@pikku/cli 0.12.25 → 0.12.27

package/dist/.pikku/queue/pikku-queue-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.25
+ * This file was generated by @pikku/cli@0.12.27
  */
 /**
  * Queue-specific type definitions for tree-shaking optimization

package/dist/.pikku/queue/pikku-queue-workers-wirings-meta.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.25
+ * This file was generated by @pikku/cli@0.12.27
  */
 import { pikkuState } from '@pikku/core/internal';
 import metaData from './pikku-queue-workers-wirings-meta.gen.json' with { type: 'json' };

package/dist/.pikku/queue/pikku-queue-workers-wirings.gen.d.ts

@@ -1,4 +1,4 @@
 /**
- * This file was generated by @pikku/cli@0.12.25
+ * This file was generated by @pikku/cli@0.12.27
  */
 import '../../src/scaffold/rpc-remote.gen.js';

package/dist/.pikku/queue/pikku-queue-workers-wirings.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.25
+ * This file was generated by @pikku/cli@0.12.27
  */
 /* The files with an addQueueWorkers function call */
 import '../../src/scaffold/rpc-remote.gen.js';

package/dist/.pikku/rpc/pikku-rpc-wirings-meta.internal.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.25
+ * This file was generated by @pikku/cli@0.12.27
  */
 import { pikkuState } from '@pikku/core/internal';
 import metaData from './pikku-rpc-wirings-meta.internal.gen.json' with { type: 'json' };

package/dist/.pikku/rpc/pikku-rpc-wirings-meta.internal.gen.json

@@ -47,6 +47,7 @@
     "dbMigrate": "dbMigrate",
     "dbSeed": "dbSeed",
     "dbReset": "dbReset",
+    "dbAudit": "dbAudit",
     "workspaceValidate": "workspaceValidate",
     "pikkuVersionsInit": "pikkuVersionsInit",
     "pikkuTestsInit": "pikkuTestsInit",
@@ -98,15 +99,17 @@
     "pikkuChannelTypes": "pikkuChannelTypes",
     "pikkuChannelsMap": "pikkuChannelsMap",
     "pikkuCommandChannels": "pikkuCommandChannels",
+    "pikkuCLIEntry": "pikkuCLIEntry",
+    "pikkuCLI": "pikkuCLI",
     "pikkuConsoleFunctions": "pikkuConsoleFunctions",
     "pikkuNodeTypes": "pikkuNodeTypes",
     "pikkuNodesMeta": "pikkuNodesMeta",
     "pikkuCredentials": "pikkuCredentials",
-    "pikkuGateway": "pikkuGateway",
     "pikkuFunctionTypesSplit": "pikkuFunctionTypesSplit",
     "pikkuFunctionTypes": "pikkuFunctionTypes",
     "pikkuFunctions": "pikkuFunctions",
     "pikkuServices": "pikkuServices",
+    "pikkuGateway": "pikkuGateway",
     "pikkuHTTPMap": "pikkuHTTPMap",
     "pikkuCommandHTTP": "pikkuCommandHTTP",
     "pikkuHTTPTypes": "pikkuHTTPTypes",
@@ -114,13 +117,16 @@
     "pikkuMCPJSON": "pikkuMCPJSON",
     "pikkuMCPTypes": "pikkuMCPTypes",
     "pikkuMCP": "pikkuMCP",
-    "pikkuCLIEntry": "pikkuCLIEntry",
-    "pikkuCLI": "pikkuCLI",
+    "pikkuMiddleware": "pikkuMiddleware",
     "pikkuSecretDefinitionTypes": "pikkuSecretDefinitionTypes",
     "pikkuVariableDefinitionTypes": "pikkuVariableDefinitionTypes",
     "pikkuPackage": "pikkuPackage",
     "pikkuPermissions": "pikkuPermissions",
-    "pikkuMiddleware": "pikkuMiddleware",
+    "pikkuCommandQueueMap": "pikkuCommandQueueMap",
+    "pikkuQueueTypes": "pikkuQueueTypes",
+    "pikkuCommandQueue": "pikkuCommandQueue",
+    "pikkuQueueMap": "pikkuQueueMap",
+    "pikkuQueue": "pikkuQueue",
     "pikkuEventsScaffold": "pikkuEventsScaffold",
     "pikkuPublicRPC": "pikkuPublicRPC",
     "pikkuRemoteRPC": "pikkuRemoteRPC",
@@ -133,10 +139,5 @@
     "pikkuTriggerTypes": "pikkuTriggerTypes",
     "pikkuTrigger": "pikkuTrigger",
     "pikkuVariables": "pikkuVariables",
-    "pikkuWorkflowRoutes": "pikkuWorkflowRoutes",
-    "pikkuCommandQueueMap": "pikkuCommandQueueMap",
-    "pikkuQueueTypes": "pikkuQueueTypes",
-    "pikkuCommandQueue": "pikkuCommandQueue",
-    "pikkuQueueMap": "pikkuQueueMap",
-    "pikkuQueue": "pikkuQueue"
+    "pikkuWorkflowRoutes": "pikkuWorkflowRoutes"
 }

