@pikku/cli 0.12.117 → 0.12.119

package/dist/.pikku/scopes/pikku-scope-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.117
+ * This file was generated by @pikku/cli@0.12.119
  */
 export { defineScope } from '@pikku/core/scope';
 export { defineSystemRole } from '@pikku/core/role';

package/dist/.pikku/scopes/pikku-scopes.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.117
+ * This file was generated by @pikku/cli@0.12.119
  */
 /**
  * This file was generated by the @pikku/cli

package/dist/.pikku/secrets/index.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.117
+ * This file was generated by @pikku/cli@0.12.119
  */
 /**
  * Subpath entry — `#pikku/secrets` resolves here.

package/dist/.pikku/secrets/index.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.117
+ * This file was generated by @pikku/cli@0.12.119
  */
 /**
  * Subpath entry — `#pikku/secrets` resolves here.

package/dist/.pikku/secrets/pikku-secret-types.gen.d.ts

@@ -1,4 +1,4 @@
 /**
- * This file was generated by @pikku/cli@0.12.117
+ * This file was generated by @pikku/cli@0.12.119
  */
 export { defineSecret } from '@pikku/core/secret';

package/dist/.pikku/secrets/pikku-secret-types.gen.js

@@ -1,4 +1,4 @@
 /**
- * This file was generated by @pikku/cli@0.12.117
+ * This file was generated by @pikku/cli@0.12.119
  */
 export { defineSecret } from '@pikku/core/secret';

package/dist/.pikku/secrets/pikku-secrets.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.117
+ * This file was generated by @pikku/cli@0.12.119
  */
 import { TypedSecretService as CoreTypedSecretService } from '@pikku/core/services';
 import type { SecretService } from '@pikku/core/services';

package/dist/.pikku/secrets/pikku-secrets.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.117
+ * This file was generated by @pikku/cli@0.12.119
  */
 import { TypedSecretService as CoreTypedSecretService } from '@pikku/core/services';
 /**

package/dist/.pikku/services/pikku-meta-service.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.117
+ * This file was generated by @pikku/cli@0.12.119
  */
 import { LocalMetaService } from '@pikku/core/services/local-meta';
 export declare class PikkuMetaService extends LocalMetaService {

package/dist/.pikku/services/pikku-meta-service.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.117
+ * This file was generated by @pikku/cli@0.12.119
  */
 import { LocalMetaService } from '@pikku/core/services/local-meta';
 export class PikkuMetaService extends LocalMetaService {

package/dist/.pikku/setup/index.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.117
+ * This file was generated by @pikku/cli@0.12.119
  */
 /**
  * Subpath entry — `#pikku/setup` resolves here.

package/dist/.pikku/setup/index.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.117
+ * This file was generated by @pikku/cli@0.12.119
  */
 /**
  * Subpath entry — `#pikku/setup` resolves here.

package/dist/.pikku/setup/pikku-setup-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.117
+ * This file was generated by @pikku/cli@0.12.119
  */
 /**
  * Config and service factory definitions, declared once per application

package/dist/.pikku/setup/pikku-setup-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.117
+ * This file was generated by @pikku/cli@0.12.119
  */
 /**
  * Config and service factory definitions, declared once per application

package/dist/.pikku/trigger/index.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.117
+ * This file was generated by @pikku/cli@0.12.119
  */
 /**
  * Subpath entry — `#pikku/trigger` resolves here.

package/dist/.pikku/trigger/index.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.117
+ * This file was generated by @pikku/cli@0.12.119
  */
 /**
  * Subpath entry — `#pikku/trigger` resolves here.

package/dist/.pikku/trigger/pikku-trigger-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.117
+ * This file was generated by @pikku/cli@0.12.119
  */
 /**
  * Trigger-specific type definitions for tree-shaking optimization

package/dist/.pikku/trigger/pikku-trigger-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.117
+ * This file was generated by @pikku/cli@0.12.119
  */
 /**
  * Trigger-specific type definitions for tree-shaking optimization

package/dist/.pikku/variables/index.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.117
+ * This file was generated by @pikku/cli@0.12.119
  */
 /**
  * Subpath entry — `#pikku/variables` resolves here.

