@pikku/cli 0.12.54 → 0.12.56

package/dist/src/server/dev-server-runner.interface.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Dev server runner abstraction.
+ *
+ * The `pikku dev` server differs by runtime: under Node it's
+ * `@pikku/node-http-server` + the `ws` WebSocketServer; under Bun it's
+ * `@pikku/bun-server` (native `Bun.serve` WebSockets). Both also supply the
+ * EventHub that is shared into singleton services so function-side broadcasts
+ * reach the transport's sockets. The right runner is resolved once in
+ * `services.ts` and injected — no `typeof Bun` checks in the dev command.
+ */
+import type { EventHubService } from '@pikku/core';
+import type { Logger } from '@pikku/core/services';
+import type { NodeHTTPServerConfig } from '@pikku/node-http-server';
+export interface DevServerInstance {
+    init(): Promise<void>;
+    start(): Promise<void>;
+    /** Full teardown — closes the server and any owned WebSocket server. */
+    stop(): Promise<void>;
+}
+/** Config shape both runtimes accept (Core config + host/port/content). */
+export type DevServerConfig = NodeHTTPServerConfig;
+export interface DevServerRunner {
+    /**
+     * Create the EventHub for this runtime. Shared into singleton services so
+     * function-side broadcasts reach the transport's sockets. Must be called
+     * once before `createServer`.
+     */
+    createEventHub(): Promise<EventHubService<any>>;
+    /** Create the dev HTTP/WS server. Must be called after `createEventHub`. */
+    createServer(config: DevServerConfig, logger: Logger): DevServerInstance;
+}

package/dist/src/server/dev-server-runner.interface.js

@@ -0,0 +1,11 @@
+/**
+ * Dev server runner abstraction.
+ *
+ * The `pikku dev` server differs by runtime: under Node it's
+ * `@pikku/node-http-server` + the `ws` WebSocketServer; under Bun it's
+ * `@pikku/bun-server` (native `Bun.serve` WebSockets). Both also supply the
+ * EventHub that is shared into singleton services so function-side broadcasts
+ * reach the transport's sockets. The right runner is resolved once in
+ * `services.ts` and injected — no `typeof Bun` checks in the dev command.
+ */
+export {};

package/dist/src/server/node-server-runner.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Node dev server runner — `@pikku/node-http-server` + the `ws` WebSocketServer.
+ * Used when the CLI runs under Node. Owns the WebSocketServer so teardown
+ * (close ws then the http server) is encapsulated in the returned instance.
+ */
+import type { EventHubService } from '@pikku/core';
+import type { Logger } from '@pikku/core/services';
+import type { DevServerRunner, DevServerInstance, DevServerConfig } from './dev-server-runner.interface.js';
+export declare class NodeServerRunner implements DevServerRunner {
+    createEventHub(): Promise<EventHubService<any>>;
+    createServer(config: DevServerConfig, logger: Logger): DevServerInstance;
+}

package/dist/src/server/node-server-runner.js

@@ -0,0 +1,30 @@
+/**
+ * Node dev server runner — `@pikku/node-http-server` + the `ws` WebSocketServer.
+ * Used when the CLI runs under Node. Owns the WebSocketServer so teardown
+ * (close ws then the http server) is encapsulated in the returned instance.
+ */
+import { LocalEventHubService } from '@pikku/core/channel/local';
+import { PikkuNodeHTTPServer } from '@pikku/node-http-server';
+import { pikkuWebsocketHandler } from '@pikku/ws';
+import { WebSocketServer } from 'ws';
+export class NodeServerRunner {
+    async createEventHub() {
+        return new LocalEventHubService();
+    }
+    createServer(config, logger) {
+        const wss = new WebSocketServer({ noServer: true });
+        const server = new PikkuNodeHTTPServer(config, logger, {
+            configureServer: (httpServer) => {
+                pikkuWebsocketHandler({ server: httpServer, wss, logger });
+            },
+        });
+        return {
+            init: () => server.init(),
+            start: () => server.start(),
+            stop: async () => {
+                await new Promise((resolve, reject) => wss.close((err) => (err ? reject(err) : resolve())));
+                await server.stop();
+            },
+        };
+    }
+}

package/dist/src/services/cli-logger.service.js

@@ -1,5 +1,6 @@
 import chalk from 'chalk';
 import { LogLevel } from '@pikku/core/services';
+import { isExpectedError } from '@pikku/core';
 // Compact one-line wordmark — the old multi-line ASCII art got cropped in
 // short/narrow AI-agent panes. Coloured directly (not via the blue `info`
 // path) so the cyan/bold render correctly.
@@ -119,7 +120,12 @@ export class CLILogger {
         if (this.level > LogLevel.error)
             return;
         if (message instanceof Error) {
-            this.emit('error', message.stack ?? message.message);
+            // An expected failure (a deliberate PikkuError, e.g. a build gate
+            // tripping) — its message says everything, so don't dump the stack.
+            // Anything else is an uncaught error: show the full trace to debug it.
+            this.emit('error', isExpectedError(message)
+                ? message.message
+                : (message.stack ?? message.message));
             return;
         }
         const msg = typeof message === 'string' ? message : message.message;

package/dist/src/services.js

@@ -11,6 +11,10 @@ import { existsSync } from 'fs';
 import { readFile, writeFile } from 'fs/promises';
 import { loadManifest } from './utils/contract-versions.js';
 import { join } from 'path';
+import { NodeBundler } from './deploy/bundler/node-bundler.js';
+import { BunBundler } from './deploy/bundler/bun-bundler.js';
+import { NodeServerRunner } from './server/node-server-runner.js';
+import { BunServerRunner } from './server/bun-server-runner.js';
 import { parseCLIFilters } from './utils/parse-cli-filters.js';
 const DIAGNOSTIC_CODE_TO_LINT_KEY = {
     [ErrorCode.SERVICES_NOT_DESTRUCTURED]: 'servicesNotDestructured',
@@ -231,11 +235,19 @@ export const createSingletonServices = async (config) => {
                     wireServicesFactoryType: config.wireServicesFactoryType,
                 },
                 tags: config.tags,
+                // Opt-in security lint (`--security`): scans function return types for
+                // data-classification leaks. Off by default — it's the dominant codegen
+                // cost. Never runs during a plain `pikku all`.
+                classificationCheck: !setupOnly && !!config.security,
                 schemaConfig: !setupOnly
                     ? {
                         tsconfig: config.tsconfig,
                         schemasFromTypes: config.schemasFromTypes,
                         schema: config.schema,
+                        // Persist generated TS schemas under node_modules/.cache (gitignored
+                        // by convention) so a warm `pikku all` with unchanged function types
+                        // skips ts-json-schema-generator — the largest cold-run cost.
+                        cacheDir: path.join(rootDir, 'node_modules', '.cache', 'pikku'),
                     }
                     : undefined,
                 openAPI: !setupOnly && config.openAPI
@@ -266,6 +278,10 @@ export const createSingletonServices = async (config) => {
         return filteredState;
     };
     const workflowService = new InMemoryWorkflowService();
+    // Resolve the runtime ONCE here, then inject runtime-specific implementations.
+    // Keeping the check in this single place avoids `typeof Bun` branches leaking
+    // into the deploy pipeline / dev command.
+    const isBun = typeof globalThis.Bun !== 'undefined';
     return {
         config,
         logger,
@@ -274,6 +290,8 @@ export const createSingletonServices = async (config) => {
         audit: new NoopAuditService(),
         getInspectorState,
         workflowService,
+        bundler: isBun ? new BunBundler() : new NodeBundler(),
+        devServerRunner: isBun ? new BunServerRunner() : new NodeServerRunner(),
     };
 };
 export const createWireServices = async ({ logger }, { cli, channel }) => {

