@pikku/cli 0.12.145 → 0.12.151

package/dist/src/functions/commands/scopes-prune.d.ts

@@ -7,8 +7,8 @@
  */
 export declare const scopesPrune: import("#pikku/function").PikkuFunctionConfig<{
     yes?: boolean;
-}, void, "rpc" | "session", import("#pikku/function").PikkuFunctionSessionless<{
+}, void, "rpc" | "session", import("#pikku/function").PikkuFunction<{
     yes?: boolean;
-}, void, "rpc" | "session", import("#pikku/function").WiredServices, unknown> | import("#pikku/function").PikkuFunction<{
+}, void, "rpc" | "session", import("#pikku/function").WiredServices> | import("#pikku/function").PikkuFunctionSessionless<{
     yes?: boolean;
-}, void, "rpc" | "session", import("#pikku/function").WiredServices>, undefined, undefined>;
+}, void, "rpc" | "session", import("#pikku/function").WiredServices, unknown>, undefined, undefined>;

package/dist/src/functions/commands/semver.d.ts

@@ -22,4 +22,4 @@ export type SemverResult = {
     mode: 'compare';
     written: string;
 } & SurfaceChanges);
-export declare const pikkuSemver: import("#pikku/function").PikkuFunctionConfig<SemverInput, SemverResult, "rpc" | "session", import("#pikku/function").PikkuFunctionSessionless<SemverInput, SemverResult, "rpc" | "session", import("#pikku/function").WiredServices, unknown> | import("#pikku/function").PikkuFunction<SemverInput, SemverResult, "rpc" | "session", import("#pikku/function").WiredServices>, undefined, undefined>;
+export declare const pikkuSemver: import("#pikku/function").PikkuFunctionConfig<SemverInput, SemverResult, "rpc" | "session", import("#pikku/function").PikkuFunction<SemverInput, SemverResult, "rpc" | "session", import("#pikku/function").WiredServices> | import("#pikku/function").PikkuFunctionSessionless<SemverInput, SemverResult, "rpc" | "session", import("#pikku/function").WiredServices, unknown>, undefined, undefined>;

package/dist/src/functions/commands/serve.d.ts

@@ -2,12 +2,12 @@ export declare const serve: import("#pikku/function").PikkuFunctionConfig<{
     port?: string;
     console?: boolean;
     model?: string;
-}, void, "rpc" | "session", import("#pikku/function").PikkuFunctionSessionless<{
+}, void, "rpc" | "session", import("#pikku/function").PikkuFunction<{
     port?: string;
     console?: boolean;
     model?: string;
-}, void, "rpc" | "session", import("#pikku/function").WiredServices, unknown> | import("#pikku/function").PikkuFunction<{
+}, void, "rpc" | "session", import("#pikku/function").WiredServices> | import("#pikku/function").PikkuFunctionSessionless<{
     port?: string;
     console?: boolean;
     model?: string;
-}, void, "rpc" | "session", import("#pikku/function").WiredServices>, undefined, undefined>;
+}, void, "rpc" | "session", import("#pikku/function").WiredServices, unknown>, undefined, undefined>;

