@pikku/cli 0.12.102 → 0.12.103

package/dist/.pikku/queue/pikku-queue-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.102
+ * This file was generated by @pikku/cli@0.12.103
  */
 /**
  * Queue-specific type definitions for tree-shaking optimization

package/dist/.pikku/queue/pikku-queue-workers-wirings-meta.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.102
+ * This file was generated by @pikku/cli@0.12.103
  */
 import { pikkuState } from '@pikku/core/ecosystem';
 import metaData from './pikku-queue-workers-wirings-meta.gen.json' with { type: 'json' };

package/dist/.pikku/queue/pikku-queue-workers-wirings.gen.d.ts

@@ -1,4 +1,4 @@
 export {};
 /**
- * This file was generated by @pikku/cli@0.12.102
+ * This file was generated by @pikku/cli@0.12.103
  */

package/dist/.pikku/queue/pikku-queue-workers-wirings.gen.js

@@ -1,5 +1,5 @@
 export {};
 /**
- * This file was generated by @pikku/cli@0.12.102
+ * This file was generated by @pikku/cli@0.12.103
  */
 /* The files with an addQueueWorkers function call */ 

package/dist/.pikku/rpc/pikku-rpc-wirings-meta.internal.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.102
+ * This file was generated by @pikku/cli@0.12.103
  */
 import { pikkuState } from '@pikku/core/ecosystem';
 import metaData from './pikku-rpc-wirings-meta.internal.gen.json' with { type: 'json' };

package/dist/.pikku/scenarios/pikku-scenario-functions-meta.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.102
+ * This file was generated by @pikku/cli@0.12.103
  */
 import { pikkuState } from '@pikku/core/ecosystem';
 import '../function/pikku-functions-meta.gen.js';

package/dist/.pikku/scenarios/pikku-scenario-functions.gen.d.ts

@@ -1,4 +1,4 @@
 /**
- * This file was generated by @pikku/cli@0.12.102
+ * This file was generated by @pikku/cli@0.12.103
  */
 export {};

package/dist/.pikku/scenarios/pikku-scenario-wirings-meta.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.102
+ * This file was generated by @pikku/cli@0.12.103
  */
 import { pikkuState } from '@pikku/core/ecosystem';
 import '../workflow/pikku-workflow-wirings-meta.gen.js';

package/dist/.pikku/scenarios/pikku-scenario-wirings.gen.d.ts

@@ -1,4 +1,4 @@
 /**
- * This file was generated by @pikku/cli@0.12.102
+ * This file was generated by @pikku/cli@0.12.103
  */
 export {};

package/dist/.pikku/scenarios/schemas/register.gen.d.ts

@@ -1,4 +1,4 @@
 /**
- * This file was generated by @pikku/cli@0.12.102
+ * This file was generated by @pikku/cli@0.12.103
  */
 export declare const empty: null;

package/dist/.pikku/scenarios/schemas/register.gen.js

@@ -1,4 +1,4 @@
 /**
- * This file was generated by @pikku/cli@0.12.102
+ * This file was generated by @pikku/cli@0.12.103
  */
 export const empty = null;

package/dist/.pikku/scheduler/pikku-scheduler-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.102
+ * This file was generated by @pikku/cli@0.12.103
  */
 /**
  * Scheduler-specific type definitions for tree-shaking optimization

package/dist/.pikku/scheduler/pikku-scheduler-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.102
+ * This file was generated by @pikku/cli@0.12.103
  */
 /**
  * Scheduler-specific type definitions for tree-shaking optimization

package/dist/.pikku/schemas/register.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.102
+ * This file was generated by @pikku/cli@0.12.103
  */
 import { addSchema } from '@pikku/core/schema';
 import * as BinaryInput from './schemas/BinaryInput.schema.json' with { type: 'json' };

package/dist/.pikku/scopes/pikku-personas.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.102
+ * This file was generated by @pikku/cli@0.12.103
  */
 /**
  * This file was generated by the @pikku/cli

package/dist/.pikku/scopes/pikku-roles.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.102
+ * This file was generated by @pikku/cli@0.12.103
  */
 /**
  * This file was generated by the @pikku/cli