package/dist/src/utils/detect-better-auth.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Cheaply scan the project source for a `pikkuBetterAuth(...)` call without
+ * runtime-importing any user file (which would deadlock during bootstrap, since
+ * those files import the not-yet-written `#pikku` hub). Returns true on the
+ * first match.
+ */
+export declare function projectDeclaresBetterAuth(rootDir: string, srcDirectories: string[], ignoreFiles?: string[]): Promise<boolean>;

package/dist/src/utils/detect-better-auth.js

@@ -0,0 +1,29 @@
+import { readFile } from 'node:fs/promises';
+import path from 'node:path';
+import { glob } from 'tinyglobby';
+// A pikkuBetterAuth(...) call. Used as a cheap, AST-free signal during bootstrap
+// (when the inspector hasn't run yet) to decide whether to pre-write the
+// auth.types.ts stub + hub re-export. The full inspect does the authoritative
+// detection later; a false negative just falls back to the old behaviour.
+const PIKKU_BETTER_AUTH_CALL = /\bpikkuBetterAuth\s*\(/;
+/**
+ * Cheaply scan the project source for a `pikkuBetterAuth(...)` call without
+ * runtime-importing any user file (which would deadlock during bootstrap, since
+ * those files import the not-yet-written `#pikku` hub). Returns true on the
+ * first match.
+ */
+export async function projectDeclaresBetterAuth(rootDir, srcDirectories, ignoreFiles = []) {
+    const files = (await Promise.all(srcDirectories.map((dir) => glob(`${path.join(rootDir, dir)}/**/*.ts`, {
+        ignore: ignoreFiles,
+        absolute: true,
+    })))).flat();
+    for (const file of files) {
+        if (file.includes('/.pikku/'))
+            continue;
+        // An unreadable file (race/permission) just can't match — treat as empty.
+        const content = await readFile(file, 'utf-8').catch(() => '');
+        if (PIKKU_BETTER_AUTH_CALL.test(content))
+            return true;
+    }
+    return false;
+}

package/dist/src/utils/parse-cli-filters.d.ts

@@ -13,6 +13,7 @@ export type CLIFilters = InspectorFilters & {
 export declare function parseCLIFilters(data: any, cliConfig?: {
     deploy?: {
         serverlessIncompatible?: string[];
+        defaultTarget?: 'serverless' | 'server';
     };
     namedFilters?: Record<string, InspectorFilters>;
 }): CLIFilters;

package/dist/src/utils/parse-cli-filters.js

@@ -94,6 +94,7 @@ export function parseCLIFilters(data, cliConfig) {
     filters.excludeTarget = validateTargetList(filters.excludeTarget, '--exclude-target');
     if (filters.target || filters.excludeTarget) {
         filters.serverlessIncompatible = cliConfig?.deploy?.serverlessIncompatible;
+        filters.defaultTarget = cliConfig?.deploy?.defaultTarget;
     }
     return filters;
 }

package/dist/src/utils/pikku-cli-config.js

@@ -200,7 +200,7 @@ const _getPikkuCLIConfig = async (logger, configFile = undefined, requiredFields
         const resolvedScaffoldDir = isAbsolute(scaffoldDir)
             ? scaffoldDir
             : join(result.rootDir, scaffoldDir);
-        if (!result.remoteRpcWorkersFile) {
+        if (result.scaffold?.remoteRpc && !result.remoteRpcWorkersFile) {
             result.remoteRpcWorkersFile = join(resolvedScaffoldDir, 'rpc-remote.gen.ts');
         }
         if (result.scaffold?.workflow && !result.workflowRoutesFile) {

package/dist/src/utils/serialize-schemas.js

@@ -19,7 +19,11 @@ export async function saveSchemas(logger, schemaParentDir, schemas, requiredSche
             await writeFile(`${schemaParentDir}/schemas/${schemaName}.schema.json`, JSON.stringify(schema), 'utf-8');
         }
     }));
-    const availableSchemas = Array.from(requiredSchemas).filter((schema) => schemas[schema]);
+    // Sort so register.gen.ts is byte-identical across runs — requiredSchemas is
+    // a Set in (nondeterministic) traversal-insertion order.
+    const availableSchemas = Array.from(requiredSchemas)
+        .filter((schema) => schemas[schema])
+        .sort();
     const packageNameArg = packageName ? `, '${packageName}'` : '';
     const schemaImports = availableSchemas
         .map((schema) => {

