@pikku/cli 0.12.81 → 0.12.83

package/dist/.pikku/workflow/meta/allWorkflow.gen.json

@@ -6,7 +6,19 @@
         "Bootstrap inspect": {
             "nodeId": "Bootstrap inspect",
             "flow": "inline",
-            "next": "Bootstrap function types split"
+            "next": "Bootstrap scope definition types"
+        },
+        "Bootstrap scope definition types": {
+            "nodeId": "Bootstrap scope definition types",
+            "rpcName": "pikkuScopeDefinitionTypes",
+            "next": "Bootstrap scopes",
+            "stepHash": "94d48581c462"
+        },
+        "Bootstrap scopes": {
+            "nodeId": "Bootstrap scopes",
+            "rpcName": "pikkuScopes",
+            "next": "Bootstrap function types split",
+            "stepHash": "41fa180b51ca"
         },
         "Bootstrap function types split": {
             "nodeId": "Bootstrap function types split",
@@ -213,9 +225,15 @@
         "Public agent scaffold": {
             "nodeId": "Public agent scaffold",
             "rpcName": "pikkuPublicAgent",
-            "next": "Public RPC",
+            "next": "Graph wirings",
             "stepHash": "64d807033007"
         },
+        "Graph wirings": {
+            "nodeId": "Graph wirings",
+            "rpcName": "pikkuGraphWirings",
+            "next": "Public RPC",
+            "stepHash": "441f296ab859"
+        },
         "Public RPC": {
             "nodeId": "Public RPC",
             "rpcName": "pikkuPublicRPC",
@@ -267,9 +285,21 @@
         "Credentials": {
             "nodeId": "Credentials",
             "rpcName": "pikkuCredentials",
-            "next": "Variable definition types",
+            "next": "Scope definition types",
             "stepHash": "3e4cb364d6f2"
         },
+        "Scope definition types": {
+            "nodeId": "Scope definition types",
+            "rpcName": "pikkuScopeDefinitionTypes",
+            "next": "Scopes",
+            "stepHash": "578ebaf38e55"
+        },
+        "Scopes": {
+            "nodeId": "Scopes",
+            "rpcName": "pikkuScopes",
+            "next": "Variable definition types",
+            "stepHash": "1ca929a3b6de"
+        },
         "Variable definition types": {
             "nodeId": "Variable definition types",
             "rpcName": "pikkuVariableDefinitionTypes",
@@ -326,9 +356,15 @@
         "RPC exposed map": {
             "nodeId": "RPC exposed map",
             "rpcName": "pikkuRPCExposedMap",
-            "next": "Workflow",
+            "next": "RPC remote map",
             "stepHash": "20b6c409e9fb"
         },
+        "RPC remote map": {
+            "nodeId": "RPC remote map",
+            "rpcName": "pikkuRPCRemoteMap",
+            "next": "Workflow",
+            "stepHash": "218a42566e2c"
+        },
         "Workflow": {
             "nodeId": "Workflow",
             "rpcName": "pikkuWorkflow",
@@ -338,9 +374,15 @@
         "Remote RPC": {
             "nodeId": "Remote RPC",
             "rpcName": "pikkuRemoteRPC",
-            "next": "Workflow routes",
+            "next": "Webhook",
             "stepHash": "82751ee2ed4b"
         },
+        "Webhook": {
+            "nodeId": "Webhook",
+            "rpcName": "pikkuWebhook",
+            "next": "Workflow routes",
+            "stepHash": "a7d0991ef74f"
+        },
         "Workflow routes": {
             "nodeId": "Workflow routes",
             "rpcName": "pikkuWorkflowRoutes",
@@ -562,5 +604,5 @@
     "entryNodeIds": [
         "Bootstrap inspect"
     ],
-    "graphHash": "e21b048b1456"
+    "graphHash": "d41d0307c719"
 }

