npm - @pikku/cli - Versions diffs - 0.12.82 → 0.12.85 - Mend

@pikku/cli 0.12.82 → 0.12.85

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (346) hide show

package/console-app/index.html CHANGED Viewed

@@ -21,8 +21,8 @@
         }
       } catch (e) {}
     </script>
-    <script type="module" crossorigin src="/console/assets/index-ChcXIEhS.js"></script>
-    <link rel="stylesheet" crossorigin href="/console/assets/index-DwyRdRuZ.css">
+    <script type="module" crossorigin src="/console/assets/index-CEv-kj3J.js"></script>
+    <link rel="stylesheet" crossorigin href="/console/assets/index-CSzCJzBb.css">
   </head>
   <body>
     <div id="root"></div>

package/dist/.pikku/agent/pikku-agent-types.gen.d.ts CHANGED Viewed

@@ -1,12 +1,13 @@
 /**
- * This file was generated by @pikku/cli@0.12.82
+ * This file was generated by @pikku/cli@0.12.85
  */
 import { CoreAIAgent, PikkuAIMiddlewareHooks } from '@pikku/core/ai-agent';
 import type { PikkuPermission, PikkuMiddleware, Services, PikkuFunctionConfig } from '../function/pikku-function-types.gen.js';
 import type { StandardSchemaV1 } from '@standard-schema/spec';
 import type { AIAgentMemoryConfig, AIAgentInput } from '@pikku/core/ai-agent';
 import type { AgentMap } from './pikku-agent-map.gen.d.js';
-type AIAgentConfig<InputSchema extends StandardSchemaV1 | undefined = undefined, OutputSchema extends StandardSchemaV1 | undefined = undefined> = Omit<CoreAIAgent<PikkuPermission, PikkuMiddleware>, 'tools' | 'agents' | 'memory' | 'input' | 'output'> & {
+import type { ScopeId } from '../scopes/pikku-scopes.gen.js';
+type AIAgentConfig<InputSchema extends StandardSchemaV1 | undefined = undefined, OutputSchema extends StandardSchemaV1 | undefined = undefined> = Omit<CoreAIAgent<PikkuPermission, PikkuMiddleware, ScopeId>, 'tools' | 'agents' | 'workflows' | 'memory' | 'input' | 'output'> & {
     input?: InputSchema;
     output?: OutputSchema;
     memory?: Omit<AIAgentMemoryConfig, 'workingMemory'> & {
@@ -14,6 +15,7 @@ type AIAgentConfig<InputSchema extends StandardSchemaV1 | undefined = undefined,
     };
     tools?: object[];
     agents?: AIAgentConfig<StandardSchemaV1 | undefined, StandardSchemaV1 | undefined>[];
+    workflows?: object[];
 };
 export declare const pikkuAIAgent: <InputSchema extends StandardSchemaV1 | undefined = undefined, OutputSchema extends StandardSchemaV1 | undefined = undefined>(agent: AIAgentConfig<InputSchema, OutputSchema>) => AIAgentConfig<InputSchema, OutputSchema>;
 export declare const pikkuAIMiddleware: <State extends Record<string, unknown> = Record<string, unknown>, RequiredServices extends Services = Services>(hooks: PikkuAIMiddlewareHooks<State, RequiredServices>) => PikkuAIMiddlewareHooks<State, RequiredServices>;

package/dist/.pikku/auth/auth.types.d.ts ADDED Viewed

@@ -0,0 +1,4 @@
+/**
+ * This file was generated by @pikku/cli@0.12.83
+ */
+export { pikkuBetterAuth } from '@pikku/better-auth';

package/dist/.pikku/auth/auth.types.js ADDED Viewed

@@ -0,0 +1,5 @@
+/**
+ * This file was generated by @pikku/cli@0.12.83
+ */
+// AUTO-GENERATED by pikku CLI (bootstrap stub) — replaced by the typed wrapper after inspection
+export { pikkuBetterAuth } from '@pikku/better-auth';