package/dist/.pikku/scheduler/pikku-scheduler-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.25
+ * This file was generated by @pikku/cli@0.12.27
  */
 /**
  * Scheduler-specific type definitions for tree-shaking optimization

package/dist/.pikku/scheduler/pikku-scheduler-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.25
+ * This file was generated by @pikku/cli@0.12.27
  */
 /**
  * Scheduler-specific type definitions for tree-shaking optimization

package/dist/.pikku/schemas/register.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.25
+ * This file was generated by @pikku/cli@0.12.27
  */
 import { addSchema } from '@pikku/core/schema';
 import * as PikkuSchemasOutput from './schemas/PikkuSchemasOutput.schema.json' with { type: 'json' };
@@ -106,6 +106,8 @@ import * as DbSeedInput from './schemas/DbSeedInput.schema.json' with { type: 'j
 addSchema('DbSeedInput', DbSeedInput);
 import * as DbResetInput from './schemas/DbResetInput.schema.json' with { type: 'json' };
 addSchema('DbResetInput', DbResetInput);
+import * as DbAuditInput from './schemas/DbAuditInput.schema.json' with { type: 'json' };
+addSchema('DbAuditInput', DbAuditInput);
 import * as WorkspaceValidateInput from './schemas/WorkspaceValidateInput.schema.json' with { type: 'json' };
 addSchema('WorkspaceValidateInput', WorkspaceValidateInput);
 import * as WorkspaceValidateOutput from './schemas/WorkspaceValidateOutput.schema.json' with { type: 'json' };
@@ -182,20 +184,20 @@ import * as PikkuPublicAgentOutput from './schemas/PikkuPublicAgentOutput.schema
 addSchema('PikkuPublicAgentOutput', PikkuPublicAgentOutput);
 import * as PikkuCommandChannelsOutput from './schemas/PikkuCommandChannelsOutput.schema.json' with { type: 'json' };
 addSchema('PikkuCommandChannelsOutput', PikkuCommandChannelsOutput);
-import * as PikkuCLIEntryOutput from './schemas/PikkuCLIEntryOutput.schema.json' with { type: 'json' };
-addSchema('PikkuCLIEntryOutput', PikkuCLIEntryOutput);
-import * as PikkuCLIOutput from './schemas/PikkuCLIOutput.schema.json' with { type: 'json' };
-addSchema('PikkuCLIOutput', PikkuCLIOutput);
 import * as PikkuConsoleFunctionsOutput from './schemas/PikkuConsoleFunctionsOutput.schema.json' with { type: 'json' };
 addSchema('PikkuConsoleFunctionsOutput', PikkuConsoleFunctionsOutput);
 import * as PikkuNodesMetaOutput from './schemas/PikkuNodesMetaOutput.schema.json' with { type: 'json' };
 addSchema('PikkuNodesMetaOutput', PikkuNodesMetaOutput);
+import * as PikkuCLIEntryOutput from './schemas/PikkuCLIEntryOutput.schema.json' with { type: 'json' };
+addSchema('PikkuCLIEntryOutput', PikkuCLIEntryOutput);