package/dist/src/functions/commands/serve.js

@@ -1,10 +1,12 @@
 import { join, resolve } from 'path';
 import { pikkuSessionlessFunc } from '#pikku/function';
 import { InMemoryQueueService, QueueWebhookService } from '@pikku/core/services';
+import { flattenScopeDefinitions } from '@pikku/core/scope';
+import { flattenSystemRoleDefinitions } from '@pikku/core/role';
 import { ConsoleLogger, LocalEmailService, InMemoryAgentRunStateService, } from '@pikku/core/services';
 import { InMemoryTriggerService } from '@pikku/core/services';
 import { InMemoryWorkflowService } from '@pikku/core/services';
-import { KyselyAgentStorageService, KyselyAgentRunStateService, KyselyAgentRunService, } from '@pikku/kysely';
+import { KyselyAgentStorageService, KyselyAgentRunStateService, KyselyAgentRunService, KyselyAnalyticsService, KyselyFeatureFlagStore, KyselyScopeService, KyselyWebhookService, } from '@pikku/kysely';
 import { stopSingletonServices } from '@pikku/core/utils';
 import { pikkuState } from '@pikku/core/state';
 import { wireAgentScorerQueueWorkers } from '@pikku/core/agent-scorer';
@@ -13,6 +15,7 @@ import { LocalContent, } from '@pikku/core/services/local-content';
 import { InMemorySchedulerService } from '@pikku/schedule';
 import { resolveDb, createKysely, parseDatabaseUrl, } from '../db/local-db.js';
 import { loadUserBootstrap, loadUserModule } from './load-user-project.js';
+import { initOrWarn } from './init-or-warn.js';
 import { registerScenarioInstrumentation } from '../wirings/scenarios/register-scenario-instrumentation.js';
 import { createDevAgentRunner } from './dev-agent-runner.js';
 import { resolveConsoleMount } from './serve-console.js';
@@ -88,9 +91,34 @@ export const serve = pikkuSessionlessFunc({
         if ('init' in agentRunState && typeof agentRunState.init === 'function') {
             await agentRunState.init();
         }
+        // Flags and analytics get the same local database the rest of the services
+        // do, so a flag an operator flips in the console survives a restart and a
+        // declared event lands somewhere a query can reach.
+        //
+        // Dropped with a warning rather than thrown on, unlike the agent services
+        // above: both tables are generated from a declaration the project may have
+        // added since it last migrated, and neither absence is worse than what a
+        // project has today — an unregistered flag source resolves every gate open,
+        // and analytics without a service falls back to the logger. Failing the
+        // boot instead would turn adding one `featureFlag:` into a dead dev server.
+        const featureFlags = kysely
+            ? await initOrWarn(new KyselyFeatureFlagStore(kysely), 'featureFlags', logger)
+            : undefined;
+        const analyticsService = kysely
+            ? await initOrWarn(new KyselyAnalyticsService(kysely), 'analyticsService', logger)
+            : undefined;
+        const requiredServices = inspectorState.serviceAggregation.requiredServices;
+        const scopeService = kysely && requiredServices.has('scopeService')
+            ? new KyselyScopeService(kysely)
+            : undefined;
+        if (scopeService) {
+            await scopeService.init();
+            await scopeService.syncScopes(flattenScopeDefinitions(inspectorState.scopes.definitions));
+            await scopeService.syncSystemRoles(flattenSystemRoleDefinitions(inspectorState.systemRoles.definitions));
+        }
         const devLogger = new ConsoleLogger();
         const hasAgents = Object.keys(inspectorState.agents.agentsMeta).length > 0;
-        const agentRunner = hasAgents
+        const agentRunner = hasAgents || requiredServices.has('agentRunner')
             ? await createDevAgentRunner({
                 logger,
                 projectRoot: config.rootDir,
@@ -99,6 +127,12 @@ export const serve = pikkuSessionlessFunc({
             : undefined;
         const eventHub = await devServerRunner.createEventHub();
         const serveQueueService = new InMemoryQueueService();
+        const serveWebhookService = kysely && requiredServices.has('webhookService')
+            ? new KyselyWebhookService(serveQueueService, kysely)
+            : new QueueWebhookService(serveQueueService);
+        if (serveWebhookService instanceof KyselyWebhookService) {
+            await serveWebhookService.init();
+        }
         const inMemoryServices = {
             logger: devLogger,
             ...(agentRunner ? { agentRunner } : {}),
@@ -106,13 +140,16 @@ export const serve = pikkuSessionlessFunc({
             metaService: new LocalMetaService(pikkuDir),
             schedulerService,
             queueService: serveQueueService,
-            webhookService: new QueueWebhookService(serveQueueService),
+            webhookService: serveWebhookService,
+            ...(scopeService ? { scopeService } : {}),
             workflowService,
             workflowRunService: workflowService,
             triggerService: new InMemoryTriggerService(),
             agentStorage,
             agentRunState,
             agentRunService,
+            ...(featureFlags ? { featureFlags } : {}),
+            ...(analyticsService ? { analyticsService } : {}),
             eventHub,
             ...(kysely ? { kysely } : {}),
             content: localContent,

package/dist/src/functions/commands/skills.d.ts

@@ -1,10 +1,10 @@
 export declare const pikkuSkillsList: import("#pikku/function").PikkuFunctionConfig<{
     target?: string;
-}, void, "rpc" | "session", import("#pikku/function").PikkuFunctionSessionless<{
+}, void, "rpc" | "session", import("#pikku/function").PikkuFunction<{
     target?: string;
-}, void, "rpc" | "session", import("#pikku/function").WiredServices, unknown> | import("#pikku/function").PikkuFunction<{
+}, void, "rpc" | "session", import("#pikku/function").WiredServices> | import("#pikku/function").PikkuFunctionSessionless<{
     target?: string;
-}, void, "rpc" | "session", import("#pikku/function").WiredServices>, undefined, undefined>;
+}, void, "rpc" | "session", import("#pikku/function").WiredServices, unknown>, undefined, undefined>;
 export declare const pikkuSkillsInstall: import("#pikku/function").PikkuFunctionConfig<{
     agent?: string;
     only?: string;
@@ -12,18 +12,18 @@ export declare const pikkuSkillsInstall: import("#pikku/function").PikkuFunction
     fabric?: boolean;
     client?: boolean;
     update?: boolean;
-}, void, "rpc" | "session", import("#pikku/function").PikkuFunctionSessionless<{
+}, void, "rpc" | "session", import("#pikku/function").PikkuFunction<{
     agent?: string;
     only?: string;
     core?: boolean;
     fabric?: boolean;
     client?: boolean;
     update?: boolean;
-}, void, "rpc" | "session", import("#pikku/function").WiredServices, unknown> | import("#pikku/function").PikkuFunction<{
+}, void, "rpc" | "session", import("#pikku/function").WiredServices> | import("#pikku/function").PikkuFunctionSessionless<{
     agent?: string;
     only?: string;
     core?: boolean;
     fabric?: boolean;
     client?: boolean;
     update?: boolean;
-}, void, "rpc" | "session", import("#pikku/function").WiredServices>, undefined, undefined>;
+}, void, "rpc" | "session", import("#pikku/function").WiredServices, unknown>, undefined, undefined>;