package/dist/.pikku/channel/pikku-channel-types.gen.d.ts CHANGED Viewed

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.82
+ * This file was generated by @pikku/cli@0.12.85
  */
 /**
  * Channel-specific type definitions for tree-shaking optimization

package/dist/.pikku/channel/pikku-channel-types.gen.js CHANGED Viewed

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.82
+ * This file was generated by @pikku/cli@0.12.85
  */
 /**
  * Channel-specific type definitions for tree-shaking optimization

package/dist/.pikku/cli/pikku-cli-channel.d.ts CHANGED Viewed

@@ -6,11 +6,11 @@ export declare const cliHelp: import("../function/pikku-function-types.gen.js").
     args?: string[];
 }, {
     help: string;
-}, "rpc" | "session", import("../function/pikku-function-types.gen.js").Services> | import("../function/pikku-function-types.gen.js").PikkuFunction<{
+}, "rpc" | "session", import("../function/pikku-function-types.gen.js").WiredServices> | import("../function/pikku-function-types.gen.js").PikkuFunction<{
     args?: string[];
 }, {
     help: string;
-}, "rpc" | "session", import("../function/pikku-function-types.gen.js").Services>, undefined, undefined>;
+}, "rpc" | "session", import("../function/pikku-function-types.gen.js").WiredServices>, undefined, undefined>;
 export declare const cliRaw: import("../function/pikku-function-types.gen.js").PikkuFunctionConfig<{
     args: string[];
 }, {
@@ -23,10 +23,10 @@ export declare const cliRaw: import("../function/pikku-function-types.gen.js").P
     help?: string;
     result?: unknown;
     error?: string;
-}, "rpc" | "session", import("../function/pikku-function-types.gen.js").Services> | import("../function/pikku-function-types.gen.js").PikkuFunction<{
+}, "rpc" | "session", import("../function/pikku-function-types.gen.js").WiredServices> | import("../function/pikku-function-types.gen.js").PikkuFunction<{
     args: string[];
 }, {
     help?: string;
     result?: unknown;
     error?: string;
-}, "rpc" | "session", import("../function/pikku-function-types.gen.js").Services>, undefined, undefined>;
+}, "rpc" | "session", import("../function/pikku-function-types.gen.js").WiredServices>, undefined, undefined>;

package/dist/.pikku/cli/pikku-cli-channel.js CHANGED Viewed

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.82
+ * This file was generated by @pikku/cli@0.12.85
  */
 /**
  * WebSocket channel backend for 'pikku' CLI commands
@@ -26,6 +26,8 @@ import { dbGenerate } from '../../src/functions/commands/db-generate.js';
 import { dbSeed } from '../../src/functions/commands/db-seed.js';
 import { dbReset } from '../../src/functions/commands/db-reset.js';
 import { dbAudit } from '../../src/functions/commands/db-audit.js';
+import { scopesAudit } from '../../src/functions/commands/scopes-audit.js';
+import { scopesPrune } from '../../src/functions/commands/scopes-prune.js';
 import { workspaceValidate } from '../../src/functions/commands/workspace-validate.js';
 import { scenarioRun } from '../../src/functions/commands/scenario.js';
 import { scenarioList } from '../../src/functions/commands/scenario.js';
@@ -70,11 +72,13 @@ import { enableAgent } from '../../src/functions/commands/enable.js';
 import { enableWorkflow } from '../../src/functions/commands/enable.js';
 import { enableEvents } from '../../src/functions/commands/enable.js';
 import { enableRemoteRpc } from '../../src/functions/commands/enable.js';
+import { enableWebhook } from '../../src/functions/commands/enable.js';
 import { pikkuNewFunction } from '../../src/functions/commands/new-function.js';
 import { pikkuNewWiring } from '../../src/functions/commands/new-wiring.js';
 import { pikkuNewMiddleware } from '../../src/functions/commands/new-middleware.js';
 import { pikkuNewPermission } from '../../src/functions/commands/new-permission.js';
 import { pikkuNewAddon } from '../../src/functions/commands/new-addon.js';
+import { pikkuImportN8n } from '../../src/functions/commands/import-n8n.js';
 import { pikkuVersionsInit } from '../../src/functions/commands/versions-init.js';
 import { pikkuVersionsCheck } from '../../src/functions/commands/versions-check.js';
 import { pikkuVersionsUpdate } from '../../src/functions/commands/versions-update.js';
@@ -231,6 +235,14 @@ wireChannel({
                 func: dbAudit,
                 middleware: [cliCloseOnComplete],
             },
+            'scopes.audit': {
+                func: scopesAudit,
+                middleware: [cliCloseOnComplete],
+            },
+            'scopes.prune': {
+                func: scopesPrune,
+                middleware: [cliCloseOnComplete],
+            },
             'workspace.validate': {
                 func: workspaceValidate,
                 middleware: [cliCloseOnComplete],
@@ -407,6 +419,10 @@ wireChannel({
                 func: enableRemoteRpc,
                 middleware: [cliCloseOnComplete],
             },
+            'enable.webhook': {
+                func: enableWebhook,
+                middleware: [cliCloseOnComplete],
+            },
             'new.function': {
                 func: pikkuNewFunction,
                 middleware: [cliCloseOnComplete],
@@ -427,6 +443,10 @@ wireChannel({
                 func: pikkuNewAddon,
                 middleware: [cliCloseOnComplete],
             },
+            'import.n8n': {
+                func: pikkuImportN8n,
+                middleware: [cliCloseOnComplete],
+            },
             'versions.init': {
                 func: pikkuVersionsInit,
                 middleware: [cliCloseOnComplete],