package/dist/tsconfig.tsbuildinfo

@@ -1 +1 @@
-{"root":["../bin/pikku.ts","../src/cli.wiring.ts","../src/services.ts","../src/deploy/build-pipeline.ts","../src/deploy/provider-adapter.ts","../src/deploy/server-entry.ts","../src/deploy/analyzer/analyzer.ts","../src/deploy/analyzer/index.ts","../src/deploy/analyzer/manifest.ts","../src/deploy/bundler/bundler.ts","../src/deploy/bundler/dep-extractor.ts","../src/deploy/bundler/index.ts","../src/deploy/bundler/types.ts","../src/deploy/codegen/index.ts","../src/deploy/codegen/per-unit-codegen.ts","../src/deploy/plan/executor.ts","../src/deploy/plan/formatter.ts","../src/deploy/plan/index.ts","../src/deploy/plan/planner.ts","../src/deploy/plan/provider.ts","../src/deploy/plan/types.ts","../src/fabric/fabric-commands.ts","../src/fabric/functions/add.function.ts","../src/fabric/functions/db-schema.function.ts","../src/fabric/functions/deploy-list.function.ts","../src/fabric/functions/deploy-units.function.ts","../src/fabric/functions/deploy.function.ts","../src/fabric/functions/domains-add.function.ts","../src/fabric/functions/domains-list.function.ts","../src/fabric/functions/domains-remove.function.ts","../src/fabric/functions/errors.function.ts","../src/fabric/functions/init.function.ts","../src/fabric/functions/link.function.ts","../src/fabric/functions/llm-key.function.ts","../src/fabric/functions/login.function.ts","../src/fabric/functions/logs.function.ts","../src/fabric/functions/metrics.function.ts","../src/fabric/functions/publish.function.ts","../src/fabric/functions/rollback.function.ts","../src/fabric/functions/secrets-list.function.ts","../src/fabric/functions/secrets-set.function.ts","../src/fabric/functions/smoke.function.ts","../src/fabric/functions/status.function.ts","../src/fabric/functions/trace.function.ts","../src/fabric/functions/validate.function.ts","../src/fabric/lib/config.ts","../src/fabric/lib/console-url.ts","../src/fabric/lib/git.ts","../src/fabric/lib/http.ts","../src/fabric/lib/not-implemented.ts","../src/fabric/lib/output.ts","../src/fabric/lib/prompt.ts","../src/fabric/lib/stage.ts","../src/fabric/sdk/http-map.gen.d.ts","../src/fabric/sdk/pikku-fetch.gen.ts","../src/fabric/sdk/pikku-rpc.gen.ts","../src/fabric/sdk/rpc-map.gen.d.ts","../src/functions/commands/all.ts","../src/functions/commands/binary.ts","../src/functions/commands/bootstrap.ts","../src/functions/commands/console.ts","../src/functions/commands/db-audit.ts","../src/functions/commands/db-generate.ts","../src/functions/commands/db-migrate.ts","../src/functions/commands/db-reset.ts","../src/functions/commands/db-seed.ts","../src/functions/commands/db-shared.ts","../src/functions/commands/deploy-apply.ts","../src/functions/commands/deploy-info.ts","../src/functions/commands/deploy-plan.ts","../src/functions/commands/dev-ai-runner.ts","../src/functions/commands/dev.ts","../src/functions/commands/emails-init.ts","../src/functions/commands/enable.ts","../src/functions/commands/info.ts","../src/functions/commands/load-user-project.ts","../src/functions/commands/login.ts","../src/functions/commands/meta.ts","../src/functions/commands/new-addon.ts","../src/functions/commands/new-function.ts","../src/functions/commands/new-middleware.ts","../src/functions/commands/new-permission.ts","../src/functions/commands/new-wiring.ts","../src/functions/commands/pikku-command-bootstrap.ts","../src/functions/commands/pikku-command-summary.ts","../src/functions/commands/skills.ts","../src/functions/commands/tests-coverage.ts","../src/functions/commands/tests-init.ts","../src/functions/commands/versions-check.ts","../src/functions/commands/versions-init.ts","../src/functions/commands/versions-update.ts","../src/functions/commands/watch.ts","../src/functions/commands/workspace-validate.ts","../src/functions/db/annotation-parser.ts","../src/functions/db/better-auth-schema.ts","../src/functions/db/coercion-plugin.ts","../src/functions/db/db-codegen.ts","../src/functions/db/db-introspector.ts","../src/functions/db/db-migrator.ts","../src/functions/db/local-db.ts","../src/functions/db/zod-codegen.ts","../src/functions/db/postgres/pglite-kysely.ts","../src/functions/db/postgres/postgres-introspector.ts","../src/functions/db/postgres/postgres-migrator.ts","../src/functions/db/sqlite/seed.ts","../src/functions/db/sqlite/sqlite-introspector.ts","../src/functions/db/sqlite/sqlite-kysely.ts","../src/functions/db/sqlite/sqlite-migrator.ts","../src/functions/db/sqlite/sqlite-runtime-bun.ts","../src/functions/db/sqlite/sqlite-runtime-node.ts","../src/functions/db/sqlite/sqlite-runtime.ts","../src/functions/runtimes/fetch/index.ts","../src/functions/runtimes/nextjs/pikku-command-nextjs.ts","../src/functions/runtimes/nextjs/serialize-nextjs-backend-worker-rpc-wrapper.ts","../src/functions/runtimes/nextjs/serialize-nextjs-backend-wrapper.ts","../src/functions/runtimes/nextjs/serialize-nextjs-http-wrapper.ts","../src/functions/runtimes/tanstack-start/pikku-command-tanstack-start.ts","../src/functions/runtimes/tanstack-start/serialize-tanstack-start-shim.ts","../src/functions/runtimes/websocket/pikku-command-websocket-typed.ts","../src/functions/runtimes/websocket/serialize-websocket-wrapper.ts","../src/functions/validate/workspace-validate.ts","../src/functions/wirings/ai-agent/pikku-command-ai-agent-types.ts","../src/functions/wirings/ai-agent/pikku-command-ai-agent.ts","../src/functions/wirings/ai-agent/pikku-command-public-agent.ts","../src/functions/wirings/ai-agent/serialize-agent-map.ts","../src/functions/wirings/ai-agent/serialize-ai-agent-types.ts","../src/functions/wirings/ai-agent/serialize-public-agent.ts","../src/functions/wirings/auth/pikku-command-auth.ts","../src/functions/wirings/auth/serialize-auth-gen.ts","../src/functions/wirings/auth/serialize-auth-meta.ts","../src/functions/wirings/auth/serialize-auth-types.ts","../src/functions/wirings/channels/pikku-channels.ts","../src/functions/wirings/channels/pikku-command-channel-types.ts","../src/functions/wirings/channels/pikku-command-channels-map.ts","../src/functions/wirings/channels/pikku-command-channels.ts","../src/functions/wirings/channels/serialize-channel