package/dist/.pikku/scopes/pikku-scope-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.102
+ * This file was generated by @pikku/cli@0.12.103
  */
 export { defineScope } from '@pikku/core/scope';
 export type { CoreScopes, CoreScopeNode, FlatScope, ScopeDefinitionMeta, ScopeDefinitionsMeta } from '@pikku/core/scope';

package/dist/.pikku/scopes/pikku-scope-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.102
+ * This file was generated by @pikku/cli@0.12.103
  */
 export { defineScope } from '@pikku/core/scope';
 export { defineSystemRole } from '@pikku/core/role';

package/dist/.pikku/scopes/pikku-scopes.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.102
+ * This file was generated by @pikku/cli@0.12.103
  */
 /**
  * This file was generated by the @pikku/cli

package/dist/.pikku/secrets/pikku-secret-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.102
+ * This file was generated by @pikku/cli@0.12.103
  */
 export { defineSecret } from '@pikku/core/secret';
 export type { CoreSecret, SecretDefinitionMeta, SecretDefinitionsMeta } from '@pikku/core/secret';

package/dist/.pikku/secrets/pikku-secret-types.gen.js

@@ -1,4 +1,4 @@
 /**
- * This file was generated by @pikku/cli@0.12.102
+ * This file was generated by @pikku/cli@0.12.103
  */
 export { defineSecret } from '@pikku/core/secret';

package/dist/.pikku/secrets/pikku-secrets.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.102
+ * This file was generated by @pikku/cli@0.12.103
  */
 import { TypedSecretService as CoreTypedSecretService } from '@pikku/core/services';
 import type { SecretService } from '@pikku/core/services';

package/dist/.pikku/secrets/pikku-secrets.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.102
+ * This file was generated by @pikku/cli@0.12.103
  */
 import { TypedSecretService as CoreTypedSecretService } from '@pikku/core/services';
 import secretsMeta from './pikku-secrets-meta.gen.json' with { type: 'json' };

package/dist/.pikku/trigger/pikku-trigger-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.102
+ * This file was generated by @pikku/cli@0.12.103
  */
 /**
  * Trigger-specific type definitions for tree-shaking optimization

package/dist/.pikku/trigger/pikku-trigger-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.102
+ * This file was generated by @pikku/cli@0.12.103
  */
 /**
  * Trigger-specific type definitions for tree-shaking optimization

package/dist/.pikku/variables/pikku-variable-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.102
+ * This file was generated by @pikku/cli@0.12.103
  */
 export { defineVariable } from '@pikku/core/variable';
 export type { CoreVariable, VariableDefinitionMeta, VariableDefinitionsMeta } from '@pikku/core/variable';

package/dist/.pikku/variables/pikku-variable-types.gen.js

@@ -1,4 +1,4 @@
 /**
- * This file was generated by @pikku/cli@0.12.102
+ * This file was generated by @pikku/cli@0.12.103
  */
 export { defineVariable } from '@pikku/core/variable';

package/dist/.pikku/variables/pikku-variables.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.102
+ * This file was generated by @pikku/cli@0.12.103
  */
 import { TypedVariablesService as CoreTypedVariablesService } from '@pikku/core/services';
 import type { VariablesService } from '@pikku/core/services';

package/dist/.pikku/variables/pikku-variables.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.102
+ * This file was generated by @pikku/cli@0.12.103
  */
 import { TypedVariablesService as CoreTypedVariablesService } from '@pikku/core/services';
 import variablesMeta from './pikku-variables-meta.gen.json' with { type: 'json' };

package/dist/.pikku/workflow/pikku-personas.gen.d.ts

@@ -1,4 +1,5 @@
-import type { HttpPersonasConfig, ScenarioPersona, ResolvedPersona } from '@pikku/core/services';
+import type { HttpPersonasConfig } from '@pikku/core/persona';
+import type { ScenarioPersona, ResolvedPersona } from '@pikku/core/services';
 import type { AgentMap } from '../agent/pikku-agent-map.gen.d.js';
 import type { FlattenedRPCMap } from '../rpc/pikku-rpc-wirings-map.gen.d.js';
 export declare const personaConfigs: {};

package/dist/.pikku/workflow/pikku-personas.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.102
+ * This file was generated by @pikku/cli@0.12.103
  */
 /** Personas declared with definePersonas() */
 import { createHttpPersonas } from '@pikku/core/persona';

