@pikku/cli 0.12.124 → 0.12.126

package/dist/src/utils/pikku-cli-config.d.ts

@@ -1,4 +1,4 @@
-import type { PikkuCLIConfig } from '../../types/config.js';
+import type { PikkuCLIConfig, PikkuCLIInput } from '../../types/config.js';
 import type { CLILogger } from '../services/cli-logger.service.js';
 import { PikkuCLIConfigError } from './pikku-cli-config-error.js';
 export declare const getPikkuCLIConfig: (logger: CLILogger, configFile: string | undefined, requiredFields: Array<keyof PikkuCLIConfig>, exitProcess?: boolean, outDirOverride?: string) => Promise<PikkuCLIConfig>;
@@ -26,14 +26,14 @@ export { PikkuCLIConfigError };
  */
 export declare const assertSchemaDirectoriesAreDistinct: (config: Pick<PikkuCLIConfig, "schemaDirectory" | "scenarioSchemaDirectory">) => void;
 /**
- * The `locale` a project gets when its config does not name one.
+ * The `metaLocale` a project gets when its config does not name one.
  *
  * English, and it stays English for almost every project — the field changes
  * what the Console reads back to a human, not who the product is for.
  */
-export declare const DEFAULT_LOCALE = "en";
+export declare const DEFAULT_META_LOCALE = "en";
 /**
- * `locale` is handed on to codegen and the Console as a language tag, so a
+ * `metaLocale` is handed on to codegen and the Console as a language tag, so a
  * value they cannot interpret is worse than none: it degrades quietly to "some
  * language" a long way from the line that is wrong. `Intl.getCanonicalLocales`
  * is the BCP-47 grammar Node already ships, and it catches the mistake people
@@ -42,5 +42,14 @@ export declare const DEFAULT_LOCALE = "en";
  * It returns the canonical spelling rather than what was typed, so `EN-gb` and
  * `en-GB` are one value downstream instead of two that never compare equal.
  */
-export declare const normalizeLocale: (locale: unknown) => string;
+export declare const normalizeMetaLocale: (metaLocale: unknown) => string;
+/**
+ * Fill in the mount defaults and make `dir` absolute.
+ *
+ * The trailing slash is stripped because a mount matches with
+ * `pathname === prefix || pathname.startsWith(prefix + '/')`, under which a
+ * stored `/app/` matches nothing at all — a frontend that silently never
+ * appears rather than an error anyone can act on.
+ */
+export declare const resolveFrontendConfig: (frontend: NonNullable<PikkuCLIInput["frontend"]>, configDir: string) => NonNullable<PikkuCLIConfig["frontend"]>;
 export declare const validateCLIConfig: (cliConfig: PikkuCLIConfig, required: Array<keyof PikkuCLIConfig>) => void;

package/dist/src/utils/pikku-cli-config.js

@@ -81,14 +81,14 @@ export const assertSchemaDirectoriesAreDistinct = (config) => {
     }
 };
 /**
- * The `locale` a project gets when its config does not name one.
+ * The `metaLocale` a project gets when its config does not name one.
  *
  * English, and it stays English for almost every project — the field changes
  * what the Console reads back to a human, not who the product is for.
  */
-export const DEFAULT_LOCALE = 'en';
+export const DEFAULT_META_LOCALE = 'en';
 /**
- * `locale` is handed on to codegen and the Console as a language tag, so a
+ * `metaLocale` is handed on to codegen and the Console as a language tag, so a
  * value they cannot interpret is worse than none: it degrades quietly to "some
  * language" a long way from the line that is wrong. `Intl.getCanonicalLocales`
  * is the BCP-47 grammar Node already ships, and it catches the mistake people
@@ -97,13 +97,13 @@ export const DEFAULT_LOCALE = 'en';
  * It returns the canonical spelling rather than what was typed, so `EN-gb` and
  * `en-GB` are one value downstream instead of two that never compare equal.
  */
-export const normalizeLocale = (locale) => {
-    if (locale === undefined || locale === null) {
-        return DEFAULT_LOCALE;
+export const normalizeMetaLocale = (metaLocale) => {
+    if (metaLocale === undefined || metaLocale === null) {
+        return DEFAULT_META_LOCALE;
     }
-    if (typeof locale === 'string') {
+    if (typeof metaLocale === 'string') {
         try {
-            const [canonical] = Intl.getCanonicalLocales(locale.trim());
+            const [canonical] = Intl.getCanonicalLocales(metaLocale.trim());
             if (canonical) {
                 return canonical;
             }
@@ -113,11 +113,54 @@ export const normalizeLocale = (locale) => {
             // explanation whether the tag was malformed or the wrong type entirely.
         }
     }
-    throw new PikkuCLIConfigError(`locale in pikku.config.json is not a language tag: ${JSON.stringify(locale)}. ` +
+    throw new PikkuCLIConfigError(`metaLocale in pikku.config.json is not a language tag: ${JSON.stringify(metaLocale)}. ` +
         `Use a BCP-47 code — "en", "de", "pt-BR" — with a hyphen rather than an underscore. ` +
         `It sets the language of the meta the Console renders back to your team (function and step descriptions, feature and scenario names). ` +
         `Identifiers stay English regardless, and the language the app speaks to its users is defaultLocale in active.json, not this.`);
 };
+/**
+ * Fill in the mount defaults and make `dir` absolute.
+ *
+ * The trailing slash is stripped because a mount matches with
+ * `pathname === prefix || pathname.startsWith(prefix + '/')`, under which a
+ * stored `/app/` matches nothing at all — a frontend that silently never
+ * appears rather than an error anyone can act on.
+ */
+export const resolveFrontendConfig = (frontend, configDir) => {
+    if (!frontend.dir) {
+        throw new PikkuCLIConfigError(`frontend.dir is required — it names the directory your frontend's build already wrote, since pikku serves that output rather than building it`);
+    }
+    const urlPrefix = frontend.urlPrefix ?? '/';
+    if (!urlPrefix.startsWith('/')) {
+        throw new PikkuCLIConfigError(`frontend.urlPrefix must start with "/" — got "${urlPrefix}"`);
+    }
+    return {
+        dir: isAbsolute(frontend.dir)
+            ? frontend.dir
+            : join(configDir, frontend.dir),
+        urlPrefix: urlPrefix === '/' ? '/' : urlPrefix.replace(/\/+$/, ''),
+        spaFallback: frontend.spaFallback ?? true,
+    };
+};
+/**
+ * The field's former name, kept only to say it moved.
+ *
+ * `locale` shipped in 0.12.120 and nothing has ever read it, so dropping it
+ * silently would cost nobody anything at runtime — but it would cost them the
+ * one thing the rename was for. A config that still says `locale` is a config
+ * whose author believed it did something; leaving it to be ignored teaches the
+ * opposite of the distinction the new name exists to draw.
+ */
+const assertMetaLocaleNotSpelledLocale = (result) => {
+    if (!('locale' in result)) {
+        return;
+    }
+    throw new PikkuCLIConfigError(`locale in pikku.config.json has been renamed to metaLocale. ` +
+        `Rename the field — the value is unchanged. ` +
+        `It was renamed because "locale", sitting beside baseLocale, defaultLocale and supportedLocales, reads as the language your app speaks to its users; it is not that. ` +
+        `It is the language of the meta the Console renders back to your team — function and step descriptions, feature and scenario names. ` +
+        `What a visitor opens the app in is defaultLocale in active.json.`);
+};
 const _getPikkuCLIConfig = async (logger, configFile = undefined, requiredFields, exitProcess = false, outDirOverride) => {
     if (!configFile) {
         configFile = await findConfigFile();
@@ -740,6 +783,9 @@ const _getPikkuCLIConfig = async (logger, configFile = undefined, requiredFields
                 }
             }
         }
+        if (result.frontend) {
+            result.frontend = resolveFrontendConfig(result.frontend, result.configDir);
+        }
         if (result.emailTemplatesDir && !isAbsolute(result.emailTemplatesDir)) {
             result.emailTemplatesDir = join(result.configDir, result.emailTemplatesDir);
         }
@@ -752,7 +798,8 @@ const _getPikkuCLIConfig = async (logger, configFile = undefined, requiredFields
         if (!isAbsolute(result.tsconfig)) {
             result.tsconfig = join(result.rootDir, result.tsconfig);
         }
-        result.locale = normalizeLocale(result.locale);
+        assertMetaLocaleNotSpelledLocale(result);
+        result.metaLocale = normalizeMetaLocale(result.metaLocale);
         assertSchemaDirectoriesAreDistinct(result);
         if (result.addon) {
             const packageJsonPath = join(result.rootDir, 'package.json');

package/dist/tsconfig.tsbuildinfo

@@ -1 +1 @@
-{"root":["../bin/pikku.ts","../src/cli.wiring.ts","../src/services.ts","../src/deploy/build-pipeline.ts","../src/deploy/server-entry.ts","../src/deploy/analyzer/analyzer.ts","../src/deploy/analyzer/index.ts","../src/deploy/bundler/bun-bundler.ts","../src/deploy/bundler/bundler.interface.ts","../src/deploy/bundler/bundler.ts","../src/deploy/bundler/dep-extractor.ts","../src/deploy/bundler/index.ts","../src/deploy/bundler/node-bundler.ts","../src/deploy/bundler/service-module-map.ts","../src/deploy/bundler/types.ts","../src/deploy/codegen/index.ts","../src/deploy/codegen/per-unit-codegen.ts","../src/deploy/plan/executor.ts","../src/deploy/plan/formatter.ts","../src/deploy/plan/index.ts","../src/deploy/plan/planner.ts","../src/deploy/plan/provider.ts","../src/deploy/plan/types.ts","../src/fabric/fabric-commands.ts","../src/fabric/functions/add.function.ts","../src/fabric/functions/addon-verify.function.ts","../src/fabric/functions/db-schema.function.ts","../src/fabric/functions/deploy-list.function.ts","../src/fabric/functions/deploy-units.function.ts","../src/fabric/functions/deploy.function.ts","../src/fabric/functions/domains-add.function.ts","../src/fabric/functions/domains-list.function.ts","../src/fabric/functions/domains-remove.function.ts","../src/fabric/functions/errors.function.ts","../src/fabric/functions/init.function.ts","../src/fabric/functions/link.function.ts","../src/fabric/functions/llm-key.function.ts","../src/fabric/functions/login.function.ts","../src/fabric/functions/logs.function.ts","../src/fabric/functions/metrics.function.ts","../src/fabric/functions/publish.function.ts","../src/fabric/functions/rollback.function.ts","../