package: 'lodash', version: '4.17.21' }, p.bin), /no version matching 4\.17\.21/);
+    });
+});
+//# sourceMappingURL=update-dependency.function.test.js.map

package/dist/src/functions/update-dependency.function.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-dependency.function.test.js","sourceRoot":"","sources":["../../../src/functions/update-dependency.function.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAC1C,OAAO,MAAM,MAAM,oBAAoB,CAAA;AACvC,OAAO,EACL,SAAS,EACT,UAAU,EACV,SAAS,EACT,WAAW,EACX,YAAY,EACZ,aAAa,GACd,MAAM,SAAS,CAAA;AAChB,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAA;AAElE;;;;GAIG;AACH,MAAM,OAAO,GAAG,CAAC,QAAiC,EAAE,EAAE;IACpD,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAA;IAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAA;IAC1C,aAAa,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAA;IAEhE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;IACnC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IAC7B,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IAC5B,6EAA6E;IAC7E,uDAAuD;IACvD,aAAa,CACX,GAAG,EACH,kCAAkC,OAAO,0BAA0B,GAAG,KAAK,CAC5E,CAAA;IACD,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IAErB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,CAAC,CAAA;IAC5D,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAClE,MAAM,MAAM,GAAwB;QAClC,aAAa,EAAE,CAAC;QAChB,IAAI,EAAE,KAAK;QACX,WAAW,EAAE,0BAA0B;QACvC,MAAM,EAAE,EAAE;QACV,OAAO,EAAE,EAAE;QACX,OAAO,EAAE;YACP,WAAW,EAAE,CAAC;YACd,QAAQ,EAAE,CAAC;YACX,IAAI,EAAE,CAAC;YACP,QAAQ,EAAE,CAAC;YACX,GAAG,EAAE,CAAC;YACN,YAAY,EAAE,CAAC;YACf,KAAK,EAAE,CAAC;YACR,KAAK,EAAE,CAAC;YACR,KAAK,EAAE,CAAC;SACT;KACF,CAAA;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAA;IACpD,aAAa,CACX,QAAQ,EACR,sEAAsE;QACpE,kBAAkB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,yDAAyD;QAC9F,aAAa,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,0BAA0B;QAC3E,iBAAiB,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,CAC7F,CAAA;IAED,MAAM,WAAW,GAAG;QAClB,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;QAC9B,QAAQ,EAAE,KAAK,EAAE,YAAoB,EAAE,EAAE;YACvC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAA;YAC/C,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QAC9D,CAAC;KACF,CAAA;IAED,OAAO;QACL,IAAI;QACJ,GAAG;QACH,WAAW;QACX,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC1D,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACjE,CAAA;AACH,CAAC,CAAA;AAED,MAAM,MAAM,GAAG,KAAK,EAClB,WAAoB,EACpB,KAA2C,EAC3C,GAAY,EACZ,EAAE;IACF,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAA;IACrC,IAAI,GAAG;QAAE,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,GAAG,IAAI,YAAY,EAAE,CAAA;IACpD,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,gBAAgB,CAAC,IAAI,CACjC,EAAE,WAAW,EAAW,EACxB,KAAc,EACd,EAAW,CACZ,CAA+B,CAAA;IAClC,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,YAAY,CAAA;IACjC,CAAC;AACH,CAAC,CAAA;AAED,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC9C,8EAA8E;IAC9E,2EAA2E;IAC3E,IAAI,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAChE,KAAK,MAAM,OAAO,IAAI;YACpB,QAAQ;YACR,QAAQ;YACR,QAAQ;YACR,SAAS;YACT,KAAK;YACL,SAAS;YACT,cAAc;YACd,2BAA2B;YAC3B,iBAAiB;YACjB,mBAAmB;YACnB,EAAE;SACH,EAAE,CAAC;YACF,MAAM,MAAM,CAAC,OAAO,CAClB,MAAM,CAAC,EAAE,QAAQ,EAAE,aAAa,EAAE,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,EACnE,iBAAiB,EACjB,OAAO,CACR,CAAA;QACH,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACtE,KAAK,MAAM,OAAO,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,eAAe,CAAC,EAAE,CAAC;YAC/D,0EAA0E;YAC1E,8BAA8B;YAC9B,MAAM,MAAM,CAAC,OAAO,CAClB,MAAM,CACJ;gBACE,QAAQ,EAAE,IAAI,CACZ,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,aAAa,CAAC,CAAC,EAC1C,QAAQ,CACT;aACF,EACD,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAC/B,EACD,wBAAwB,EACxB,OAAO,CACR,CAAA;QACH,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC9C,IAAI,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,MAAM,CAAC,OAAO,CAClB,MAAM,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAC1D,gCAAgC,CACjC,CAAA;QACD,MAAM,MAAM,CAAC,OAAO,CAClB,MAAM,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EACnD,gCAAgC,CACjC,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,CAAC,GAAG,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAA;QACnE,MAAM,MAAM,CAAC,OAAO,CAClB,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EACvE,yBAAyB,CAC1B,CAAA;QACD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,oCAAoC,CAAC,CAAA;IACnE,CAAC,CAAC,CAAA;IAEF,4EAA4E;IAC5E,sEAAsE;IACtE,IAAI,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC7D,KAAK,MAAM,SAAS,IAAI;YACtB,aAAa;YACb,cAAc;YACd,cAAc;YACd,gCAAgC;YAChC,YAAY;YACZ,4BAA4B;YAC5B,iBAAiB;SAClB,EAAE,CAAC;YACF,MAAM,CAAC,GAAG,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,CAAA;YACrE,MAAM,MAAM,CAAC,OAAO,CAClB,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EACnE,sBAAsB,EACtB,SAAS,CACV,CAAA;YACD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAA;QACpE,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,IAAI,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QACpE,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI;YAC5B,CAAC,UAAU,EAAE,UAAU,CAAC;YACxB,CAAC,UAAU,EAAE,UAAU,CAAC;YACxB,CAAC,SAAS,EAAE,SAAS,CAAC;SACvB,EAAE,CAAC;YACF,MAAM,CAAC,GAAG,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,MAAM,EAAE,MAAO,EAAE,EAAE,CAAC,CAAA;YACrE,MAAM,MAAM,CACV,CAAC,CAAC,WAAW,EACb,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,EACzC,CAAC,CAAC,GAAG,CACN,CAAA;YACD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAA;QAC/D,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC5E,KAAK,MAAM,OAAO,IAAI;YACpB,cAAc;YACd,iBAAiB;YACjB,sBAAsB;YACtB,kBAAkB;SACnB,EAAE,CAAC;YACF,MAAM,CAAC,GAAG,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;YACrE,MAAM,MAAM,CACV,CAAC,CAAC,WAAW,EACb,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,EACzC,CAAC,CAAC,GAAG,CACN,CAAA;YACD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,CAAA;QACjE,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,CAAC,GAAG,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;QACxE,MAAM,MAAM,CACV,CAAC,CAAC,WAAW,EACb,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,EACzC,CAAC,CAAC,GAAG,CACN,CAAA;QAED,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAC1C,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,cAAc,CAAC,CAAA;QACvC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,WAAW,CAAC,CAAA;QACpC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAA;QACzC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,2BAA2B,CAAC,CAAA;IACtD,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,CAAC,GAAG,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;QACxE,MAAM,MAAM,GAAG,MAAM,MAAM,CACzB,CAAC,CAAC,WAAW,EACb,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,EACzC,CAAC,CAAC,GAAG,CACN,CAAA;QACD,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAA;QAC5C,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,CAAA;IACnC,CAAC,CAAC,CAAA;IAEF,6EAA6E;IAC7E,0EAA0E;IAC1E,IAAI,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,CAAC,GAAG,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;QACxE,aAAa,CACX,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAClB,oEAAoE,CACrE,CAAA;QACD,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,KAAK,CAAC,CAAA;QAEpC,MAAM,MAAM,CAAC,OAAO,CAClB,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EACvE,+BAA+B,CAChC,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/src/functions/update-email-template.function.d.ts

