@pikku/cli 0.12.25 → 0.12.27

package/dist/src/functions/db/local-db.d.ts

@@ -1,48 +1,42 @@
 import type { Kysely } from 'kysely';
-import { type MigrateResult } from './sql-migrator.js';
-import { type CodegenResult } from './sqlite-codegen.js';
+import { type MigrateResult } from './db-migrator.js';
+import { type CodegenResult } from './db-codegen.js';
 import { type ZodCodegenResult } from './zod-codegen.js';
-import { type SeedResult } from './seed.js';
-export type DevDbConfig = true | {
-    file?: string;
-};
-export interface ResolvedLocalDb {
-    dbFile: string;
-    runtimeDir: string;
+import { type SeedResult } from './sqlite/seed.js';
+import type { UserConfigShape } from '../commands/db-shared.js';
+interface ResolvedDbBase {
     migrationsDir: string;
     seedFile: string;
     schemaFile: string;
     coercionFile: string;
+    manifestFile: string;
     zodFile: string;
     camelCase: boolean;
 }
+export interface ResolvedSqliteDb extends ResolvedDbBase {
+    dialect: 'sqlite';
+    dbFile: string;
+    runtimeDir: string;
+}
+export interface ResolvedPostgresDb extends ResolvedDbBase {
+    dialect: 'postgres';
+    connectionString: string;
+}
+export type ResolvedDb = ResolvedSqliteDb | ResolvedPostgresDb;
 /**
- * Resolve a DevDbConfig into absolute paths.
- * - dbFile lives under runtimeDir (default: <rootDir>/.pikku-runtime)
- * - schema/coercion/zod are generated into outDir/db
- * - migrations and seed are authored source under rootDir/db
+ * Resolve a UserConfigShape into an absolute-path descriptor.
+ * Returns null when neither sqliteDb nor postgresUrl is configured.
  */
-export declare function resolveLocalDb(config: DevDbConfig | undefined, rootDir: string, outDir: string, runtimeDir?: string): ResolvedLocalDb | null;
+export declare function resolveDb(userConfig: UserConfigShape, rootDir: string, outDir: string, runtimeDir?: string): ResolvedDb | null;
+/** @deprecated Use resolveDb(userConfig, ...) instead. */
+export declare function resolveLocalDb(sqliteDb: string | undefined, rootDir: string, outDir: string, runtimeDir?: string): ResolvedSqliteDb | null;
 export interface MigrateAndCodegenOutcome {
     migrate: MigrateResult;
     codegen: CodegenResult;
     zod: ZodCodegenResult;
 }
-/**
- * Run the migrate routine (open → tracking-table → drift-check → apply →
- * codegen → close). Used by both `pikku db migrate` and `pikku dev` boot.
- */
-export declare function migrateAndCodegen(resolved: ResolvedLocalDb): Promise<MigrateAndCodegenOutcome>;
-export declare function seed(resolved: ResolvedLocalDb): Promise<SeedResult>;
-/**
- * Delete the dev DB file. Refuses if NODE_ENV is 'production' or the
- * resolved file lives outside the project root (defensive against
- * misconfigured absolute paths).
- */
-export declare function reset(resolved: ResolvedLocalDb, rootDir: string): void;
-/**
- * Construct the user-facing Kysely instance for the dev DB. Used by
- * `pikku dev` to populate inMemoryServices.kysely.
- * Wires the coercion plugin when db/coercion.gen.ts exists.
- */
-export declare function createKysely<DB>(resolved: ResolvedLocalDb): Promise<Kysely<DB>>;
+export declare function migrateAndCodegen(resolved: ResolvedDb): Promise<MigrateAndCodegenOutcome>;
+export declare function seed(resolved: ResolvedSqliteDb): Promise<SeedResult>;
+export declare function reset(resolved: ResolvedSqliteDb, rootDir: string): void;
+export declare function createKysely<DB>(resolved: ResolvedSqliteDb): Promise<Kysely<DB>>;
+export {};