-types.ts","../src/functions/wirings/channels/serialize-typed-channel-map.ts","../src/functions/wirings/cli/pikku-command-cli-entry.ts","../src/functions/wirings/cli/pikku-command-cli-types.ts","../src/functions/wirings/cli/pikku-command-cli.ts","../src/functions/wirings/cli/serialize-channel-cli-client.ts","../src/functions/wirings/cli/serialize-channel-cli.ts","../src/functions/wirings/cli/serialize-cli-types.ts","../src/functions/wirings/cli/serialize-local-cli-bootstrap.ts","../src/functions/wirings/console/pikku-command-console-functions.ts","../src/functions/wirings/console/pikku-command-node-types.ts","../src/functions/wirings/console/pikku-command-nodes-meta.ts","../src/functions/wirings/console/serialize-console-functions.ts","../src/functions/wirings/console/serialize-node-types.ts","../src/functions/wirings/credentials/pikku-command-credentials.ts","../src/functions/wirings/credentials/serialize-credentials-types.ts","../src/functions/wirings/emails/pikku-command-emails.ts","../src/functions/wirings/emails/serialize-emails.ts","../src/functions/wirings/functions/pikku-command-addon-types.ts","../src/functions/wirings/functions/pikku-command-function-types-split.ts","../src/functions/wirings/functions/pikku-command-function-types.ts","../src/functions/wirings/functions/pikku-command-functions.ts","../src/functions/wirings/functions/pikku-command-services.ts","../src/functions/wirings/functions/schemas.ts","../src/functions/wirings/functions/serialize-addon-refs.ts","../src/functions/wirings/functions/serialize-addon-types.ts","../src/functions/wirings/functions/serialize-function-imports.ts","../src/functions/wirings/functions/serialize-function-types.ts","../src/functions/wirings/functions/serialize-pikku-types-hub.ts","../src/functions/wirings/gateway/pikku-command-gateway.ts","../src/functions/wirings/gateway/serialize-gateway-meta.ts","../src/functions/wirings/http/pikku-command-http-map.ts","../src/functions/wirings/http/pikku-command-http-routes.ts","../src/functions/wirings/http/pikku-command-http-types.ts","../src/functions/wirings/http/pikku-command-openapi.ts","../src/functions/wirings/http/pikku-http-routes.ts","../src/functions/wirings/http/serialize-fetch-wrapper.ts","../src/functions/wirings/http/serialize-http-types.ts","../src/functions/wirings/http/serialize-typed-http-map.ts","../src/functions/wirings/mcp/pikku-command-mcp-json.ts","../src/functions/wirings/mcp/pikku-command-mcp-types.ts","../src/functions/wirings/mcp/pikku-command-mcp.ts","../src/functions/wirings/mcp/serialize-mcp-types.ts","../src/functions/wirings/middleware/pikku-command-middleware.ts","../src/functions/wirings/middleware/serialize-middleware-imports.ts","../src/functions/wirings/package/pikku-command-package-types.ts","../src/functions/wirings/package/pikku-command-package.ts","../src/functions/wirings/package/serialize-package-types.ts","../src/functions/wirings/package/serialize-package.ts","../src/functions/wirings/permissions/pikku-command-permissions.ts","../src/functions/wirings/permissions/serialize-permissions-imports.ts","../src/functions/wirings/queue/pikku-command-queue-map.ts","../src/functions/wirings/queue/pikku-command-queue-service.ts","../src/functions/wirings/queue/pikku-command-queue-types.ts","../src/functions/wirings/queue/pikku-command-queue.ts","../src/functions/wirings/queue/pikku-queue-map.ts","../src/functions/wirings/queue/pikku-queue.ts","../src/functions/wirings/queue/serialize-queue-map.ts","../src/functions/wirings/queue/serialize-queue-meta.ts","../src/functions/wirings/queue/serialize-queue-types.ts","../src/functions/wirings/queue/serialize-queue-wrapper.ts","../src/functions/wirings/realtime/pikku-command-events-scaffold.ts","../src/functions/wirings/realtime/pikku-command-realtime.ts","../src/functions/wirings/realtime/serialize-events-scaffold.ts","../src/functions/wirings/realtime/serialize-realtime-client.ts","../src/functions/wirings/rpc/pikku-command-public-rpc.ts","../src/functions/wirings/rpc/pikku-command-react-query.ts","../src/functions/wirings/rpc/pikku-command-remote-rpc.ts","../src/functions/wirings/rpc/pikku-command-rpc-client.ts","../src/functions/wirings/rpc/pikku-command-rpc-map.ts","../src/functions/wirings/rpc/pikku-command-rpc.ts","../src/functions/wirings/rpc/serialize-public-rpc.ts","../src/functions/wirings/rpc/serialize-react-query-hooks.ts","../src/functions/wirings/rpc/serialize-remote-rpc.ts","../src/functions/wirings/rpc/serialize-rpc-wrapper.ts","../src/functions/wirings/rpc/serialize-typed-rpc-map.ts","../src/functions/wirings/scheduler/pikku-command-scheduler-types.ts","../src/functions/wirings/scheduler/pikku-command-scheduler.ts","../src/functions/wirings/scheduler/serialize-scheduler-meta.ts","../src/functions/wirings/scheduler/serialize-scheduler-types.ts","../src/functions/wirings/secrets/pikku-command-secrets.ts","../src/functions/wirings/secrets/serialize-secrets-types.ts","../src/functions/wirings/triggers/pikku-command-trigger-types.ts","../src/functions/wirings/triggers/pikku-command-trigger.ts","../src/functions/wirings/triggers/serialize-trigger-meta.ts","../src/functions/wirings/triggers/serialize-trigger-types.ts","../src/functions/wirings/variables/pikku-command-variables.ts","../src/functions/wirings/variables/serialize-variables-types.ts","../src/functions/wirings/workflow/pikku-command-workflow-routes.ts","../src/functions/wirings/workflow/pikku-command-workflow.ts","../src/functions/wirings/workflow/serialize-workflow-bootstrap-map.ts","../src/functions/wirings/workflow/serialize-workflow-map.ts","../src/functions/wirings/workflow/serialize-workflow-meta.ts","../src/functions/wirings/workflow/serialize-workflow-registration.ts","../src/functions/wirings/workflow/serialize-workflow-routes.ts","../src/functions/wirings/workflow/serialize-workflow-types.ts","../src/functions/workflows/all.workflow.ts","../src/middleware/log-command-info-and-time.ts","../src/scaffold/rpc-remote.gen.ts","../src/services/cli-logger-forwarder.service.ts","../src/services/cli-logger.service.ts","../src/utils/check-required-types.ts","../src/utils/cli-session.ts","