package/dist/src/functions/commands/update.d.ts

@@ -96,4 +96,4 @@ export declare const runUpdate: ({ rootDir, apply, updatePeers, install, tag, re
     registry: string;
     fetchPackument?: FetchPackument;
 }) => Promise<UpdateResult>;
-export declare const pikkuUpdate: import("#pikku/function").PikkuFunctionConfig<UpdateInput, UpdateResult, "rpc" | "session", import("#pikku/function").PikkuFunctionSessionless<UpdateInput, UpdateResult, "rpc" | "session", import("#pikku/function").WiredServices, unknown> | import("#pikku/function").PikkuFunction<UpdateInput, UpdateResult, "rpc" | "session", import("#pikku/function").WiredServices>, undefined, undefined>;
+export declare const pikkuUpdate: import("#pikku/function").PikkuFunctionConfig<UpdateInput, UpdateResult, "rpc" | "session", import("#pikku/function").PikkuFunction<UpdateInput, UpdateResult, "rpc" | "session", import("#pikku/function").WiredServices> | import("#pikku/function").PikkuFunctionSessionless<UpdateInput, UpdateResult, "rpc" | "session", import("#pikku/function").WiredServices, unknown>, undefined, undefined>;

package/dist/src/functions/commands/validate.d.ts

@@ -9,12 +9,12 @@ export declare const validate: import("#pikku/function").PikkuFunctionConfig<Rec
     }[];
     findings: {
         id: string;
-        severity: "warn" | "error" | "info";
+        severity: "error" | "info" | "warn";
         message: string;
         path: string;
         fixHint: string;
     }[];
-}, "rpc" | "session", import("#pikku/function").PikkuFunctionSessionless<Record<string, never>, {
+}, "rpc" | "session", import("#pikku/function").PikkuFunction<Record<string, never>, {
     ok: boolean;
     root: string;
     ran: {
@@ -24,12 +24,12 @@ export declare const validate: import("#pikku/function").PikkuFunctionConfig<Rec
     }[];
     findings: {
         id: string;
-        severity: "warn" | "error" | "info";
+        severity: "error" | "info" | "warn";
         message: string;
         path: string;
         fixHint: string;
     }[];
-}, "rpc" | "session", import("#pikku/function").WiredServices, unknown> | import("#pikku/function").PikkuFunction<Record<string, never>, {
+}, "rpc" | "session", import("#pikku/function").WiredServices> | import("#pikku/function").PikkuFunctionSessionless<Record<string, never>, {
     ok: boolean;
     root: string;
     ran: {
@@ -39,10 +39,10 @@ export declare const validate: import("#pikku/function").PikkuFunctionConfig<Rec
     }[];
     findings: {
         id: string;
-        severity: "warn" | "error" | "info";
+        severity: "error" | "info" | "warn";
         message: string;
         path: string;
         fixHint: string;
     }[];
-}, "rpc" | "session", import("#pikku/function").WiredServices>, undefined, undefined>;
+}, "rpc" | "session", import("#pikku/function").WiredServices, unknown>, undefined, undefined>;
 export { renderValidate };

package/dist/src/functions/commands/versions-check.d.ts

@@ -1 +1 @@
-export declare const pikkuVersionsCheck: import("#pikku/function").PikkuFunctionConfig<void, void, "rpc" | "session", import("#pikku/function").PikkuFunctionSessionless<void, void, "rpc" | "session", import("#pikku/function").WiredServices, unknown> | import("#pikku/function").PikkuFunction<void, void, "rpc" | "session", import("#pikku/function").WiredServices>, undefined, undefined>;
+export declare const pikkuVersionsCheck: import("#pikku/function").PikkuFunctionConfig<void, void, "rpc" | "session", import("#pikku/function").PikkuFunction<void, void, "rpc" | "session", import("#pikku/function").WiredServices> | import("#pikku/function").PikkuFunctionSessionless<void, void, "rpc" | "session", import("#pikku/function").WiredServices, unknown>, undefined, undefined>;