@@ -1,17 +1,17 @@
-export declare const updateEmailTemplate: import("#pikku").PikkuFunctionConfig<{
+export declare const updateEmailTemplate: import("#pikku/addon/function").PikkuFunctionConfig<{
     templateName: string;
     source: string;
 }, {
     success: boolean;
-}, "rpc" | "session", import("#pikku").PikkuFunction<{
+}, "rpc" | "session", import("#pikku/addon/function").PikkuFunction<{
     templateName: string;
     source: string;
 }, {
     success: boolean;
-}, "rpc" | "session", import("#pikku").WiredServices> | import("#pikku").PikkuFunctionSessionless<{
+}, "rpc" | "session", import("#pikku/addon/function").WiredServices> | import("#pikku/addon/function").PikkuFunctionSessionless<{
     templateName: string;
     source: string;
 }, {
     success: boolean;
-}, "rpc" | "session", import("#pikku").WiredServices, unknown>, undefined, undefined>;
+}, "rpc" | "session", import("#pikku/addon/function").WiredServices, unknown>, undefined, undefined>;
 //# sourceMappingURL=update-email-template.function.d.ts.map

package/dist/src/functions/update-email-template.function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update-email-template.function.d.ts","sourceRoot":"","sources":["../../../src/functions/update-email-template.function.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,mBAAmB;kBAEd,MAAM;YACZ,MAAM;;aAEL,OAAO;;kBAHF,MAAM;YACZ,MAAM;;aAEL,OAAO;;kBAHF,MAAM;YACZ,MAAM;;aAEL,OAAO;qFA6BlB,CAAA"}
+{"version":3,"file":"update-email-template.function.d.ts","sourceRoot":"","sources":["../../../src/functions/update-email-template.function.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,mBAAmB;kBAEd,MAAM;YACZ,MAAM;;aAEL,OAAO;;kBAHF,MAAM;YACZ,MAAM;;aAEL,OAAO;;kBAHF,MAAM;YACZ,MAAM;;aAEL,OAAO;oGA6BlB,CAAA"}

package/dist/src/functions/update-email-template.function.js

@@ -1,6 +1,5 @@
-import { NotFoundError } from '@pikku/core';
-import { LocalEnvironmentOnlyError } from '@pikku/core/errors';
-import { pikkuFunc } from '#pikku';
+import { LocalEnvironmentOnlyError, NotFoundError } from '#pikku/addon/error';
+import { pikkuFunc } from '#pikku/addon/function';
 export const updateEmailTemplate = pikkuFunc({
     title: 'Update Email Template',
     description: 'Overwrites an email template HTML source file (templates/<name>.html) so small edits can be made from the console.',

package/dist/src/functions/update-email-template.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"update-email-template.function.js","sourceRoot":"","sources":["../../../src/functions/update-email-template.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,mBAAmB,GAAG,SAAS,CAM1C;IACA,KAAK,EAAE,uBAAuB;IAC9B,WAAW,EACT,oHAAoH;IACtH,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,4BAA4B,CAAC;IACtC,IAAI,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,eAAe,EAAE,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,EAAE;QACzE,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,yBAAyB,CACjC,0CAA0C,CAC3C,CAAA;QACH,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,YAAY,EAAE,CAAA;QACnD,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC;YACpB,MAAM,IAAI,aAAa,CACrB,iEAAiE,CAClE,CAAA;QACH,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,aAAa,CAAC,2BAA2B,YAAY,EAAE,CAAC,CAAA;QACpE,CAAC;QACD,MAAM,eAAe,CAAC,mBAAmB,CACvC,UAAU,CAAC,GAAG,EACd,YAAY,EACZ,MAAM,CACP,CAAA;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"update-email-template.function.js","sourceRoot":"","sources":["../../../src/functions/update-email-template.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAC7E,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AAEjD,MAAM,CAAC,MAAM,mBAAmB,GAAG,SAAS,CAM1C;IACA,KAAK,EAAE,uBAAuB;IAC9B,WAAW,EACT,oHAAoH;IACtH,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,4BAA4B,CAAC;IACtC,IAAI,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,eAAe,EAAE,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,EAAE;QACzE,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,yBAAyB,CACjC,0CAA0C,CAC3C,CAAA;QACH,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,YAAY,EAAE,CAAA;QACnD,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC;YACpB,MAAM,IAAI,aAAa,CACrB,iEAAiE,CAClE,CAAA;QACH,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,aAAa,CAAC,2BAA2B,YAAY,EAAE,CAAC,CAAA;QACpE,CAAC;QACD,MAAM,eAAe,CAAC,mBAAmB,CACvC,UAAU,CAAC,GAAG,EACd,YAAY,EACZ,MAAM,CACP,CAAA;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/update-function-body.function.d.ts