package/dist/.pikku/cli/pikku-cli-client.gen.d.ts CHANGED Viewed

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.82
+ * This file was generated by @pikku/cli@0.12.85
  */
 import '../pikku-bootstrap.gen.js';
 /**

package/dist/.pikku/cli/pikku-cli-client.gen.js CHANGED Viewed

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.82
+ * This file was generated by @pikku/cli@0.12.85
  */
 import { executeCLIViaChannel } from '@pikku/core/cli/channel';
 import { CorePikkuWebsocket } from '@pikku/websocket';

package/dist/.pikku/cli/pikku-cli-contracts-meta.gen.d.ts CHANGED Viewed

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.82
+ * This file was generated by @pikku/cli@0.12.85
  */
 import contractsMeta from './pikku-cli-contracts-meta.gen.json';
 export default contractsMeta;

package/dist/.pikku/cli/pikku-cli-contracts-meta.gen.js CHANGED Viewed

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.82
+ * This file was generated by @pikku/cli@0.12.85
  */
 import contractsMeta from './pikku-cli-contracts-meta.gen.json' with { type: 'json' };
 export default contractsMeta;

package/dist/.pikku/cli/pikku-cli-types.gen.d.ts CHANGED Viewed

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.82
+ * This file was generated by @pikku/cli@0.12.85
  */
 /**

package/dist/.pikku/cli/pikku-cli-types.gen.js CHANGED Viewed

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.82
+ * This file was generated by @pikku/cli@0.12.85
  */
 /**

package/dist/.pikku/cli/pikku-cli-wirings-meta.gen.js CHANGED Viewed

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.82
+ * This file was generated by @pikku/cli@0.12.85
  */
 import { pikkuState } from '@pikku/core/internal';
 import metaData from './pikku-cli-wirings-meta.gen.json' with { type: 'json' };