package/dist/src/functions/db/local-db.js

@@ -1,65 +1,122 @@
 import { existsSync, mkdirSync, rmSync } from 'node:fs';
 import { resolve, isAbsolute, relative, dirname, join } from 'node:path';
-import { migrate } from './sql-migrator.js';
-import { generateSchemaTypes } from './sqlite-codegen.js';
+import { migrate } from './db-migrator.js';
+import { generateSchemaTypes } from './db-codegen.js';
 import { generateZodTypes } from './zod-codegen.js';
-import { seed as runSeed } from './seed.js';
 import { createCoercionPlugin } from './coercion-plugin.js';
-import { createSqliteKysely } from './sqlite-kysely.js';
-import { loadSqliteRuntime } from './sqlite-runtime.js';
+import { SqliteMigrationExecutor } from './sqlite/sqlite-migrator.js';
+import { SqliteIntrospector } from './sqlite/sqlite-introspector.js';
+import { createSqliteKysely } from './sqlite/sqlite-kysely.js';
+import { loadSqliteRuntime } from './sqlite/sqlite-runtime.js';
+import { seed as runSeed } from './sqlite/seed.js';
+import { PostgresMigrationExecutor } from './postgres/postgres-migrator.js';
+import { PostgresIntrospector } from './postgres/postgres-introspector.js';
+// ─── Resolution ───────────────────────────────────────────────────────────────
 /**
- * Resolve a DevDbConfig into absolute paths.
- * - dbFile lives under runtimeDir (default: <rootDir>/.pikku-runtime)
- * - schema/coercion/zod are generated into outDir/db
- * - migrations and seed are authored source under rootDir/db
+ * Resolve a UserConfigShape into an absolute-path descriptor.
+ * Returns null when neither sqliteDb nor postgresUrl is configured.
  */
-export function resolveLocalDb(config, rootDir, outDir, runtimeDir) {
-    if (!config)
-        return null;
-    const file = config === true ? undefined : config.file;
-    const resolvedRuntimeDir = runtimeDir ?? join(rootDir, '.pikku-runtime');
-    return {
-        dbFile: file
-            ? resolveAgainst(rootDir, file)
-            : join(resolvedRuntimeDir, 'dev.db'),
-        runtimeDir: resolvedRuntimeDir,
-        migrationsDir: resolveAgainst(rootDir, 'db/migrations'),
-        seedFile: resolveAgainst(rootDir, 'db/seed.sql'),
+export function resolveDb(userConfig, rootDir, outDir, runtimeDir) {
+    const base = (sub, seedFileName) => ({
+        migrationsDir: resolveAgainst(rootDir, sub),
+        seedFile: resolveAgainst(rootDir, seedFileName),
         schemaFile: join(outDir, 'db', 'schema.d.ts'),
         coercionFile: join(outDir, 'db', 'coercion.gen.ts'),
+        manifestFile: join(outDir, 'db', 'classification.gen.ts'),
         zodFile: join(outDir, 'db', 'zod.gen.ts'),
         camelCase: true,
-    };
+    });
+    if (userConfig.postgresUrl && userConfig.sqliteDb) {
+        throw new Error('Both postgresUrl and sqliteDb are set. Configure exactly one database dialect.');
+    }
+    if (userConfig.postgresUrl) {
+        return {
+            dialect: 'postgres',
+            connectionString: userConfig.postgresUrl,
+            ...base('db/postgres', 'db/postgres-seed.sql'),
+        };
+    }
+    if (userConfig.sqliteDb) {
+        const resolvedRuntimeDir = runtimeDir
+            ? resolveAgainst(rootDir, runtimeDir)
+            : join(rootDir, '.pikku-runtime');
+        return {
+            dialect: 'sqlite',
+            dbFile: resolveAgainst(rootDir, userConfig.sqliteDb),
+            runtimeDir: resolvedRuntimeDir,
+            ...base('db/sqlite', 'db/sqlite-seed.sql'),
+        };
+    }
+    return null;
+}
+/** @deprecated Use resolveDb(userConfig, ...) instead. */
+export function resolveLocalDb(sqliteDb, rootDir, outDir, runtimeDir) {
+    if (!sqliteDb)
+        return null;
+    const result = resolveDb({ sqliteDb }, rootDir, outDir, runtimeDir);
+    return result;
 }
 function resolveAgainst(root, p) {
     return isAbsolute(p) ? p : resolve(root, p);
 }
-/**
- * Run the migrate routine (open → tracking-table → drift-check → apply →
- * codegen → close). Used by both `pikku db migrate` and `pikku dev` boot.
- */
 export async function migrateAndCodegen(resolved) {
-    mkdirSync(dirname(resolved.dbFile), { recursive: true });
-    const runtime = await loadSqliteRuntime();
-    const db = runtime.open(resolved.dbFile);
+    if (resolved.dialect === 'sqlite') {
+        mkdirSync(dirname(resolved.dbFile), { recursive: true });
+        const runtime = await loadSqliteRuntime();