package/dist/src/functions/commands/versions-init.d.ts

@@ -1,7 +1,7 @@
 export declare const pikkuVersionsInit: import("#pikku/function").PikkuFunctionConfig<{
     force?: boolean;
-}, void, "rpc" | "session", import("#pikku/function").PikkuFunctionSessionless<{
+}, void, "rpc" | "session", import("#pikku/function").PikkuFunction<{
     force?: boolean;
-}, void, "rpc" | "session", import("#pikku/function").WiredServices, unknown> | import("#pikku/function").PikkuFunction<{
+}, void, "rpc" | "session", import("#pikku/function").WiredServices> | import("#pikku/function").PikkuFunctionSessionless<{
     force?: boolean;
-}, void, "rpc" | "session", import("#pikku/function").WiredServices>, undefined, undefined>;
+}, void, "rpc" | "session", import("#pikku/function").WiredServices, unknown>, undefined, undefined>;

package/dist/src/functions/commands/versions-update.d.ts

@@ -1 +1 @@
-export declare const pikkuVersionsUpdate: import("#pikku/function").PikkuFunctionConfig<void, void, "rpc" | "session", import("#pikku/function").PikkuFunctionSessionless<void, void, "rpc" | "session", import("#pikku/function").WiredServices, unknown> | import("#pikku/function").PikkuFunction<void, void, "rpc" | "session", import("#pikku/function").WiredServices>, undefined, undefined>;
+export declare const pikkuVersionsUpdate: import("#pikku/function").PikkuFunctionConfig<void, void, "rpc" | "session", import("#pikku/function").PikkuFunction<void, void, "rpc" | "session", import("#pikku/function").WiredServices> | import("#pikku/function").PikkuFunctionSessionless<void, void, "rpc" | "session", import("#pikku/function").WiredServices, unknown>, undefined, undefined>;

package/dist/src/functions/commands/watch.d.ts

@@ -1,7 +1,7 @@
 export declare const watch: import("#pikku/function").PikkuFunctionConfig<{
     hmr?: boolean;
-}, void, "rpc" | "session", import("#pikku/function").PikkuFunctionSessionless<{
+}, void, "rpc" | "session", import("#pikku/function").PikkuFunction<{
     hmr?: boolean;
-}, void, "rpc" | "session", import("#pikku/function").WiredServices, unknown> | import("#pikku/function").PikkuFunction<{
+}, void, "rpc" | "session", import("#pikku/function").WiredServices> | import("#pikku/function").PikkuFunctionSessionless<{
     hmr?: boolean;
-}, void, "rpc" | "session", import("#pikku/function").WiredServices>, undefined, undefined>;
+}, void, "rpc" | "session", import("#pikku/function").WiredServices, unknown>, undefined, undefined>;

package/dist/src/functions/db/zod-codegen.d.ts

@@ -7,25 +7,25 @@
  * union in `ColumnEntry`. All confirmed present in zod 4.
  */
 export declare const ZOD_FORMATS: {
-    readonly email: "z.email()";
-    readonly url: "z.url()";
-    readonly emoji: "z.emoji()";
-    readonly e164: "z.e164()";
-    readonly jwt: "z.jwt()";
-    readonly cuid: "z.cuid()";
-    readonly cuid2: "z.cuid2()";
-    readonly ulid: "z.ulid()";
-    readonly nanoid: "z.nanoid()";
-    readonly base64: "z.base64()";
-    readonly base64url: "z.base64url()";
-    readonly ipv4: "z.ipv4()";
-    readonly ipv6: "z.ipv6()";
-    readonly cidrv4: "z.cidrv4()";
-    readonly cidrv6: "z.cidrv6()";
-    readonly isoDate: "z.iso.date()";
-    readonly isoTime: "z.iso.time()";
-    readonly isoDatetime: "z.iso.datetime()";
-    readonly isoDuration: "z.iso.duration()";
+    readonly email: 'z.email()';
+    readonly url: 'z.url()';
+    readonly emoji: 'z.emoji()';
+    readonly e164: 'z.e164()';
+    readonly jwt: 'z.jwt()';
+    readonly cuid: 'z.cuid()';
+    readonly cuid2: 'z.cuid2()';
+    readonly ulid: 'z.ulid()';
+    readonly nanoid: 'z.nanoid()';
+    readonly base64: 'z.base64()';
+    readonly base64url: 'z.base64url()';
+    readonly ipv4: 'z.ipv4()';
+    readonly ipv6: 'z.ipv6()';
+    readonly cidrv4: 'z.cidrv4()';
+    readonly cidrv6: 'z.cidrv6()';
+    readonly isoDate: 'z.iso.date()';
+    readonly isoTime: 'z.iso.time()';
+    readonly isoDatetime: 'z.iso.datetime()';
+    readonly isoDuration: 'z.iso.duration()';
 };
 export type ZodFormat = keyof typeof ZOD_FORMATS;
 export interface ZodCodegenOptions {