+import * as PikkuCLIOutput from './schemas/PikkuCLIOutput.schema.json' with { type: 'json' };
+addSchema('PikkuCLIOutput', PikkuCLIOutput);
+import * as PikkuGatewayOutput from './schemas/PikkuGatewayOutput.schema.json' with { type: 'json' };
+addSchema('PikkuGatewayOutput', PikkuGatewayOutput);
 import * as PikkuFunctionTypesSplitInput from './schemas/PikkuFunctionTypesSplitInput.schema.json' with { type: 'json' };
 addSchema('PikkuFunctionTypesSplitInput', PikkuFunctionTypesSplitInput);
 import * as PikkuFunctionsOutput from './schemas/PikkuFunctionsOutput.schema.json' with { type: 'json' };
 addSchema('PikkuFunctionsOutput', PikkuFunctionsOutput);
-import * as PikkuGatewayOutput from './schemas/PikkuGatewayOutput.schema.json' with { type: 'json' };
-addSchema('PikkuGatewayOutput', PikkuGatewayOutput);
 import * as PikkuCommandHTTPOutput from './schemas/PikkuCommandHTTPOutput.schema.json' with { type: 'json' };
 addSchema('PikkuCommandHTTPOutput', PikkuCommandHTTPOutput);
 import * as PikkuHTTPOutput from './schemas/PikkuHTTPOutput.schema.json' with { type: 'json' };
@@ -214,14 +216,14 @@ import * as PikkuQueueOutput from './schemas/PikkuQueueOutput.schema.json' with
 addSchema('PikkuQueueOutput', PikkuQueueOutput);
 import * as PikkuEventsScaffoldOutput from './schemas/PikkuEventsScaffoldOutput.schema.json' with { type: 'json' };
 addSchema('PikkuEventsScaffoldOutput', PikkuEventsScaffoldOutput);
-import * as PikkuSchedulerOutput from './schemas/PikkuSchedulerOutput.schema.json' with { type: 'json' };
-addSchema('PikkuSchedulerOutput', PikkuSchedulerOutput);
 import * as PikkuPublicRPCOutput from './schemas/PikkuPublicRPCOutput.schema.json' with { type: 'json' };
 addSchema('PikkuPublicRPCOutput', PikkuPublicRPCOutput);
 import * as PikkuRemoteRPCOutput from './schemas/PikkuRemoteRPCOutput.schema.json' with { type: 'json' };
 addSchema('PikkuRemoteRPCOutput', PikkuRemoteRPCOutput);
 import * as PikkuRPCOutput from './schemas/PikkuRPCOutput.schema.json' with { type: 'json' };
 addSchema('PikkuRPCOutput', PikkuRPCOutput);
+import * as PikkuSchedulerOutput from './schemas/PikkuSchedulerOutput.schema.json' with { type: 'json' };
+addSchema('PikkuSchedulerOutput', PikkuSchedulerOutput);
 import * as PikkuTriggerTypesInput from './schemas/PikkuTriggerTypesInput.schema.json' with { type: 'json' };
 addSchema('PikkuTriggerTypesInput', PikkuTriggerTypesInput);
 import * as PikkuTriggerOutput from './schemas/PikkuTriggerOutput.schema.json' with { type: 'json' };

package/dist/.pikku/schemas/schemas/DbAuditInput.schema.json

@@ -0,0 +1 @@
+{ "$schema": "http://json-schema.org/draft-07/schema#", "type": "object", "additionalProperties": false, "definitions": {} }