package/dist/.pikku/cli/pikku-cli-wirings-meta.gen.json CHANGED Viewed

@@ -254,6 +254,32 @@
                         }
                     }
                 },
+                "scopes": {
+                    "pikkuFuncId": "",
+                    "positionals": [],
+                    "options": {},
+                    "description": "Inspect and maintain declared authorization scopes",
+                    "subcommands": {
+                        "audit": {
+                            "pikkuFuncId": "scopesAudit",
+                            "positionals": [],
+                            "options": {},
+                            "description": "Report scopes in the database that are no longer declared in code, and the roles holding them"
+                        },
+                        "prune": {
+                            "pikkuFuncId": "scopesPrune",
+                            "positionals": [],
+                            "options": {
+                                "yes": {
+                                    "description": "Actually delete. Without it, prune only reports the blast radius",
+                                    "short": "y",
+                                    "default": false
+                                }
+                            },
+                            "description": "Remove scopes that are no longer declared in code, cascading them out of every role"
+                        }
+                    }
+                },
                 "workspace": {
                     "pikkuFuncId": "",
                     "positionals": [],
@@ -936,6 +962,12 @@
                                 }
                             },
                             "description": "Enable the remote internal RPC queue worker + HTTP endpoint (scaffolds rpc-remote.gen.ts)"
+                        },
+                        "webhook": {
+                            "pikkuFuncId": "enableWebhook",
+                            "positionals": [],
+                            "options": {},
+                            "description": "Enable the outgoing webhook delivery queue worker (scaffolds webhook.gen.ts)"
                         }
                     }
                 },
@@ -1049,7 +1081,7 @@
                                     "default": false
                                 },
                                 "oauth": {
-                                    "description": "Include OAuth2 credential wiring and OAuth2Client-based API service",
+                                    "description": "Include OAuth2 credential wiring; the API service reads its access token from the credential service",
                                     "default": false
                                 },
                                 "credential": {
@@ -1079,6 +1111,31 @@
                         }
                     }
                 },
+                "import": {
+                    "pikkuFuncId": "",
+                    "positionals": [],
+                    "options": {},
+                    "description": "Import workflows from other systems",
+                    "subcommands": {
+                        "n8n": {
+                            "pikkuFuncId": "pikkuImportN8n",
+                            "positionals": [
+                                {
+                                    "name": "file",
+                                    "required": true
+                                }
+                            ],
+                            "options": {
+                                "out": {
+                                    "description": "Output directory (defaults to scaffold.functionDir or cwd)",
+                                    "short": "o"
+                                }
+                            },
+                            "description": "Import an n8n workflow JSON export (a single workflow, an export array, or a directory of exports) into Pikku workflow graphs + stub functions",
+                            "parameters": "<file>"
+                        }
+                    }
+                },
                 "versions": {
                     "pikkuFuncId": "",
                     "positionals": [],
@@ -1185,7 +1242,7 @@
                     "pikkuFuncId": "",
                     "positionals": [],
                     "options": {},
-                    "description": "Install bundled agent skills (Claude Code today; Codex/Gemini coming soon)",
+                    "description": "Install bundled agent skills (Claude Code, opencode, pi; Codex/Gemini coming soon)",
                     "subcommands": {
                         "list": {
                             "pikkuFuncId": "pikkuSkillsList",
@@ -1198,7 +1255,7 @@
                             "positionals": [],
                             "options": {
                                 "agent": {
-                                    "description": "Target agent (claude | opencode | codex | gemini). Default: claude",
+                                    "description": "Target agent (claude | opencode | pi). Default: claude",
                                     "default": "claude"
                                 },
                                 "only": {

package/dist/.pikku/cli/pikku-cli-wirings.gen.d.ts CHANGED Viewed

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.82
+ * This file was generated by @pikku/cli@0.12.85
  */
 import '../../src/cli.wiring.js';
 import '../../src/services.js';

package/dist/.pikku/cli/pikku-cli-wirings.gen.js CHANGED Viewed

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.82
+ * This file was generated by @pikku/cli@0.12.85
  */
 /* The files with an wireCLI function call */
 import '../../src/cli.wiring.js';

package/dist/.pikku/cli/pikku-cli.gen.d.ts CHANGED Viewed

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.82
+ * This file was generated by @pikku/cli@0.12.85
  */
 import '../pikku-bootstrap.gen.js';
 export declare function PikkuCLI(args: string[]): Promise<void>;

package/dist/.pikku/cli/pikku-cli.gen.js CHANGED Viewed

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.82
+ * This file was generated by @pikku/cli@0.12.85
  */
 import { executeCLI, CLIError } from '@pikku/core/cli';
 import { createConfig as createConfig } from '../../src/services.js';