../src/utils/command-summary.ts","../src/utils/contract-versions.ts","../src/utils/device-auth.ts","../src/utils/file-import-path.ts","../src/utils/file-imports-serializer.ts","../src/utils/file-writer.ts","../src/utils/generate-bootstrap-file.ts","../src/utils/get-cli-version.ts","../src/utils/parse-cli-filters.ts","../src/utils/pikku-cli-config.ts","../src/utils/pikku-files-and-methods.ts","../src/utils/serialize-import-map.ts","../src/utils/serialize-meta-ts.ts","../src/utils/serialize-schemas.ts","../src/utils/strip-verbose-meta.ts","../.pikku/pikku-bootstrap.gen.ts","../.pikku/pikku-meta-service.gen.ts","../.pikku/pikku-services.gen.ts","../.pikku/pikku-types.gen.ts","../.pikku/agent/pikku-agent-map.gen.d.ts","../.pikku/agent/pikku-agent-types.gen.ts","../.pikku/channel/pikku-channel-types.gen.ts","../.pikku/cli/pikku-cli-channel.ts","../.pikku/cli/pikku-cli-client.gen.ts","../.pikku/cli/pikku-cli-contracts-meta.gen.ts","../.pikku/cli/pikku-cli-types.gen.ts","../.pikku/cli/pikku-cli-wirings-meta.gen.ts","../.pikku/cli/pikku-cli-wirings.gen.ts","../.pikku/cli/pikku-cli.gen.ts","../.pikku/console/pikku-node-types.gen.ts","../.pikku/function/pikku-function-types.gen.ts","../.pikku/function/pikku-functions-meta.gen.ts","../.pikku/function/pikku-functions.gen.ts","../.pikku/http/pikku-http-types.gen.ts","../.pikku/http/pikku-http-wirings-map.gen.d.ts","../.pikku/http/pikku-http-wirings-meta.gen.ts","../.pikku/http/pikku-http-wirings.gen.ts","../.pikku/mcp/pikku-mcp-types.gen.ts","../.pikku/node/pikku-node-types.gen.ts","../.pikku/queue/pikku-queue-types.gen.ts","../.pikku/queue/pikku-queue-workers-wirings-map.gen.d.ts","../.pikku/queue/pikku-queue-workers-wirings-meta.gen.ts","../.pikku/queue/pikku-queue-workers-wirings.gen.ts","../.pikku/rpc/pikku-rpc-wirings-map.gen.d.ts","../.pikku/rpc/pikku-rpc-wirings-map.internal.gen.d.ts","../.pikku/rpc/pikku-rpc-wirings-meta.internal.gen.ts","../.pikku/scheduler/pikku-scheduler-types.gen.ts","../.pikku/schemas/register.gen.ts","../.pikku/secrets/pikku-secret-types.gen.ts","../.pikku/secrets/pikku-secrets.gen.ts","../.pikku/trigger/pikku-trigger-types.gen.ts","../.pikku/variables/pikku-variable-types.gen.ts","../.pikku/variables/pikku-variables.gen.ts","../.pikku/workflow/pikku-workflow-map.gen.d.ts","../.pikku/workflow/pikku-workflow-types.gen.ts","../.pikku/workflow/pikku-workflow-wirings-meta.gen.ts","../.pikku/workflow/pikku-workflow-wirings.gen.ts","../types/application-types.d.ts","../types/bun-sqlite.d.ts","../types/config.d.ts"],"version":"5.9.3"}
+{"root":["../bin/pikku.ts","../src/cli.wiring.ts","../src/services.ts","../src/deploy/build-pipeline.ts","../src/deploy/provider-adapter.ts","../src/deploy/server-entry.ts","../src/deploy/analyzer/analyzer.ts","../src/deploy/analyzer/index.ts","../src/deploy/analyzer/manifest.ts","../src/deploy/bundler/bun-bundler.ts","../src/deploy/bundler/bundler.interface.ts","../src/deploy/bundler/bundler.ts","../src/deploy/bundler/dep-extractor.ts","../src/deploy/bundler/index.ts","../src/deploy/bundler/node-bundler.ts","../src/deploy/bundler/types.ts","../src/deploy/codegen/index.ts","../src/deploy/codegen/per-unit-codegen.ts","../src/deploy/plan/executor.ts","../src/deploy/plan/formatter.ts","../src/deploy/plan/index.ts","../src/deploy/plan/planner.ts","../src/deploy/plan/provider.ts","../src/deploy/plan/types.ts","../src/fabric/fabric-commands.ts","../src/fabric/functions/add.function.ts","../src/fabric/functions/addon-verify.function.ts","../src/fabric/functions/db-schema.function.ts","../src/fabric/functions/deploy-list.function.ts","../src/fabric/functions/deploy-units.function.ts","../src/fabric/functions/deploy.function.ts","../src/fabric/functions/domains-add.function.ts","../src/fabric/functions/domains-list.function.ts","../src/fabric/functions/domains-remove.function.ts","../src/fabric/functions/errors.function.ts","../src/fabric/functions/init.function.ts","../src/fabric/functions/link.function.ts","../src/fabric/functions/llm-key.function.ts","../src/fabric/functions/login.function.ts","../src/fabric/functions/logs.function.ts","../src/fabric/functions/metrics.function.ts","../src/fabric/functions/publish.function.ts","../src/fabric/functions/rollback.function.ts","../src/fabric/functions/secrets-list.function.ts","../src/fabric/functions/secrets-set.function.ts","../src/fabric/functions/smoke.function.ts","../src/fabric/functions/status.function.ts","../src/fabric/functions/trace.function.ts","../src/fabric/functions/validate.function.ts","../src/fabric/lib/config.ts","../src/fabric/lib/console-url.ts","../src/fabric/lib/git.ts","../src/fabric/lib/http.ts","../src/fabric/lib/not-implemented.ts","../src/fabric/lib/output.ts","../src/fabric/lib/prompt.ts","../src/fabric/lib/stage.ts","../src/fabric/sdk/http-map.gen.d.ts","../src/fabric/sdk/pikku-fetch.gen.ts","../src/fabric/sdk/pikku-rpc.gen.ts","../src/fabric/sdk/rpc-map.gen.d.ts","../src/functions/commands/all.ts","../src/functions/commands/binary.ts","../src/functions/commands/bootstrap.ts","../src/functions/commands/console.ts","../src/functions/commands/db-audit.ts","../src/functions/commands/db-generate.ts","../src/functions/commands/db-migrate.ts","../src/functions/commands/db-reset.ts","../src/functions/commands/db-seed.ts","../src/functions/commands/db-shared.ts","../src/functions/commands/deploy-apply.ts","../src/functions/commands/deploy-info.ts","../src/functions/commands/deploy-plan.ts","../src/functions/commands/dev-ai-runner.ts","../src/functions/commands/dev.ts","../src/functions/commands/emails-init.ts","../src/functions/commands/enable.ts","../src/functions/commands/info.ts","../src/functions/commands/load-user-project.ts","../src/functions/commands/login.ts","../src/functions/commands/meta.ts","../src/functions/commands/new-addon.ts","../src/functions/commands/new-function.ts","../src/functions/commands/new-middleware.ts","../src/functions/commands/new-permission.ts","../src/functions/commands/new-wiring.ts","../src/functions/commands/pikku-command-bootstrap.ts","../src/functions/commands/pikku-command-summary.ts","../src/functions/commands/skills.ts","../src/