package/dist/.pikku/schemas/schemas/PikkuTestsCoverageInput.schema.json

@@ -1 +1 @@
-{ "$schema": "http://json-schema.org/draft-07/schema#", "type": "object", "properties": { "noRun": { "type": "boolean" } }, "additionalProperties": false, "definitions": {} }
+{ "$schema": "http://json-schema.org/draft-07/schema#", "type": "object", "properties": { "noRun": { "type": "boolean" }, "aiOut": { "type": "string" } }, "additionalProperties": false, "definitions": {} }

package/dist/.pikku/secrets/pikku-secret-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.25
+ * This file was generated by @pikku/cli@0.12.27
  */
 export { wireSecret } from '@pikku/core/secret';
 export type { CoreSecret, SecretDefinitionMeta, SecretDefinitionsMeta } from '@pikku/core/secret';

package/dist/.pikku/secrets/pikku-secret-types.gen.js

@@ -1,4 +1,4 @@
 /**
- * This file was generated by @pikku/cli@0.12.25
+ * This file was generated by @pikku/cli@0.12.27
  */
 export { wireSecret } from '@pikku/core/secret';

package/dist/.pikku/secrets/pikku-secrets.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.25
+ * This file was generated by @pikku/cli@0.12.27
  */
 import { TypedSecretService as CoreTypedSecretService } from '@pikku/core/services';
 import type { SecretService } from '@pikku/core/services';

package/dist/.pikku/secrets/pikku-secrets.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.25
+ * This file was generated by @pikku/cli@0.12.27
  */
 import { TypedSecretService as CoreTypedSecretService } from '@pikku/core/services';
 const CREDENTIALS_META = {};

package/dist/.pikku/trigger/pikku-trigger-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.25
+ * This file was generated by @pikku/cli@0.12.27
  */
 /**
  * Trigger-specific type definitions for tree-shaking optimization

package/dist/.pikku/trigger/pikku-trigger-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.25
+ * This file was generated by @pikku/cli@0.12.27
  */
 /**
  * Trigger-specific type definitions for tree-shaking optimization

package/dist/.pikku/variables/pikku-variable-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.25
+ * This file was generated by @pikku/cli@0.12.27
  */
 export { wireVariable } from '@pikku/core/variable';
 export type { CoreVariable, VariableDefinitionMeta, VariableDefinitionsMeta } from '@pikku/core/variable';

package/dist/.pikku/variables/pikku-variable-types.gen.js

@@ -1,4 +1,4 @@
 /**
- * This file was generated by @pikku/cli@0.12.25
+ * This file was generated by @pikku/cli@0.12.27
  */
 export { wireVariable } from '@pikku/core/variable';

package/dist/.pikku/variables/pikku-variables.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.25
+ * This file was generated by @pikku/cli@0.12.27
  */
 import { TypedVariablesService as CoreTypedVariablesService } from '@pikku/core/services';
 import type { VariablesService } from '@pikku/core/services';

package/dist/.pikku/variables/pikku-variables.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.25
+ * This file was generated by @pikku/cli@0.12.27
  */
 import { TypedVariablesService as CoreTypedVariablesService } from '@pikku/core/services';
 const VARIABLES_META = {};

package/dist/.pikku/workflow/pikku-workflow-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.25
+ * This file was generated by @pikku/cli@0.12.27
  */
 import { WorkflowCancelledException } from '@pikku/core/workflow';
 import { template } from '@pikku/core/workflow';

package/dist/.pikku/workflow/pikku-workflow-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.25
+ * This file was generated by @pikku/cli@0.12.27
  */
 import { WorkflowCancelledException } from '@pikku/core/workflow';
 import { template } from '@pikku/core/workflow';

package/dist/.pikku/workflow/pikku-workflow-wirings-meta.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.25
+ * This file was generated by @pikku/cli@0.12.27
  */
 import { pikkuState } from '@pikku/core/internal';
 import allWorkflowMeta from './meta/allWorkflow.gen.json' with { type: 'json' };