package/dist/.pikku/console/pikku-node-types.gen.d.ts CHANGED Viewed

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.82
+ * This file was generated by @pikku/cli@0.12.85
  */
 import type { FlattenedRPCMap } from '../rpc/pikku-rpc-wirings-map.internal.gen.js';
 export type NodeCategory = never;

package/dist/.pikku/function/pikku-function-types.gen.d.ts CHANGED Viewed

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.82
+ * This file was generated by @pikku/cli@0.12.85
  */
 /**
  * Core function, middleware, and permission types for all wirings
@@ -8,6 +8,7 @@ import type { CorePikkuMiddleware, CorePermissionGroup, ListInput, ListOutput, P
 import type { CorePikkuFunctionConfig, CorePikkuAuth, CorePikkuAuthConfig, CorePikkuPermission } from '@pikku/core/function';
 import { CreateWireServices } from '@pikku/core/internal';
 import type { NodeType } from '@pikku/core/node';
+import type { ScopeId } from '../scopes/pikku-scopes.gen.js';
 import type { StandardSchemaV1 } from '@standard-schema/spec';
 import { CorePikkuFunction, CorePikkuFunctionSessionless } from '@pikku/core/function';
 import type { UserSession } from '../../types/application-types.d.js';
@@ -20,6 +21,16 @@ import type { TypedWorkflow, TypedScenario } from '../workflow/pikku-workflow-ty
 export type { SingletonServices as SingletonServices };
 export type { Services as Services };
 export type Session = UserSession;
+/**
+ * The services a wired function actually receives. The inspector records which
+ * services each wired `func`, `permissions` and `middleware` destructures and
+ * emits them as `RequiredSingletonServices`; intersecting that here makes those
+ * services **non-optional** at every call site. A service is optional only when
+ * nothing destructures it — in which case it is never created either. This is
+ * why an `if (!service)` guard inside a function body is always dead code.
+ */
+export type WiredSingletonServices = RequiredSingletonServices & SingletonServices;
+export type WiredServices = RequiredSingletonServices & Services;
 /**
  * Inline node configuration for function definitions.
  */
@@ -36,18 +47,18 @@ export type NodeConfig = {
  * @template In - The input type that the permission check will receive
  * @template RequiredServices - The services required for this permission check
  */
-export type PikkuPermission<In = unknown, RequiredServices extends Services = Services> = CorePikkuPermission<In, RequiredServices, PikkuWire<In, never, false, Session>>;
+export type PikkuPermission<In = unknown, RequiredServices extends Services = WiredServices> = CorePikkuPermission<In, RequiredServices, PikkuWire<In, never, false, Session>>;
 /**
  * Type-safe middleware definition that can access your application's services and session.
  * Use this to define reusable middleware that can be applied to multiple wirings.
  *
  * @template RequiredServices - The services required for this middleware
  */
-export type PikkuMiddleware<RequiredServices extends SingletonServices = SingletonServices> = CorePikkuMiddleware<RequiredServices>;
+export type PikkuMiddleware<RequiredServices extends SingletonServices = WiredSingletonServices> = CorePikkuMiddleware<RequiredServices>;
 /**
  * Configuration object for creating a permission with metadata
  */
-export type PikkuPermissionConfig<In = unknown, RequiredServices extends Services = Services> = {
+export type PikkuPermissionConfig<In = unknown, RequiredServices extends Services = WiredServices> = {
     /** The permission function */
     func: PikkuPermission<In, RequiredServices>;
     /** Optional human-readable name for the permission */
@@ -86,11 +97,11 @@ export declare const pikkuPermission: <In>(permission: PikkuPermission<In> | Pik
  *
  * @template RequiredServices - The services required for this auth check
  */