package/dist/.pikku/workflow/pikku-workflow-types.gen.d.ts

@@ -1,10 +1,11 @@
 /**
- * This file was generated by @pikku/cli@0.12.102
+ * This file was generated by @pikku/cli@0.12.103
  */
 import { WorkflowCancelledException } from '@pikku/core/workflow';
 import { template } from '@pikku/core/workflow';
 import { type PikkuWorkflowGraphConfig, type PikkuWorkflowGraphResult } from '@pikku/core/workflow';
-import type { PikkuWorkflowWire, PikkuScenarioWire, WorkflowStepOptions, ScenarioStepOptions } from '@pikku/core/workflow';
+import type { PikkuWorkflowWire, WorkflowStepOptions } from '@pikku/core/workflow';
+import type { PikkuScenarioWire, ScenarioStepOptions } from '@pikku/core/scenario';
 export { WorkflowCancelledException };
 import type { PikkuFunctionSessionless, PikkuFunctionConfig, WiredServices } from '../function/pikku-function-types.gen.js';
 import type { FlattenedRPCMap } from '../rpc/pikku-rpc-wirings-map.internal.gen.d.js';

package/dist/.pikku/workflow/pikku-workflow-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.102
+ * This file was generated by @pikku/cli@0.12.103
  */
 import { WorkflowCancelledException } from '@pikku/core/workflow';
 import { template } from '@pikku/core/workflow';

package/dist/.pikku/workflow/pikku-workflow-wirings-meta.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.102
+ * This file was generated by @pikku/cli@0.12.103
  */
 import { pikkuState } from '@pikku/core/ecosystem';
 import allWorkflowMeta from './meta/allWorkflow.gen.json' with { type: 'json' };

package/dist/.pikku/workflow/pikku-workflow-wirings.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.102
+ * This file was generated by @pikku/cli@0.12.103
  */
 import { addWorkflow } from '@pikku/core/workflow';
 import './pikku-workflow-wirings-meta.gen.js';

package/dist/bin/pikku-bin.mjs

@@ -11,8 +11,8 @@ async function checkForUpdate() {
     })
     if (!res.ok) return
     const { version: latest } = await res.json()
-    if (latest !== '0.12.102') {
-      process.stderr.write(`\n  Update available  0.12.102 → ${latest}\n  brew upgrade pikku  or  npm install -g @pikku/cli\n\n`)
+    if (latest !== '0.12.103') {
+      process.stderr.write(`\n  Update available  0.12.103 → ${latest}\n  brew upgrade pikku  or  npm install -g @pikku/cli\n\n`)
     }
   } catch {}
 }

package/dist/src/deploy/analyzer/analyzer.js

@@ -372,6 +372,11 @@ export function analyzeDeployment(state, options) {
     }));
     const unscopedSecretAddons = [];
     const unscopedCredentialAddons = [];
+    const grantedSecretAddons = [];
+    const grantedCredentialAddons = [];
+    // An override's key is a grant too: scoping is checked before the rename, so
+    // the key is a name the addon may read that it never declared.
+    const grantedNames = (grants, overrides) => [...new Set([...(grants ?? []), ...Object.keys(overrides ?? {})])].sort();
     for (const [namespace, addon] of state.rpc?.wireAddonDeclarations ?? []) {
         if (addon.globalSecrets) {
             unscopedSecretAddons.push({
@@ -380,6 +385,12 @@ export function analyzeDeployment(state, options) {
                 reason: addon.globalSecrets,
             });
         }
+        else {
+            const granted = grantedNames(addon.secretGrants, addon.secretOverrides);
+            if (granted.length > 0) {
+                grantedSecretAddons.push({ namespace, package: addon.package, granted });
+            }
+        }
         if (addon.globalCredentials) {
             unscopedCredentialAddons.push({
                 namespace,
@@ -387,6 +398,16 @@ export function analyzeDeployment(state, options) {
                 reason: addon.globalCredentials,
             });
         }
+        else {
+            const granted = grantedNames(addon.credentialGrants, addon.credentialOverrides);
+            if (granted.length > 0) {
+                grantedCredentialAddons.push({
+                    namespace,
+                    package: addon.package,
+                    granted,
+                });
+            }
+        }
     }
     const byNamespace = (a, b) => a.namespace.localeCompare(b.namespace);
     const variables = state.variables.definitions.map((v) => ({
@@ -408,6 +429,8 @@ export function analyzeDeployment(state, options) {
         unresolvedSecretReads: unresolvedSecretReads.sort(),
         unscopedSecretAddons: unscopedSecretAddons.sort(byNamespace),
         unscopedCredentialAddons: unscopedCredentialAddons.sort(byNamespace),
+        grantedSecretAddons: grantedSecretAddons.sort(byNamespace),
+        grantedCredentialAddons: grantedCredentialAddons.sort(byNamespace),
         variables,
     };
 }