src/fabric/functions/secrets-list.function.ts","../src/fabric/functions/secrets-rotate.function.ts","../src/fabric/functions/secrets-set.function.ts","../src/fabric/functions/smoke.function.ts","../src/fabric/functions/status.function.ts","../src/fabric/functions/trace.function.ts","../src/fabric/functions/validate.function.ts","../src/fabric/functions/variables-get.function.ts","../src/fabric/functions/variables-set.function.ts","../src/fabric/lib/config.ts","../src/fabric/lib/console-url.ts","../src/fabric/lib/deployment.ts","../src/fabric/lib/frontend-typecheck.ts","../src/fabric/lib/git.ts","../src/fabric/lib/http.ts","../src/fabric/lib/not-implemented.ts","../src/fabric/lib/output.ts","../src/fabric/lib/prompt.ts","../src/fabric/lib/sealed-box.ts","../src/fabric/lib/stage.ts","../src/fabric/lib/variable-value.ts","../src/fabric/sdk/http-map.gen.d.ts","../src/fabric/sdk/pikku-fetch.gen.ts","../src/fabric/sdk/pikku-rpc.gen.ts","../src/fabric/sdk/rpc-map.gen.d.ts","../src/functions/commands/all.ts","../src/functions/commands/audit.ts","../src/functions/commands/binary.ts","../src/functions/commands/bootstrap.ts","../src/functions/commands/bun-coverage-loader.ts","../src/functions/commands/db-audit.ts","../src/functions/commands/db-baseline.ts","../src/functions/commands/db-check.ts","../src/functions/commands/db-codegen.ts","../src/functions/commands/db-export.ts","../src/functions/commands/db-generate.ts","../src/functions/commands/db-migrate.ts","../src/functions/commands/db-reset.ts","../src/functions/commands/db-shared.ts","../src/functions/commands/deploy-apply.ts","../src/functions/commands/deploy-info.ts","../src/functions/commands/deploy-plan.ts","../src/functions/commands/dev-agent-runner.ts","../src/functions/commands/dev.ts","../src/functions/commands/doc.ts","../src/functions/commands/emails-init.ts","../src/functions/commands/enable.ts","../src/functions/commands/environment.ts","../src/functions/commands/import-n8n.ts","../src/functions/commands/info.ts","../src/functions/commands/knowledge-index.ts","../src/functions/commands/knowledge-validate.ts","../src/functions/commands/load-user-project.ts","../src/functions/commands/login.ts","../src/functions/commands/meta.ts","../src/functions/commands/new-addon.ts","../src/functions/commands/new-function.ts","../src/functions/commands/new-middleware.ts","../src/functions/commands/new-permission.ts","../src/functions/commands/new-wiring.ts","../src/functions/commands/persona-sync.ts","../src/functions/commands/persona.ts","../src/functions/commands/pikku-command-bootstrap.ts","../src/functions/commands/pikku-command-summary.ts","../src/functions/commands/roles-audit.ts","../src/functions/commands/roles-prune.ts","../src/functions/commands/roles-shared.ts","../src/functions/commands/scenario-browser.ts","../src/functions/commands/scenario-formatter.ts","../src/functions/commands/scenario-ladder.ts","../src/functions/commands/scenario-plan.ts","../src/functions/commands/scenario.ts","../src/functions/commands/scopes-audit.ts","../src/functions/commands/scopes-prune.ts","../src/functions/commands/scopes-shared.ts","../src/functions/commands/semver-render.ts","../src/functions/commands/semver.ts","../src/functions/commands/serve-console.ts","../src/functions/commands/serve.ts","../src/functions/commands/skills.ts","../src/functions/commands/start-coverage.ts","../src/functions/commands/update-render.ts","../src/functions/commands/update.ts","../src/functions/commands/validate.ts","../src/functions/commands/versions-check.ts","../src/functions/commands/versions-init.ts","../src/functions/commands/versions-update.ts","../src/functions/commands/virtual-user-formatter.ts","../src/functions/commands/watch.ts","../src/functions/db/annotation-parser.ts","../src/functions/db/better-auth-schema.ts","../src/functions/db/db-codegen.ts","../src/functions/db/db-introspector.ts","../src/functions/db/db-migrator.ts","../src/functions/db/local-db.ts","../src/functions/db/migration-identifiers.ts","../src/functions/db/migration-provenance.ts","../src/functions/db/schema-sql.ts","../src/functions/db/zod-codegen.ts","../src/functions/db/postgres/pglite-kysely.ts","../src/functions/db/postgres/postgres-introspector.ts","../src/functions/db/postgres/postgres-migrator.ts","../src/functions/db/sqlite/dev-seed.ts","../src/functions/db/sqlite/sqlite-introspector.ts","../src/functions/db/sqlite/sqlite-kysely.ts","../src/functions/db/sqlite/sqlite-migrator.ts","../src/functions/db/sqlite/sqlite-runtime-bun.ts","../src/functions/db/sqlite/sqlite-runtime-node.ts","../src/functions/db/sqlite/sqlite-runtime.ts","../src/functions/knowledge/render.ts","../src/functions/knowledge/schemas.ts","../src/functions/runtimes/fetch/index.ts","../src/functions/runtimes/nextjs/pikku-command-nextjs.ts","../src/functions/runtimes/nextjs/serialize-nextjs-backend-worker-rpc-wrapper.ts","../src/functions/runtimes/nextjs/serialize-nextjs-backend-wrapper.ts","../src/functions/runtimes/nextjs/serialize-nextjs-http-wrapper.ts","../src/functions/runtimes/tanstack-start/pikku-command-tanstack-start.ts","../src/functions/runtimes/tanstack-start/serialize-tanstack-start-shim.ts","../src/functions/runtimes/websocket/pikku-command-websocket-typed.ts","../src/functions/runtimes/websocket/serialize-websocket-wrapper.ts","../src/functions/surface/build-surface-doc.ts","../src/functions/surface/collect-snippets.ts","../src/functions/surface/collect-surface-usage.ts","../src/functions/surface/collect-surface.ts","../src/functions/surface/generate-surface-doc.ts","../src/functions/surface/render-surface-doc.ts","../src/functions/surface/shipped-surface-doc.ts","../src/functions/surface/surface-doc.types.ts","../src/functions/surface/surface-editorial.ts","../src/functions/surface/write-surface-usage.ts","../src/functions/validate/addon-package-checks.ts","../src/functions/validate/auth-plugin-checks.ts","../src/functions/validate/bootstrap-checks.ts","../src/functions/validate/persona-checks.ts","../src/functions/validate/pikku-barrel-checks.ts","../src/functions/validate/scenario-file-checks.ts","../src/functions/validate/shared-checks.ts","../src/functions/validate/type-identity-checks.ts","../src/functions/validate/validate-registry.ts","../src/functions/validate/validate.ts","../src/functions/validate/websocket-deps-checks.ts","../src/functions/validate/workspace-exports-checks.ts","../src/functions/wirings/agent/pikku-command-agent-types.ts","../src/functions/wirings/agent/pikku-command-agent.ts","../src/functions/wirings/agent/pikku-command-public-agent.ts","../src/functions/wirings/agent/serialize-agent-map.ts","../src/functions/wirings/agent/serialize-agent-types.ts","../src/functions/wirings/agent/serialize-model-aliases.ts","../src/functions/wirings/agent/serialize-public-agent.ts","../src/functions/wirings/agent-scorer/pikku-command-agent-scorer.ts","../src/functions/wirings/agent-scorer/serialize-scorer-names.ts","../src/functions/wirings/auth/pikku-command-auth.ts","../src/functions/wirings/auth/serialize-auth-gen.ts","../src/functions/wirings/auth/serialize-auth-guards.ts","../src/functions/wirings/auth/serialize-auth-meta.ts","../src/functions/wirings/auth/serialize-auth-types.ts","../src/functions/wirings/channels/pikku-channels.ts","../src/functions/wirings/channels/pikku-command-channel-types.ts","../src/functions/wirings/channels/pikku-command-channels-map.ts","../src/functions/wirings/channels/pikku-command-channels.ts","../src/functions/wirings/channels/serialize-channel-types.ts","../src/functions/wirings/channels/serialize-typed-channel-map.ts","../src/functions/wirings/cli/pikku-command-cli-entry.ts","../src/functions/wirings/cli/pikku-command-cli-types.ts","../src/functions/wirings/cli/pikku-command-cli.ts","../src/functions/wirings/cli/serialize-channel-cli-client.ts","../src/functions/wirings/cli/serialize-channel-cli.ts","../src/functions/wirings/cli/serialize-cli-entrypoint-guard.ts","../src/functions/wirings/cli/serialize-cli-types.ts","../src/functions/wirings/cli/serialize-local-cli-bootstrap.ts","../src/functions/wirings/console/pikku-command-console-functions.ts","../src/functions/wirings/console/pikku-command-nodes-meta.ts","../src/functions/wirings/console/serialize-console-functions.ts","../src/functions/wirings/credentials/pikku-command-credentials.ts","../src/functions/wirings/credentials/serialize-credentials-types.ts","../src/functions/wirings/emails/pikku-command-emails.ts","../src/functions/wirings/emails/serialize-emails.ts","../src/functions/wirings/errors/pikku-command-error-types.ts","../src/functions/wirings/errors/serialize-error-types.ts","../src/functions/wirings/functions/pikku-command-addon-types.ts","../src/functions/wirings/functions/pikku-command-function-types-split.ts","../src/functions/wirings/functions/pikku-command-functions.ts","../src/functions/wirings/functions/pikku-command-leaf-indexes.ts","../src/functions/wirings/functions/pikku-command-services.ts","../src/functions/wirings/functions/schemas.ts","../src/functions/wirings/functions/serialize-addon-refs.ts","../src/functions/wirings/functions/serialize-addon-types.ts","../src/functions/wirings/functions/serialize-function-imports.ts","../src/functions/wirings/functions/serialize-function-types.ts","../src/functions/wirings/functions/serialize-leaf-index.ts","../src/functions/wirings/gateway/pikku-command-gateway-types.ts","../src/functions/wirings/gateway/pikku-command-gateway.ts","../src/functions/wirings/gateway/serialize-gateway-meta.ts","../src/functions/wirings/gateway/serialize-gateway-types.ts","../src/functions/wirings/graph/pikku-command-graph-wirings.ts","../src/functions/wirings/graph/serialize-graph-wirings.ts","../src/functions/wirings/http/pikku-command-http-map.ts","../src/functions/wirings/http/pikku-command-http-routes.ts","../src/functions/wirings/http/pikku-command-http-types.ts","../src/functions/wirings/http/pikku-command-openapi.ts","../src/functions/wirings/http/pikku-http-routes.ts","../src/functions/wirings/http/serialize-fetch-wrapper.ts","../src/functions/wirings/http/serialize-http-types.ts","../src/functions/wirings/http/serialize-typed-http-map.ts","../src/functions/wirings/mcp/pikku-command-mcp-json.ts","../src/functions/wirings/mcp/pikku-command-mcp-types.