package/dist/.pikku/workflow/pikku-workflow-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.81
+ * This file was generated by @pikku/cli@0.12.83
  */
 import { WorkflowCancelledException } from '@pikku/core/workflow';
 import { template } from '@pikku/core/workflow';
@@ -85,6 +85,7 @@ type NodeInputType<FuncMap extends Record<string, string>, K extends keyof FuncM
 type NodeOutputKeys<FuncMap extends Record<string, string>, N extends string> = N extends keyof FuncMap ? FuncMap[N] extends keyof FlattenedRPCMap ? keyof FlattenedRPCMap[FuncMap[N]]['output'] & string : FuncMap[N] extends keyof FlattenedWorkflowMap ? keyof FlattenedWorkflowMap[FuncMap[N]]['output'] & string : FuncMap[N] extends keyof FlattenedAgentMap ? keyof FlattenedAgentMap[FuncMap[N]]['output'] & string : string : string;
 type RefFunction<FuncMap extends Record<string, string>> = {
     <N extends Extract<keyof FuncMap, string>>(nodeId: N, path: NodeOutputKeys<FuncMap, N>): TypedRef<unknown>;
+    <N extends Extract<keyof FuncMap, string>>(nodeId: N): TypedRef<unknown>;
     (nodeId: 'trigger' | '$item', path?: string): TypedRef<unknown>;
 };
 type TemplateFunction = (templateStr: string, refs: TypedRef<unknown>[]) => TemplateString;
@@ -93,6 +94,8 @@ type GraphNodeConfigMap<FuncMap extends Record<string, string>> = {
         next?: NextConfig<Extract<keyof FuncMap, string>>;
         input?: NodeInputType<FuncMap, K> | (() => NodeInputType<FuncMap, K>) | ((ref: RefFunction<FuncMap>, template: TemplateFunction) => NodeInputType<FuncMap, K>);
         onError?: Extract<keyof FuncMap, string> | Extract<keyof FuncMap, string>[];
+        /** Free-text node documentation. Non-semantic — excluded from graphHash. */
+        notes?: string;
     };
 };
 type NextConfig<NodeIds extends string> = NodeIds | NodeIds[] | {

package/dist/.pikku/workflow/pikku-workflow-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.81
+ * This file was generated by @pikku/cli@0.12.83
  */
 import { WorkflowCancelledException } from '@pikku/core/workflow';
 import { template } from '@pikku/core/workflow';

package/dist/.pikku/workflow/pikku-workflow-wirings-meta.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.81
+ * This file was generated by @pikku/cli@0.12.83
  */
 import { pikkuState } from '@pikku/core/internal';
 import allWorkflowMeta from './meta/allWorkflow.gen.json' with { type: 'json' };

package/dist/.pikku/workflow/pikku-workflow-wirings.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.81
+ * This file was generated by @pikku/cli@0.12.83
  */
 import { addWorkflow } from '@pikku/core/workflow';
 import './pikku-workflow-wirings-meta.gen.js';

package/dist/bin/pikku-bin.mjs

@@ -11,8 +11,8 @@ async function checkForUpdate() {
     })
     if (!res.ok) return
     const { version: latest } = await res.json()
-    if (latest !== '0.12.81') {
-      process.stderr.write(`\n  Update available  0.12.81 → ${latest}\n  brew upgrade pikku  or  npm install -g @pikku/cli\n\n`)
+    if (latest !== '0.12.83') {
+      process.stderr.write(`\n  Update available  0.12.83 → ${latest}\n  brew upgrade pikku  or  npm install -g @pikku/cli\n\n`)
     }
   } catch {}
 }