package/dist/src/deploy/analyzer/manifest.d.ts

@@ -115,6 +115,16 @@ export interface UnscopedAddon {
     /** The app's stated reason, from `wireAddon({ globalSecrets | globalCredentials })`. */
     reason: string;
 }
+/** A `wireAddon` instance the app lent named secrets or credentials it never declared. */
+export interface GrantedAddon {
+    namespace: string;
+    package: string;
+    /**
+     * The names the addon may now read, as the addon reads them — grants and
+     * override keys alike, since scoping is checked before an override renames.
+     */
+    granted: string[];
+}
 export interface VariableDeclaration {
     variableId: string;
     displayName: string;
@@ -147,5 +157,14 @@ export interface DeploymentManifest {
      * only the credentials it declared, and none can enumerate the app's users.
      */
     unscopedCredentialAddons: UnscopedAddon[];
+    /**
+     * Addon instances lent named secrets on top of the ones they declared. The
+     * other half of the same waiver as `unscopedSecretAddons` — narrower, because
+     * the app named the set — so between them a deployment sees every secret an
+     * addon can reach that it did not declare for itself.
+     */
+    grantedSecretAddons: GrantedAddon[];
+    /** Addon instances lent named credentials on top of the ones they declared. */
+    grantedCredentialAddons: GrantedAddon[];
     variables: VariableDeclaration[];
 }

package/dist/src/fabric/functions/validate.function.js

@@ -7,6 +7,7 @@ import { pikkuSessionlessFunc } from '../../../.pikku/pikku-types.gen.js';
 import { added, changed, removed, dim } from '../lib/output.js';
 import { typeCheckFrontends } from '../lib/frontend-typecheck.js';
 import { readJsonSafe, readTextSafe, runSharedProjectChecks, } from '../../functions/validate/shared-checks.js';
+import { runTypeIdentityChecks } from '../../functions/validate/type-identity-checks.js';
 const FindingSchema = z.object({
     id: z.string(),
     severity: z.enum(['error', 'warn', 'info']),
@@ -318,6 +319,7 @@ export async function runValidate(startDir = process.cwd(), opts = {}) {
             }
         }
     }
+    findings.push(...(await runTypeIdentityChecks(root)));
     // ── scaffold-implied dependencies ──────────────────────────────────────
     // `scaffold.console` makes codegen import
     // `@pikku/addon-console/.pikku/pikku-bootstrap.gen.js` from the generated

package/dist/src/functions/commands/scenario-browser.d.ts

@@ -7,7 +7,7 @@
  * making the driver's optional isolation and diagnostics safe to call
  * unconditionally.
  */
-import type { ScenarioBrowserFailure, ScenarioBrowserProvider } from '@pikku/core/workflow';
+import type { ScenarioBrowserFailure, ScenarioBrowserProvider } from '@pikku/core/scenario';
 import type { ResolvedPersona } from '@pikku/core/services';
 /** The default driver, used when a project names no other. */
 export declare const DEFAULT_BROWSER_DRIVER = "@pikku/playwright";

package/dist/src/functions/commands/scenario-formatter.d.ts

@@ -7,7 +7,7 @@
  * second formatter (JSON, JUnit) a matter of writing one function rather than
  * unpicking the runner.
  */
-import type { ScenarioBrowserFailure } from '@pikku/core/workflow';
+import type { ScenarioBrowserFailure } from '@pikku/core/scenario';
 /** The longest gherkin keyword ("Given"), so sentences line up under each other. */
 declare const KEYWORD_WIDTH = 5;
 /** One step of a run, already joined to the prose that declared it. */