package/dist/.pikku/variables/index.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.117
+ * This file was generated by @pikku/cli@0.12.119
  */
 /**
  * Subpath entry — `#pikku/variables` resolves here.

package/dist/.pikku/variables/pikku-variable-types.gen.d.ts

@@ -1,4 +1,4 @@
 /**
- * This file was generated by @pikku/cli@0.12.117
+ * This file was generated by @pikku/cli@0.12.119
  */
 export { defineVariable } from '@pikku/core/variable';

package/dist/.pikku/variables/pikku-variable-types.gen.js

@@ -1,4 +1,4 @@
 /**
- * This file was generated by @pikku/cli@0.12.117
+ * This file was generated by @pikku/cli@0.12.119
  */
 export { defineVariable } from '@pikku/core/variable';

package/dist/.pikku/variables/pikku-variables.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.117
+ * This file was generated by @pikku/cli@0.12.119
  */
 import { TypedVariablesService as CoreTypedVariablesService } from '@pikku/core/services';
 import type { VariablesService } from '@pikku/core/services';

package/dist/.pikku/variables/pikku-variables.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.117
+ * This file was generated by @pikku/cli@0.12.119
  */
 import { TypedVariablesService as CoreTypedVariablesService, } from '@pikku/core/services';
 /**

package/dist/.pikku/workflow/index.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.117
+ * This file was generated by @pikku/cli@0.12.119
  */
 /**
  * Subpath entry — `#pikku/workflow` resolves here.

package/dist/.pikku/workflow/index.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.117
+ * This file was generated by @pikku/cli@0.12.119
  */
 /**
  * Subpath entry — `#pikku/workflow` resolves here.

package/dist/.pikku/workflow/pikku-workflow-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.117
+ * This file was generated by @pikku/cli@0.12.119
  */
 import { WorkflowCancelledException } from '@pikku/core/workflow';
 import type { PikkuWorkflowGraphConfig, PikkuWorkflowGraphResult } from '@pikku/core/workflow';

package/dist/.pikku/workflow/pikku-workflow-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.117
+ * This file was generated by @pikku/cli@0.12.119
  */
 import { WorkflowCancelledException } from '@pikku/core/workflow';
 import { pikkuWorkflowGraph as corePikkuWorkflowGraph } from '@pikku/core/workflow';

package/dist/.pikku/workflow/pikku-workflow-wirings-meta.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.117
+ * This file was generated by @pikku/cli@0.12.119
  */
 import { pikkuState } from '@pikku/core/state';
 import allWorkflowMeta from './meta/allWorkflow.gen.json' with { type: 'json' };

package/dist/.pikku/workflow/pikku-workflow-wirings.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.117
+ * This file was generated by @pikku/cli@0.12.119
  */
 import { addWorkflow } from '@pikku/core/workflow';
 import './pikku-workflow-wirings-meta.gen.js';

package/dist/bin/pikku-bin.mjs

@@ -11,8 +11,8 @@ async function checkForUpdate() {
     })
     if (!res.ok) return
     const { version: latest } = await res.json()
-    if (latest !== '0.12.117') {
-      process.stderr.write(`\n  Update available  0.12.117 → ${latest}\n  brew upgrade pikku  or  npm install -g @pikku/cli\n\n`)
+    if (latest !== '0.12.119') {
+      process.stderr.write(`\n  Update available  0.12.119 → ${latest}\n  brew upgrade pikku  or  npm install -g @pikku/cli\n\n`)
     }
   } catch {}
 }