package/dist/src/functions/knowledge/schemas.d.ts

@@ -28,8 +28,8 @@ export declare const KnowledgeIndexOutputSchema: import("zod").ZodObject<{
         path: import("zod").ZodString;
         action: import("zod").ZodEnum<{
             created: "created";
-            updated: "updated";
             unchanged: "unchanged";
+            updated: "updated";
         }>;
     }, import("zod/v4/core").$strip>>;
 }, import("zod/v4/core").$strip>;
@@ -41,8 +41,8 @@ export declare const KnowledgeValidateOutputSchema: import("zod").ZodObject<{
         id: import("zod").ZodString;
         severity: import("zod").ZodEnum<{
             error: "error";
-            warn: "warn";
             info: "info";
+            warn: "warn";
         }>;
         message: import("zod").ZodString;
         path: import("zod").ZodString;
@@ -97,12 +97,12 @@ export declare const KnowledgePlanDeferOutputSchema: import("zod").ZodObject<{
 export declare const KnowledgeReconcileInputSchema: import("zod").ZodObject<{}, import("zod/v4/core").$strip>;
 export declare const KnowledgeReconcileOutputSchema: import("zod").ZodObject<{
     kind: import("zod").ZodEnum<{
-        idle: "idle";
-        "repair-note": "repair-note";
-        "write-plan": "write-plan";
         "ask-user": "ask-user";
         dispatch: "dispatch";
         hold: "hold";
+        idle: "idle";
+        "repair-note": "repair-note";
+        "write-plan": "write-plan";
     }>;
     reason: import("zod").ZodString;
     note: import("zod").ZodOptional<import("zod").ZodString>;

package/dist/src/functions/runtimes/fetch/index.d.ts

@@ -1 +1 @@
-export declare const pikkuFetch: import("#pikku/function").PikkuFunctionConfig<void, void, "rpc" | "session", import("#pikku/function").PikkuFunctionSessionless<void, void, "rpc" | "session", import("#pikku/function").WiredServices, unknown> | import("#pikku/function").PikkuFunction<void, void, "rpc" | "session", import("#pikku/function").WiredServices>, undefined, undefined>;
+export declare const pikkuFetch: import("#pikku/function").PikkuFunctionConfig<void, void, "rpc" | "session", import("#pikku/function").PikkuFunction<void, void, "rpc" | "session", import("#pikku/function").WiredServices> | import("#pikku/function").PikkuFunctionSessionless<void, void, "rpc" | "session", import("#pikku/function").WiredServices, unknown>, undefined, undefined>;

package/dist/src/functions/runtimes/nextjs/pikku-command-nextjs.d.ts

@@ -1 +1 @@
-export declare const pikkuNext: import("#pikku/function").PikkuFunctionConfig<void, void, "rpc" | "session", import("#pikku/function").PikkuFunctionSessionless<void, void, "rpc" | "session", import("#pikku/function").WiredServices, unknown> | import("#pikku/function").PikkuFunction<void, void, "rpc" | "session", import("#pikku/function").WiredServices>, undefined, undefined>;
+export declare const pikkuNext: import("#pikku/function").PikkuFunctionConfig<void, void, "rpc" | "session", import("#pikku/function").PikkuFunction<void, void, "rpc" | "session", import("#pikku/function").WiredServices> | import("#pikku/function").PikkuFunctionSessionless<void, void, "rpc" | "session", import("#pikku/function").WiredServices, unknown>, undefined, undefined>;

package/dist/src/functions/runtimes/tanstack-start/pikku-command-tanstack-start.d.ts

@@ -1 +1 @@
-export declare const pikkuTanStackStart: import("#pikku/function").PikkuFunctionConfig<void, void, "rpc" | "session", import("#pikku/function").PikkuFunctionSessionless<void, void, "rpc" | "session", import("#pikku/function").WiredServices, unknown> | import("#pikku/function").PikkuFunction<void, void, "rpc" | "session", import("#pikku/function").WiredServices>, undefined, undefined>;
+export declare const pikkuTanStackStart: import("#pikku/function").PikkuFunctionConfig<void, void, "rpc" | "session", import("#pikku/function").PikkuFunction<void, void, "rpc" | "session", import("#pikku/function").WiredServices> | import("#pikku/function").PikkuFunctionSessionless<void, void, "rpc" | "session", import("#pikku/function").WiredServices, unknown>, undefined, undefined>;

package/dist/src/functions/runtimes/websocket/pikku-command-websocket-typed.d.ts

@@ -1 +1 @@
-export declare const pikkuWebSocketTyped: import("#pikku/function").PikkuFunctionConfig<void, void, "rpc" | "session", import("#pikku/function").PikkuFunctionSessionless<void, void, "rpc" | "session", import("#pikku/function").WiredServices, unknown> | import("#pikku/function").PikkuFunction<void, void, "rpc" | "session", import("#pikku/function").WiredServices>, undefined, undefined>;
+export declare const pikkuWebSocketTyped: import("#pikku/function").PikkuFunctionConfig<void, void, "rpc" | "session", import("#pikku/function").PikkuFunction<void, void, "rpc" | "session", import("#pikku/function").WiredServices> | import("#pikku/function").PikkuFunctionSessionless<void, void, "rpc" | "session", import("#pikku/function").WiredServices, unknown>, undefined, undefined>;