package/dist/.pikku/workflow/pikku-workflow-wirings.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.25
+ * This file was generated by @pikku/cli@0.12.27
  */
 import { addWorkflow } from '@pikku/core/workflow';
 import './pikku-workflow-wirings-meta.gen.js';

package/dist/bin/pikku-bin.mjs

@@ -11,8 +11,8 @@ async function checkForUpdate() {
     })
     if (!res.ok) return
     const { version: latest } = await res.json()
-    if (latest !== '0.12.25') {
-      process.stderr.write(`\n  Update available  0.12.25 → ${latest}\n  brew upgrade pikku  or  npm install -g @pikku/cli\n\n`)
+    if (latest !== '0.12.27') {
+      process.stderr.write(`\n  Update available  0.12.27 → ${latest}\n  brew upgrade pikku  or  npm install -g @pikku/cli\n\n`)
     }
   } catch {}
 }

package/dist/src/cli.wiring.js

@@ -18,6 +18,7 @@ import { dev } from './functions/commands/dev.js';
 import { dbMigrate } from './functions/commands/db-migrate.js';
 import { dbSeed } from './functions/commands/db-seed.js';
 import { dbReset } from './functions/commands/db-reset.js';
+import { dbAudit } from './functions/commands/db-audit.js';
 import { workspaceValidate, renderWorkspaceValidate, } from './functions/commands/workspace-validate.js';
 import { pikkuVersionsInit } from './functions/commands/versions-init.js';
 import { pikkuTestsInit } from './functions/commands/tests-init.js';
@@ -230,6 +231,10 @@ wireCLI({
                     func: dbReset,
                     description: 'Wipe and recreate the dev database (migrate + seed)',
                 }),
+                audit: pikkuCLICommand({
+                    func: dbAudit,
+                    description: 'Report column classifications from the manifest and flag columns with no anonymize strategy',
+                }),
             },
         },
         workspace: {
@@ -460,6 +465,9 @@ wireCLI({
                         noRun: {
                             description: 'Skip running the suite and only re-analyse an existing coverage-final.json',
                         },
+                        aiOut: {
+                            description: 'Write an AI-ready coverage prompt to the given file path (use - for stdout)',
+                        },
                     },
                 }),
             },

package/dist/src/fabric/functions/validate-core.js

@@ -90,10 +90,10 @@ export async function runFabricValidate(startDir = process.cwd()) {
                 e('missing-kysely-sqlite', 'services.ts imports @pikku/kysely-sqlite but it is not in root package.json', rootPkgPath, 'Add "@pikku/kysely-sqlite": "file:./vendor/pikku-kysely-sqlite.tgz" to dependencies');
             }
         }
-        // db/migrations/ — presence, numbering and SQL dialect
-        const migrationsDir = join(fnDir, 'db', 'migrations');
+        // db/sqlite/ — presence, numbering and SQL dialect
+        const migrationsDir = join(fnDir, 'db', 'sqlite');
         if (!existsSync(migrationsDir)) {
-            e('migrations-dir-missing', 'packages/functions/db/migrations/ not found', migrationsDir, 'Create db/migrations/ and add numbered .sql files (e.g. 0001-init.sql) using SQLite-compatible syntax');
+            e('migrations-dir-missing', 'packages/functions/db/sqlite/ not found', migrationsDir, 'Create db/sqlite/ and add numbered .sql files (e.g. 0001-init.sql) using SQLite-compatible syntax');
         }
         else {
             try {
@@ -125,10 +125,10 @@ export async function runFabricValidate(startDir = process.cwd()) {
                 // readdir failure — skip
             }
         }
-        // db/seed.sql
-        const seedPath = join(fnDir, 'db', 'seed.sql');
+        // db/sqlite-seed.sql
+        const seedPath = join(fnDir, 'db', 'sqlite-seed.sql');
         if (!existsSync(seedPath)) {
-            e('seed-sql-missing', 'packages/functions/db/seed.sql not found', seedPath, 'Create db/seed.sql with idempotent INSERT OR IGNORE statements for demo/test data');
+            e('seed-sql-missing', 'packages/functions/db/sqlite-seed.sql not found', seedPath, 'Create db/sqlite-seed.sql with idempotent INSERT OR IGNORE statements for demo/test data');
         }
     }
     const appsDir = join(root, 'apps');