@@ -1,20 +1,20 @@
-export declare const updateFunctionBody: import("#pikku").PikkuFunctionConfig<{
+export declare const updateFunctionBody: import("#pikku/addon/function").PikkuFunctionConfig<{
     sourceFile: string;
     exportedName: string;
     body: string;
 }, {
     success: boolean;
-}, "rpc" | "session", import("#pikku").PikkuFunction<{
+}, "rpc" | "session", import("#pikku/addon/function").PikkuFunction<{
     sourceFile: string;
     exportedName: string;
     body: string;
 }, {
     success: boolean;
-}, "rpc" | "session", import("#pikku").WiredServices> | import("#pikku").PikkuFunctionSessionless<{
+}, "rpc" | "session", import("#pikku/addon/function").WiredServices> | import("#pikku/addon/function").PikkuFunctionSessionless<{
     sourceFile: string;
     exportedName: string;
     body: string;
 }, {
     success: boolean;
-}, "rpc" | "session", import("#pikku").WiredServices, unknown>, undefined, undefined>;
+}, "rpc" | "session", import("#pikku/addon/function").WiredServices, unknown>, undefined, undefined>;
 //# sourceMappingURL=update-function-body.function.d.ts.map

package/dist/src/functions/update-function-body.function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update-function-body.function.d.ts","sourceRoot":"","sources":["../../../src/functions/update-function-body.function.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,kBAAkB;gBAEf,MAAM;kBACJ,MAAM;UACd,MAAM;;aAEH,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;UACd,MAAM;;aAEH,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;UACd,MAAM;;aAEH,OAAO;qFAgBlB,CAAA"}
+{"version":3,"file":"update-function-body.function.d.ts","sourceRoot":"","sources":["../../../src/functions/update-function-body.function.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,kBAAkB;gBAEf,MAAM;kBACJ,MAAM;UACd,MAAM;;aAEH,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;UACd,MAAM;;aAEH,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;UACd,MAAM;;aAEH,OAAO;oGAgBlB,CAAA"}

package/dist/src/functions/update-function-body.function.js

@@ -1,5 +1,5 @@
-import { LocalEnvironmentOnlyError } from '@pikku/core/errors';
-import { pikkuFunc } from '#pikku';
+import { LocalEnvironmentOnlyError } from '#pikku/addon/error';
+import { pikkuFunc } from '#pikku/addon/function';
 export const updateFunctionBody = pikkuFunc({
     title: 'Update Function Body',
     description: 'Replaces the function body of a pikku function definition in source code and triggers a rebuild.',

package/dist/src/functions/update-function-body.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"update-function-body.function.js","sourceRoot":"","sources":["../../../src/functions/update-function-body.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAElC,MAAM,CAAC,MAAM,kBAAkB,GAAG,SAAS,CAOzC;IACA,KAAK,EAAE,sBAAsB;IAC7B,WAAW,EACT,kGAAkG;IACpG,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,0BAA0B,CAAC;IACpC,IAAI,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,EAAE;QACtE,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,yBAAyB,CACjC,0CAA0C,CAC3C,CAAA;QACH,CAAC;QACD,MAAM,eAAe,CAAC,kBAAkB,CAAC,UAAU,EAAE,YAAY,EAAE,IAAI,CAAC,CAAA;QACxE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"update-function-body.function.js","sourceRoot":"","sources":["../../../src/functions/update-function-body.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AAEjD,MAAM,CAAC,MAAM,kBAAkB,GAAG,SAAS,CAOzC;IACA,KAAK,EAAE,sBAAsB;IAC7B,WAAW,EACT,kGAAkG;IACpG,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,0BAA0B,CAAC;IACpC,IAAI,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,EAAE;QACtE,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,yBAAyB,CACjC,0CAA0C,CAC3C,CAAA;QACH,CAAC;QACD,MAAM,eAAe,CAAC,kBAAkB,CAAC,UAAU,EAAE,YAAY,EAAE,IAAI,CAAC,CAAA;QACxE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}