package/dist/src/cli.wiring.js

@@ -21,6 +21,8 @@ import { dbGenerate } from './functions/commands/db-generate.js';
 import { dbSeed } from './functions/commands/db-seed.js';
 import { dbReset } from './functions/commands/db-reset.js';
 import { dbAudit } from './functions/commands/db-audit.js';
+import { scopesAudit } from './functions/commands/scopes-audit.js';
+import { scopesPrune } from './functions/commands/scopes-prune.js';
 import { pikkuAudit } from './functions/commands/audit.js';
 import { workspaceValidate, renderWorkspaceValidate, } from './functions/commands/workspace-validate.js';
 import { scenarioRun, scenarioList } from './functions/commands/scenario.js';
@@ -33,8 +35,9 @@ import { pikkuNewWiring } from './functions/commands/new-wiring.js';
 import { pikkuNewMiddleware } from './functions/commands/new-middleware.js';
 import { pikkuNewPermission } from './functions/commands/new-permission.js';
 import { pikkuNewAddon } from './functions/commands/new-addon.js';
+import { pikkuImportN8n } from './functions/commands/import-n8n.js';
 import { pikkuInfoFunctions, pikkuInfoTags, pikkuInfoMiddleware, pikkuInfoPermissions, } from './functions/commands/info.js';
-import { enableRpc, enableConsole, enableScenarios, enableAgent, enableWorkflow, enableEvents, enableRemoteRpc, } from './functions/commands/enable.js';
+import { enableRpc, enableConsole, enableScenarios, enableAgent, enableWorkflow, enableEvents, enableRemoteRpc, enableWebhook, } from './functions/commands/enable.js';
 import { pikkuRealtime } from './functions/wirings/realtime/pikku-command-realtime.js';
 import { binary } from './functions/commands/binary.js';
 import { deployPlan } from './functions/commands/deploy-plan.js';
@@ -332,6 +335,26 @@ wireCLI({
                 }),
             },
         },
+        scopes: {
+            description: 'Inspect and maintain declared authorization scopes',
+            subcommands: {
+                audit: pikkuCLICommand({
+                    func: scopesAudit,
+                    description: 'Report scopes in the database that are no longer declared in code, and the roles holding them',
+                }),
+                prune: pikkuCLICommand({
+                    func: scopesPrune,
+                    description: 'Remove scopes that are no longer declared in code, cascading them out of every role',
+                    options: {
+                        yes: {
+                            description: 'Actually delete. Without it, prune only reports the blast radius',
+                            short: 'y',
+                            default: false,
+                        },
+                    },
+                }),
+            },
+        },
         workspace: {
             description: 'Workspace-level validation and maintenance commands',
             subcommands: {
@@ -483,6 +506,10 @@ wireCLI({
                         },
                     },
                 }),
+                webhook: pikkuCLICommand({
+                    func: enableWebhook,
+                    description: 'Enable the outgoing webhook delivery queue worker (scaffolds webhook.gen.ts)',
+                }),
             },
         },
         new: {
@@ -564,7 +591,7 @@ wireCLI({
                             default: false,
                         },
                         oauth: {
-                            description: 'Include OAuth2 credential wiring and OAuth2Client-based API service',
+                            description: 'Include OAuth2 credential wiring; the API service reads its access token from the credential service',
                             default: false,
                         },
                         credential: {
@@ -592,6 +619,22 @@ wireCLI({
                 }),
             },
         },
+        import: {
+            description: 'Import workflows from other systems',
+            subcommands: {
+                n8n: pikkuCLICommand({
+                    func: pikkuImportN8n,
+                    description: 'Import an n8n workflow JSON export (a single workflow, an export array, or a directory of exports) into Pikku workflow graphs + stub functions',
+                    parameters: '<file>',
+                    options: {
+                        out: {
+                            description: 'Output directory (defaults to scaffold.functionDir or cwd)',
+                            short: 'o',
+                        },
+                    },
+                }),
+            },
+        },
         versions: {
             description: 'Manage function contract versions',
             subcommands: {
@@ -680,7 +723,7 @@ wireCLI({
             },
         },
         skills: {
-            description: 'Install bundled agent skills (Claude Code today; Codex/Gemini coming soon)',
+            description: 'Install bundled agent skills (Claude Code, opencode, pi; Codex/Gemini coming soon)',
             subcommands: {
                 list: pikkuCLICommand({
                     func: pikkuSkillsList,
@@ -691,7 +734,7 @@ wireCLI({
                     description: 'Copy bundled skills into the current project',
                     options: {
                         agent: {
-                            description: 'Target agent (claude | opencode | codex | gemini). Default: claude',
+                            description: 'Target agent (claude | opencode | pi). Default: claude',
                             default: 'claude',
                         },
                         only: {