ts","../src/functions/wirings/mcp/pikku-command-mcp.ts","../src/functions/wirings/mcp/serialize-mcp-types.ts","../src/functions/wirings/middleware/pikku-command-middleware.ts","../src/functions/wirings/middleware/serialize-middleware-imports.ts","../src/functions/wirings/middleware/serialize-middleware-types.ts","../src/functions/wirings/package/pikku-command-package-types.ts","../src/functions/wirings/package/pikku-command-package.ts","../src/functions/wirings/package/serialize-package-types.ts","../src/functions/wirings/package/serialize-package.ts","../src/functions/wirings/permissions/pikku-command-permissions.ts","../src/functions/wirings/permissions/serialize-permissions-imports.ts","../src/functions/wirings/personas/personas-secrets-file.ts","../src/functions/wirings/personas/pikku-command-personas.ts","../src/functions/wirings/personas/serialize-personas-secrets.ts","../src/functions/wirings/personas/serialize-personas-types.ts","../src/functions/wirings/queue/pikku-command-queue-map.ts","../src/functions/wirings/queue/pikku-command-queue-service.ts","../src/functions/wirings/queue/pikku-command-queue-types.ts","../src/functions/wirings/queue/pikku-command-queue.ts","../src/functions/wirings/queue/pikku-queue-map.ts","../src/functions/wirings/queue/pikku-queue.ts","../src/functions/wirings/queue/serialize-queue-map.ts","../src/functions/wirings/queue/serialize-queue-meta.ts","../src/functions/wirings/queue/serialize-queue-types.ts","../src/functions/wirings/queue/serialize-queue-wrapper.ts","../src/functions/wirings/realtime/pikku-command-events-scaffold.ts","../src/functions/wirings/realtime/pikku-command-realtime.ts","../src/functions/wirings/realtime/serialize-events-scaffold.ts","../src/functions/wirings/realtime/serialize-realtime-client.ts","../src/functions/wirings/roles/pikku-command-roles.ts","../src/functions/wirings/roles/serialize-roles-types.ts","../src/functions/wirings/rpc/pikku-command-public-rpc.ts","../src/functions/wirings/rpc/pikku-command-react-query.ts","../src/functions/wirings/rpc/pikku-command-remote-rpc.ts","../src/functions/wirings/rpc/pikku-command-rpc-client.ts","../src/functions/wirings/rpc/pikku-command-rpc-map.ts","../src/functions/wirings/rpc/pikku-command-rpc.ts","../src/functions/wirings/rpc/serialize-public-rpc.ts","../src/functions/wirings/rpc/serialize-react-query-hooks.ts","../src/functions/wirings/rpc/serialize-remote-rpc.ts","../src/functions/wirings/rpc/serialize-rpc-wrapper.ts","../src/functions/wirings/rpc/serialize-typed-rpc-map.ts","../src/functions/wirings/scenarios/register-scenario-instrumentation.ts","../src/functions/wirings/scenarios/scenario-partition.ts","../src/functions/wirings/scenarios/scenario-schema-partition.ts","../src/functions/wirings/scenarios/serialize-feature-meta.ts","../src/functions/wirings/scenarios/serialize-scenario-meta.ts","../src/functions/wirings/scenarios/serialize-scenario-registration.ts","../src/functions/wirings/scheduler/pikku-command-scheduler-types.ts","../src/functions/wirings/scheduler/pikku-command-scheduler.ts","../src/functions/wirings/scheduler/serialize-scheduler-meta.ts","../src/functions/wirings/scheduler/serialize-scheduler-types.ts","../src/functions/wirings/scopes/pikku-command-scopes.ts","../src/functions/wirings/scopes/serialize-scopes-client.ts","../src/functions/wirings/scopes/serialize-scopes-types.ts","../src/functions/wirings/secrets/pikku-command-secrets.ts","../src/functions/wirings/secrets/serialize-secrets-types.ts","../src/functions/wirings/setup/serialize-setup-types.ts","../src/functions/wirings/triggers/pikku-command-trigger-types.ts","../src/functions/wirings/triggers/pikku-command-trigger.ts","../src/functions/wirings/triggers/serialize-trigger-meta.ts","../src/functions/wirings/triggers/serialize-trigger-types.ts","../src/functions/wirings/user-admin/pikku-command-user-admin-functions.ts","../src/functions/wirings/user-admin/serialize-user-admin-functions.ts","../src/functions/wirings/variables/pikku-command-variables.ts","../src/functions/wirings/variables/serialize-variables-types.ts","../src/functions/wirings/virtual-user/pikku-command-virtual-user-functions.ts","../src/functions/wirings/virtual-user/serialize-virtual-user-functions.ts","../src/functions/wirings/webhook/pikku-command-webhook.ts","../src/functions/wirings/webhook/serialize-webhook.ts","../src/functions/wirings/workflow/pikku-command-workflow-routes.ts","../src/functions/wirings/workflow/pikku-command-workflow.ts","../src/functions/wirings/workflow/serialize-personas.ts","../src/functions/wirings/workflow/serialize-scenario-step-map.ts","../src/functions/wirings/workflow/serialize-scenario-types.ts","../src/functions/wirings/workflow/serialize-workflow-bootstrap-map.ts","../src/functions/wirings/workflow/serialize-workflow-map.ts","../src/functions/wirings/workflow/serialize-workflow-meta.ts","../src/functions/wirings/workflow/serialize-workflow-registration.ts","../src/functions/wirings/workflow/serialize-workflow-routes.ts","../src/functions/wirings/workflow/serialize-workflow-types.ts","../src/functions/workflows/all.workflow.ts","../src/middleware/log-command-info-and-time.ts","../src/server/actor-sign-in.ts","../src/server/bun-server-runner.ts","../src/server/content-signing-jwt.ts","../src/server/dev-server-runner.interface.ts","../src/server/node-server-runner.ts","../src/server/server-ready.ts","../src/server/spawn-dev-server.ts","../src/services/cli-logger-forwarder.service.ts","../src/services/cli-logger.service.ts","../src/utils/assert-single-core-version.ts","../src/utils/check-required-types.ts","../src/utils/cli-session.ts","../src/utils/command-summary.ts","../src/utils/contract-versions.ts","../src/utils/detect-better-auth.ts","../src/utils/device-auth.ts","../src/utils/file-import-path.ts","../src/utils/file-imports-serializer.ts","../src/utils/file-writer.ts","../src/utils/generate-bootstrap-file.ts","../src/utils/get-cli-version.ts","../src/utils/is-deploy-codegen.ts","../src/utils/leaf-import-path.ts","../src/utils/meta-diff.ts","../src/utils/model-alias-override.ts","../src/utils/parse-cli-filters.ts","../src/utils/persona-credentials.ts","../src/utils/pikku-cli-config-error.ts","../src/utils/pikku-cli-config.ts","../src/utils/pikku-files-and-methods.ts","../src/utils/precise-coverage-map.ts","../src/utils/remove-legacy-scaffold-file.ts","../src/utils/resolve-from-project.ts","../src/utils/resolve-personas.ts","../src/utils/resolve-scaffold-feature.ts","../src/utils/schema-diff.ts","../src/utils/serialize-import-map.ts","../src/utils/serialize-meta-ts.ts","../src/utils/serialize-schemas.ts","../src/utils/strip-verbose-meta.ts","../src/utils/surface-diff.ts","../src/utils/surface.ts","../src/utils/tsc-check.ts","../.pikku/pikku-bootstrap-scenarios.gen.ts","../.pikku/pikku-bootstrap.gen.ts","../.pikku/pikku-services.gen.ts","../.pikku/addon/index.ts","../.pikku/addon/pikku-addon-types.gen.ts","../.pikku/agent/index.ts","../.pikku/agent/pikku-agent-map.gen.d.ts","../.pikku/agent/pikku-agent-types.gen.ts","../.pikku/agent/pikku-model-aliases.gen.ts","../.pikku/agent/pikku-scorer-names.gen.d.ts","../.pikku/auth/auth.types.ts","../.pikku/auth/index.ts","../.pikku/auth/pikku-auth-types.gen.ts","../.pikku/channel/index.ts","../.pikku/channel/pikku-channel-types.gen.ts","../.pikku/cli/index.ts","../.pikku/cli/pikku-cli-channel.ts","../.pikku/cli/pikku-cli-client.gen.ts","../.pikku/cli/pikku-cli-contracts-meta.gen.ts","../.pikku/cli/pikku-cli-types.gen.ts","../.pikku/cli/pikku-cli-wirings-meta.gen.ts","../.pikku/cli/pikku-cli-wirings.gen.ts","../.pikku/cli/pikku-cli.gen.ts","../.pikku/error/index.ts","../.pikku/error/pikku-error-types.gen.ts","../.pikku/function/index.ts","../.pikku/function/pikku-function-types.gen.ts","../.pikku/function/pikku-functions-meta.gen.ts","../.pikku/function/pikku-functions.gen.ts","../.pikku/gateway/index.ts","../.pikku/gateway/pikku-gateway-types.gen.ts","../.pikku/http/index.ts","../.pikku/http/pikku-http-types.gen.ts","../.pikku/mcp/index.ts","../.pikku/mcp/pikku-mcp-types.gen.ts","../.pikku/middleware/index.ts","../.pikku/middleware/pikku-middleware-types.gen.ts","../.pikku/node/pikku-node-types.gen.ts","../.pikku/queue/index.ts","../.pikku/queue/pikku-queue-types.gen.ts","../.pikku/queue/pikku-queue-workers-wirings-map.gen.d.ts","../.pikku/queue/pikku-queue-workers-wirings-meta.gen.ts","../.pikku/queue/pikku-queue-workers-wirings.gen.ts","../.pikku/rpc/pikku-rpc-wirings-map.gen.d.ts","../.pikku/rpc/pikku-rpc-wirings-map.internal.gen.d.ts","../.pikku/rpc/pikku-rpc-wirings-map.remote.gen.d.ts","../.pikku/rpc/pikku-rpc-wirings-meta.internal.gen.ts","../.pikku/scenarios/index.ts","../.pikku/scenarios/pikku-personas.gen.ts","../.pikku/scenarios/pikku-scenario-functions-meta.gen.ts","../.pikku/scenarios/pikku-scenario-functions.gen.ts","../.pikku/scenarios/pikku-scenario-types.gen.ts","../.pikku/scenarios/pikku-scenario-wirings-meta.gen.ts","../.pikku/scenarios/pikku-scenario-wirings.gen.ts","../.pikku/scenarios/schemas/register.gen.ts","../.pikku/scheduler/index.ts","../.pikku/scheduler/pikku-scheduler-types.gen.ts","../.pikku/schemas/register.gen.ts","../.pikku/scopes/index.ts","../.pikku/scopes/pikku-personas.gen.ts","../.pikku/scopes/pikku-roles.gen.ts","../.pikku/scopes/pikku-scope-types.gen.ts","../.pikku/scopes/pikku-scopes.gen.ts","../.pikku/secrets/index.ts","../.pikku/secrets/pikku-secret-types.gen.ts","../.pikku/secrets/pikku-secrets.gen.ts","../.pikku/services/pikku-meta-service.gen.ts","../.pikku/setup/index.ts","../.pikku/setup/pikku-setup-types.gen.ts","../.pikku/trigger/index.ts","../.pikku/trigger/pikku-trigger-types.gen.ts","../.pikku/variables/index.ts","../.pikku/variables/pikku-variable-types.gen.ts","../.pikku/variables/pikku-variables.gen.ts","../.pikku/workflow/index.ts","../.pikku/workflow/pikku-scenario-step-map.gen.d.ts","../.pikku/workflow/pikku-workflow-map.gen.d.ts","../.pikku/workflow/pikku-workflow-types.gen.ts","../.pikku/workflow/pikku-workflow-wirings-meta.gen.ts","../.pikku/workflow/pikku-workflow-wirings.gen.ts","../types/application-types.d.ts","../types/bun-sqlite.d.ts","../types/config.d.ts"],"version":"6.0.3"}