package/dist/src/functions/update-function-config.function.d.ts

@@ -1,21 +1,21 @@
 import type { FunctionConfigChanges } from '../services/code-edit.service.js';
-export declare const updateFunctionConfig: import("#pikku").PikkuFunctionConfig<{
+export declare const updateFunctionConfig: import("#pikku/addon/function").PikkuFunctionConfig<{
     sourceFile: string;
     exportedName: string;
     changes: FunctionConfigChanges;
 }, {
     success: boolean;
-}, "rpc" | "session", import("#pikku").PikkuFunction<{
+}, "rpc" | "session", import("#pikku/addon/function").PikkuFunction<{
     sourceFile: string;
     exportedName: string;
     changes: FunctionConfigChanges;
 }, {
     success: boolean;
-}, "rpc" | "session", import("#pikku").WiredServices> | import("#pikku").PikkuFunctionSessionless<{
+}, "rpc" | "session", import("#pikku/addon/function").WiredServices> | import("#pikku/addon/function").PikkuFunctionSessionless<{
     sourceFile: string;
     exportedName: string;
     changes: FunctionConfigChanges;
 }, {
     success: boolean;
-}, "rpc" | "session", import("#pikku").WiredServices, unknown>, undefined, undefined>;
+}, "rpc" | "session", import("#pikku/addon/function").WiredServices, unknown>, undefined, undefined>;
 //# sourceMappingURL=update-function-config.function.d.ts.map

package/dist/src/functions/update-function-config.function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update-function-config.function.d.ts","sourceRoot":"","sources":["../../../src/functions/update-function-config.function.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAA;AAE7E,eAAO,MAAM,oBAAoB;gBAEjB,MAAM;kBACJ,MAAM;aACX,qBAAqB;;aAErB,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;aACX,qBAAqB;;aAErB,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;aACX,qBAAqB;;aAErB,OAAO;qFAoBlB,CAAA"}
+{"version":3,"file":"update-function-config.function.d.ts","sourceRoot":"","sources":["../../../src/functions/update-function-config.function.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAA;AAE7E,eAAO,MAAM,oBAAoB;gBAEjB,MAAM;kBACJ,MAAM;aACX,qBAAqB;;aAErB,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;aACX,qBAAqB;;aAErB,OAAO;;gBAJJ,MAAM;kBACJ,MAAM;aACX,qBAAqB;;aAErB,OAAO;oGAoBlB,CAAA"}

package/dist/src/functions/update-function-config.function.js

@@ -1,5 +1,5 @@
-import { LocalEnvironmentOnlyError } from '@pikku/core/errors';
-import { pikkuFunc } from '#pikku';
+import { LocalEnvironmentOnlyError } from '#pikku/addon/error';
+import { pikkuFunc } from '#pikku/addon/function';
 export const updateFunctionConfig = pikkuFunc({
     title: 'Update Function Config',
     description: 'Updates the config properties of a pikku function definition in source code and triggers a rebuild.',

package/dist/src/functions/update-function-config.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"update-function-config.function.js","sourceRoot":"","sources":["../../../src/functions/update-function-config.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAGlC,MAAM,CAAC,MAAM,oBAAoB,GAAG,SAAS,CAO3C;IACA,KAAK,EAAE,wBAAwB;IAC/B,WAAW,EACT,qGAAqG;IACvG,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,0BAA0B,CAAC;IACpC,IAAI,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,EAAE;QACzE,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,yBAAyB,CACjC,0CAA0C,CAC3C,CAAA;QACH,CAAC;QACD,MAAM,eAAe,CAAC,oBAAoB,CACxC,UAAU,EACV,YAAY,EACZ,OAAO,CACR,CAAA;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"update-function-config.function.js","sourceRoot":"","sources":["../../../src/functions/update-function-config.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AAGjD,MAAM,CAAC,MAAM,oBAAoB,GAAG,SAAS,CAO3C;IACA,KAAK,EAAE,wBAAwB;IAC/B,WAAW,EACT,qGAAqG;IACvG,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,0BAA0B,CAAC;IACpC,IAAI,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,EAAE;QACzE,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,yBAAyB,CACjC,0CAA0C,CAC3C,CAAA;QACH,CAAC;QACD,MAAM,eAAe,CAAC,oBAAoB,CACxC,UAAU,EACV,YAAY,EACZ,OAAO,CACR,CAAA;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}