package/dist/src/cli.wiring.js

@@ -58,7 +58,7 @@ import { deployPlan } from './functions/commands/deploy-plan.js';
 import { deployApply } from './functions/commands/deploy-apply.js';
 import { deployInfo } from './functions/commands/deploy-info.js';
 import { pikkuSkillsInstall, pikkuSkillsList, } from './functions/commands/skills.js';
-import { pikkuMetaFunctionsGet, pikkuMetaFunctionsList, pikkuMetaSchemasGet, pikkuMetaSchemasList, pikkuMetaMiddlewareGet, pikkuMetaMiddlewareList, pikkuMetaPermissionsGet, pikkuMetaPermissionsList, pikkuMetaWiresList, pikkuMetaWiresHttp, pikkuMetaWiresScheduler, pikkuMetaWiresQueue, pikkuMetaWiresChannel, pikkuMetaWiresTrigger, pikkuMetaWiresType, pikkuMetaWorkflowsGet, pikkuMetaWorkflowsList, pikkuMetaContext, pikkuMetaClients, } from './functions/commands/meta.js';
+import { pikkuMetaFunctionsGet, pikkuMetaFunctionsList, pikkuMetaSchemasGet, pikkuMetaSchemasList, pikkuMetaMiddlewareGet, pikkuMetaMiddlewareList, pikkuMetaPermissionsGet, pikkuMetaPermissionsList, pikkuMetaWiresList, pikkuMetaWiresHttp, pikkuMetaWiresScheduler, pikkuMetaWiresQueue, pikkuMetaWiresChannel, pikkuMetaWiresTrigger, pikkuMetaWiresType, pikkuMetaWorkflowsGet, pikkuMetaWorkflowsList, pikkuMetaContext, pikkuMetaClients, pikkuMetaApply, } from './functions/commands/meta.js';
 import { defaultCLIRenderer } from './services.js';
 wireCLI({
     program: 'pikku',
@@ -635,16 +635,8 @@ wireCLI({
                 }),
                 sync: pikkuCLICommand({
                     func: personaSync,
-                    description: "Provision the declared personas into an environment: create each account and apply the roles it declares. Additive — it never revokes. Needs both the environment's API (to sign in) and its database (to write the grants), and the sign-in secret from SCENARIO_ACTOR_SECRET.",
+                    description: "Report which personas an environment will provision, with which roles, and why any of them were skipped. The provisioning itself happens in the deployment — call provisionPersonas from '@pikku/better-auth' in your server lifecycle — because the CLI has no connection to a deployed environment's database.",
                     parameters: '<environment>',
-                    options: {
-                        dryRun: {
-                            description: 'Report who would be provisioned, with which roles, and why anyone was skipped — without touching anything',
-                        },
-                        apiUrl: {
-                            description: "Override the environment's apiUrl — for a target that only exists at run time, such as a freshly deployed sandbox",
-                        },
-                    },
                 }),
                 list: pikkuCLICommand({
                     func: personaList,
@@ -988,6 +980,11 @@ wireCLI({
                     func: pikkuMetaClients,
                     description: 'Frontend-targeted metadata: exposed RPCs, workflows, channels with their input/output type names and descriptions',
                 }),
+                apply: pikkuCLICommand({
+                    func: pikkuMetaApply,
+                    description: 'Apply a batch of edits to your own source, all-or-nothing. Takes JSON — a file, or stdin — of {operations: [{kind, sourceFile, exportedName, ...}]}, where kind is functionConfig, functionBody or agentConfig. Config edits are spliced into the original text, so formatting and comments survive, and a permission or tool written as an identifier brings its import with it. Nothing is written unless every operation resolves, so a batch either lands whole or not at all. Run `pikku all` once afterwards to refresh generated metadata.',
+                    parameters: '[file]',
+                }),
                 functions: {
                     func: pikkuMetaFunctionsList,
                     description: 'Inspect function metadata',