+{"root":["../bin/pikku.ts","../src/cli.wiring.ts","../src/services.ts","../src/deploy/build-pipeline.ts","../src/deploy/frontend-assets.ts","../src/deploy/server-entry.ts","../src/deploy/analyzer/analyzer.ts","../src/deploy/analyzer/index.ts","../src/deploy/bundler/bun-bundler.ts","../src/deploy/bundler/bundler.interface.ts","../src/deploy/bundler/bundler.ts","../src/deploy/bundler/dep-extractor.ts","../src/deploy/bundler/index.ts","../src/deploy/bundler/node-bundler.ts","../src/deploy/bundler/service-module-map.ts","../src/deploy/bundler/types.ts","../src/deploy/codegen/index.ts","../src/deploy/codegen/per-unit-codegen.ts","../src/deploy/plan/executor.ts","../src/deploy/plan/formatter.ts","../src/deploy/plan/index.ts","../src/deploy/plan/planner.ts","../src/deploy/plan/provider.ts","../src/deploy/plan/types.ts","../src/fabric/fabric-commands.ts","../src/fabric/functions/add.function.ts","../src/fabric/functions/addon-verify.function.ts","../src/fabric/functions/db-schema.function.ts","../src/fabric/functions/deploy-list.function.ts","../src/fabric/functions/deploy-units.function.ts","../src/fabric/functions/deploy.function.ts","../src/fabric/functions/domains-add.function.ts","../src/fabric/functions/domains-list.function.ts","../src/fabric/functions/domains-remove.function.ts","../src/fabric/functions/errors.function.ts","../src/fabric/functions/init.function.ts","../src/fabric/functions/link.function.ts","../src/fabric/functions/llm-key.function.ts","../src/fabric/functions/login.function.ts","../src/fabric/functions/logs.function.ts","../src/fabric/functions/metrics.function.ts","../src/fabric/functions/projects-list.function.ts","../src/fabric/functions/publish.function.ts","../src/fabric/functions/rollback.function.ts","../src/fabric/functions/secrets-list.function.ts","../src/fabric/functions/secrets-rotate.function.ts","../src/fabric/functions/secrets-set.function.ts","../src/fabric/functions/smoke.function.ts","../src/fabric/functions/status.function.ts","../src/fabric/functions/trace.function.ts","../src/fabric/functions/validate.function.ts","../src/fabric/functions/variables-get.function.ts","../src/fabric/functions/variables-set.function.ts","../src/fabric/lib/blank-comments.ts","../src/fabric/lib/blank-scenario-meta.ts","../src/fabric/lib/config.ts","../src/fabric/lib/console-url.ts","../src/fabric/lib/deployment.ts","../src/fabric/lib/frontend-typecheck.ts","../src/fabric/lib/git.ts","../src/fabric/lib/http.ts","../src/fabric/lib/not-implemented.ts","../src/fabric/lib/output.ts","../src/fabric/lib/prompt.ts","../src/fabric/lib/sealed-box.ts","../src/fabric/lib/stage.ts","../src/fabric/lib/variable-value.ts","../src/fabric/sdk/http-map.gen.d.ts","../src/fabric/sdk/pikku-fetch.gen.ts","../src/fabric/sdk/pikku-rpc.gen.ts","../src/fabric/sdk/rpc-map.gen.d.ts","../src/functions/commands/all.ts","../src/functions/commands/audit.ts","../src/functions/commands/binary.ts","../src/functions/commands/bootstrap.ts","../src/functions/commands/bun-coverage-loader.ts","../src/functions/commands/db-audit.ts","../src/functions/commands/db-baseline.ts","../src/functions/commands/db-check.ts","../src/functions/commands/db-codegen.ts","../src/functions/commands/db-export.ts","../src/functions/commands/db-generate.ts","../src/functions/commands/db-migrate.ts","../src/functions/commands/db-reset.ts","../src/functions/commands/db-shared.ts","../src/functions/commands/deploy-apply.ts","../src/functions/commands/deploy-info.ts","../src/functions/commands/deploy-plan.ts","../src/functions/commands/dev-agent-runner.ts","../src/functions/commands/dev.ts","../src/functions/commands/doc.ts","../src/functions/commands/emails-init.ts","../src/functions/commands/enable.ts","../src/functions/commands/environment.ts","../src/functions/commands/import-n8n.ts","../src/functions/commands/info.ts","../src/functions/commands/knowledge-index.ts","../src/functions/commands/knowledge-validate.ts","../src/functions/commands/load-user-project.ts","../src/functions/commands/login.ts","../src/functions/commands/meta.ts","../src/functions/commands/new-addon.ts","../src/functions/commands/new-function.ts","../src/functions/commands/new-middleware.ts","../src/functions/commands/new-permission.ts","../src/functions/commands/new-wiring.ts","../src/functions/commands/persona-sync.ts","../src/functions/commands/persona.ts","../src/functions/commands/pikku-command-bootstrap.ts","../src/functions/commands/pikku-command-summary.ts","../src/functions/commands/roles-audit.ts","../src/functions/commands/roles-prune.ts","../src/functions/commands/roles-shared.ts","../src/functions/commands/scenario-browser.ts","../src/functions/commands/scenario-formatter.ts","../src/functions/commands/scenario-ladder.ts","../src/functions/commands/scenario-plan.ts","../src/functions/commands/scenario.ts","../src/functions/commands/scopes-audit.ts","../src/functions/commands/scopes-prune.ts","../src/functions/commands/scopes-shared.ts","../src/functions/commands/semver-render.ts","../src/functions/commands/semver.ts","../src/functions/commands/serve-console.ts","../src/functions/commands/serve-frontend.ts","../src/functions/commands/serve.ts","../src/functions/commands/skills.ts","../src/functions/commands/start-coverage.ts","../src/functions/commands/update-render.ts","../src/functions/commands/update.ts","../src/functions/commands/validate.ts","../src/functions/commands/versions-check.ts","../src/functions/commands/versions-init.ts","../src/functions/commands/versions-update.ts","../src/functions/commands/virtual-user-formatter.ts","../src/functions/commands/watch.ts","../src/functions/db/annotation-parser.ts","../src/functions/db/better-auth-schema.ts","../src/functions/db/check-enums.ts","../src/functions/db/db-codegen.ts","../src/functions/db/db-introspector.ts","../src/functions/db/db-migrator.ts","../src/functions/db/local-db.ts","../src/functions/db/migration-identifiers.ts","../src/functions/db/migration-provenance.ts","../src/functions/db/schema-sql.ts","../src/functions/db/zod-codegen.ts","../src/functions/db/postgres/pglite-kysely.ts","../src/functions/db/postgres/postgres-introspector.ts","../src/functions/db/postgres/postgres-migrator.ts","../src/functions/db/sqlite/dev-seed.ts","../src/functions/db/sqlite/sqlite-introspector.ts","../src/functions/db/sqlite/sqlite-kysely.ts","../src/functions/db/sqlite/sqlite-migrator.ts","../src/functions/db/sqlite/sqlite-runtime-bun.ts","../src/functions/db/sqlite/sqlite-runtime-node.ts","../src/functions/db/sqlite/sqlite-runtime.ts","../src/functions/knowledge/render.ts","../src/functions/knowledge/schemas.ts","../src/functions/runtimes/fetch/index.ts","../src/functions/runtimes/nextjs/pikku-command-nextjs.ts","../src/functions/runtimes/nextjs/serialize-nextjs-backend-worker-rpc-wrapper.ts","../src/functions/runtimes/nextjs/serialize-nextjs-backend-wrapper.ts","../src/functions/runtimes/nextjs/serialize-nextjs-http-wrapper.ts","../src/functions/runtimes/tanstack-start/pikku-command-tanstack-start.ts","../src/functions/runtimes/tanstack-start/serialize-tanstack-start-shim.ts","../src/functions/runtimes/websocket/pikku-command-websocket-typed.ts","../src/functions/runtimes/websocket/serialize-websocket-wrapper.ts","../src/functions/surface/build-surface-doc.ts","../src/functions/surface/collect-snippets.ts","../src/functions/surface/collect-surface-usage.ts","../src/functions/surface/collect-surface.ts","../src/functions/surface/generate-surface-doc.ts","../src/functions/surface/render-surface-doc.ts","../src/functions/surface/shipped-surface-doc.ts","../src/functions/surface/surface-doc.types.ts","../src/functions/surface/surface-editorial.ts","../src/functions/surface/write-surface-usage.ts","../src/functions/validate/addon-package-checks.ts","../src/functions/validate/auth-plugin-checks.ts","../src/functions/validate/bootstrap-checks.ts","../src/functions/validate/persona-checks.ts","../src/functions/validate/pikku-barrel-checks.ts","../src/functions/validate/scenario-file-checks.ts","../src/functions/validate/shared-checks.ts","../src/functions/validate/type-identity-checks.ts","../src/functions/validate/validate-registry.ts","../src/functions/validate/validate.ts","../src/functions/validate/websocket-deps-checks.ts","../src/functions/validate/workspace-exports-checks.ts","../src/functions/wirings/agent/pikku-command-agent-types.ts","../src/functions/wirings/agent/pikku-command-agent.ts","../src/functions/wirings/agent/pikku-command-public-agent.ts","../src/functions/wirings/agent/serialize-agent-map.ts","../src/functions/wirings/agent/serialize-agent-types.ts","../src/functions/wirings/agent/serialize-model-aliases.ts","../src/functions/wirings/agent/serialize-public-agent.ts","../src/functions/wirings/agent-scorer/pikku-command-agent-scorer.ts","../src/functions/wirings/agent-scorer/serialize-scorer-names.ts","../src/functions/wirings/auth/pikku-command-auth.ts","../src/functions/wirings/auth/serialize-auth-gen.ts","../src/functions/wirings/auth/serialize-auth-guards.ts","../src/functions/wirings/auth/serialize-auth-meta.ts","../src/functions/wirings/auth/serialize-auth-types.ts","../src/functions/wirings/channels/pikku-channels.ts","../src/functions/wirings/channels/pikku-command-channel-types.ts","../src/functions/wirings/channels/pikku-command-channels-map.ts","../src/functions/wirings/channels/pikku-command-channels.ts","../src/functions/wirings/channels/serialize-channel-types.ts","../src/functions/wirings/channels/serialize-typed-channel-map.ts","../src/functions/wirings/cli/pikku-command-cli-entry.ts","../src/functions/wirings/cli/pikku-command-cli-types.ts","../src/functions/wirings/cli/pikku-command-cli.ts","../src/functions/wirings/cli/serialize-channel-cli-client.ts","../src/functions/wirings/cli/serialize-channel-cli.ts","../src/functions/wirings/cli/serialize-cli-entrypoint-guard.ts","../src/functions/wirings/cli/serialize-cli-types.ts","../src/functions/wirings/cli/serialize-local-cli-bootstrap.ts","../src/functions/wirings/console/pikku-command-console-functions.ts","../src/functions/wirings/console/pikku-command-nodes-meta.ts","../src/functions/wirings/console/serialize-console-functions.ts","../src/functions/wirings/credentials/pikku-command-credentials.ts","../src/functions/wirings/credentials/serialize-credentials-types.ts","../src/functions/wirings/emails/pikku-command-emails.ts","../src/functions/wirings/emails/serialize-emails.ts","../src/functions/wirings/errors/pikku-command-error-types.ts","../src/functions/wirings/errors/serialize-error-types.ts","../src/functions/wirings/functions/pikku-command-addon-types.ts","../src/functions/wirings/functions/pikku-command-function-types-split.ts","../src/functions/wirings/functions/pikku-command-functions.ts","../src/functions/wirings/functions/pikku-command-leaf-indexes.ts","../src/functions/wirings/functions/pikku-command-services.ts","../src/functions/wirings/functions/schemas.ts","../src/functions/wirings/functions/serialize-addon-refs.ts","../src/functions/wirings/functions/serialize-addon-types.ts","../src/functions/wirings/functions/serialize-function-imports.ts","../src/functions/wirings/functions/serialize-function-types.ts","../src/functions/wirings/functions/serialize-leaf-index.ts","../src/functions/wirings/gateway/pikku-command-gateway-types.ts","../src/functions/wirings/gateway/pikku-command-gateway.ts","../src/functions/wirings/gateway/serialize-gateway-meta.ts","../src/functions/wirings/gateway/serialize-gateway-types.ts","../src/functions/wirings/graph/pikku-command-graph-wirings.ts","../src/functions/wirings/graph/serialize-graph-wirings.ts","../src/functions/wirings/http/pikku-command-http-map.ts","../src/functions/wirings/http/pikku-command-http-routes.ts","../src/functions/wirings/http/pikku-command-http-types.ts","../src/functions/wirings/http/pikku-command-openapi.ts","../src/functions/wirings/http/pikku-http-routes.ts","../src/functions/wirings/http/serialize-fetch-wrapper.ts","../src/functions/wirings/http/serialize-http-types.ts","../src/functions/wirings/http/serialize-typed-http-map.ts","../src/functions/wirings/mcp/pikku-command-mcp-json.ts","../src/functions/wirings/mcp/pikku-command-mcp-types.ts","../src/functions/wirings/mcp/pikku-command-mcp.ts","../src/functions/wirings/mcp/serialize-mcp-types.ts","../src/functions/wirings/middleware/pikku-command-middleware.ts","../src/functions/wirings/middleware/serialize-middleware-imports.ts","../src/functions/wirings/middleware/serialize-middleware-types.ts","../src/functions/wirings/package/pikku-command-package-types.ts","../src/functions/wirings/package/pikku-command-package.ts","../src/functions/wirings/package/serialize-package-types.ts","../src/functions/wirings/package/serialize-package.ts","../src/functions/wirings/permissions/pikku-command-permissions.ts","../src/functions/wirings/permissions/serialize-permissions-imports.ts","../src/functions/wirings/personas/personas-secrets-file.ts","../src/functions/wirings/personas/pikku-command-personas.ts","../src/functions/wirings/personas/serialize-personas-secrets.ts","../src/functions/wirings/personas/serialize-personas-types.ts","../src/functions/wirings/queue/pikku-command-queue-map.ts","../src/functions/wirings/queue/pikku-command-queue-service.ts","../src/functions/wirings/queue/pikku-command-queue-types.ts","../src/functions/wirings/queue/pikku-command-queue.ts","../src/functions/wirings/queue/pikku-queue-map.ts","../src/functions/wirings/queue/pikku-queue.ts","../src/functions/wirings/queue/serialize-queue-map.ts","../src/functions/wirings/queue/serialize-queue-meta.ts","../src/functions/wirings/queue/serialize-queue-types.ts","../src/functions/wirings/queue/serialize-queue-wrapper.ts","../src/functions/wirings/realtime/pikku-command-events-scaffold.ts","../src/functions/wirings/realtime/pikku-command-realtime.ts","../src/functions/wirings/realtime/serialize-events-scaffold.ts","../src/functions/wirings/realtime/serialize-realtime-client.ts","../src/functions/wirings/roles/pikku-command-roles.ts","../src/functions/wirings/roles/serialize-roles-types.ts","../src/functions/wirings/rpc/pikku-command-public-rpc.ts","../src/functions/wirings/rpc/pikku-command-react-query.ts","../src/functions/wirings/rpc/pikku-command-remote-rpc.ts","../src/functions/wirings/rpc/pikku-command-rpc-client.ts","../src/functions/wirings/rpc/pikku-command-rpc-map.ts","../src/functions/wirings/rpc/pikku-command-rpc.ts","../src/functions/wirings/rpc/serialize-public-rpc.ts","../src/functions/wirings/rpc/serialize-react-query-hooks.ts","../src/functions/wirings/rpc/serialize-remote-rpc.ts","../src/functions/wirings/rpc/serialize-rpc-wrapper.ts","../src/functions/wirings/rpc/serialize-typed-rpc-map.ts","../src/functions/wirings/scenarios/register-scenario-instrumentation.ts","../src/functions/wirings/scenarios/scenario-partition.ts","../src/functions/wirings/scenarios/scenario-schema-partition.ts","../src/functions/wirings/scenarios/serialize-feature-meta.ts","../src/functions/wirings/scenarios/serialize-scenario-meta.ts","../src/functions/wirings/scenarios/serialize-scenario-registration.ts","../src/functions/wirings/scheduler/pikku-command-scheduler-types.ts","../src/functions/wirings/scheduler/pikku-command-scheduler.ts","../src/functions/wirings/scheduler/serialize-scheduler-meta.ts","../src/functions/wirings/scheduler/serialize-scheduler-types.ts","../src/functions/wirings/scopes/pikku-command-scopes.ts","../src/functions/wirings/scopes/serialize-scopes-client.ts","../src/functions/wirings/scopes/serialize-scopes-types.ts","../src/functions/wirings/secrets/pikku-command-secrets.ts","../src/functions/wirings/secrets/serialize-secrets-types.ts","../src/functions/wirings/setup/serialize-setup-types.ts","../src/functions/wirings/triggers/pikku-command-trigger-types.ts","../src/functions/wirings/triggers/pikku-command-trigger.ts","../src/functions/wirings/triggers/serialize-trigger-meta.ts","../src/functions/wirings/triggers/serialize-trigger-types.ts","../src/functions/wirings/user-admin/pikku-command-user-admin-functions.ts","../src/functions/wirings/user-admin/serialize-user-admin-functions.ts","../src/functions/wirings/variables/pikku-command-variables.ts","../src/functions/wirings/variables/serialize-variables-types.ts","../src/functions/wirings/virtual-user/pikku-command-virtual-user-functions.ts","../src/functions/wirings/virtual-user/serialize-virtual-user-functions.ts","../src/functions/wirings/webhook/pikku-command-webhook.ts","../src/functions/wirings/webhook/serialize-webhook.ts","../src/functions/wirings/workflow/pikku-command-workflow-routes.ts","../src/functions/wirings/workflow/pikku-command-workflow.ts","../src/functions/wirings/workflow/serialize-personas.ts","../src/functions/wirings/workflow/serialize-scenario-step-map.ts","../src/functions/wirings/workflow/serialize-scenario-types.ts","../src/functions/wirings/workflow/serialize-workflow-bootstrap-map.ts","../src/functions/wirings/workflow/serialize-workflow-map.ts","../src/functions/wirings/workflow/serialize-workflow-meta.ts","../src/functions/wirings/workflow/serialize-workflow-registration.ts","../src/functions/wirings/workflow/serialize-workflow-routes.ts","../src/functions/wirings/workflow/serialize-workflow-types.ts","../src/functions/workflows/all.workflow.ts","../src/middleware/log-command-info-and-time.ts","../src/server/actor-sign-in.ts","../src/server/bun-server-runner.ts","../src/server/content-signing-jwt.ts","../src/server/dev-server-runner.interface.ts","../src/server/node-server-runner.ts","../src/server/server-ready.ts","../src/server/spawn-dev-server.ts","../src/services/cli-logger-forwarder.service.ts","../src/services/cli-logger.service.ts","../src/utils/assert-single-core-version.ts","../src/utils/check-required-types.ts","../src/utils/cli-session.ts","../src/utils/command-summary.ts","../src/utils/contract-versions.ts","../src/utils/detect-better-auth.ts","../src/utils/device-auth.ts","../src/utils/file-import-path.ts","../src/utils/file-imports-serializer.ts","../src/utils/file-writer.ts","../src/utils/frontend.ts","../src/utils/generate-bootstrap-file.ts","../src/utils/get-cli-version.ts","../src/utils/is-deploy-codegen.ts","../src/utils/leaf-import-path.ts","../src/utils/meta-diff.ts","../src/utils/model-alias-override.ts","../src/utils/parse-cli-filters.ts","../src/utils/persona-credentials.ts","../src/utils/pikku-cli-config-error.ts","../src/utils/pikku-cli-config.ts","../src/utils/pikku-files-and-methods.ts","../src/utils/precise-coverage-map.ts","../src/utils/remove-legacy-scaffold-file.ts","../src/utils/resolve-from-project.ts","../src/utils/resolve-personas.ts","../src/utils/resolve-scaffold-feature.ts","../src/utils/schema-diff.ts","../src/utils/serialize-import-map.ts","../src/utils/serialize-meta-ts.ts","../src/utils/serialize-schemas.ts","../src/utils/strip-verbose-meta.ts","../src/utils/surface-diff.ts","../src/utils/surface.ts","../src/utils/tsc-check.ts","../.pikku/pikku-bootstrap-scenarios.gen.ts","../.pikku/pikku-bootstrap.gen.ts","../.pikku/pikku-services.gen.ts","../.pikku/addon/index.ts","../.pikku/addon/pikku-addon-types.gen.ts","../.pikku/agent/index.ts","../.pikku/agent/pikku-agent-map.gen.d.ts","../.pikku/agent/pikku-agent-types.gen.ts","../.pikku/agent/pikku-model-aliases.gen.ts","../.pikku/agent/pikku-scorer-names.gen.d.ts","../.pikku/auth/auth.types.ts","../.pikku/auth/index.ts","../.pikku/auth/pikku-auth-types.gen.ts","../.pikku/channel/index.ts","../.pikku/channel/pikku-channel-types.gen.ts","../.pikku/cli/index.ts","../.pikku/cli/pikku-cli-channel.ts","../.pikku/cli/pikku-cli-client.gen.ts","../.pikku/cli/pikku-cli-contracts-meta.gen.ts","../.pikku/cli/pikku-cli-types.gen.ts","../.pikku/cli/pikku-cli-wirings-meta.gen.ts","../.pikku/cli/pikku-cli-wirings.gen.ts","../.pikku/cli/pikku-cli.gen.ts","../.pikku/error/index.ts","../.pikku/error/pikku-error-types.gen.ts","../.pikku/function/index.ts","../.pikku/function/pikku-function-types.gen.ts","../.pikku/function/pikku-functions-meta.gen.ts","../.pikku/function/pikku-functions.gen.ts","../.pikku/gateway/index.ts","../.pikku/gateway/pikku-gateway-types.gen.ts","../.pikku/http/index.ts","../.pikku/http/pikku-http-types.gen.ts","../.pikku/mcp/index.ts","../.pikku/mcp/pikku-mcp-types.gen.ts","../.pikku/middleware/index.ts","../.pikku/middleware/pikku-middleware-types.gen.ts","../.pikku/node/pikku-node-types.gen.ts","../.pikku/queue/index.ts","../.pikku/queue/pikku-queue-types.gen.ts","../.pikku/queue/pikku-queue-workers-wirings-map.gen.d.ts","../.pikku/queue/pikku-queue-workers-wirings-meta.gen.ts","../.pikku/queue/pikku-queue-workers-wirings.gen.ts","../.pikku/rpc/pikku-rpc-wirings-map.gen.d.ts","../.pikku/rpc/pikku-rpc-wirings-map.internal.gen.d.ts","../.pikku/rpc/pikku-rpc-wirings-map.remote.gen.d.ts","../.pikku/rpc/pikku-rpc-wirings-meta.internal.gen.ts","../.pikku/scenarios/index.ts","../.pikku/scenarios/pikku-personas.gen.ts","../.pikku/scenarios/pikku-scenario-functions-meta.gen.ts","../.pikku/scenarios/pikku-scenario-functions.gen.ts","../.pikku/scenarios/pikku-scenario-types.gen.ts","../.pikku/scenarios/pikku-scenario-wirings-meta.gen.ts","../.pikku/scenarios/pikku-scenario-wirings.gen.ts","../.pikku/scenarios/schemas/register.gen.ts","../.pikku/scheduler/index.ts","../.pikku/scheduler/pikku-scheduler-types.gen.ts","../.pikku/schemas/register.gen.ts","../.pikku/scopes/index.ts","../.pikku/scopes/pikku-personas.gen.ts","../.pikku/scopes/pikku-roles.gen.ts","../.pikku/scopes/pikku-scope-types.gen.ts","../.pikku/scopes/pikku-scopes.gen.ts","../.pikku/secrets/index.ts","../.pikku/secrets/pikku-secret-types.gen.ts","../.pikku/secrets/pikku-secrets.gen.ts","../.pikku/services/pikku-meta-service.gen.ts","../.pikku/setup/index.ts","../.pikku/setup/pikku-setup-types.gen.ts","../.pikku/trigger/index.ts","../.pikku/trigger/pikku-trigger-types.gen.ts","../.pikku/variables/index.ts","../.pikku/variables/pikku-variable-types.gen.ts","../.pikku/variables/pikku-variables.gen.ts","../.pikku/workflow/index.ts","../.pikku/workflow/pikku-scenario-step-map.gen.d.ts","../.pikku/workflow/pikku-workflow-map.gen.d.ts","../.pikku/workflow/pikku-workflow-types.gen.ts","../.pikku/workflow/pikku-workflow-wirings-meta.gen.ts","../.pikku/workflow/pikku-workflow-wirings.gen.ts","../types/application-types.d.ts","../types/bun-sqlite.d.ts","../types/config.d.ts"],"version":"6.0.3"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pikku/cli",
-  "version": "0.12.124",
+  "version": "0.12.126",
   "description": "Pikku CLI — code generation, dev server, migrations and deployment",
   "author": "yasser.fadl@gmail.com",
   "license": "BUSL-1.1",
@@ -31,20 +31,20 @@
     "@jridgewell/trace-mapping": "^0.3.31",
     "@openapi-contrib/json-schema-to-openapi-schema": "^4.3.4",
     "@pikku/ai-vercel": "^0.12.13",
-    "@pikku/better-auth": "^0.12.31",
-    "@pikku/bun-server": "^0.12.9",
+    "@pikku/better-auth": "^0.12.33",
+    "@pikku/bun-server": "^0.12.10",
     "@pikku/code-edit": "^0.12.1",
-    "@pikku/deploy": "^0.12.1",
+    "@pikku/deploy": "^0.12.2",
     "@pikku/deploy-cloudflare": "^0.12.13",
     "@pikku/fetch": "^0.12.10",
-    "@pikku/inspector": "^0.12.67",
+    "@pikku/inspector": "^0.12.68",
     "@pikku/knowledge": "^0.12.7",
-    "@pikku/kysely": "^0.13.22",
+    "@pikku/kysely": "^0.13.23",
     "@pikku/n8n-import": "^0.0.7",
-    "@pikku/node-http-server": "^0.12.11",
+    "@pikku/node-http-server": "^0.12.12",
     "@pikku/openapi-parser": "^0.12.20",
     "@pikku/schedule": "^0.12.7",
-    "@pikku/skills": "^0.12.19",
+    "@pikku/skills": "^0.12.20",
     "@types/cookie": "^1.0.0",
     "@types/json-schema": "^7.0.15",
     "ai": "^7.0.66",
@@ -67,15 +67,15 @@
     "zod-to-ts": "^2.1.0"
   },
   "peerDependencies": {
-    "@pikku/core": "^0.12.97",
-    "@pikku/playwright": "^0.12.79",
+    "@pikku/core": "^0.12.99",
+    "@pikku/playwright": "^0.12.80",
     "@pikku/ws": "^0.12.9",
     "better-auth": "^1.6.0",
     "ws": "^8.21.3"
   },
   "devDependencies": {
-    "@pikku/core": "^0.12.97",
-    "@pikku/playwright": "^0.12.79",
+    "@pikku/core": "^0.12.99",
+    "@pikku/playwright": "^0.12.80",
     "@pikku/ws": "^0.12.9",
     "@playwright/test": "^1.50.0",
     "@types/istanbul-lib-instrument": "^1.7.8",

package/snippets.json

@@ -40,7 +40,7 @@
   "cronWirings": "wireScheduler({\n  name: 'dailySalesReport',\n  schedule: '0 6 * * *', // 06:00 UTC every day\n  func: dailySalesReport,\n  middleware: [timingMiddleware],\n})\n\nwireScheduler({\n  name: 'cleanupAbandonedBaskets',\n  schedule: '0 3 * * *', // 03:00 UTC every day\n  func: cleanupAbandonedBaskets,\n})",
   "dailySalesReport": "export const dailySalesReport = pikkuVoidFunc({\n  // Exposed so an operator can run the sweep on demand and a scenario can\n  // prove it still works. A job reachable only by its schedule is a job\n  // nobody can test and nobody can force when it matters.\n  expose: true,\n  description: 'Cron job: compute and log a daily sales summary.',\n  func: async ({ kysely, logger }) => {\n    const yesterday = new Date()\n    yesterday.setDate(yesterday.getDate() - 1)\n    yesterday.setHours(0, 0, 0, 0)\n    const dayStart = yesterday.toISOString()\n\n    const today = new Date(yesterday)\n    today.setDate(today.getDate() + 1)\n    const dayEnd = today.toISOString()\n\n    const [summary, topItems] = await Promise.all([\n      kysely\n        .selectFrom('order')\n        .select([\n          (eb) => eb.fn.countAll<number>().as('orderCount'),\n          (eb) => eb.fn.sum<number>('totalCents').as('revenueCents'),\n        ])\n        .where('status', '=', 'paid')\n        .where('createdAt', '>=', dayStart)\n        .where('createdAt', '<', dayEnd)\n        .executeTakeFirst(),\n      kysely\n        .selectFrom('orderItem')\n        .innerJoin('order', 'order.orderId', 'orderItem.orderId')\n        .innerJoin('item', 'item.itemId', 'orderItem.itemId')\n        .select([\n          'item.name',\n          (eb) => eb.fn.sum<number>('orderItem.quantity').as('unitsSold'),\n        ])\n        .where('order.status', '=', 'paid')\n        .where('order.createdAt', '>=', dayStart)\n        .where('order.createdAt', '<', dayEnd)\n        .groupBy('orderItem.itemId')\n        .orderBy('unitsSold', 'desc')\n        .limit(5)\n        .execute(),\n    ])\n\n    logger.info({\n      event: 'daily_sales_report',\n      date: yesterday.toISOString().split('T')[0],\n      orders: Number(summary?.orderCount ?? 0),\n      revenueCents: Number(summary?.revenueCents ?? 0),\n      topItems,\n    })\n  },\n})",
   "definePersonas": "definePersonas({\n  visitor: {\n    // A customer, like the people this app is for. The catalogue happens to be\n    // readable without a session, so this is not what makes the smoke gate\n    // pass — it is what stops the gate depending on that staying true.\n    name: 'Visitor',\n    jobTitle: 'Synthetic health-check user',\n    roles: ['customer'],\n    personality:\n      'Signs in and checks their own session — proves auth end to end',\n    account: {},\n  },\n  shopper: {\n    name: 'Susan',\n    jobTitle: 'Buys for a small caf\\u00e9',\n    description: 'Orders stock every week and watches the margins',\n    roles: ['customer'],\n    personality:\n      'Hunts cheap deals. Tries three coupon codes before giving up, and abandons a basket if checkout asks for anything unexpected.',\n    goals: ['Get the weekly order in under five minutes'],\n    disposition: 'careless',\n    account: {},\n  },\n  /**\n   * Holds `orders:refund` without owning any order — the seam that makes the\n   * scope-versus-permission split worth demonstrating. A scenario run as Priya\n   * proves support can act on somebody else's order; one run as Susan proves a\n   * customer cannot.\n   */\n  priya: {\n    name: 'Priya from Support',\n    jobTitle: 'Customer support',\n    description:\n      'Handles refunds and cancellations for other people\\u2019s orders',\n    roles: ['support'],\n    personality:\n      'Methodical. Reads the order history before touching anything, and says what she changed.',\n    goals: ['Resolve the customer\\u2019s problem without escalating'],\n    account: {},\n  },\n  alex: {\n    name: 'Alex the Owner',\n    jobTitle: 'Shop owner',\n    description: 'Runs the shop \\u2014 prices, stock and who works here',\n    roles: ['admin'],\n    personality:\n      'Impatient. Knows the catalogue by heart and expects bulk actions to exist.',\n    goals: ['Keep stock accurate', 'See what sold this week'],\n    account: {},\n  },\n})",
-  "defineRoles": "defineSystemRole({\n  customer: {\n    displayName: 'Customer',\n    description: 'Browse the catalogue, place and track their own orders',\n    scopes: [\n      'catalogue:read',\n      'orders:create',\n      'orders:read',\n      'payments:charge',\n    ],\n  },\n  /**\n   * Handles orders but cannot change what is for sale. `orders:refund` without\n   * `catalogue:write` is the seam worth having in a template: support staff\n   * routinely need to undo a payment and routinely should not be able to\n   * reprice the shop.\n   */\n  support: {\n    displayName: 'Support',\n    description: 'Handle customer orders, including refunds',\n    scopes: [\n      'catalogue:read',\n      'orders:read',\n      'orders:cancel',\n      'orders:refund',\n      'payments:manage',\n    ],\n  },\n  /**\n   * Names the parents rather than enumerating their children — pikku's\n   * parent-grant rule means holding a node grants everything beneath it, so\n   * `catalogue` is `catalogue:read` and `catalogue:write` in one word instead\n   * of a list that drifts as the tree grows.\n   *\n   * `pikku:console` comes from `@pikku/addon-console`, not from this app: the\n   * console's own surface is the addon's to declare, and the shop composes with\n   * it rather than declaring a competing tree.\n   */\n  admin: {\n    displayName: 'Administrator',\n    description: 'Everything the shop can do, plus console administration',\n    scopes: ['catalogue', 'orders', 'payments', 'reports', 'pikku:console'],\n  },\n})",
+  "defineRoles": "defineSystemRole({\n  customer: {\n    displayName: 'Customer',\n    description: 'Browse the catalogue, place and track their own orders',\n    scopes: [\n      'catalogue:read',\n      'orders:create',\n      'orders:read',\n      'payments:charge',\n    ],\n  },\n  /**\n   * Handles orders but cannot change what is for sale. `orders:refund` without\n   * `catalogue:write` is the seam worth having in a template: support staff\n   * routinely need to undo a payment and routinely should not be able to\n   * reprice the shop.\n   */\n  support: {\n    displayName: 'Support',\n    description: 'Handle customer orders, including refunds',\n    scopes: [\n      'catalogue:read',\n      'orders:read',\n      'orders:cancel',\n      'orders:refund',\n      'payments:manage',\n    ],\n  },\n  /**\n   * Names the parents rather than enumerating their children — pikku's\n   * parent-grant rule means holding a node grants everything beneath it, so\n   * `catalogue` is `catalogue:read` and `catalogue:write` in one word instead\n   * of a list that drifts as the tree grows.\n   *\n   * `pikku:console` comes from `@pikku/addon-console`, not from this app, and\n   * `virtualUser` from the virtual-user scaffold, whose RPCs no role could\n   * otherwise reach. Both are parents rather than `virtualUser:*`: a wildcard\n   * has no row in pikku_scopes for pikku_role_scopes to reference.\n   */\n  admin: {\n    displayName: 'Administrator',\n    description: 'Everything the shop can do, plus console administration',\n    scopes: [\n      'catalogue',\n      'orders',\n      'payments',\n      'reports',\n      'pikku:console',\n      'virtualUser',\n    ],\n  },\n})",