package/dist/src/deploy/analyzer/analyzer.js

@@ -31,6 +31,7 @@ export function analyzeDeployment(state, options) {
             funcId.startsWith('workflowStart:') ||
             funcId.startsWith('workflow:') ||
             funcId.startsWith('workflowStatus:') ||
+            funcId.startsWith('workflowApprove:') ||
             funcId.startsWith('pikkuWorkflowWorker:') ||
             funcId.startsWith('pikkuWorkflowOrchestrator:')) {
             continue;
@@ -419,6 +420,11 @@ function buildWorkflows(graphMeta, functionsMeta, rpcMeta, _httpMeta, units, wor
                 route: `/workflow/${graph.name}/status/:runId`,
                 pikkuFuncId: `workflowStatus:${graph.name}`,
             },
+            {
+                method: 'post',
+                route: `/workflow/${graph.name}/approve/:runId`,
+                pikkuFuncId: `workflowApprove:${graph.name}`,
+            },
             {
                 method: 'post',
                 route: `/workflow/${graph.name}/graph/:nodeId`,

package/dist/src/fabric/fabric-commands.d.ts

@@ -661,7 +661,7 @@ export declare const fabricCommands: {
             }, {
                 proxyUrl: string;
                 apiKey: string;
-                format: "text" | "json" | "shell" | "env";
+                format: "json" | "text" | "shell" | "env";
             }, "rpc" | "session", import("../../.pikku/pikku-types.gen.js").PikkuFunctionSessionless<{
                 shell?: boolean | undefined;
                 env?: boolean | undefined;
@@ -669,7 +669,7 @@ export declare const fabricCommands: {
             }, {
                 proxyUrl: string;
                 apiKey: string;
-                format: "text" | "json" | "shell" | "env";
+                format: "json" | "text" | "shell" | "env";
             }, "rpc" | "session", import("../../types/application-types.js").Services> | import("../../.pikku/pikku-types.gen.js").PikkuFunction<{
                 shell?: boolean | undefined;
                 env?: boolean | undefined;
@@ -677,7 +677,7 @@ export declare const fabricCommands: {
             }, {
                 proxyUrl: string;
                 apiKey: string;
-                format: "text" | "json" | "shell" | "env";
+                format: "json" | "text" | "shell" | "env";
             }, "rpc" | "session", import("../../types/application-types.js").Services>, undefined, undefined>, import("../../.pikku/pikku-types.gen.js").PikkuMiddleware, (services: import("../../types/application-types.js").SingletonServices, data: any, session?: import("../../types/application-types.js").UserSession | undefined) => void | Promise<void>, string>;
         };
     };

package/dist/src/fabric/functions/llm-key.function.d.ts

@@ -8,8 +8,8 @@ export declare const FabricLLMKeyOutput: z.ZodObject<{
     proxyUrl: z.ZodString;
     apiKey: z.ZodString;
     format: z.ZodEnum<{
-        text: "text";
         json: "json";
+        text: "text";
         shell: "shell";
         env: "env";
     }>;
@@ -21,7 +21,7 @@ export declare const FabricLLMKey: import("../../../.pikku/pikku-types.gen.js").
 }, {
     proxyUrl: string;
     apiKey: string;
-    format: "text" | "json" | "shell" | "env";
+    format: "json" | "text" | "shell" | "env";
 }, "rpc" | "session", import("../../../.pikku/pikku-types.gen.js").PikkuFunctionSessionless<{
     shell?: boolean | undefined;
     env?: boolean | undefined;
@@ -29,7 +29,7 @@ export declare const FabricLLMKey: import("../../../.pikku/pikku-types.gen.js").
 }, {
     proxyUrl: string;
     apiKey: string;
-    format: "text" | "json" | "shell" | "env";
+    format: "json" | "text" | "shell" | "env";
 }, "rpc" | "session", import("../../../types/application-types.js").Services> | import("../../../.pikku/pikku-types.gen.js").PikkuFunction<{
     shell?: boolean | undefined;
     env?: boolean | undefined;
@@ -37,7 +37,7 @@ export declare const FabricLLMKey: import("../../../.pikku/pikku-types.gen.js").
 }, {
     proxyUrl: string;
     apiKey: string;
-    format: "text" | "json" | "shell" | "env";
+    format: "json" | "text" | "shell" | "env";
 }, "rpc" | "session", import("../../../types/application-types.js").Services>, undefined, undefined>;
 export declare const renderLLMKey: (_services: unknown, data: {
     proxyUrl: string;