package/dist/src/fabric/functions/validate.function.js

@@ -256,7 +256,7 @@ export async function runValidate(startDir = process.cwd()) {
             info('wirings-dir-missing', 'packages/functions/src/wirings/ not found', join(fnDir, 'src', 'wirings'), 'Create src/wirings/ for transport bindings: *.http.ts, *.queue.ts, *.schedule.ts, *.channel.ts, *.cli.ts');
         }
         if (!existsSync(join(fnDir, 'src', 'config.ts'))) {
-            info('config-missing', 'packages/functions/src/config.ts not found', join(fnDir, 'src', 'config.ts'), 'Create src/config.ts: export const createConfig = pikkuConfig(async () => ({ dev: { db: true } }))');
+            info('config-missing', 'packages/functions/src/config.ts not found', join(fnDir, 'src', 'config.ts'), "Create src/config.ts: export const createConfig = pikkuConfig(async () => ({ sqliteDb: '.pikku-runtime/dev.db' }))");
         }
     }
     // ── apps/ vs fabric.config.json frontends ─────────────────────────────

package/dist/src/functions/commands/db-audit.d.ts

@@ -0,0 +1 @@
+export declare const dbAudit: import("#pikku").PikkuFunctionConfig<{}, void, "rpc" | "session", import("#pikku").PikkuFunctionSessionless<{}, void, "rpc" | "session", import("#pikku").Services> | import("#pikku").PikkuFunction<{}, void, "rpc" | "session", import("#pikku").Services>, undefined, undefined>;

package/dist/src/functions/commands/db-audit.js

@@ -0,0 +1,67 @@
+import { pikkuSessionlessFunc } from '#pikku';
+import { resolveDb } from '../db/local-db.js';
+import { loadUserConfigForDb } from './db-shared.js';
+export const dbAudit = pikkuSessionlessFunc({
+    remote: true,
+    func: async ({ logger, config }) => {
+        const userConfig = await loadUserConfigForDb({ config, logger });
+        if (!userConfig)
+            return;
+        const resolved = resolveDb(userConfig, config.rootDir, config.outDir, config.runtimeDir);
+        if (!resolved) {
+            logger.error('pikku db audit: no database configured — set sqliteDb or postgresUrl in your createConfig.');
+            throw new Error('no database configured');
+        }
+        let manifest;
+        try {
+            const mod = await import(resolved.manifestFile);
+            manifest = mod.classificationManifest;
+        }
+        catch {
+            logger.error(`pikku db audit: classification manifest not found at ${resolved.manifestFile}.\n` +
+                `  Run \`pikku db migrate\` to generate it.`);
+            throw new Error('classification manifest not found');
+        }
+        let publicCount = 0;
+        let privateCount = 0;
+        let secretCount = 0;
+        const noStrategyColumns = [];
+        const secretColumns = [];
+        logger.info('Classification audit:');
+        for (const [table, cols] of Object.entries(manifest.tables)) {
+            logger.info(`  ${table}:`);
+            for (const [col, info] of Object.entries(cols)) {
+                const { classification, anonymize_strategy } = info;
+                const strategyLabel = anonymize_strategy ?? '(null → will be nulled on clone)';
+                if (classification === 'public') {
+                    publicCount++;
+                    logger.info(`    ${col.padEnd(30)} public`);
+                }
+                else if (classification === 'secret') {
+                    secretCount++;
+                    secretColumns.push(`${table}.${col}`);
+                    if (!anonymize_strategy)
+                        noStrategyColumns.push(`${table}.${col}`);
+                    logger.info(`    ${col.padEnd(30)} secret   ${strategyLabel}`);
+                }
+                else {
+                    privateCount++;
+                    if (!anonymize_strategy)
+                        noStrategyColumns.push(`${table}.${col}`);
+                    logger.info(`    ${col.padEnd(30)} private  ${strategyLabel}`);
+                }
+            }
+        }
+        const total = publicCount + privateCount + secretCount;
+        logger.info('');
+        logger.info(`Summary: ${total} columns total — ` +
+            `${publicCount} public, ${privateCount} private, ${secretCount} secret`);
+        if (secretColumns.length > 0) {
+            logger.info(`Secret columns (extra-sensitive): ${secretColumns.join(', ')}`);
+        }
+        if (noStrategyColumns.length > 0) {
+            logger.warn(`${noStrategyColumns.length} private/secret column(s) have no anonymize strategy ` +
+                `and will be NULLed on clone: ${noStrategyColumns.join(', ')}`);
+        }
+    },
+});