package/dist/src/functions/surface/build-surface-doc.js

@@ -1,6 +1,6 @@
 import { existsSync, readFileSync } from 'node:fs';
 import { dirname, join, relative, resolve, sep } from 'node:path';
-import { collectSurface } from './collect-surface.js';
+import { collectSurface, } from '@pikku/inspector/surface';
 import { ENTRY_POINT_EDITORIAL, LEAF_EDITORIAL, } from './surface-editorial.js';
 /** The specifier an application reaches its generated leaves through. */
 export const PIKKU_IMPORTS_SUBPATH = '#pikku/*';

package/dist/src/functions/surface/surface-doc.types.d.ts

@@ -1,4 +1,4 @@
-import type { SurfaceKind, SurfaceMember } from './collect-surface.js';
+import type { SurfaceKind, SurfaceMember } from '@pikku/inspector/surface';
 export type { SurfaceKind, SurfaceMember };
 /**
  * The order in which you meet these doors while building a service. It is the

package/dist/src/functions/surface/surface-editorial.js

@@ -34,6 +34,11 @@ export const LEAF_EDITORIAL = {
         skill: 'pikku-services',
         summary: 'Secrets a function can use without ever holding, declared here and resolved by the secrets service at runtime.',
     },
+    analytics: {
+        step: 'enhance it',
+        skill: null,
+        summary: 'The events a project can measure, declared by name so the generated ingest knows what to accept. Where they go is an AnalyticsService on singleton services; what a function records into is the analytics service on the invocation.',
+    },
     credentials: {
         step: 'enhance it',
         skill: null,

package/dist/src/functions/validate/pikku-barrel-checks.js

@@ -1,6 +1,6 @@
 import { readdir, readFile } from 'node:fs/promises';
 import { join, relative } from 'node:path';
-import ts from 'typescript';
+import { readModuleSpecifiers } from '@pikku/inspector';
 const SKIP_DIRS = new Set([
     'node_modules',
     '.git',
@@ -24,27 +24,7 @@ const isGenerated = (path) => path.includes('.gen.') || path.endsWith('.d.ts');
  * client and resolves to exactly what it names.
  */
 const isBarrel = (specifier) => specifier === '#pikku' || /^#pikku\/pikku-types\.gen(\.js)?$/.test(specifier);
-/**
- * Parsed rather than grepped: a project's own codegen templates hold the
- * specifiers they emit inside template literals, and those are output text
- * rather than imports the file itself makes.
- */
-const barrelImports = (file, content) => {
-    const source = ts.createSourceFile(file, content, ts.ScriptTarget.Latest, true);
-    const found = [];
-    for (const statement of source.statements) {
-        if (!ts.isImportDeclaration(statement) &&
-            !ts.isExportDeclaration(statement)) {
-            continue;
-        }
-        const moduleSpecifier = statement.moduleSpecifier;
-        if (!moduleSpecifier || !ts.isStringLiteral(moduleSpecifier))
-            continue;
-        if (isBarrel(moduleSpecifier.text))
-            found.push(moduleSpecifier.text);
-    }
-    return found;
-};
+const barrelImports = (file, content) => readModuleSpecifiers(file, content).filter(isBarrel);
 const collectSources = async (dir, out = []) => {
     let entries;
     try {

package/dist/src/functions/validate/validate.d.ts

@@ -3,9 +3,9 @@ export { readJsonSafe, readTextSafe } from './shared-checks.js';
 export declare const FindingSchema: z.ZodObject<{
     id: z.ZodString;
     severity: z.ZodEnum<{
-        warn: "warn";
         error: "error";
         info: "info";
+        warn: "warn";
     }>;
     message: z.ZodString;
     path: z.ZodString;
@@ -24,9 +24,9 @@ export declare const ValidateOutput: z.ZodObject<{
     findings: z.ZodArray<z.ZodObject<{
         id: z.ZodString;
         severity: z.ZodEnum<{
-            warn: "warn";
             error: "error";
             info: "info";
+            warn: "warn";
         }>;
         message: z.ZodString;
         path: z.ZodString;

package/dist/src/functions/validate/websocket-deps-checks.d.ts

@@ -4,7 +4,7 @@ import type { ValidateFinding } from './persona-checks.js';
  * optional peers of `@pikku/cli`, because Bun serves WebSockets natively
  * through `@pikku/bun-server` and a Bun project has no use for either.
  */
-export declare const NODE_WEBSOCKET_PACKAGES: readonly ["@pikku/ws", "ws"];
+export declare const NODE_WEBSOCKET_PACKAGES: readonly ['@pikku/ws', 'ws'];
 export type WebsocketDepsInput = {
     root: string;
     /** The runtime the CLI is running on. Bun needs neither package. */