package/dist/src/fabric/functions/validate.function.js

@@ -1058,8 +1058,48 @@ export async function runValidate(startDir = process.cwd()) {
     }
     // ── packages/theme + packages/components ──────────────────────────────
     const designDocUrl = 'https://pikkufabric.dev/docs/design';
-    if (!existsSync(join(root, 'packages', 'mantine-theme'))) {
-        info('theme-missing', 'packages/mantine-theme/ not found — Fabric design features require a theme package', join(root, 'packages', 'mantine-theme'), `Create packages/mantine-theme/ with your Mantine theme tokens. See ${designDocUrl}`);
+    const themePkgDir = join(root, 'packages', 'mantine-theme');
+    if (!existsSync(themePkgDir)) {
+        info('theme-missing', 'packages/mantine-theme/ not found — Fabric design features require a theme package', themePkgDir, `Create packages/mantine-theme/ with your Mantine theme tokens. See ${designDocUrl}`);
+    }
+    else {
+        // The Fabric console's Design tab lists a theme only when it can read a
+        // themes/<id>.json spec (+ active.json pointing at one) — that spec is the
+        // single source of truth the app runtime and the console both consume. A
+        // package that only hand-writes createTheme() renders fine but the console
+        // reports "no theme set" and cannot edit it. Mirror getSandboxThemes' file
+        // logic (themes/<id>.json where id matches THEME_ID_RE, + active.json.id).
+        const themeIdRe = /^[a-z][a-z0-9-]{0,38}$/;
+        const themesDir = join(themePkgDir, 'themes');
+        let specIds = [];
+        if (existsSync(themesDir)) {
+            try {
+                specIds = (await readdir(themesDir))
+                    .filter((f) => f.endsWith('.json'))
+                    .map((f) => f.slice(0, -'.json'.length))
+                    .filter((id) => themeIdRe.test(id));
+            }
+            catch {
+                // readdir failure — treat as no specs
+            }
+        }
+        if (specIds.length === 0) {
+            info('theme-no-spec', 'packages/mantine-theme/ has no themes/<id>.json spec — the Fabric console Design tab reports "no theme set" (and cannot edit the theme) even if the app is branded via a hand-written createTheme()', themesDir, lines('Add a theme spec the console can read:', '1. Create packages/mantine-theme/themes/<id>.json (id is kebab-case), e.g.:', '{', '  "name": "My Brand",', '  "brand": { "colors": { "primary": "#4f46e5" }, "fonts": { "body": "Inter" } },', '  "structure": { "defaultRadius": "md", "defaultColorScheme": "light" }', '}', '2. Create packages/mantine-theme/active.json: { "id": "<id>" }', '3. Build the Mantine theme from the active spec in index.ts.', `See ${designDocUrl}`));
+        }
+        else {
+            // A spec exists — active.json must point at one, else the console has no
+            // active theme (getSandboxThemes falls back to a "default" id that may
+            // not exist among the specs).
+            const activePath = join(themePkgDir, 'active.json');
+            const active = await readJsonSafe(activePath);
+            const activeId = typeof active?.id === 'string' ? active.id : null;
+            if (!activeId) {
+                info('theme-no-active', 'packages/mantine-theme/active.json is missing or has no string "id" — the Fabric console falls back to the "default" theme id, which may not match any themes/<id>.json', activePath, lines('Create packages/mantine-theme/active.json pointing at an existing spec:', `{ "id": "${specIds[0]}" }`));
+            }
+            else if (!specIds.includes(activeId)) {
+                info('theme-active-mismatch', `packages/mantine-theme/active.json points at "${activeId}" but no themes/${activeId}.json exists — the Fabric console has no active theme`, activePath, lines(`Point active.json at an existing spec (${specIds.join(', ')}):`, `{ "id": "${specIds[0]}" }`));
+            }
+        }
     }
     if (!existsSync(join(root, 'packages', 'components'))) {
         info('components-missing', 'packages/components/ not found — Fabric design features require a components package', join(root, 'packages', 'components'), `Create packages/components/ with your shared UI components. See ${designDocUrl}`);