+        const db = runtime.open(resolved.dbFile);
+        try {
+            const executor = new SqliteMigrationExecutor(db);
+            const migrateResult = await migrate(executor, resolved.migrationsDir);
+            const introspector = new SqliteIntrospector(db);
+            const codegenResult = await generateSchemaTypes(introspector, {
+                outFile: resolved.schemaFile,
+                coercionFile: resolved.coercionFile,
+                manifestFile: resolved.manifestFile,
+                camelCase: resolved.camelCase,
+                migrationsDir: resolved.migrationsDir,
+            });
+            const zodResult = generateZodTypes({
+                schemaFile: resolved.schemaFile,
+                outFile: resolved.zodFile,
+            });
+            return { migrate: migrateResult, codegen: codegenResult, zod: zodResult };
+        }
+        finally {
+            db.close();
+        }
+    }
+    // Postgres
+    const introspector = new PostgresIntrospector(resolved.connectionString);
+    await introspector.connect();
     try {
-        const migrateResult = migrate(db, resolved.migrationsDir);
-        const codegenResult = generateSchemaTypes(db, {
-            outFile: resolved.schemaFile,
-            coercionFile: resolved.coercionFile,
-            camelCase: resolved.camelCase,
-            migrationsDir: resolved.migrationsDir,
-        });
-        const zodResult = generateZodTypes({
-            schemaFile: resolved.schemaFile,
-            outFile: resolved.zodFile,
-        });
-        return { migrate: migrateResult, codegen: codegenResult, zod: zodResult };
+        const { Client } = await import('pg');
+        const client = new Client({ connectionString: resolved.connectionString });
+        await client.connect();
+        try {
+            const executor = new PostgresMigrationExecutor(client);
+            const migrateResult = await migrate(executor, resolved.migrationsDir);
+            const codegenResult = await generateSchemaTypes(introspector, {
+                outFile: resolved.schemaFile,
+                coercionFile: resolved.coercionFile,
+                manifestFile: resolved.manifestFile,
+                camelCase: resolved.camelCase,
+                migrationsDir: resolved.migrationsDir,
+            });
+            const zodResult = generateZodTypes({
+                schemaFile: resolved.schemaFile,
+                outFile: resolved.zodFile,
+            });
+            return { migrate: migrateResult, codegen: codegenResult, zod: zodResult };
+        }
+        finally {
+            await client.end();
+        }
     }
     finally {
-        db.close();
+        await introspector.close();
     }
 }
+// ─── SQLite-only operations ───────────────────────────────────────────────────
 export async function seed(resolved) {
     const runtime = await loadSqliteRuntime();
     const db = runtime.open(resolved.dbFile);
@@ -70,28 +127,18 @@ export async function seed(resolved) {
         db.close();
     }
 }
-/**
- * Delete the dev DB file. Refuses if NODE_ENV is 'production' or the
- * resolved file lives outside the project root (defensive against
- * misconfigured absolute paths).
- */
 export function reset(resolved, rootDir) {
     if (process.env.NODE_ENV === 'production') {
         throw new Error(`pikku db reset refused: NODE_ENV=production. This command only runs in dev.`);
     }
     const rel = relative(resolved.runtimeDir, resolved.dbFile);
     if (rel.startsWith('..') || isAbsolute(rel)) {
-        throw new Error(`pikku db reset refused: resolved DB file (${resolved.dbFile}) is outside the runtime directory (${resolved.runtimeDir}). Override dev.db.file or set runtimeDir correctly.`);
+        throw new Error(`pikku db reset refused: resolved DB file (${resolved.dbFile}) is outside the runtime directory (${resolved.runtimeDir}). Override sqliteDb or set runtimeDir correctly.`);
     }
     if (existsSync(resolved.dbFile)) {
         rmSync(resolved.dbFile);
     }
 }
-/**
- * Construct the user-facing Kysely instance for the dev DB. Used by
- * `pikku dev` to populate inMemoryServices.kysely.
- * Wires the coercion plugin when db/coercion.gen.ts exists.
- */
 export async function createKysely(resolved) {
     mkdirSync(dirname(resolved.dbFile), { recursive: true });
     const runtime = await loadSqliteRuntime();