package/dist/src/functions/wirings/agent/pikku-command-agent-types.d.ts

@@ -1 +1 @@
-export declare const pikkuAgentTypes: import("#pikku/function").PikkuFunctionConfig<void, void, "rpc" | "session", import("#pikku/function").PikkuFunctionSessionless<void, void, "rpc" | "session", import("#pikku/function").WiredServices, unknown> | import("#pikku/function").PikkuFunction<void, void, "rpc" | "session", import("#pikku/function").WiredServices>, undefined, undefined>;
+export declare const pikkuAgentTypes: import("#pikku/function").PikkuFunctionConfig<void, void, "rpc" | "session", import("#pikku/function").PikkuFunction<void, void, "rpc" | "session", import("#pikku/function").WiredServices> | import("#pikku/function").PikkuFunctionSessionless<void, void, "rpc" | "session", import("#pikku/function").WiredServices, unknown>, undefined, undefined>;

package/dist/src/functions/wirings/agent/pikku-command-agent.d.ts

@@ -1 +1 @@
-export declare const pikkuAgent: import("#pikku/function").PikkuFunctionConfig<void, boolean | undefined, "rpc" | "session", import("#pikku/function").PikkuFunctionSessionless<void, boolean | undefined, "rpc" | "session", import("#pikku/function").WiredServices, unknown> | import("#pikku/function").PikkuFunction<void, boolean | undefined, "rpc" | "session", import("#pikku/function").WiredServices>, undefined, undefined>;
+export declare const pikkuAgent: import("#pikku/function").PikkuFunctionConfig<void, boolean | undefined, "rpc" | "session", import("#pikku/function").PikkuFunction<void, boolean | undefined, "rpc" | "session", import("#pikku/function").WiredServices> | import("#pikku/function").PikkuFunctionSessionless<void, boolean | undefined, "rpc" | "session", import("#pikku/function").WiredServices, unknown>, undefined, undefined>;

package/dist/src/functions/wirings/agent/pikku-command-public-agent.d.ts

@@ -1 +1 @@
-export declare const pikkuPublicAgent: import("#pikku/function").PikkuFunctionConfig<void, boolean, "rpc" | "session", import("#pikku/function").PikkuFunctionSessionless<void, boolean, "rpc" | "session", import("#pikku/function").WiredServices, unknown> | import("#pikku/function").PikkuFunction<void, boolean, "rpc" | "session", import("#pikku/function").WiredServices>, undefined, undefined>;
+export declare const pikkuPublicAgent: import("#pikku/function").PikkuFunctionConfig<void, boolean, "rpc" | "session", import("#pikku/function").PikkuFunction<void, boolean, "rpc" | "session", import("#pikku/function").WiredServices> | import("#pikku/function").PikkuFunctionSessionless<void, boolean, "rpc" | "session", import("#pikku/function").WiredServices, unknown>, undefined, undefined>;

package/dist/src/functions/wirings/agent-scorer/pikku-command-agent-scorer.d.ts

@@ -1 +1 @@
-export declare const pikkuAgentScorer: import("#pikku/function").PikkuFunctionConfig<void, boolean | undefined, "rpc" | "session", import("#pikku/function").PikkuFunctionSessionless<void, boolean | undefined, "rpc" | "session", import("#pikku/function").WiredServices, unknown> | import("#pikku/function").PikkuFunction<void, boolean | undefined, "rpc" | "session", import("#pikku/function").WiredServices>, undefined, undefined>;
+export declare const pikkuAgentScorer: import("#pikku/function").PikkuFunctionConfig<void, boolean | undefined, "rpc" | "session", import("#pikku/function").PikkuFunction<void, boolean | undefined, "rpc" | "session", import("#pikku/function").WiredServices> | import("#pikku/function").PikkuFunctionSessionless<void, boolean | undefined, "rpc" | "session", import("#pikku/function").WiredServices, unknown>, undefined, undefined>;

package/dist/src/functions/wirings/analytics/pikku-command-analytics.d.ts

@@ -0,0 +1,11 @@
+/**
+ * ESM specifier from the generated ingest to one of the app's
+ * `defineAnalyticsEvents` declarations.
+ *
+ * Relative rather than aliased: the declaration is ordinary project source that
+ * a consumer may put anywhere, and a `#pikku` leaf would imply pikku generated
+ * it. Emitted with a `.js` extension and a leading `./` so the specifier is
+ * valid ESM rather than a bare module id.
+ */
+export declare const analyticsSpecifier: (analyticsFile: string, declarationFile: string) => string;
+export declare const pikkuAnalytics: import("#pikku/function").PikkuFunctionConfig<void, boolean, "rpc" | "session", import("#pikku/function").PikkuFunction<void, boolean, "rpc" | "session", import("#pikku/function").WiredServices> | import("#pikku/function").PikkuFunctionSessionless<void, boolean, "rpc" | "session", import("#pikku/function").WiredServices, unknown>, undefined, undefined>;