-export type PikkuAuth<RequiredServices extends SingletonServices = SingletonServices> = CorePikkuAuth<RequiredServices, Session>;
+export type PikkuAuth<RequiredServices extends SingletonServices = WiredSingletonServices> = CorePikkuAuth<RequiredServices, Session>;
 /**
  * Configuration object for creating an auth permission with metadata
  */
-export type PikkuAuthConfig<RequiredServices extends SingletonServices = SingletonServices> = CorePikkuAuthConfig<RequiredServices, Session>;
+export type PikkuAuthConfig<RequiredServices extends SingletonServices = WiredSingletonServices> = CorePikkuAuthConfig<RequiredServices, Session>;
 /**
  * Factory function for creating auth-only permissions with tree-shaking support.
  * Auth permissions only receive services and session (no request data),
@@ -111,11 +122,11 @@ export type PikkuAuthConfig<RequiredServices extends SingletonServices = Singlet
  * })
  * \`\`\`
  */
-export declare const pikkuAuth: <RequiredServices extends SingletonServices = SingletonServices>(auth: PikkuAuth<RequiredServices> | PikkuAuthConfig<RequiredServices>) => PikkuPermission<any, any>;
+export declare const pikkuAuth: <RequiredServices extends SingletonServices = WiredSingletonServices>(auth: PikkuAuth<RequiredServices> | PikkuAuthConfig<RequiredServices>) => PikkuPermission<any, any>;
 /**
  * Configuration object for creating middleware with metadata
  */
-export type PikkuMiddlewareConfig<RequiredServices extends SingletonServices = SingletonServices> = {
+export type PikkuMiddlewareConfig<RequiredServices extends SingletonServices = WiredSingletonServices> = {
     /** The middleware function */
     func: PikkuMiddleware<RequiredServices>;
     /** Optional human-readable name for the middleware */
@@ -146,7 +157,7 @@ export type PikkuMiddlewareConfig<RequiredServices extends SingletonServices = S
  * })
  * ```
  */
-export declare const pikkuMiddleware: <RequiredServices extends SingletonServices = SingletonServices>(middleware: PikkuMiddleware<RequiredServices> | PikkuMiddlewareConfig<RequiredServices>) => PikkuMiddleware<RequiredServices>;
+export declare const pikkuMiddleware: <RequiredServices extends SingletonServices = WiredSingletonServices>(middleware: PikkuMiddleware<RequiredServices> | PikkuMiddlewareConfig<RequiredServices>) => PikkuMiddleware<RequiredServices>;
 /**
  * Factory function for creating middleware factories
  * Use this when your middleware needs configuration/input parameters
@@ -192,7 +203,7 @@ export declare const pikkuPermissionFactory: <In = any>(factory: (input: In) =>
  * @template In - The input type (same as the function it describes)
  * @template RequiredServices - The services required for this description function
  */
-export type PikkuApprovalDescription<In = unknown, RequiredServices extends Services = Services> = (services: RequiredServices, data: In) => Promise<string>;
+export type PikkuApprovalDescription<In = unknown, RequiredServices extends Services = WiredServices> = (services: RequiredServices, data: In) => Promise<string>;
 /**
  * Factory function for creating approval description functions with tree-shaking support.
  *
@@ -206,7 +217,7 @@ export type PikkuApprovalDescription<In = unknown, RequiredServices extends Serv
  * )
  * ```
  */
-export declare const pikkuApprovalDescription: <In = unknown, RequiredServices extends Services = Services>(fn: PikkuApprovalDescription<In, RequiredServices>) => PikkuApprovalDescription<In, RequiredServices>;
+export declare const pikkuApprovalDescription: <In = unknown, RequiredServices extends Services = WiredServices>(fn: PikkuApprovalDescription<In, RequiredServices>) => PikkuApprovalDescription<In, RequiredServices>;
 /**
  * A sessionless API function that doesn't require user authentication.
  * Use this for public endpoints, health checks, or operations that don't need user context.