package/dist/src/functions/commands/scenario-ladder.d.ts

@@ -1,4 +1,4 @@
-import type { ScenarioStepPhase, ScenarioSurface } from '@pikku/core/workflow';
+import type { ScenarioStepPhase, ScenarioSurface } from '@pikku/core/scenario';
 import type { WorkflowStepMeta } from '@pikku/core/workflow/types';
 import type { FunctionsMeta } from '@pikku/core';
 import type { ScenarioFailureDetail, ScenarioStepRow } from './scenario-formatter.js';

package/dist/src/functions/commands/scenario-ladder.js

@@ -8,7 +8,7 @@
  * belongs to `scenario-formatter.ts`; this module only decides what each step
  * is called.
  */
-import { composeStepProse } from '@pikku/core/workflow';
+import { composeStepProse } from '@pikku/core/scenario';
 import { KEYWORD_WIDTH } from './scenario-formatter.js';
 /**
  * Walk a workflow's steps — including the ones nested inside branches, fanouts

package/dist/src/functions/commands/scenario-plan.d.ts

@@ -1,4 +1,5 @@
-import type { CoreFeature, CoreWorkflow } from '@pikku/core/workflow';
+import type { CoreWorkflow } from '@pikku/core/workflow';
+import type { CoreFeature } from '@pikku/core/scenario';
 /** One scenario run: a scenario name and, for a feature's paired entry, its input. */
 export type ScenarioPlanEntry = {
     scenarioName: string;

package/dist/src/functions/commands/scenario-plan.js

@@ -1,4 +1,4 @@
-import { resolveFeatureScenarios } from '@pikku/core/workflow';
+import { resolveFeatureScenarios } from '@pikku/core/scenario';
 /**
  * Turn the registered scenarios and features into an ordered list of run units.
  *

package/dist/src/functions/commands/scenario.d.ts

@@ -1,4 +1,4 @@
-import type { ScenarioSurface } from '@pikku/core/workflow';
+import type { ScenarioSurface } from '@pikku/core/scenario';
 export declare const scenarioList: import("#pikku").PikkuFunctionConfig<{}, void, "rpc" | "session", import("#pikku").PikkuFunctionSessionless<{}, void, "rpc" | "session", import("#pikku").WiredServices, unknown> | import("#pikku").PikkuFunction<{}, void, "rpc" | "session", import("#pikku").WiredServices>, undefined, undefined>;
 export declare const scenarioRun: import("#pikku").PikkuFunctionConfig<{
     environment: string;

package/dist/src/functions/commands/scenario.js

@@ -6,10 +6,10 @@ import { InMemoryWorkflowService } from '@pikku/core/services';
 import { createHttpPersonas } from '@pikku/core/persona';
 import { PikkuScenarioService } from '@pikku/core/scenario';
 import { pikkuState, getAllPackageStates } from '@pikku/core/ecosystem';
-import { resolveFeatureScenarios } from '@pikku/core/workflow';
+import { resolveFeatureScenarios } from '@pikku/core/scenario';
 import { loadScenarioBootstrap } from './load-user-project.js';
 import { collectScenarioStepProse, scenarioBrowserSteps, scenarioFailureFromSteps, scenarioStepRows, scenarioStepsWithoutBinding, scenarioSurfaceCoverage, } from './scenario-ladder.js';
-import { SCENARIO_SURFACES } from '@pikku/core/workflow';
+import { SCENARIO_SURFACES } from '@pikku/core/scenario';
 import { formatScenarioReport } from './scenario-formatter.js';
 import { resolveScenarioBrowserProvider, scenarioBrowserLifecycle, } from './scenario-browser.js';
 import { resolvePersonas } from '../../utils/resolve-personas.js';

package/dist/src/functions/surface/collect-surface.d.ts

@@ -0,0 +1,14 @@
+export type SurfaceKind = 'function' | 'class' | 'interface' | 'type' | 'const' | 'enum' | 'namespace';
+export type SurfaceSymbol = {
+    name: string;
+    kind: SurfaceKind;
+    declaredAt: string;
+    deprecated: boolean;
+};
+export type SurfaceEntrypoint = {
+    subpath: string;
+    specifier: string;
+    entryFile: string;
+    symbols: SurfaceSymbol[];
+};
+export declare const collectSurface: (packageDir: string) => Promise<SurfaceEntrypoint[]>;