package/dist/src/fabric/functions/smoke.function.js

@@ -11,7 +11,7 @@ import { pikkuSessionlessFunc } from '../../../.pikku/function/index.js';
 import { findProjectRoot, readJsonSafe, } from '../../functions/validate/validate.js';
 import { headSha, isWorkingTreeClean } from '../lib/git.js';
 import { added, changed, dim, removed } from '../lib/output.js';
-const DEFAULT_BUN_VERSION = 'bun@1.3.14';
+const DEFAULT_BUN_VERSION = 'bun@1.4.0';
 const DEFAULT_STEP_TIMEOUT_SECONDS = 300;
 const DEFAULT_STARTUP_TIMEOUT_SECONDS = 60;
 const DEV_LOG_TAIL_BYTES = 16_000;
@@ -555,7 +555,7 @@ export const FabricSmoke = pikkuSessionlessFunc({
                 notes,
                 steps,
                 failure: `Unsupported packageManager for Fabric smoke: ${packageManager}`,
-                logTail: 'Fabric is bun-only, so smoke runs the same way the build container does. Declare "packageManager": "bun@1.3.14" in package.json.',
+                logTail: 'Fabric is bun-only, so smoke runs the same way the build container does. Declare "packageManager": "bun@1.4.0" in package.json.',
             };
             process.exitCode = 1;
             return result;

package/dist/src/fabric/functions/validate.function.js

@@ -235,10 +235,10 @@ export async function runValidate(startDir = process.cwd(), opts = {}) {
     {
         const declared = rootPkg?.packageManager;
         if (!declared) {
-            e('package-manager-undeclared', 'package.json does not declare "packageManager" — Fabric is bun-only and the build container aborts with "Unsupported packageManager"', rootPkgPath, lines('Add it to the root package.json:', '  "packageManager": "bun@1.3.14"', 'then run `bun install` to generate bun.lock and commit both.'));
+            e('package-manager-undeclared', 'package.json does not declare "packageManager" — Fabric is bun-only and the build container aborts with "Unsupported packageManager"', rootPkgPath, lines('Add it to the root package.json:', '  "packageManager": "bun@1.4.0"', 'then run `bun install` to generate bun.lock and commit both.'));
         }
         else if (!declared.startsWith('bun@')) {
-            e('package-manager-not-bun', `package.json declares packageManager "${declared}" — Fabric is bun-only and the build container aborts with "Unsupported packageManager"`, rootPkgPath, lines('Set the root package.json to bun:', '  "packageManager": "bun@1.3.14"', 'then migrate the lockfile:', '  bun install && rm -f yarn.lock pnpm-lock.yaml package-lock.json', 'and commit bun.lock.'));
+            e('package-manager-not-bun', `package.json declares packageManager "${declared}" — Fabric is bun-only and the build container aborts with "Unsupported packageManager"`, rootPkgPath, lines('Set the root package.json to bun:', '  "packageManager": "bun@1.4.0"', 'then migrate the lockfile:', '  bun install && rm -f yarn.lock pnpm-lock.yaml package-lock.json', 'and commit bun.lock.'));
         }
     }
     // ── pikkufabric.config.json ────────────────────────────────────────────

package/dist/src/fabric/lib/git.js

@@ -15,9 +15,39 @@ export class GitError extends Error {
         this.stderr = stderr;
     }
 }
+/**
+ * Repository-location variables git exports to its hooks. `git push` from a
+ * worktree sets GIT_DIR, and a hook's children inherit it — after which git
+ * answers about the hook's repository no matter which directory it is run in,
+ * so a probe given a `cwd` outside any repository reports that repository's
+ * state instead of "no repository". Every probe below picks its repository by
+ * `cwd`, so the inherited pointer is always wrong here and is dropped.
+ */
+const REPO_LOCATION_ENV = [
+    'GIT_DIR',
+    'GIT_COMMON_DIR',
+    'GIT_WORK_TREE',
+    'GIT_INDEX_FILE',
+    'GIT_PREFIX',
+    'GIT_NAMESPACE',
+    'GIT_OBJECT_DIRECTORY',
+    'GIT_ALTERNATE_OBJECT_DIRECTORIES',
+    'GIT_CEILING_DIRECTORIES',
+];
+function envWithoutInheritedRepo() {
+    const env = { ...process.env };
+    for (const key of REPO_LOCATION_ENV) {
+        delete env[key];
+    }
+    return env;
+}
 function git(args, cwd = process.cwd()) {
     return new Promise((resolve, reject) => {
-        const child = spawn('git', args, { cwd, stdio: ['ignore', 'pipe', 'pipe'] });
+        const child = spawn('git', args, {
+            cwd,
+            env: envWithoutInheritedRepo(),
+            stdio: ['ignore', 'pipe', 'pipe'],
+        });
         let stdout = '';
         let stderr = '';
         child.stdout.on('data', (b) => (stdout += b.toString()));