package/dist/src/functions/commands/db-migrate.js

@@ -1,19 +1,16 @@
 import { pikkuSessionlessFunc } from '#pikku';
-import { resolveLocalDb, migrateAndCodegen } from '../db/local-db.js';
+import { resolveDb, migrateAndCodegen } from '../db/local-db.js';
 import { loadUserConfigForDb } from './db-shared.js';
 export const dbMigrate = pikkuSessionlessFunc({
     remote: true,
     func: async ({ logger, config }) => {
-        const userConfig = await loadUserConfigForDb({
-            config,
-            logger,
-        });
+        const userConfig = await loadUserConfigForDb({ config, logger });
         if (!userConfig)
             return;
-        const resolved = resolveLocalDb(userConfig.dev?.db, config.rootDir, config.outDir, config.runtimeDir);
+        const resolved = resolveDb(userConfig, config.rootDir, config.outDir, config.runtimeDir);
         if (!resolved) {
-            logger.error('pikku db migrate: dev.db is not configured in your pikku config.');
-            throw new Error('dev.db not configured');
+            logger.error('pikku db migrate: no database configured — set sqliteDb or postgresUrl in your createConfig.');
+            throw new Error('no database configured');
         }
         const { migrate, codegen, zod } = await migrateAndCodegen(resolved);
         if (migrate.applied.length === 0) {

package/dist/src/functions/commands/db-reset.js

@@ -1,19 +1,20 @@
 import { pikkuSessionlessFunc } from '#pikku';
-import { resolveLocalDb, reset, migrateAndCodegen, seed, } from '../db/local-db.js';
+import { resolveDb, reset, migrateAndCodegen, seed } from '../db/local-db.js';
 import { loadUserConfigForDb } from './db-shared.js';
 export const dbReset = pikkuSessionlessFunc({
     remote: true,
     func: async ({ logger, config }) => {
-        const userConfig = await loadUserConfigForDb({
-            config,
-            logger,
-        });
+        const userConfig = await loadUserConfigForDb({ config, logger });
         if (!userConfig)
             return;
-        const resolved = resolveLocalDb(userConfig.dev?.db, config.rootDir, config.outDir, config.runtimeDir);
+        const resolved = resolveDb(userConfig, config.rootDir, config.outDir, config.runtimeDir);
         if (!resolved) {
-            logger.error('pikku db reset: dev.db is not configured in your pikku config.');
-            throw new Error('dev.db not configured');
+            logger.error('pikku db reset: no database configured — set sqliteDb in your createConfig.');
+            throw new Error('no database configured');
+        }
+        if (resolved.dialect !== 'sqlite') {
+            logger.error('pikku db reset: reset is only supported for SQLite databases.');
+            throw new Error('reset not supported for postgres');
         }
         reset(resolved, config.rootDir);
         logger.info(`db reset: removed ${resolved.dbFile}`);