package/dist/src/functions/db/postgres/postgres-introspector.d.ts

@@ -0,0 +1,10 @@
+import { Client } from 'pg';
+import type { DbIntrospector, ColumnInfo } from '../db-introspector.js';
+export declare class PostgresIntrospector implements DbIntrospector {
+    private client;
+    constructor(connectionStringOrClient: string | Client);
+    connect(): Promise<void>;
+    listTables(): Promise<string[]>;
+    getColumns(table: string): Promise<ColumnInfo[]>;
+    close(): Promise<void>;
+}

package/dist/src/functions/db/postgres/postgres-introspector.js

@@ -0,0 +1,54 @@
+import { Client } from 'pg';
+export class PostgresIntrospector {
+    client;
+    constructor(connectionStringOrClient) {
+        this.client =
+            typeof connectionStringOrClient === 'string'
+                ? new Client({ connectionString: connectionStringOrClient })
+                : connectionStringOrClient;
+    }
+    async connect() {
+        await this.client.connect();
+    }
+    async listTables() {
+        const result = await this.client.query(`SELECT table_name
+       FROM information_schema.tables
+       WHERE table_schema = 'public' AND table_type = 'BASE TABLE'
+       ORDER BY table_name`);
+        return result.rows.map((r) => r.table_name);
+    }
+    async getColumns(table) {
+        const result = await this.client.query(`SELECT
+         c.column_name,
+         c.data_type,
+         c.is_nullable,
+         c.column_default,
+         c.is_generated,
+         EXISTS(
+           SELECT 1
+           FROM information_schema.table_constraints tc
+           JOIN information_schema.key_column_usage kcu
+             ON tc.constraint_name = kcu.constraint_name
+            AND tc.table_schema = kcu.table_schema
+            AND tc.table_name = kcu.table_name
+           WHERE tc.constraint_type = 'PRIMARY KEY'
+             AND tc.table_schema = 'public'
+             AND tc.table_name = $1
+             AND kcu.column_name = c.column_name
+         ) AS is_pk
+       FROM information_schema.columns c
+       WHERE c.table_schema = 'public' AND c.table_name = $1
+       ORDER BY c.ordinal_position`, [table]);
+        return result.rows.map((r) => ({
+            name: r.column_name,
+            type: r.data_type,
+            notNull: r.is_nullable === 'NO',
+            pk: Boolean(r.is_pk),
+            defaultValue: r.column_default,
+            generated: r.is_generated === 'ALWAYS',
+        }));
+    }
+    async close() {
+        await this.client.end();
+    }
+}