package/dist/src/lib/addon-readiness.test.js

@@ -99,7 +99,7 @@ test('a package with no declarations is ready', async () => {
 test('reads the override names out of the instance wiring file', async () => {
     await withRoot(async (root) => {
         const wiringFile = join(root, 'widget-promo.addon.ts');
-        await writeFile(wiringFile, `import { wireAddon } from '#pikku/pikku-types.gen.js'
+        await writeFile(wiringFile, `import { wireAddon } from '#pikku/addon'
 
 wireAddon({
   name: 'widget-promo',

package/dist/src/lib/audit-exec.d.ts

@@ -1,5 +1,5 @@
-import type { MetaService } from '@pikku/core/ecosystem/services';
-import type { SecurityAuditReport } from '@pikku/core/ecosystem/types';
+import type { MetaService } from '@pikku/core/services';
+import type { SecurityAuditReport } from '@pikku/core/types';
 export declare function findBin(name: string, searchFrom: string): string;
 export declare function readAuditReport(metaService: MetaService): Promise<SecurityAuditReport | null>;
 export declare function spawnProcess(command: string, args: string[], cwd: string, { failOnNonZero, timeoutMs, }?: {

package/dist/src/lib/audit-exec.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit-exec.d.ts","sourceRoot":"","sources":["../../../src/lib/audit-exec.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAA;AACjE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAA;AAItE,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAUhE;AAID,wBAAsB,eAAe,CACnC,WAAW,EAAE,WAAW,GACvB,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAQrC;AAQD,wBAAgB,YAAY,CAC1B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,GAAG,EAAE,MAAM,EACX,EACE,aAAqB,EACrB,SAAsB,GACvB,GAAE;IAAE,aAAa,CAAC,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GACtD,OAAO,CAAC,IAAI,CAAC,CAmCf;AAGD,wBAAsB,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAOrE"}
+{"version":3,"file":"audit-exec.d.ts","sourceRoot":"","sources":["../../../src/lib/audit-exec.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AACvD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AAI5D,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAUhE;AAID,wBAAsB,eAAe,CACnC,WAAW,EAAE,WAAW,GACvB,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAQrC;AAQD,wBAAgB,YAAY,CAC1B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,GAAG,EAAE,MAAM,EACX,EACE,aAAqB,EACrB,SAAsB,GACvB,GAAE;IAAE,aAAa,CAAC,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GACtD,OAAO,CAAC,IAAI,CAAC,CAmCf;AAGD,wBAAsB,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAOrE"}

package/dist/src/lib/audit-exec.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=audit-exec.test.d.ts.map

package/dist/src/lib/audit-exec.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-exec.test.d.ts","sourceRoot":"","sources":["../../../src/lib/audit-exec.test.ts"],"names":[],"mappings":""}