   "defineScopes": "defineScope({\n  catalogue: {\n    displayName: 'Catalogue',\n    description: 'Browse and manage what is for sale',\n    scopes: {\n      read: { description: 'Browse items and categories' },\n      write: { description: 'Create, edit and withdraw items' },\n    },\n  },\n  orders: {\n    displayName: 'Orders',\n    description: 'Placing and handling orders',\n    scopes: {\n      read: { description: 'Read orders' },\n      create: { description: 'Place an order' },\n      cancel: { description: 'Cancel an order before it ships' },\n      refund: { description: 'Refund a paid order' },\n    },\n  },\n  payments: {\n    displayName: 'Payments',\n    description: 'Reaching the payment provider',\n    scopes: {\n      charge: { description: 'Create a payment intent for your own order' },\n      manage: {\n        description: 'Refunds, customers and everything else Stripe offers',\n      },\n    },\n  },\n  reports: {\n    displayName: 'Reports',\n    description: 'Sales and stock reporting',\n    scopes: {\n      read: { description: 'Read sales and stock reports' },\n    },\n  },\n})",
   "fetchClient": "export async function shopApiExamples() {\n  pikkuFetch.setServerUrl('http://localhost:4000')\n\n  const categories = await pikkuFetch.get('/categories')\n  const item = await pikkuFetch.get('/items/:itemId', { itemId: 'item-001' })\n\n  pikkuFetch.setAuthorizationJWT('user-jwt-token')\n  const order = await pikkuFetch.post('/orders', {\n    basketId: 'basket-123',\n    shippingAddress: {\n      line1: '1 High St',\n      city: 'London',\n      postcode: 'SW1A 1AA',\n      country: 'GB',\n    },\n  })\n\n  return { categories, item, order }\n}",
   "funcMultiWire": "// The same function can be wired to multiple transports without any changes.\n// Define once, wire everywhere.\nwireHTTP({ method: 'get', route: '/items/:itemId', func: getItem, auth: false })",
@@ -105,7 +105,7 @@
   "shopIsOrderOwner": "export const isOrderOwner = pikkuPermission(\n  async ({ kysely }, { orderId }: { orderId: string }, { session }) => {\n    const order = await kysely\n      .selectFrom('order')\n      .select('userId')\n      .where('orderId', '=', orderId)\n      .executeTakeFirst()\n    return order?.userId === session?.userId\n  }\n)",
   "shopRoutes": "export const shopRoutes = defineHTTPRoutes({\n  auth: false,\n  routes: {\n    // Categories\n    listCategories: {\n      method: 'get',\n      route: '/categories',\n      func: listCategories,\n    },\n    createCategory: {\n      method: 'post',\n      route: '/categories',\n      func: createCategory,\n      auth: true,\n    },\n\n    // Items\n    listItems: { method: 'get', route: '/items', func: listItems },\n    getItem: { method: 'get', route: '/items/:itemId', func: getItem },\n    createItem: {\n      method: 'post',\n      route: '/items',\n      func: createItem,\n      auth: true,\n    },\n    updateItem: {\n      method: 'patch',\n      route: '/items/:itemId',\n      func: updateItem,\n      auth: true,\n    },\n\n    // Account\n    getProfile: {\n      method: 'get',\n      route: '/profile',\n      func: getProfile,\n      auth: true,\n    },\n\n    // Basket (sessionless — works for guests too)\n    getBasket: { method: 'get', route: '/basket', func: getBasket },\n    addToBasket: { method: 'post', route: '/basket/items', func: addToBasket },\n    removeFromBasket: {\n      method: 'delete',\n      route: '/basket/items/:itemId',\n      func: removeFromBasket,\n    },\n\n    // Orders (require auth)\n    createOrder: {\n      method: 'post',\n      route: '/orders',\n      func: createOrder,\n      auth: true,\n    },\n    listOrders: {\n      method: 'get',\n      route: '/orders',\n      func: listOrders,\n      auth: true,\n    },\n    getOrder: {\n      method: 'get',\n      route: '/orders/:orderId',\n      func: getOrder,\n      auth: true,\n    },\n    cancelOrder: {\n      method: 'post',\n      route: '/orders/:orderId/cancel',\n      func: cancelOrder,\n      auth: true,\n    },\n  },\n})",
   "shopSecretUsage": "// Note what is *absent* here: `secrets`.\n//\n// Every function-, permission- and auth-facing services type in pikku is\n// bounded by `SecretlessServices`, which omits `secrets` outright. A function\n// cannot read one, so a secret cannot leak through a return value, a log line\n// or an error thrown from business logic — the class of bug you only find in\n// somebody else's incident report.\n//\n// Secrets are read once, where they are needed. `chargeCard` asks the Stripe\n// addon to create a payment intent; `STRIPE_SECRET_KEY` is the addon's secret\n// and never crosses into this function, so it cannot be logged here, returned\n// here, or attached to an error thrown here.\n//\n// This is the step the checkout workflow actually runs. The point used to be\n// made by a second, unwired copy of the same call that existed only to be\n// quoted — so the documented example was the one piece of payment code no\n// shopper ever reached.\nexport const chargeCard = pikkuSessionlessFunc({\n  // Invoked by name from `createOrder` as well as by the workflow, so one\n  // charge path exists rather than two that can drift.\n  expose: true,\n  description: 'Charge the card through Stripe.',\n  func: async (\n    { logger },\n    data: { orderId: string; totalCents: number; cardToken?: string },\n    { rpc }\n  ) => {\n    // The order id goes in the payment intent's metadata because that is the\n    // only way it comes back: `applyStripeEvent` reads it off the verified\n    // webhook event to decide which order was paid. Stripe knows nothing about\n    // our ids otherwise.\n    const intent = await rpc.invoke('stripe:paymentIntentCreate', {\n      amount: data.totalCents,\n      currency: 'gbp',\n      ...(data.cardToken\n        ? { paymentMethod: data.cardToken, confirm: true }\n        : {}),\n      metadata: { orderId: data.orderId },\n      // Charging twice for one order is the expensive failure here, and a\n      // workflow step is retried by design.\n      idempotencyKey: `order_${data.orderId}`,\n      description: `Order ${data.orderId}`,\n    })\n\n    logger.info({\n      event: 'payment_intent_created',\n      orderId: data.orderId,\n      status: intent.status,\n    })\n\n    return intent.status === 'succeeded'\n      ? { status: 'succeeded' as const, providerRef: intent.id }\n      : { status: 'failed' as const, reason: intent.status }\n  },\n})",
-  "shopServices": "export const createSingletonServices = pikkuServices(\n  async (config, existingServices) => {\n    const variables =\n      existingServices?.variables ??\n      new TypedVariablesService(new LocalVariablesService())\n    const secrets =\n      existingServices?.secrets ??\n      new TypedSecretService(new LocalSecretService(variables))\n    const logger = existingServices?.logger ?? new JsonConsoleLogger()\n    const schema = existingServices?.schema ?? new CFWorkerSchemaService(logger)\n    const emailService =\n      existingServices?.emailService ??\n      new GeneratedTemplateEmailService({\n        delegate: new LocalEmailService(),\n      })\n    // The durable audit sink. In a deployed stage fabric injects the platform's\n    // audit service; locally it falls back to a no-op so nothing is persisted.\n    const audit = existingServices?.audit ?? new NoopAuditService()\n    // kysely is injected by pikku dev (node:sqlite) or the CF Worker workflow (libsql).\n    // The template never constructs its own dialect — dialects are fabric/runtime\n    // concerns — so it must always be provided by the runtime.\n    if (!existingServices?.kysely) {\n      throw new Error(\n        'kysely service was not injected by the runtime (pikku dev / fabric)'\n      )\n    }\n    const kysely: Kysely<DB> = existingServices.kysely\n\n    // Per-user credential store (wire.getCredential) — needed by addons imported\n    // with --auth per-user/delegated. A deployed stage injects it: credentials are\n    // sealed to the stage, and only its secrets Worker holds the key. There is no\n    // fallback because there is no key to fall back to — the template used to\n    // build a `KyselyCredentialService` from a `CREDENTIALS_KEY` secret, which was\n    // the stage's own KEK handed to every unit. Outside a stage the app runs fine\n    // and credential-using addon calls fail with a clear error from the addon's\n    // wire services; wire your own `credentialService` here if you need one.\n    const credentialService = existingServices?.credentialService\n\n    const litellmProxyUrl = process.env.LITELLM_PROXY_URL ?? null\n    const litellmApiKey = process.env.LITELLM_API_KEY ?? null\n    let aiAgentRunner: VercelAgentRunner | undefined\n    if (litellmProxyUrl && litellmApiKey) {\n      // The AI SDKs (~3MB) are stubbed out of non-agent units at bundle time —\n      // only units with the `ai-model` capability keep them. So import them\n      // dynamically and guard on the module resolving to a real export; in a\n      // stubbed unit the import yields `{}` and the runner is simply not built.