package/dist/src/functions/db/postgres/postgres-migrator.d.ts

@@ -0,0 +1,9 @@
+import type { Client } from 'pg';
+import type { MigrationExecutor, AppliedMigration } from '../db-migrator.js';
+export declare class PostgresMigrationExecutor implements MigrationExecutor {
+    private readonly client;
+    constructor(client: Client);
+    ensureTrackingTable(): Promise<void>;
+    getApplied(): Promise<AppliedMigration[]>;
+    runMigration(sql: string, name: string, hash: string): Promise<void>;
+}

package/dist/src/functions/db/postgres/postgres-migrator.js

@@ -0,0 +1,32 @@
+const TRACKING_TABLE = 'sql_migrations';
+export class PostgresMigrationExecutor {
+    client;
+    constructor(client) {
+        this.client = client;
+    }
+    async ensureTrackingTable() {
+        await this.client.query(`
+      CREATE TABLE IF NOT EXISTS ${TRACKING_TABLE} (
+        name       TEXT PRIMARY KEY,
+        hash       TEXT NOT NULL,
+        applied_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+      )
+    `);
+    }
+    async getApplied() {
+        const { rows } = await this.client.query(`SELECT name, hash, applied_at FROM ${TRACKING_TABLE} ORDER BY name`);
+        return rows;
+    }
+    async runMigration(sql, name, hash) {
+        await this.client.query('BEGIN');
+        try {
+            await this.client.query(sql);
+            await this.client.query(`INSERT INTO ${TRACKING_TABLE} (name, hash) VALUES ($1, $2)`, [name, hash]);
+            await this.client.query('COMMIT');
+        }
+        catch (err) {
+            await this.client.query('ROLLBACK');
+            throw err;
+        }
+    }
+}

package/dist/src/functions/db/sqlite/sqlite-introspector.d.ts

@@ -0,0 +1,9 @@
+import type { DbIntrospector, ColumnInfo } from '../db-introspector.js';
+import type { SyncSqliteDatabase } from './sqlite-runtime.js';
+export declare class SqliteIntrospector implements DbIntrospector {
+    private readonly db;
+    constructor(db: SyncSqliteDatabase);
+    listTables(): Promise<string[]>;
+    getColumns(table: string): Promise<ColumnInfo[]>;
+    close(): Promise<void>;
+}

package/dist/src/functions/db/sqlite/sqlite-introspector.js

@@ -0,0 +1,35 @@
+const SKIP_TABLES = new Set(['sqlite_sequence', 'sql_migrations']);
+export class SqliteIntrospector {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    async listTables() {
+        const rows = this.db
+            .prepare(`SELECT name FROM sqlite_master
+           WHERE type = 'table'
+             AND name NOT LIKE 'sqlite\\_%' ESCAPE '\\'
+           ORDER BY name`)
+            .all();
+        return rows.map((r) => r.name).filter((n) => !SKIP_TABLES.has(n));
+    }
+    async getColumns(table) {
+        const escaped = `"${table.replace(/"/g, '""')}"`;
+        const rows = this.db
+            .prepare(`PRAGMA table_xinfo(${escaped})`)
+            .all();
+        return rows
+            .filter((c) => c.hidden !== 1)
+            .map((c) => ({
+            name: c.name,
+            type: c.type,
+            notNull: Boolean(c.notnull),
+            pk: c.pk > 0,
+            defaultValue: c.dflt_value != null ? String(c.dflt_value) : null,
+            generated: c.hidden === 2 || c.hidden === 3,
+        }));
+    }
+    async close() {
+        this.db.close();
+    }
+}

package/dist/src/functions/db/sqlite/sqlite-migrator.d.ts

@@ -0,0 +1,10 @@
+import type { MigrationExecutor, AppliedMigration } from '../db-migrator.js';
+import type { SyncSqliteDatabase } from './sqlite-runtime.js';
+export declare class SqliteMigrationExecutor implements MigrationExecutor {
+    private readonly db;
+    constructor(db: SyncSqliteDatabase);
+    ensureTrackingTable(): Promise<void>;
+    getApplied(): Promise<AppliedMigration[]>;
+    runMigration(sql: string, name: string, hash: string): Promise<void>;
+}
+export declare function dropTrackingTable(db: SyncSqliteDatabase): void;