package/dist/src/functions/commands/bootstrap.js

@@ -3,6 +3,8 @@ export const bootstrap = pikkuVoidFunc({
     remote: true,
     func: async ({ logger, getInspectorState }, _data, { rpc }) => {
         await getInspectorState(false, true, true);
+        // Before function types: they import ScopeId from the scopes codegen.
+        await rpc.invoke('pikkuScopes', { bootstrap: true });
         await rpc.invoke('pikkuFunctionTypesSplit', { bootstrap: true });
         // Stub auth.types.ts (if better-auth is used) so the pikkuBetterAuth
         // re-export resolves before any user file is imported.
@@ -18,6 +20,7 @@ export const bootstrap = pikkuVoidFunc({
         await rpc.invoke('pikkuAIAgentTypes');
         await rpc.invoke('pikkuNodeTypes');
         await rpc.invoke('pikkuSecretDefinitionTypes');
+        await rpc.invoke('pikkuScopeDefinitionTypes');
         await rpc.invoke('pikkuCLITypes', { bootstrap: true });
         if (logger.hasCriticalErrors()) {
             process.exit(1);

package/dist/src/functions/commands/dev.js

@@ -1,8 +1,8 @@
 import { join, resolve } from 'path';
 import { pikkuSessionlessFunc } from '#pikku';
 import chokidar from 'chokidar';
-import { pikkuDevReloader, reloadGeneratedMeta } from '@pikku/core/dev';
-import { ConsoleLogger, LocalEmailService, spy, InMemoryQueueService, InMemoryWorkflowService, InMemoryTriggerService, InMemoryAIRunStateService, } from '@pikku/core/services';
+import { pikkuDevReloader, reloadGeneratedMeta, reconcileAddonRegistry, } from '@pikku/core/dev';
+import { ConsoleLogger, LocalEmailService, spy, InMemoryQueueService, InMemoryWorkflowService, InMemoryTriggerService, InMemoryAIRunStateService, QueueWebhookService, } from '@pikku/core/services';
 import { KyselyAIStorageService, KyselyAIRunStateService, KyselyAgentRunService, } from '@pikku/kysely';
 import { stopSingletonServices } from '@pikku/core';
 import { pikkuState } from '@pikku/core/internal';
@@ -182,6 +182,7 @@ export const dev = pikkuSessionlessFunc({
         // services.ts. Its EventHub is shared into the singleton services so
         // function-side broadcasts reach the sockets the transport holds.
         const eventHub = await devServerRunner.createEventHub();
+        const devQueueService = new InMemoryQueueService();
         const inMemoryServices = {
             logger: devLogger,
             ...(aiAgentRunner ? { aiAgentRunner } : {}),
@@ -191,7 +192,8 @@ export const dev = pikkuSessionlessFunc({
             metaService: new LocalMetaService(pikkuDir),
             ...(coverageService ? { coverageService } : {}),
             schedulerService,
-            queueService: new InMemoryQueueService(),
+            queueService: devQueueService,
+            webhookService: new QueueWebhookService(devQueueService),
             workflowService,
             workflowRunService: workflowService,
             triggerService: new InMemoryTriggerService(),
@@ -292,6 +294,15 @@ export const dev = pikkuSessionlessFunc({
                             // this post-codegen pass (the reloader's instant pass ran too
                             // early to see it).
                             await devReloader?.reimportPending();
+                            // reimportPending only re-runs wire* for changed/added files, so a
+                            // DELETED *.addon.ts leaves its wireAddon entry stranded in the
+                            // live registry. Prune it against the inspection runAllWithCommandState
+                            // already produced this pass — a plain read (no refresh) reuses that
+                            // fresh post-change cache. Forcing refresh=true here re-inspected the
+                            // whole project a SECOND time: the codegen writes after that inspection
+                            // bump the ts-write generation, so refresh treats the cache as stale.
+                            const { rpc } = await getInspectorState();
+                            reconcileAddonRegistry(rpc.wireAddonDeclarations.keys(), logger);
                             logger.info({
                                 message: `✓ Generated in ${Date.now() - start}ms`,
                                 type: 'timing',