\n      const aiVercel = await import('@pikku/ai-vercel')\n      const aiSdk = await import('@ai-sdk/openai-compatible')\n      if (aiVercel.VercelAgentRunner && aiSdk.createOpenAICompatible) {\n        const litellmProvider = aiSdk.createOpenAICompatible({\n          name: 'litellm',\n          baseURL: litellmProxyUrl,\n          apiKey: litellmApiKey,\n        })\n        aiAgentRunner = new aiVercel.VercelAgentRunner({\n          openai: (modelId: string) => litellmProvider.chatModel(modelId),\n          anthropic: (modelId: string) => litellmProvider.chatModel(modelId),\n          google: (modelId: string) => litellmProvider.chatModel(modelId),\n          deepseek: (modelId: string) => litellmProvider.chatModel(modelId),\n        })\n      }\n    }\n\n    // Without a ScopeService no user can hold any scope, so every function that\n    // requires one denies everybody — `defineScope`, `defineSystemRole` and the\n    // role grants `pikku persona sync` writes all exist and none of them reach a\n    // request. It resolves userId -> roles -> scopes out of the four pikku_* tables.\n    //\n    // Built as the concrete class rather than the `ScopeService` interface because\n    // `init()` (which creates those tables if they are absent) is the\n    // implementation's, not the contract's. The cast is the app's own `DB` — which\n    // includes the pikku_* tables — against the narrower shape the service\n    // declares; the two differ only in kysely's internal builder generics.\n    let scopeService = existingServices?.scopeService\n    if (!scopeService) {\n      const kyselyScopes = new KyselyScopeService(\n        kysely as unknown as Kysely<KyselyPikkuDB>\n      )\n      await kyselyScopes.init()\n      scopeService = kyselyScopes\n    }\n\n    return {\n      ...(existingServices ?? {}),\n      config,\n      scopeService,\n      workflowService: existingServices?.workflowService,\n      workflowRunService: existingServices?.workflowRunService,\n      variables,\n      secrets,\n      schema,\n      logger,\n      emailService,\n      audit,\n      kysely,\n      // Constructed once here rather than read per call: the payment provider's\n      // credentials belong to service construction, and functions cannot reach\n      // `secrets` at all (every function-facing services type is bounded by\n      // SecretlessServices).\n      ...(credentialService ? { credentialService } : {}),\n      ...(aiAgentRunner ? { aiAgentRunner } : {}),\n    }\n  }\n)",
+  "shopServices": "export const createSingletonServices = pikkuServices(\n  async (config, existingServices) => {\n    const variables =\n      existingServices?.variables ??\n      new TypedVariablesService(new LocalVariablesService())\n    const secrets =\n      existingServices?.secrets ??\n      new TypedSecretService(new LocalSecretService(variables))\n    const logger = existingServices?.logger ?? new JsonConsoleLogger()\n    const schema = existingServices?.schema ?? new CFWorkerSchemaService(logger)\n    const emailService =\n      existingServices?.emailService ??\n      new GeneratedTemplateEmailService({\n        delegate: new LocalEmailService(),\n      })\n    // The durable audit sink. In a deployed stage fabric injects the platform's\n    // audit service; locally it falls back to a no-op so nothing is persisted.\n    const audit = existingServices?.audit ?? new NoopAuditService()\n    // kysely is injected by pikku dev (node:sqlite) or the CF Worker workflow (libsql).\n    // The template never constructs its own dialect — dialects are fabric/runtime\n    // concerns — so it must always be provided by the runtime.\n    if (!existingServices?.kysely) {\n      throw new Error(\n        'kysely service was not injected by the runtime (pikku dev / fabric)'\n      )\n    }\n    const kysely: Kysely<DB> = existingServices.kysely\n\n    // Per-user credential store (wire.getCredential) — needed by addons imported\n    // with --auth per-user/delegated. A deployed stage injects it: credentials are\n    // sealed to the stage, and only its secrets Worker holds the key. There is no\n    // fallback because there is no key to fall back to — the template used to\n    // build a `KyselyCredentialService` from a `CREDENTIALS_KEY` secret, which was\n    // the stage's own KEK handed to every unit. Outside a stage the app runs fine\n    // and credential-using addon calls fail with a clear error from the addon's\n    // wire services; wire your own `credentialService` here if you need one.\n    const credentialService = existingServices?.credentialService\n\n    const litellmProxyUrl = process.env.LITELLM_PROXY_URL ?? null\n    const litellmApiKey = process.env.LITELLM_API_KEY ?? null\n    let aiAgentRunner: VercelAgentRunner | undefined\n    if (litellmProxyUrl && litellmApiKey) {\n      // The AI SDKs (~3MB) are stubbed out of non-agent units at bundle time —\n      // only units with the `ai-model` capability keep them. So import them\n      // dynamically and guard on the module resolving to a real export; in a\n      // stubbed unit the import yields `{}` and the runner is simply not built.\n      const aiVercel = await import('@pikku/ai-vercel')\n      const aiSdk = await import('@ai-sdk/openai-compatible')\n      if (aiVercel.VercelAgentRunner && aiSdk.createOpenAICompatible) {\n        const litellmProvider = aiSdk.createOpenAICompatible({\n          name: 'litellm',\n          baseURL: litellmProxyUrl,\n          apiKey: litellmApiKey,\n        })\n        aiAgentRunner = new aiVercel.VercelAgentRunner({\n          openai: (modelId: string) => litellmProvider.chatModel(modelId),\n          anthropic: (modelId: string) => litellmProvider.chatModel(modelId),\n          google: (modelId: string) => litellmProvider.chatModel(modelId),\n          deepseek: (modelId: string) => litellmProvider.chatModel(modelId),\n        })\n      }\n    }\n\n    // Without a ScopeService no user can hold any scope, so every function that\n    // requires one denies everybody — `defineScope`, `defineSystemRole` and the\n    // role grants `pikku persona sync` writes all exist and none of them reach a\n    // request. It resolves userId -> roles -> scopes out of the four pikku_* tables.\n    //\n    // Built as the concrete class rather than the `ScopeService` interface because\n    // `init()` (which creates those tables if they are absent) is the\n    // implementation's, not the contract's. The cast is the app's own `DB` — which\n    // includes the pikku_* tables — against the narrower shape the service\n    // declares; the two differ only in kysely's internal builder generics.\n    let scopeService = existingServices?.scopeService\n    if (!scopeService) {\n      const kyselyScopes = new KyselyScopeService(\n        kysely as unknown as Kysely<KyselyPikkuDB>\n      )\n      await kyselyScopes.init()\n      scopeService = kyselyScopes\n    }\n\n    // The definitions in scopes.ts and roles.ts are declarations until something\n    // writes them down. Nothing else does, and a role with no row cannot be\n    // granted — `addUserToRole` fails the pikku_role_scopes foreign key, which is\n    // how persona provisioning discovers it.\n    await scopeService.syncScopes(SCOPES)\n    await scopeService.syncSystemRoles(SYSTEM_ROLES)\n\n    return {\n      ...(existingServices ?? {}),\n      config,\n      scopeService,\n      workflowService: existingServices?.workflowService,\n      workflowRunService: existingServices?.workflowRunService,\n      variables,\n      secrets,\n      schema,\n      logger,\n      emailService,\n      audit,\n      kysely,\n      // Constructed once here rather than read per call: the payment provider's\n      // credentials belong to service construction, and functions cannot reach\n      // `secrets` at all (every function-facing services type is bounded by\n      // SecretlessServices).\n      ...(credentialService ? { credentialService } : {}),\n      ...(aiAgentRunner ? { aiAgentRunner } : {}),\n    }\n  }\n)",
   "shopVersionedItem": "export const GetItemOutputV1 = z.object({\n  itemId: z.string(),\n  name: z.string(),\n  priceCents: z.number(),\n})\n\nexport const getItemV1 = pikkuSessionlessFunc({\n  expose: true,\n  version: 1,\n  input: GetItemInput,\n  output: GetItemOutputV1,\n  func: async ({ kysely }, { itemId }) => {\n    const row = await kysely\n      .selectFrom('item')\n      .select(['itemId', 'name', 'priceCents'])\n      .where('itemId', '=', itemId)\n      .executeTakeFirstOrThrow()\n    return row\n  },\n})\n\n// v2 — adds stock and imageUrl to the response\nexport const getItemV2 = pikkuSessionlessFunc({\n  expose: true,\n  version: 2,\n  input: GetItemInput,\n  output: GetItemOutput,\n  func: async ({ kysely }, { itemId }) => {\n    const row = await kysely\n      .selectFrom('item')\n      .innerJoin('category', 'category.categoryId', 'item.categoryId')\n      .select([\n        'item.itemId',\n        'item.name',\n        'item.slug',\n        'item.description',\n        'item.priceCents',\n        'item.stock',\n        'item.imageUrl',\n        'item.isActive',\n        'item.createdAt',\n        'item.updatedAt',\n        'category.categoryId',\n        'category.name as categoryName',\n        'category.slug as categorySlug',\n      ])\n      .where('item.itemId', '=', itemId)\n      .executeTakeFirstOrThrow()\n    return {\n      ...row,\n      category: {\n        categoryId: row.categoryId,\n        name: row.categoryName,\n        slug: row.categorySlug,\n      },\n    }\n  },\n})",
   "shopWireServices": "export const createWireServices = pikkuWireServices(\n  async (singletonServices, wire) => {\n    if (!singletonServices.audit) {\n      return {}\n    }\n    const auditLog = createInvocationAudit(singletonServices.audit, wire)\n    // auditLog is ALWAYS injected, but `auditLog.write(...)` only PERSISTS when this\n    // function set `audit: true` — createInvocationAudit gates on wire.audit, so\n    // without it write() is a warn-only no-op (see @pikku/core audit-service.ts).\n    // `auditLog.config` is set ONLY when audit: true is on, and when it is, ALSO wrap\n    // kysely so every query is captured and the runner flushes the buffer on close.\n    // Without audit: true, leave the plain kysely untouched — no per-query overhead.\n    if (!auditLog.config) {\n      return { auditLog }\n    }\n    return {\n      auditLog,\n      kysely: createAuditedKysely(singletonServices.kysely, {\n        audit: auditLog,\n      }),\n    }\n  }\n)",
   "tagMiddleware": "addTagMiddleware('checkout', [auditMiddleware('checkout')])",