functions/commands/tests-coverage.ts","../src/functions/commands/tests-init.ts","../src/functions/commands/versions-check.ts","../src/functions/commands/versions-init.ts","../src/functions/commands/versions-update.ts","../src/functions/commands/watch.ts","../src/functions/commands/workspace-validate.ts","../src/functions/db/annotation-parser.ts","../src/functions/db/better-auth-schema.ts","../src/functions/db/coercion-plugin.ts","../src/functions/db/db-codegen.ts","../src/functions/db/db-introspector.ts","../src/functions/db/db-migrator.ts","../src/functions/db/local-db.ts","../src/functions/db/zod-codegen.ts","../src/functions/db/postgres/pglite-kysely.ts","../src/functions/db/postgres/postgres-introspector.ts","../src/functions/db/postgres/postgres-migrator.ts","../src/functions/db/sqlite/seed.ts","../src/functions/db/sqlite/sqlite-introspector.ts","../src/functions/db/sqlite/sqlite-kysely.ts","../src/functions/db/sqlite/sqlite-migrator.ts","../src/functions/db/sqlite/sqlite-runtime-bun.ts","../src/functions/db/sqlite/sqlite-runtime-node.ts","../src/functions/db/sqlite/sqlite-runtime.ts","../src/functions/runtimes/fetch/index.ts","../src/functions/runtimes/nextjs/pikku-command-nextjs.ts","../src/functions/runtimes/nextjs/serialize-nextjs-backend-worker-rpc-wrapper.ts","../src/functions/runtimes/nextjs/serialize-nextjs-backend-wrapper.ts","../src/functions/runtimes/nextjs/serialize-nextjs-http-wrapper.ts","../src/functions/runtimes/tanstack-start/pikku-command-tanstack-start.ts","../src/functions/runtimes/tanstack-start/serialize-tanstack-start-shim.ts","../src/functions/runtimes/websocket/pikku-command-websocket-typed.ts","../src/functions/runtimes/websocket/serialize-websocket-wrapper.ts","../src/functions/validate/workspace-validate.ts","../src/functions/wirings/ai-agent/pikku-command-ai-agent-types.ts","../src/functions/wirings/ai-agent/pikku-command-ai-agent.ts","../src/functions/wirings/ai-agent/pikku-command-public-agent.ts","../src/functions/wirings/ai-agent/serialize-agent-map.ts","../src/functions/wirings/ai-agent/serialize-ai-agent-types.ts","../src/functions/wirings/ai-agent/serialize-public-agent.ts","../src/functions/wirings/auth/pikku-command-auth.ts","../src/functions/wirings/auth/serialize-auth-gen.ts","../src/functions/wirings/auth/serialize-auth-meta.ts","../src/functions/wirings/auth/serialize-auth-types.ts","../src/functions/wirings/channels/pikku-channels.ts","../src/functions/wirings/channels/pikku-command-channel-types.ts","../src/functions/wirings/channels/pikku-command-channels-map.ts","../src/functions/wirings/channels/pikku-command-channels.ts","../src/functions/wirings/channels/serialize-channel-types.ts","../src/functions/wirings/channels/serialize-typed-channel-map.ts","../src/functions/wirings/cli/pikku-command-cli-entry.ts","../src/functions/wirings/cli/pikku-command-cli-types.ts","../src/functions/wirings/cli/pikku-command-cli.ts","../src/functions/wirings/cli/serialize-channel-cli-client.ts","../src/functions/wirings/cli/serialize-channel-cli.ts","../src/functions/wirings/cli/serialize-cli-types.ts","../src/functions/wirings/cli/serialize-local-cli-bootstrap.ts","../src/functions/wirings/console/pikku-command-console-functions.ts","../src/functions/wirings/console/pikku-command-node-types.ts","../src/functions/wirings/console/pikku-command-nodes-meta.ts","../src/functions/wirings/console/serialize-console-functions.ts","../src/functions/wirings/console/serialize-node-types.ts","../src/functions/wirings/credentials/pikku-command-credentials.ts","../src/functions/wirings/credentials/serialize-credentials-types.ts","../src/functions/wirings/emails/pikku-command-emails.ts","../src/functions/wirings/emails/serialize-emails.ts","../src/functions/wirings/functions/pikku-command-addon-types.ts","../src/functions/wirings/functions/pikku-command-function-types-split.ts","../src/functions/wirings/functions/pikku-command-function-types.ts","../src/functions/wirings/functions/pikku-command-functions.ts","../src/functions/wirings/functions/pikku-command-services.ts","../src/functions/wirings/functions/schemas.ts","../src/functions/wirings/functions/serialize-addon-refs.ts","../src/functions/wirings/functions/serialize-addon-types.ts","../src/functions/wirings/functions/serialize-function-imports.ts","../src/functions/wirings/functions/serialize-function-types.ts","../src/functions/wirings/functions/serialize-pikku-types-hub.ts","../src/functions/wirings/gateway/pikku-command-gateway.ts","../src/functions/wirings/gateway/serialize-gateway-meta.ts","../src/functions/wirings/http/pikku-command-http-map.ts","../src/functions/wirings/http/pikku-command-http-routes.ts","../src/functions/wirings/http/pikku-command-http-types.ts","../src/functions/wirings/http/pikku-command-openapi.ts","../src/functions/wirings/http/pikku-http-routes.ts","../src/functions/wirings/http/serialize-fetch-wrapper.ts","../src/functions/wirings/http/serialize-http-types.ts","../src/functions/wirings/http/serialize-typed-http-map.ts","../src/functions/wirings/mcp/pikku-command-mcp-json.ts","../src/functions/wirings/mcp/pikku-command-mcp-types.ts","../src/functions/wirings/mcp/pikku-command-mcp.ts","../src/functions/wirings/mcp/serialize-mcp-types.ts","../src/functions/wirings/middleware/pikku-command-middleware.ts","../src/functions/wirings/middleware/serialize-middleware-imports.ts","../src/functions/wirings/package/pikku-command-package-types.ts","../src/functions/wirings/package/pikku-command-package.ts","../src/functions/wirings/package/serialize-package-types.ts","../src/functions/wirings/package/serialize-package.ts","../src/functions/wirings/permissions/pikku-command-permissions.ts","../src/functions/wirings/permissions/serialize-permissions-imports.ts","../src/functions/wirings/queue/pikku-command-queue-map.ts","../src/functions/wirings/queue/pikku-command-queue-service.ts","../src/functions/wirings/queue/pikku-command-queue-types.ts","../src/functions/wirings/queue/pikku-command-queue.ts","../src/functions/wirings/queue/pikku-queue-map.ts","../src/functions/wirings/queue/pikku-queue.ts","../src/functions/wirings/queue/serialize