@@ -215,7 +226,7 @@ export declare const pikkuApprovalDescription: <In = unknown, RequiredServices e
  * @template Out - The output type that the function returns
  * @template RequiredServices - Services required by this function
  */
-export type PikkuFunctionSessionless<In = unknown, Out = never, RequiredWires extends keyof PikkuWire = never, RequiredServices extends Services = Services> = CorePikkuFunctionSessionless<In, Out, RequiredServices, Session, PickRequired<PikkuWire<In, Out, false, Session, TypedPikkuRPC, null, any, TypedWorkflow, unknown, TypedScenario>, RequiredWires>>;
+export type PikkuFunctionSessionless<In = unknown, Out = never, RequiredWires extends keyof PikkuWire = never, RequiredServices extends Services = WiredServices> = CorePikkuFunctionSessionless<In, Out, RequiredServices, Session, PickRequired<PikkuWire<In, Out, false, Session, TypedPikkuRPC, null, any, TypedWorkflow, unknown, TypedScenario>, RequiredWires>>;
 /**
  * A session-aware API function that requires user authentication.
  * Use this for protected endpoints that need access to user session data.
@@ -224,7 +235,7 @@ export type PikkuFunctionSessionless<In = unknown, Out = never, RequiredWires ex
  * @template Out - The output type that the function returns
  * @template RequiredServices - Services required by this function
  */
-export type PikkuFunction<In = unknown, Out = never, RequiredWires extends keyof PikkuWire = 'session', RequiredServices extends Services = Services> = CorePikkuFunction<In, Out, RequiredServices, Session, PickRequired<PikkuWire<In, Out, true, Session, TypedPikkuRPC, null, any, TypedWorkflow, unknown, TypedScenario>, RequiredWires>>;
+export type PikkuFunction<In = unknown, Out = never, RequiredWires extends keyof PikkuWire = 'session', RequiredServices extends Services = WiredServices> = CorePikkuFunction<In, Out, RequiredServices, Session, PickRequired<PikkuWire<In, Out, true, Session, TypedPikkuRPC, null, any, TypedWorkflow, unknown, TypedScenario>, RequiredWires>>;
 /**
  * Helper type to infer the output type from a Standard Schema
  */
@@ -237,7 +248,7 @@ export type InferSchemaOutput<T> = T extends StandardSchemaV1<any, infer Output>
  * @template Out - The output type
  * @template PikkuFunc - The function type (can be narrowed to PikkuFunction or PikkuFunctionSessionless)
  */
-export type PikkuFunctionConfig<In = unknown, Out = unknown, RequiredWires extends keyof PikkuWire = never, PikkuFunc extends PikkuFunction<In, Out, RequiredWires> | PikkuFunctionSessionless<In, Out, RequiredWires> = PikkuFunction<In, Out, RequiredWires> | PikkuFunctionSessionless<In, Out, RequiredWires>, InputSchema extends StandardSchemaV1 | undefined = undefined, OutputSchema extends StandardSchemaV1 | undefined = undefined> = CorePikkuFunctionConfig<PikkuFunc, PikkuPermission<In>, PikkuMiddleware, InputSchema, OutputSchema>;
+export type PikkuFunctionConfig<In = unknown, Out = unknown, RequiredWires extends keyof PikkuWire = never, PikkuFunc extends PikkuFunction<In, Out, RequiredWires> | PikkuFunctionSessionless<In, Out, RequiredWires> = PikkuFunction<In, Out, RequiredWires> | PikkuFunctionSessionless<In, Out, RequiredWires>, InputSchema extends StandardSchemaV1 | undefined = undefined, OutputSchema extends StandardSchemaV1 | undefined = undefined> = CorePikkuFunctionConfig<PikkuFunc, PikkuPermission<In>, PikkuMiddleware, InputSchema, OutputSchema, ScopeId>;
 /**
  * Configuration object for Pikku functions with Zod schema validation.
  * Use this when you want to define input/output schemas using Zod.
@@ -248,7 +259,7 @@ type SchemaInferred<S, Fallback = unknown> = S extends StandardSchemaV1 ? InferS
  * Schema-overload variant for pikkuFunc. Derived from CorePikkuFunctionConfig
  * so adding a field on the core type automatically propagates here.