package/dist/src/lib/audit-exec.test.js

@@ -0,0 +1,97 @@
+import { describe, test } from 'node:test';
+import assert from 'node:assert/strict';
+import { chmodSync, mkdirSync, mkdtempSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { findBin, readAuditReport, spawnProcess } from './audit-exec.js';
+const scratch = () => mkdtempSync(join(tmpdir(), 'pikku-audit-exec-'));
+const executable = (dir, name, body) => {
+    mkdirSync(dir, { recursive: true });
+    const path = join(dir, name);
+    writeFileSync(path, body);
+    chmodSync(path, 0o755);
+    return path;
+};
+describe('findBin', () => {
+    test('finds the binary in the nearest node_modules/.bin', () => {
+        const root = scratch();
+        const nested = join(root, 'packages', 'api');
+        mkdirSync(nested, { recursive: true });
+        const bin = executable(join(nested, 'node_modules', '.bin'), 'pikku', '');
+        assert.equal(findBin('pikku', nested), bin);
+    });
+    test('walks up to a hoisted binary in the workspace root', () => {
+        const root = scratch();
+        const nested = join(root, 'packages', 'api', 'src');
+        mkdirSync(nested, { recursive: true });
+        const bin = executable(join(root, 'node_modules', '.bin'), 'pikku', '');
+        assert.equal(findBin('pikku', nested), bin);
+    });
+    test('prefers the closest binary over the hoisted one', () => {
+        const root = scratch();
+        const nested = join(root, 'packages', 'api');
+        mkdirSync(nested, { recursive: true });
+        executable(join(root, 'node_modules', '.bin'), 'pikku', '');
+        const local = executable(join(nested, 'node_modules', '.bin'), 'pikku', '');
+        assert.equal(findBin('pikku', nested), local);
+    });
+    // Falling back to the bare name lets PATH resolve it — a globally installed
+    // CLI still works rather than the call failing outright.
+    test('falls back to the bare name when nothing is installed', () => {
+        assert.equal(findBin('pikku', scratch()), 'pikku');
+    });
+});
+describe('spawnProcess', () => {
+    const sh = (body) => {
+        const dir = scratch();
+        return executable(dir, 'script.sh', `#!/bin/sh\n${body}`);
+    };
+    test('resolves when the process succeeds', async () => {
+        await spawnProcess(sh('exit 0'), [], scratch());
+    });
+    // `pikku audit` exits non-zero precisely when it finds advisories, having
+    // written a perfectly valid report — rejecting there would hide findings.
+    test('is lenient about a non-zero exit by default', async () => {
+        await spawnProcess(sh('exit 3'), [], scratch());
+    });
+    test('rejects on a non-zero exit when asked to', async () => {
+        await assert.rejects(spawnProcess(sh('exit 3'), [], scratch(), { failOnNonZero: true }), /exit 3/);
+    });
+    test('includes stderr so the failure is diagnosable', async () => {
+        await assert.rejects(spawnProcess(sh('echo "no matching version" >&2; exit 1'), [], scratch(), {
+            failOnNonZero: true,
+        }), /no matching version/);
+    });
+    test('rejects when the command does not exist', async () => {
+        await assert.rejects(spawnProcess(join(scratch(), 'nope'), [], scratch()), /ENOENT/);
+    });
+    // A hung `bun install` must not hold the console request open forever.
+    test('kills and rejects a process that outruns its timeout', async () => {
+        const started = Date.now();
+        await assert.rejects(spawnProcess(sh('sleep 30'), [], scratch(), { timeoutMs: 250 }), /timed out after 250ms/);
+        assert.ok(Date.now() - started < 5_000);
+    });
+    test('does not fire the timeout for a process that finished in time', async () => {
+        await spawnProcess(sh('exit 0'), [], scratch(), { timeoutMs: 10_000 });
+    });
+});
+describe('readAuditReport', () => {
+    const metaService = (readFile) => ({ readFile });
+    test('parses the report', async () => {
+        const report = await readAuditReport(metaService(async () => JSON.stringify({ schemaVersion: 1, tool: 'bun' })));
+        assert.equal(report?.tool, 'bun');
+    });
+    test('is null when there is no report yet', async () => {
+        assert.equal(await readAuditReport(metaService(async () => null)), null);
+        assert.equal(await readAuditReport(metaService(async () => '')), null);
+    });
+    test('is null rather than throwing on a malformed report', async () => {
+        assert.equal(await readAuditReport(metaService(async () => '{ truncated')), null);
+    });
+    test('is null rather than throwing when the read itself fails', async () => {
+        assert.equal(await readAuditReport(metaService(async () => {
+            throw new Error('EACCES');
+        })), null);
+    });
+});
+//# sourceMappingURL=audit-exec.test.js.map