package/dist/src/functions/commands/dev.js

@@ -22,11 +22,13 @@ import { createDevAgentRunner } from './dev-agent-runner.js';
 import { resolveConsoleMount } from './serve-console.js';
 import { serverReadyLine } from '../../server/server-ready.js';
 import { createEphemeralContentSigningJWT } from '../../server/content-signing-jwt.js';
+import { enableDevActorSignIn } from '../../server/actor-sign-in.js';
 import { applyModelAliasOverride } from '../../utils/model-alias-override.js';
 export const dev = pikkuSessionlessFunc({
     remote: true,
     func: async ({ logger, config, getInspectorState, invalidateInspectorState, variables, devServerRunner, }, { port, watch, hmr, coverage, test, model }, { rpc }) => {
         process.env.PIKKU_DEV_QUICK_LOGIN ??= 'true';
+        enableDevActorSignIn(logger);
         applyModelAliasOverride(logger, model, config.models);
         if (test) {
             process.env.PIKKU_TEST_RUN = 'true';

package/dist/src/functions/commands/meta.d.ts

@@ -80,3 +80,10 @@ export declare const pikkuMetaContext: import("#pikku/function").PikkuFunctionCo
  * `pikku meta context`.
  */
 export declare const pikkuMetaClients: import("#pikku/function").PikkuFunctionConfig<{}, void, "rpc" | "session", import("#pikku/function").PikkuFunctionSessionless<{}, void, "rpc" | "session", import("#pikku/function").WiredServices, unknown> | import("#pikku/function").PikkuFunction<{}, void, "rpc" | "session", import("#pikku/function").WiredServices>, undefined, undefined>;
+export declare const pikkuMetaApply: import("#pikku/function").PikkuFunctionConfig<{
+    file?: string;
+}, void, "rpc" | "session", import("#pikku/function").PikkuFunctionSessionless<{
+    file?: string;
+}, void, "rpc" | "session", import("#pikku/function").WiredServices, unknown> | import("#pikku/function").PikkuFunction<{
+    file?: string;
+}, void, "rpc" | "session", import("#pikku/function").WiredServices>, undefined, undefined>;

package/dist/src/functions/commands/meta.js

@@ -1,5 +1,8 @@
 import { pikkuSessionlessFunc } from '#pikku/function';
 import { getSchema } from '@pikku/core/schema';
+import { CodeEditService } from '@pikku/code-edit';
+import { readFile } from 'node:fs/promises';
+import { relative, resolve } from 'node:path';
 function out(value) {
     console.log(JSON.stringify(value));
 }
@@ -452,3 +455,65 @@ export const pikkuMetaClients = pikkuSessionlessFunc({
         });
     },
 });
+async function readOperationsInput(file) {
+    const raw = file
+        ? await readFile(resolve(file), 'utf-8')
+        : await new Promise((res, rej) => {
+            let buffer = '';
+            process.stdin.setEncoding('utf-8');
+            process.stdin.on('data', (chunk) => (buffer += chunk));
+            process.stdin.on('end', () => res(buffer));
+            process.stdin.on('error', rej);
+        });
+    if (!raw.trim()) {
+        throw new Error(file
+            ? `${file} is empty`
+            : 'No operations on stdin. Pass a file, or pipe JSON in.');
+    }
+    try {
+        return JSON.parse(raw);
+    }
+    catch (e) {
+        throw new Error(`Could not parse operations as JSON: ${e.message}`);
+    }
+}
+function parseOperations(input) {
+    const operations = Array.isArray(input)
+        ? input
+        : input?.operations;
+    if (!Array.isArray(operations)) {
+        throw new Error('Expected an array of operations, or an object with an "operations" array');
+    }
+    const kinds = ['functionConfig', 'functionBody', 'agentConfig'];
+    operations.forEach((operation, index) => {
+        const at = `operations[${index}]`;
+        if (!operation || typeof operation !== 'object') {
+            throw new Error(`${at} is not an object`);
+        }
+        const { kind, sourceFile, exportedName } = operation;
+        if (typeof kind !== 'string' || !kinds.includes(kind)) {
+            throw new Error(`${at}.kind must be one of ${kinds.join(', ')}`);
+        }
+        if (typeof sourceFile !== 'string' || !sourceFile) {
+            throw new Error(`${at}.sourceFile must be a non-empty string`);
+        }
+        if (typeof exportedName !== 'string' || !exportedName) {
+            throw new Error(`${at}.exportedName must be a non-empty string`);
+        }
+    });
+    return operations;
+}
+export const pikkuMetaApply = pikkuSessionlessFunc({
+    func: async ({ config }, data) => {
+        const operations = parseOperations(await readOperationsInput(data.file));
+        const rootDir = config.rootDir ?? process.cwd();
+        const codeEdit = new CodeEditService(rootDir);
+        const files = await codeEdit.applyOperations(operations);
+        out({
+            schemaVersion: 'meta-apply.v1',
+            applied: operations.length,
+            files: files.map((f) => relative(rootDir, f)),
+            generatedMetaIsStale: operations.some((o) => o.kind !== 'functionBody'),
+        });
+    },
+});

package/dist/src/functions/commands/persona-sync.d.ts

@@ -1,33 +1,25 @@
 /**
- * Provision the declared personas into an environment: their accounts, and the
- * roles they declare.
+ * Report which personas an environment will provision, and which it will not.
  *
- * This is deployment, not seeding. `pikku db reset` applies a project's test
- * fixtures and does not run in production; an accountable persona doing a real
- * job in production still needs an account and its grants, and this is where
- * they come from.
+ * It reports rather than writes, because the writing happens somewhere this
+ * command cannot reach. Provisioning a persona means creating a user row and
+ * granting it roles, and both of those live in the deployment's database — one
+ * the CLI has no connection to for any environment that is not the developer's
+ * own. This command used to open a Kysely connection from the local project
+ * config and write through it, which provisioned a local stage correctly and
+ * silently provisioned the wrong database for every other environment.
  *
- * Additive in the same way `syncSystemRoles` is: it creates and grants, and
- * never deletes or revokes. Removing a persona from the code leaves their
- * account and their grants standing until somebody decides otherwise — which is
- * the point, because the alternative is a rolling deploy quietly locking out the
- * teammate that the older replica is still running.
- *
- * It needs both halves of an environment: its API, to sign the persona in, and
- * its database, to write the grants. They must be the same deployment — the
- * command has no way to check that, so pointing it at a stage's API and a local
- * database provisions nobody usefully.
+ * So the deployment provisions itself: an app calls `provisionPersonas` from
+ * `@pikku/better-auth` in its server lifecycle, where the database connection
+ * and better-auth's own adapter are both already open, and a deploy carries its
+ * personas with it. What is left here is the half that needs no database — the
+ * declaration, and the environment rule applied to it — which is what tells you
+ * before a deploy whether the accounts you expect will appear.
  */
 export declare const personaSync: import("#pikku/function").PikkuFunctionConfig<{
     environment: string;
-    apiUrl?: string;
-    dryRun?: boolean;
 }, void, "rpc" | "session", import("#pikku/function").PikkuFunctionSessionless<{
     environment: string;
-    apiUrl?: string;
-    dryRun?: boolean;
 }, void, "rpc" | "session", import("#pikku/function").WiredServices, unknown> | import("#pikku/function").PikkuFunction<{
     environment: string;
-    apiUrl?: string;
-    dryRun?: boolean;
 }, void, "rpc" | "session", import("#pikku/function").WiredServices>, undefined, undefined>;