package/dist/src/functions/db/sqlite/sqlite-migrator.js

@@ -0,0 +1,36 @@
+const TRACKING_TABLE = 'sql_migrations';
+export class SqliteMigrationExecutor {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    async ensureTrackingTable() {
+        this.db.exec(`CREATE TABLE IF NOT EXISTS ${TRACKING_TABLE} (
+         name       TEXT PRIMARY KEY,
+         hash       TEXT NOT NULL,
+         applied_at TEXT NOT NULL DEFAULT (datetime('now'))
+       )`);
+    }
+    async getApplied() {
+        return this.db
+            .prepare(`SELECT name, hash, applied_at FROM ${TRACKING_TABLE} ORDER BY name`)
+            .all();
+    }
+    async runMigration(sql, name, hash) {
+        this.db.exec('BEGIN');
+        try {
+            this.db.exec(sql);
+            this.db
+                .prepare(`INSERT INTO ${TRACKING_TABLE} (name, hash) VALUES (?, ?)`)
+                .run(name, hash);
+            this.db.exec('COMMIT');
+        }
+        catch (err) {
+            this.db.exec('ROLLBACK');
+            throw err;
+        }
+    }
+}
+export function dropTrackingTable(db) {
+    db.exec(`DROP TABLE IF EXISTS ${TRACKING_TABLE}`);
+}

package/dist/src/functions/validate/workspace-validate.js

@@ -96,7 +96,6 @@ export async function runWorkspaceValidate(startDir = process.cwd()) {
             info('pikku-config-no-client-files', 'pikku.config.json missing "clientFiles" — no generated SDK or React Query hooks', pikkuConfigPath, 'Add clientFiles.rpcMapDeclarationFile and clientFiles.reactQueryFile pointing to packages/functions-sdk/src/pikku/');
         }
     }
-    const hasConfiguredDevDb = Boolean(pikkuConfig?.dev?.db);
     const rootPkgPath = join(root, 'package.json');
     const rootPkg = await readJsonSafe(rootPkgPath);
     if (!rootPkg) {
@@ -143,8 +142,13 @@ export async function runWorkspaceValidate(startDir = process.cwd()) {
         if (!servicesText) {
             w('services-missing', 'packages/functions/src/services.ts not found', servicesPath, 'Create services.ts and export your service factory for the workspace');
         }
-        const migrationsDir = join(fnDir, 'db', 'migrations');
         const authEnabled = await hasAuthSessionMiddleware(fnDir);
+        const configText = await readTextSafe(join(fnDir, 'src', 'config.ts'));
+        const hasConfiguredDevDb = /sqliteDb/.test(configText ?? '');
+        const hasPostgresUrl = /postgresUrl/.test(configText ?? '');
+        const migrationsDir = hasPostgresUrl
+            ? join(fnDir, 'db', 'postgres')
+            : join(fnDir, 'db', 'sqlite');
         let createsAppUser = false;
         let createsAuthVerificationToken = false;
         if (existsSync(migrationsDir)) {
@@ -178,7 +182,7 @@ export async function runWorkspaceValidate(startDir = process.cwd()) {
             }
         }
         if (authEnabled && !hasConfiguredDevDb) {
-            e('auth-dev-db-missing', 'Auth middleware is registered, but pikku.config.json is missing dev.db so local auth schema validation and db migrate cannot run', pikkuConfigPath, 'Add dev.db to pikku.config.json so `pikku db migrate` can create and validate the local auth schema');
+            e('auth-dev-db-missing', 'Auth middleware is registered, but createConfig is missing sqliteDb so local auth schema validation and db migrate cannot run', pikkuConfigPath, 'Add sqliteDb to createConfig so `pikku db migrate` can create and validate the local auth schema');
         }
         if (authEnabled && !createsAppUser) {
             e('auth-schema-missing-app-user', 'Auth middleware is registered, but no SQL migration creates the app_user table', migrationsDir, 'Add a migration that creates app_user before enabling auth');