package/dist/src/lib/audit-exec.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-exec.test.js","sourceRoot":"","sources":["../../../src/lib/audit-exec.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAC1C,OAAO,MAAM,MAAM,oBAAoB,CAAA;AACvC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAC1E,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAExE,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAA;AAEtE,MAAM,UAAU,GAAG,CAAC,GAAW,EAAE,IAAY,EAAE,IAAY,EAAE,EAAE;IAC7D,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACnC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IAC5B,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IACzB,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IACtB,OAAO,IAAI,CAAA;AACb,CAAC,CAAA;AAED,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE;IACvB,IAAI,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC7D,MAAM,IAAI,GAAG,OAAO,EAAE,CAAA;QACtB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,CAAA;QAC5C,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACtC,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,CAAA;QACzE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,CAAA;IAC7C,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC9D,MAAM,IAAI,GAAG,OAAO,EAAE,CAAA;QACtB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,CAAA;QACnD,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACtC,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,CAAA;QACvE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,CAAA;IAC7C,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,iDAAiD,EAAE,GAAG,EAAE;QAC3D,MAAM,IAAI,GAAG,OAAO,EAAE,CAAA;QACtB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,CAAA;QAC5C,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACtC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,CAAA;QAC3D,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,CAAA;QAC3E,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,4EAA4E;IAC5E,yDAAyD;IACzD,IAAI,CAAC,uDAAuD,EAAE,GAAG,EAAE;QACjE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,CAAC,CAAA;IACpD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,MAAM,EAAE,GAAG,CAAC,IAAY,EAAE,EAAE;QAC1B,MAAM,GAAG,GAAG,OAAO,EAAE,CAAA;QACrB,OAAO,UAAU,CAAC,GAAG,EAAE,WAAW,EAAE,cAAc,IAAI,EAAE,CAAC,CAAA;IAC3D,CAAC,CAAA;IAED,IAAI,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,YAAY,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;IAEF,0EAA0E;IAC1E,0EAA0E;IAC1E,IAAI,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,YAAY,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,MAAM,CAAC,OAAO,CAClB,YAAY,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAClE,QAAQ,CACT,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,MAAM,CAAC,OAAO,CAClB,YAAY,CACV,EAAE,CAAC,wCAAwC,CAAC,EAC5C,EAAE,EACF,OAAO,EAAE,EACT;YACE,aAAa,EAAE,IAAI;SACpB,CACF,EACD,qBAAqB,CACtB,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,MAAM,CAAC,OAAO,CAClB,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EACpD,QAAQ,CACT,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,uEAAuE;IACvE,IAAI,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAC1B,MAAM,MAAM,CAAC,OAAO,CAClB,YAAY,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,EAC/D,uBAAuB,CACxB,CAAA;QACD,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,KAAK,CAAC,CAAA;IACzC,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,YAAY,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAA;IACxE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,MAAM,WAAW,GAAG,CAAC,QAAsC,EAAE,EAAE,CAC7D,CAAC,EAAE,QAAQ,EAAE,CAAU,CAAA;IAEzB,IAAI,CAAC,mBAAmB,EAAE,KAAK,IAAI,EAAE;QACnC,MAAM,MAAM,GAAG,MAAM,eAAe,CAClC,WAAW,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAC3E,CAAA;QACD,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,CAAA;IACnC,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,CAAC,KAAK,CAAC,MAAM,eAAe,CAAC,WAAW,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;QACxE,MAAM,CAAC,KAAK,CAAC,MAAM,eAAe,CAAC,WAAW,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;IACxE,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,CAAC,KAAK,CACV,MAAM,eAAe,CAAC,WAAW,CAAC,KAAK,IAAI,EAAE,CAAC,aAAa,CAAC,CAAC,EAC7D,IAAI,CACL,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,CAAC,KAAK,CACV,MAAM,eAAe,CACnB,WAAW,CAAC,KAAK,IAAI,EAAE;YACrB,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAA;QAC3B,CAAC,CAAC,CACH,EACD,IAAI,CACL,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/src/lib/derive-instance-overrides.js

@@ -1,7 +1,7 @@
 import { readFile } from 'node:fs/promises';
 import { existsSync } from 'node:fs';
 import { join, resolve, sep } from 'node:path';
-import { BadRequestError } from '@pikku/core/errors';
+import { BadRequestError } from '#pikku/addon/error';
 /** Anchoring the first character on npm's no-leading-dot rule is what excludes
  *  `.` and `..`; a trailing `[a-z0-9._-]+` alone matches both. */
 const VALID_PACKAGE_NAME = /^(@[a-z0-9-]+\/)?[a-z0-9-][a-z0-9._-]*$/;

package/dist/src/lib/resolve-audit-users.d.ts

@@ -1,5 +1,5 @@
 import type { BetterAuthInstance } from '@pikku/better-auth';
-import type { CoreSingletonServices } from '@pikku/core';
+import type { CoreSingletonServices } from '@pikku/core/types';
 /** Who a user id belongs to. */
 export type AuditUserProfile = {
     name?: string;