package/dist/src/functions/commands/db-seed.js

@@ -1,19 +1,20 @@
 import { pikkuSessionlessFunc } from '#pikku';
-import { resolveLocalDb, seed } from '../db/local-db.js';
+import { resolveDb, seed } from '../db/local-db.js';
 import { loadUserConfigForDb } from './db-shared.js';
 export const dbSeed = pikkuSessionlessFunc({
     remote: true,
     func: async ({ logger, config }) => {
-        const userConfig = await loadUserConfigForDb({
-            config,
-            logger,
-        });
+        const userConfig = await loadUserConfigForDb({ config, logger });
         if (!userConfig)
             return;
-        const resolved = resolveLocalDb(userConfig.dev?.db, config.rootDir, config.outDir, config.runtimeDir);
+        const resolved = resolveDb(userConfig, config.rootDir, config.outDir, config.runtimeDir);
         if (!resolved) {
-            logger.error('pikku db seed: dev.db is not configured in your pikku config.');
-            throw new Error('dev.db not configured');
+            logger.error('pikku db seed: no database configured — set sqliteDb in your createConfig.');
+            throw new Error('no database configured');
+        }
+        if (resolved.dialect !== 'sqlite') {
+            logger.error('pikku db seed: seed is only supported for SQLite databases.');
+            throw new Error('seed not supported for postgres');
         }
         const result = await seed(resolved);
         if (!result.applied) {

package/dist/src/functions/commands/db-shared.d.ts

@@ -1,8 +1,6 @@
-import type { DevDbConfig } from '../db/local-db.js';
 export interface UserConfigShape {
-    dev?: {
-        db?: DevDbConfig;
-    };
+    sqliteDb?: string;
+    postgresUrl?: string;
     [key: string]: unknown;
 }
 interface LoadOptions {

package/dist/src/functions/commands/db-shared.js

@@ -18,12 +18,22 @@ function findUserConfigFactoryFile(rootDir, srcDirectories) {
 }
 export async function loadUserConfigForDb(options) {
     const { config, logger } = options;
-    const hasConventionalDbAssets = existsSync(join(config.rootDir, 'db', 'migrations')) ||
-        existsSync(join(config.rootDir, 'db', 'seed.sql'));
+    const hasSqliteDbAssets = existsSync(join(config.rootDir, 'db', 'sqlite'));
+    const hasPostgresDbAssets = existsSync(join(config.rootDir, 'db', 'postgres'));
+    const hasConventionalDbAssets = hasSqliteDbAssets || hasPostgresDbAssets;
+    const getFallbackConfig = () => {
+        if (hasSqliteDbAssets)
+            return { sqliteDb: '.pikku-runtime/dev.db' };
+        if (hasPostgresDbAssets) {
+            logger.error('Postgres assets detected but postgresUrl is not configured in createConfig.');
+            return null;
+        }
+        return null;
+    };
     const configFactoryFile = findUserConfigFactoryFile(config.rootDir, config.srcDirectories);
     if (!configFactoryFile) {
         if (hasConventionalDbAssets) {
-            return { dev: { db: true } };
+            return getFallbackConfig();
         }
         logger.error('createConfig must be defined in your project');
         return null;
@@ -35,7 +45,7 @@ export async function loadUserConfigForDb(options) {
     catch (error) {
         if (hasConventionalDbAssets) {
             logger.warn(`Falling back to default local db config because '${configFactoryFile}' could not be loaded: ${error.message}`);
-            return { dev: { db: true } };
+            return getFallbackConfig();
         }
         throw error;
     }
@@ -43,7 +53,7 @@ export async function loadUserConfigForDb(options) {
     if (typeof userCreateConfig !== 'function') {
         if (hasConventionalDbAssets) {
             logger.warn(`Falling back to default local db config because '${configFactoryFile}' does not export createConfig`);
-            return { dev: { db: true } };
+            return getFallbackConfig();
         }
         logger.error(`Expected 'createConfig' in '${configFactoryFile}' to be a function`);
         return null;