package/dist/src/functions/commands/enable.d.ts

@@ -5,3 +5,4 @@ export declare const enableAgent: import("#pikku").PikkuFunctionConfig<void, voi
 export declare const enableWorkflow: import("#pikku").PikkuFunctionConfig<void, void, "rpc" | "session", import("#pikku").PikkuFunctionSessionless<void, void, "rpc" | "session", import("#pikku").Services> | import("#pikku").PikkuFunction<void, void, "rpc" | "session", import("#pikku").Services>, undefined, undefined>;
 export declare const enableEvents: import("#pikku").PikkuFunctionConfig<void, void, "rpc" | "session", import("#pikku").PikkuFunctionSessionless<void, void, "rpc" | "session", import("#pikku").Services> | import("#pikku").PikkuFunction<void, void, "rpc" | "session", import("#pikku").Services>, undefined, undefined>;
 export declare const enableRemoteRpc: import("#pikku").PikkuFunctionConfig<void, void, "rpc" | "session", import("#pikku").PikkuFunctionSessionless<void, void, "rpc" | "session", import("#pikku").Services> | import("#pikku").PikkuFunction<void, void, "rpc" | "session", import("#pikku").Services>, undefined, undefined>;
+export declare const enableWebhook: import("#pikku").PikkuFunctionConfig<void, void, "rpc" | "session", import("#pikku").PikkuFunctionSessionless<void, void, "rpc" | "session", import("#pikku").Services> | import("#pikku").PikkuFunction<void, void, "rpc" | "session", import("#pikku").Services>, undefined, undefined>;

package/dist/src/functions/commands/enable.js

@@ -23,11 +23,13 @@ async function enableFeature(feature, logger, config, data) {
     }
     // The console is an admin surface — every RPC requires a session, so it can
     // never be scaffolded no-auth (the --no-auth flag is ignored for it).
-    const value = feature === 'console'
-        ? 'auth'
-        : noAuth
-            ? 'no-auth'
-            : FEATURE_DEFAULTS[feature];
+    const value = feature === 'webhook'
+        ? true
+        : feature === 'console'
+            ? 'auth'
+            : noAuth
+                ? 'no-auth'
+                : FEATURE_DEFAULTS[feature];
     json.scaffold[feature] = value;
     await writeFile(configPath, JSON.stringify(json, null, 2) + '\n', 'utf-8');
     logger.info(`Enabled scaffold.${feature} = '${value}' in ${configPath}`);
@@ -53,3 +55,6 @@ export const enableEvents = pikkuVoidFunc({
 export const enableRemoteRpc = pikkuVoidFunc({
     func: async ({ logger, config }, data) => enableFeature('remoteRpc', logger, config, data),
 });
+export const enableWebhook = pikkuVoidFunc({
+    func: async ({ logger, config }, data) => enableFeature('webhook', logger, config, data),
+});

package/dist/src/functions/commands/import-n8n.d.ts

@@ -0,0 +1,10 @@
+export declare const pikkuImportN8n: import("#pikku").PikkuFunctionConfig<{
+    file: string;
+    out?: string;
+}, void, "rpc" | "session", import("#pikku").PikkuFunctionSessionless<{
+    file: string;
+    out?: string;
+}, void, "rpc" | "session", import("#pikku").Services> | import("#pikku").PikkuFunction<{
+    file: string;
+    out?: string;
+}, void, "rpc" | "session", import("#pikku").Services>, undefined, undefined>;