-queue-map.ts","../src/functions/wirings/queue/serialize-queue-meta.ts","../src/functions/wirings/queue/serialize-queue-types.ts","../src/functions/wirings/queue/serialize-queue-wrapper.ts","../src/functions/wirings/realtime/pikku-command-events-scaffold.ts","../src/functions/wirings/realtime/pikku-command-realtime.ts","../src/functions/wirings/realtime/serialize-events-scaffold.ts","../src/functions/wirings/realtime/serialize-realtime-client.ts","../src/functions/wirings/rpc/pikku-command-public-rpc.ts","../src/functions/wirings/rpc/pikku-command-react-query.ts","../src/functions/wirings/rpc/pikku-command-remote-rpc.ts","../src/functions/wirings/rpc/pikku-command-rpc-client.ts","../src/functions/wirings/rpc/pikku-command-rpc-map.ts","../src/functions/wirings/rpc/pikku-command-rpc.ts","../src/functions/wirings/rpc/serialize-public-rpc.ts","../src/functions/wirings/rpc/serialize-react-query-hooks.ts","../src/functions/wirings/rpc/serialize-remote-rpc.ts","../src/functions/wirings/rpc/serialize-rpc-wrapper.ts","../src/functions/wirings/rpc/serialize-typed-rpc-map.ts","../src/functions/wirings/scheduler/pikku-command-scheduler-types.ts","../src/functions/wirings/scheduler/pikku-command-scheduler.ts","../src/functions/wirings/scheduler/serialize-scheduler-meta.ts","../src/functions/wirings/scheduler/serialize-scheduler-types.ts","../src/functions/wirings/secrets/pikku-command-secrets.ts","../src/functions/wirings/secrets/serialize-secrets-types.ts","../src/functions/wirings/triggers/pikku-command-trigger-types.ts","../src/functions/wirings/triggers/pikku-command-trigger.ts","../src/functions/wirings/triggers/serialize-trigger-meta.ts","../src/functions/wirings/triggers/serialize-trigger-types.ts","../src/functions/wirings/variables/pikku-command-variables.ts","../src/functions/wirings/variables/serialize-variables-types.ts","../src/functions/wirings/workflow/pikku-command-workflow-routes.ts","../src/functions/wirings/workflow/pikku-command-workflow.ts","../src/functions/wirings/workflow/serialize-workflow-bootstrap-map.ts","../src/functions/wirings/workflow/serialize-workflow-map.ts","../src/functions/wirings/workflow/serialize-workflow-meta.ts","../src/functions/wirings/workflow/serialize-workflow-registration.ts","../src/functions/wirings/workflow/serialize-workflow-routes.ts","../src/functions/wirings/workflow/serialize-workflow-types.ts","../src/functions/workflows/all.workflow.ts","../src/middleware/log-command-info-and-time.ts","../src/scaffold/rpc-remote.gen.ts","../src/server/bun-server-runner.ts","../src/server/dev-server-runner.interface.ts","../src/server/node-server-runner.ts","../src/services/cli-logger-forwarder.service.ts","../src/services/cli-logger.service.ts","../src/utils/check-required-types.ts","../src/utils/cli-session.ts","../src/utils/command-summary.ts","../src/utils/contract-versions.ts","../src/utils/detect-better-auth.ts","../src/utils/device-auth.ts","../src/utils/file-import-path.ts","../src/utils/file-imports-serializer.ts","../src/utils/file-writer.ts","../src/utils/generate-bootstrap-file.ts","../src/utils/get-cli-version.ts","../src/utils/parse-cli-filters.ts","../src/utils/pikku-cli-config.ts","../src/utils/pikku-files-and-methods.ts","../src/utils/serialize-import-map.ts","../src/utils/serialize-meta-ts.ts","../src/utils/serialize-schemas.ts","../src/utils/strip-verbose-meta.ts","../.pikku/pikku-bootstrap.gen.ts","../.pikku/pikku-meta-service.gen.ts","../.pikku/pikku-services.gen.ts","../.pikku/pikku-types.gen.ts","../.pikku/agent/pikku-agent-map.gen.d.ts","../.pikku/agent/pikku-agent-types.gen.ts","../.pikku/channel/pikku-channel-types.gen.ts","../.pikku/cli/pikku-cli-channel.ts","../.pikku/cli/pikku-cli-client.gen.ts","../.pikku/cli/pikku-cli-contracts-meta.gen.ts","../.pikku/cli/pikku-cli-types.gen.ts","../.pikku/cli/pikku-cli-wirings-meta.gen.ts","../.pikku/cli/pikku-cli-wirings.gen.ts","../.pikku/cli/pikku-cli.gen.ts","../.pikku/console/pikku-node-types.gen.ts","../.pikku/function/pikku-function-types.gen.ts","../.pikku/function/pikku-functions-meta.gen.ts","../.pikku/function/pikku-functions.gen.ts","../.pikku/http/pikku-http-types.gen.ts","../.pikku/http/pikku-http-wirings-map.gen.d.ts","../.pikku/http/pikku-http-wirings-meta.gen.ts","../.pikku/http/pikku-http-wirings.gen.ts","../.pikku/mcp/pikku-mcp-types.gen.ts","../.pikku/node/pikku-node-types.gen.ts","../.pikku/queue/pikku-queue-types.gen.ts","../.pikku/queue/pikku-queue-workers-wirings-map.gen.d.ts","../.pikku/queue/pikku-queue-workers-wirings-meta.gen.ts","../.pikku/queue/pikku-queue-workers-wirings.gen.ts","../.pikku/rpc/pikku-rpc-wirings-map.gen.d.ts","../.pikku/rpc/pikku-rpc-wirings-map.internal.gen.d.ts","../.pikku/rpc/pikku-rpc-wirings-meta.internal.gen.ts","../.pikku/scheduler/pikku-scheduler-types.gen.ts","../.pikku/schemas/register.gen.ts","../.pikku/secrets/pikku-secret-types.gen.ts","../.pikku/secrets/pikku-secrets.gen.ts","../.pikku/trigger/pikku-trigger-types.gen.ts","../.pikku/variables/pikku-variable-types.gen.ts","../.pikku/variables/pikku-variables.gen.ts","../.pikku/workflow/pikku-workflow-map.gen.d.ts","../.pikku/workflow/pikku-workflow-types.gen.ts","../.pikku/workflow/pikku-workflow-wirings-meta.gen.ts","../.pikku/workflow/pikku-workflow-wirings.gen.ts","../types/application-types.d.ts","../types/bun-sqlite.d.ts","../types/config.d.ts"],"version":"5.9.3"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pikku/cli",
-  "version": "0.12.54",
+  "version": "0.12.56",
   "author": "yasser.fadl@gmail.com",
   "license": "BUSL-1.1",
   "imports": {
@@ -29,11 +29,11 @@
     "@openapi-contrib/json-schema-to-openapi-schema": "^4.3.1",
     "@pikku/better-auth": "^0.12.12",
     "@pikku/bun-server": "^0.12.1",
-    "@pikku/core": "^0.12.38",
+    "@pikku/core": "^0.12.40",
     "@pikku/deploy-cloudflare": "^0.12.6",
     "@pikku/fetch": "^0.12.5",
-    "@pikku/inspector": "^0.12.26",
-    "@pikku/kysely": "^0.12.17",
+    "@pikku/inspector": "^0.12.28",
+    "@pikku/kysely": "^0.12.18",
     "@pikku/kysely-node-sqlite": "^0.12.2",
     "@pikku/node-http-server": "^0.12.3",
     "@pikku/openapi-parser": "^0.12.10",