package/dist/src/functions/wirings/ai-agent/serialize-public-agent.js

@@ -19,7 +19,7 @@ export const agentCaller = pikkuSessionlessFunc<
 })
 
 export const agentStreamCaller = pikkuSessionlessFunc<
-  { agentName: string; message: string; threadId: string; resourceId: string },
+  { agentName: string; message: string; threadId: string; resourceId: string; context?: string },
   void
 >({
   tags: ['pikku'],
@@ -29,6 +29,7 @@ export const agentStreamCaller = pikkuSessionlessFunc<
       message: data.message,
       threadId: data.threadId,
       resourceId: data.resourceId,
+      ...(data.context ? { context: data.context } : {}),
     })
   },
 })

package/dist/src/functions/wirings/console/serialize-console-functions.js

@@ -12,7 +12,7 @@ export const pikkuConsoleSetSecret = pikkuSessionlessFunc<{
   expose: true,
   auth: false,
   func: async ({ secrets }, { secretId, value }) => {
-    await secrets.setSecretJSON(secretId, value)
+    await secrets.setSecret(secretId, value)
     return { success: true }
   },
 })
@@ -31,7 +31,7 @@ export const pikkuConsoleGetVariable = pikkuSessionlessFunc<
       return { exists: false, value: null }
     }
     try {
-      const value = await variables.getJSON(variableId)
+      const value = await variables.get(variableId)
       return { exists: true, value }
     } catch {
       const value = await variables.get(variableId)
@@ -52,7 +52,7 @@ export const pikkuConsoleSetVariable = pikkuSessionlessFunc<
     if (typeof value === 'string') {
       await variables.set(variableId, value)
     } else {
-      await variables.setJSON(variableId, value)
+      await variables.set(variableId, value)
     }
     return { success: true }
   },
@@ -85,7 +85,7 @@ export const pikkuConsoleGetSecret = pikkuSessionlessFunc<
     if (!exists) {
       return { exists: false, value: null }
     }
-    const value = await secrets.getSecretJSON(secretId)
+    const value = await secrets.getSecret(secretId)
     return { exists: true, value }
   },
 })

package/dist/src/functions/wirings/functions/serialize-addon-types.js

@@ -52,7 +52,7 @@ export const pikkuAddonConfig = <ExistingServices extends Omit<Partial<Singleton
  *   config,
  *   { secrets }
  * ) => {
- *   const creds = await secrets.getSecretJSON<GithubCredentials>('GITHUB_CREDENTIALS')
+ *   const creds = await secrets.getSecret<GithubCredentials>('GITHUB_CREDENTIALS')
  *   const github = new GithubService(creds)
  *   return { github }
  * })

package/dist/src/scaffold/rpc-remote.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.25
+ * This file was generated by @pikku/cli@0.12.27
  */
 /**
  * Auto-generated remote internal RPC queue worker and HTTP endpoint

package/dist/src/services.js

@@ -1,5 +1,6 @@
 import { pikkuCLIRender } from '@pikku/core/cli';
 import { LocalVariablesService, LocalSecretService, LogLevel, InMemoryWorkflowService, } from '@pikku/core/services';
+import { NoopAuditService } from '@pikku/core';
 import { CLILogger } from './services/cli-logger.service.js';
 import { getPikkuCLIConfig } from './utils/pikku-cli-config.js';
 import { inspect, serializeInspectorState, deserializeInspectorState, filterInspectorState, getInitialInspectorState, ErrorCode, } from '@pikku/inspector';
@@ -251,6 +252,7 @@ export const createSingletonServices = async (config) => {
         logger,
         variables,
         secrets: new LocalSecretService(variables),
+        audit: new NoopAuditService(),
         getInspectorState,
         workflowService,
     };