package/dist/src/functions/commands/import-n8n.js

@@ -0,0 +1,130 @@
+import { existsSync } from 'fs';
+import { basename, isAbsolute, join, resolve } from 'path';
+import { mkdir, readdir, readFile, stat, writeFile } from 'fs/promises';
+import { pikkuSessionlessFunc } from '#pikku';
+import { parseN8n, generateWorkflowFromN8n } from '@pikku/n8n-import';
+async function writeFiles(baseDir, files) {
+    const written = [];
+    for (const [relativePath, content] of Object.entries(files)) {
+        const fullPath = join(baseDir, relativePath);
+        await mkdir(join(fullPath, '..'), { recursive: true });
+        await writeFile(fullPath, content, 'utf-8');
+        written.push(fullPath);
+    }
+    return written;
+}
+// A single n8n export file may hold one workflow object, a bare array of
+// workflows (n8n `export:workflow --all`), or a `{ workflows: [...] }` wrapper.
+// Flatten whichever shape into one job per workflow.
+function collectJobs(raw, nameHint, jobs) {
+    const list = Array.isArray(raw)
+        ? raw
+        : raw && Array.isArray(raw.workflows)
+            ? raw.workflows
+            : null;
+    if (list) {
+        list.forEach((wf, i) => {
+            const own = wf?.name?.trim();
+            jobs.push({ raw: wf, nameHint: own || `${nameHint}-${i + 1}` });
+        });
+    }
+    else {
+        jobs.push({ raw, nameHint });
+    }
+}
+async function importOne({ raw, nameHint }, baseDir, logger) {
+    let parsed;
+    try {
+        parsed = parseN8n(raw, nameHint);
+    }
+    catch (err) {
+        logger.error(`Failed to parse "${nameHint}": ${err.message}`);
+        return false;
+    }
+    const { files, manifest, credentialInstances, diagnostics } = generateWorkflowFromN8n(parsed);
+    // A single-file import can only resolve self-references; any cross-workflow
+    // sub-workflow reference is un-importable here. Report and skip rather than
+    // write a partial, un-runnable scaffold.
+    if (diagnostics.some((d) => d.type === 'error')) {
+        logger.error(`Cannot import "${parsed.name}":`);
+        for (const d of diagnostics) {
+            logger.error(`  [${d.reason}] ${d.message}`);
+        }
+        return false;
+    }
+    const written = await writeFiles(baseDir, files);
+    logger.info(`Imported "${parsed.name}" (${parsed.shape}) → ${written.length} file(s) in ${baseDir}`);
+    if (manifest.length > 0) {
+        logger.info(`  ${manifest.length} integration node(s) recorded in ${parsed.slug}.integrations.json`);
+    }
+    if (credentialInstances.length > 0) {
+        logger.info(`  ${credentialInstances.length} addon instance(s) wired in ${parsed.slug}.addons.gen.ts: ${credentialInstances
+            .map((i) => i.instanceName)
+            .join(', ')}`);
+    }
+    const stubCount = written.filter((f) => f.includes('/functions/')).length;
+    if (stubCount > 0) {
+        logger.info(`  ${stubCount} stub function(s) to implement — run the pikku-n8n-import skill to fill them in`);
+    }
+    return true;
+}
+export const pikkuImportN8n = pikkuSessionlessFunc({
+    func: async ({ logger, config }, { file, out }) => {
+        const inputPath = isAbsolute(file) ? file : resolve(process.cwd(), file);
+        if (!existsSync(inputPath)) {
+            logger.error(`n8n workflow file not found: ${inputPath}`);
+            process.exit(1);
+        }
+        const baseDir = out
+            ? isAbsolute(out)
+                ? out
+                : resolve(process.cwd(), out)
+            : config.scaffold?.functionDir || process.cwd();
+        const jobs = [];
+        if ((await stat(inputPath)).isDirectory()) {
+            const entries = (await readdir(inputPath))
+                .filter((f) => f.toLowerCase().endsWith('.json'))
+                .sort();
+            if (entries.length === 0) {
+                logger.error(`No .json workflow files found in ${inputPath}`);
+                process.exit(1);
+            }
+            for (const entry of entries) {
+                try {
+                    const raw = JSON.parse(await readFile(join(inputPath, entry), 'utf-8'));
+                    collectJobs(raw, entry.replace(/\.json$/i, ''), jobs);
+                }
+                catch (err) {
+                    logger.error(`Failed to read ${entry}: ${err.message}`);
+                }
+            }
+        }
+        else {
+            let raw;
+            try {
+                raw = JSON.parse(await readFile(inputPath, 'utf-8'));
+            }
+            catch (err) {
+                logger.error(`Failed to parse n8n workflow: ${err.message}`);
+                process.exit(1);
+            }
+            collectJobs(raw, basename(inputPath).replace(/\.json$/i, ''), jobs);
+        }
+        if (jobs.length === 0) {
+            logger.error('No workflows found to import');
+            process.exit(1);
+        }
+        let failed = 0;
+        for (const job of jobs) {
+            if (!(await importOne(job, baseDir, logger)))
+                failed++;
+        }
+        if (jobs.length > 1) {
+            const ok = jobs.length - failed;
+            logger.info(`Imported ${ok}/${jobs.length} workflow(s) into ${baseDir}${failed > 0 ? ` — ${failed} failed` : ''}`);
+        }
+        if (failed > 0) {
+            process.exit(1);
+        }
+    },
+});