package/skills/pikku-addon/SKILL.md

@@ -102,65 +102,7 @@ export const createWireServices = pikkuAddonWireServices(
 npx pikku new addon
 ```
 
-### Package Structure
-
-```text
-my-addon/
-├── package.json               # Exports .pikku/* and dist/
-├── pikku.config.json          # addon: true + metadata
-├── tsconfig.json              # #pikku path mapping
-├── src/
-│   ├── services.ts            # createSingletonServices (required)
-│   └── functions/
-│       └── *.function.ts      # Function definitions
-├── types/
-│   └── application-types.d.ts # SingletonServices interface
-└── .pikku/                    # Generated (gitignored)
-```
-
-### pikku.config.json
-
-```json
-{
-  "tsconfig": "./tsconfig.json",
-  "srcDirectories": ["src", "types"],
-  "outDir": "./.pikku",
-  "addon": true,
-  "node": {
-    "displayName": "My Addon",
-    "description": "What this addon does",
-    "categories": ["General"]
-  }
-}
-```
-
-### package.json (key fields)
-
-```json
-{
-  "name": "@my-org/addon-todos",
-  "imports": {
-    "#pikku": "./.pikku/pikku-types.gen.ts",
-    "#pikku/*": "./.pikku/*"
-  },
-  "exports": {
-    ".": { "types": "./dist/src/index.d.ts", "import": "./dist/src/index.js" },
-    "./.pikku/*": "./.pikku/*",
-    "./.pikku/pikku-metadata.gen.json": "./.pikku/pikku-metadata.gen.json",
-    "./.pikku/rpc/pikku-rpc-wirings-map.internal.gen.js": {
-      "types": "./.pikku/rpc/pikku-rpc-wirings-map.internal.gen.d.ts"
-    }
-  },
-  "files": ["dist", ".pikku"],
-  "peerDependencies": {
-    "@pikku/core": "*"
-  },
-  "scripts": {
-    "pikku": "pikku all",
-    "build": "tsc && cp -r .pikku dist/"
-  }
-}
-```
+This generates `package.json` (exports `.pikku/*` + `dist/`), `pikku.config.json` (`addon: true`), `tsconfig.json` (`#pikku` path mapping), `src/services.ts`, `src/functions/`, and `types/application-types.d.ts`. For the full file contents/exports you rarely hand-edit, read `references/addon-package-manifest.md`.
 
 ### Services
 
@@ -202,6 +144,13 @@ export const addTodo = pikkuSessionlessFunc({
 })
 ```
 
+Optional approval gating (e.g. for agent tools) — add `approvalRequired: true` plus an `approvalDescription` resolver:
+
+```typescript
+approvalRequired: true,
+approvalDescription: async (_services, { title }) => `Add a todo called "${title}"`,
+```
+
 ### Build
 
 ```bash
@@ -251,6 +200,23 @@ wireHTTP({
 })
 ```
 
+Or batch multiple addon routes with `defineHTTPRoutes` + `wireHTTPRoutes`:
+
+```typescript
+import { wireHTTPRoutes, defineHTTPRoutes, addon } from '#pikku'
+
+const todoRoutes = defineHTTPRoutes({
+  tags: ['todos'],
+  auth: false,
+  routes: {
+    list: { method: 'get', route: '/todos', func: addon('todos:listTodos') },
+    add: { method: 'post', route: '/todos', func: addon('todos:addTodo') },
+  },
+})
+
+wireHTTPRoutes({ basePath: '/api', routes: { todos: todoRoutes } })
+```
+
 ### Use in AI Agents
 
 ```typescript
@@ -270,61 +236,3 @@ export const todoAgent = pikkuAIAgent({
   maxSteps: 5,
 })
 ```
-
-## Complete Example
-
-```typescript
-// --- ADDON PACKAGE: @my-org/addon-todos ---
-
-// src/services.ts
-import { pikkuAddonServices } from '#pikku'
-
-export const createSingletonServices = pikkuAddonServices(async () => {
-  return { todoStore: new TodoStore() }
-})
-
-// src/functions/listTodos.function.ts
-export const listTodos = pikkuSessionlessFunc({
-  description: 'List all todos',
-  func: async ({ todoStore }) => {
-    return { todos: todoStore.list() }
-  },
-})
-
-// src/functions/addTodo.function.ts
-export const addTodo = pikkuSessionlessFunc({
-  description: 'Add a new todo',
-  approvalRequired: true,
-  approvalDescription: async (_services, { title }) => {
-    return `Add a todo called "${title}"`
-  },
-  input: z.object({ title: z.string() }),
-  output: z.object({ id: z.string(), title: z.string() }),
-  func: async ({ todoStore }, { title }) => {
-    return todoStore.add(title)
-  },
-})
-
-// --- CONSUMING PROJECT ---
-
-// wirings/addons.wirings.ts
-import { wireAddon } from '#pikku'
-wireAddon({ name: 'todos', package: '@my-org/addon-todos' })
-
-// wirings/api.http.ts
-import { wireHTTPRoutes, defineHTTPRoutes, addon } from '#pikku'
-
-const todoRoutes = defineHTTPRoutes({
-  tags: ['todos'],
-  auth: false,
-  routes: {
-    list: { method: 'get', route: '/todos', func: addon('todos:listTodos') },
-    add: { method: 'post', route: '/todos', func: addon('todos:addTodo') },
-  },
-})
-
-wireHTTPRoutes({
-  basePath: '/api',
-  routes: { todos: todoRoutes },
-})
-```

package/skills/pikku-addon/references/addon-package-manifest.md

@@ -0,0 +1,63 @@
+# Addon Package Manifest Reference
+
+`npx pikku new addon` scaffolds these files. You rarely hand-edit them — consult this when wiring exports or config by hand.
+
+## Package Structure
+
+```text
+my-addon/
+├── package.json               # Exports .pikku/* and dist/
+├── pikku.config.json          # addon: true + metadata
+├── tsconfig.json              # #pikku path mapping
+├── src/
+│   ├── services.ts            # createSingletonServices (required)
+│   └── functions/
+│       └── *.function.ts      # Function definitions
+├── types/
+│   └── application-types.d.ts # SingletonServices interface
+└── .pikku/                    # Generated (gitignored)
+```
+
+## pikku.config.json
+
+```json
+{
+  "tsconfig": "./tsconfig.json",
+  "srcDirectories": ["src", "types"],
+  "outDir": "./.pikku",
+  "addon": true,
+  "node": {
+    "displayName": "My Addon",
+    "description": "What this addon does",
+    "categories": ["General"]
+  }
+}
+```
+
+## package.json (key fields)
+
+```json
+{
+  "name": "@my-org/addon-todos",
+  "imports": {
+    "#pikku": "./.pikku/pikku-types.gen.ts",
+    "#pikku/*": "./.pikku/*"
+  },
+  "exports": {
+    ".": { "types": "./dist/src/index.d.ts", "import": "./dist/src/index.js" },
+    "./.pikku/*": "./.pikku/*",
+    "./.pikku/pikku-metadata.gen.json": "./.pikku/pikku-metadata.gen.json",
+    "./.pikku/rpc/pikku-rpc-wirings-map.internal.gen.js": {
+      "types": "./.pikku/rpc/pikku-rpc-wirings-map.internal.gen.d.ts"
+    }
+  },
+  "files": ["dist", ".pikku"],
+  "peerDependencies": {
+    "@pikku/core": "*"
+  },
+  "scripts": {
+    "pikku": "pikku all",
+    "build": "tsc && cp -r .pikku dist/"
+  }
+}
+```