package/dist/src/functions/wirings/analytics/pikku-command-analytics.js

@@ -0,0 +1,66 @@
+import { dirname, relative } from 'node:path';
+import { pikkuSessionlessFunc } from '#pikku/function';
+import { getLeafImportPath } from '../../../utils/leaf-import-path.js';
+import { writeFileInDir } from '../../../utils/file-writer.js';
+import { logCommandInfoAndTime } from '../../../middleware/log-command-info-and-time.js';
+import { removeLegacyScaffoldFile } from '../../../utils/remove-legacy-scaffold-file.js';
+import { buildAnalyticsEventsMeta, serializeAnalytics, } from './serialize-analytics.js';
+import { analyticsSchemasFile } from '../../../utils/analytics-schemas-file.js';
+import { isDeployCodegen } from '../../../utils/is-deploy-codegen.js';
+/**
+ * ESM specifier from the generated ingest to one of the app's
+ * `defineAnalyticsEvents` declarations.
+ *
+ * Relative rather than aliased: the declaration is ordinary project source that
+ * a consumer may put anywhere, and a `#pikku` leaf would imply pikku generated
+ * it. Emitted with a `.js` extension and a leading `./` so the specifier is
+ * valid ESM rather than a bare module id.
+ */
+export const analyticsSpecifier = (analyticsFile, declarationFile) => {
+    const rel = relative(dirname(analyticsFile), declarationFile)
+        .replace(/\.tsx?$/, '.js')
+        .split(/[\\/]/)
+        .join('/');
+    return rel.startsWith('.') ? rel : `./${rel}`;
+};
+export const pikkuAnalytics = pikkuSessionlessFunc({
+    func: async ({ logger, config, variables, getInspectorState }) => {
+        if (await isDeployCodegen(variables)) {
+            return false;
+        }
+        const { analytics } = await getInspectorState();
+        // Before the scaffold gate: a project that declares events without wiring
+        // the ingest still measures things, and the console still has to list them.
+        if (config.analyticsMetaJsonFile) {
+            await writeFileInDir(logger, config.analyticsMetaJsonFile, JSON.stringify(buildAnalyticsEventsMeta(analytics ?? []), null, 2));
+        }
+        if (!config.scaffold?.analytics || !config.analyticsFile) {
+            return false;
+        }
+        // Refuse rather than emit an ingest that imports a declaration which is not
+        // there: the generated wire would fail to typecheck, pointing at generated
+        // code instead of at the one thing the project actually has to supply.
+        if (!analytics || analytics.length === 0) {
+            logger.error(`scaffold.analytics is enabled but no defineAnalyticsEvents declaration was found. ` +
+                `Add one in a source directory: \`export const analyticsEvents = defineAnalyticsEvents({ page_viewed: z.object({ path: z.string() }) })\`.`);
+            return false;
+        }
+        const leaf = (name) => getLeafImportPath(config.analyticsFile, name, config);
+        const declarations = analytics.map((declaration) => ({
+            specifier: analyticsSpecifier(config.analyticsFile, declaration.file),
+            variable: declaration.variable,
+            events: declaration.events,
+        }));
+        const { schemas, functions } = serializeAnalytics(leaf, declarations, config.globalHTTPPrefix || '');
+        await writeFileInDir(logger, analyticsSchemasFile(config.analyticsFile), schemas);
+        await writeFileInDir(logger, config.analyticsFile, functions);
+        await removeLegacyScaffoldFile(config.analyticsFile);
+        return true;
+    },
+    middleware: [
+        logCommandInfoAndTime({
+            commandStart: 'Generating Analytics Ingest',
+            commandEnd: 'Generated Analytics Ingest',
+        }),
+    ],
+});

package/dist/src/functions/wirings/analytics/serialize-analytics.d.ts

@@ -0,0 +1,30 @@
+import type { AnalyticsEventsMeta } from '@pikku/core/analytics';
+export interface AnalyticsGenOutput {
+    schemas: string;
+    functions: string;
+}
+/** One `defineAnalyticsEvents` declaration, as the inspector found it. */
+export interface AnalyticsDeclarationMeta {
+    file: string;
+    variable: string;
+    events: string[];
+    props?: Record<string, Record<string, string>>;
+}
+/**
+ * The declarations flattened to one entry per event, which is how every reader
+ * wants them: an event name belongs to exactly one declaration — the inspector
+ * refuses a second — so keying by name loses nothing and spares each caller the
+ * walk.
+ */
+export declare const buildAnalyticsEventsMeta: (declarations: readonly AnalyticsDeclarationMeta[]) => AnalyticsEventsMeta;
+export interface AnalyticsDeclaration {
+    specifier: string;
+    variable: string;
+    events: string[];
+}
+/**
+ * Generate the ingest wire and its schemas. No middleware is emitted: an origin
+ * lock is not a security boundary and rejects every native client, so which
+ * guard belongs here is the project's call.
+ */
+export declare const serializeAnalytics: (leaf: (name: string) => string, declarations: AnalyticsDeclaration[], globalHTTPPrefix?: string) => AnalyticsGenOutput;