  */
-export type PikkuFunctionConfigWithSchema<InputSchema extends StandardSchemaV1 | undefined = undefined, OutputSchema extends StandardSchemaV1 | undefined = undefined, RequiredWires extends keyof PikkuWire = never> = Omit<CorePikkuFunctionConfig<PikkuFunction<SchemaInferred<InputSchema>, SchemaInferred<OutputSchema>, RequiredWires> | PikkuFunctionSessionless<SchemaInferred<InputSchema>, SchemaInferred<OutputSchema>, RequiredWires>>, 'func' | 'input' | 'output' | 'permissions' | 'approvalDescription'> & {
+export type PikkuFunctionConfigWithSchema<InputSchema extends StandardSchemaV1 | undefined = undefined, OutputSchema extends StandardSchemaV1 | undefined = undefined, RequiredWires extends keyof PikkuWire = never> = Omit<CorePikkuFunctionConfig<PikkuFunction<SchemaInferred<InputSchema>, SchemaInferred<OutputSchema>, RequiredWires> | PikkuFunctionSessionless<SchemaInferred<InputSchema>, SchemaInferred<OutputSchema>, RequiredWires>, CorePikkuPermission<any>, PikkuMiddleware, undefined, undefined, ScopeId>, 'func' | 'input' | 'output' | 'permissions' | 'approvalDescription'> & {
     func: PikkuFunction<SchemaInferred<InputSchema>, SchemaInferred<OutputSchema>, RequiredWires> | PikkuFunctionSessionless<SchemaInferred<InputSchema>, SchemaInferred<OutputSchema>, RequiredWires>;
     input?: InputSchema;
     output?: OutputSchema;
@@ -341,7 +352,7 @@ export declare function pikkuSessionlessFunc<In, Out = unknown>(func: PikkuFunct
  * })
  * ```
  */
-export declare const pikkuVoidFunc: (func: PikkuFunctionSessionless<void, void, "session" | "rpc"> | PikkuFunctionConfig<void, void, "session" | "rpc">) => PikkuFunctionConfig<void, void, "rpc" | "session", PikkuFunctionSessionless<void, void, "rpc" | "session", Services> | PikkuFunction<void, void, "rpc" | "session", Services>, undefined, undefined>;
+export declare const pikkuVoidFunc: (func: PikkuFunctionSessionless<void, void, "session" | "rpc"> | PikkuFunctionConfig<void, void, "session" | "rpc">) => PikkuFunctionConfig<void, void, "rpc" | "session", PikkuFunctionSessionless<void, void, "rpc" | "session", WiredServices> | PikkuFunction<void, void, "rpc" | "session", WiredServices>, undefined, undefined>;
 /**
  * References a registered function by name for use in any wiring.
  * Works for both local and addon functions — resolves via RPC at runtime.
@@ -432,13 +443,6 @@ export declare const addTagMiddleware: (tag: string, middleware: PikkuMiddleware
  * addGlobalMiddleware([telemetryMiddleware])
  */
 export declare const addGlobalMiddleware: (middleware: PikkuMiddleware[]) => void;
-/**
- * Tag-scoped permissions. Applies to any wiring that carries the matching tag.
- *
- * @example
- * addTagPermission('admin', [adminPermission])
- */
-export declare const addTagPermission: <In = unknown>(tag: string, permissions: CorePermissionGroup<PikkuPermission<In>> | PikkuPermission<In>[]) => void;
 /**
  * Wire-agnostic global permissions. Runs at the top of every wiring's
  * permission resolution — before wire-, tag-, and function-level entries.
@@ -449,8 +453,8 @@ export declare const addTagPermission: <In = unknown>(tag: string, permissions:
  * addGlobalPermission([signedInUser])
  */
 export declare const addGlobalPermission: <In = unknown>(permissions: CorePermissionGroup<PikkuPermission<In>> | PikkuPermission<In>[]) => void;
-export { wireAddon } from '@pikku/core/rpc';
-export type { WireAddonConfig } from '@pikku/core/rpc';
+export { wireAddon, wireRemoteAddon } from '@pikku/core/rpc';
+export type { WireAddonConfig, WireRemoteAddonConfig, RemoteAddonAuth } from '@pikku/core/rpc';
 /**
  * Addon contract references. Generated from each wired addon's published
  * contract metadata — no addon source is imported. Functions are proxied via

package/dist/.pikku/function/pikku-function-types.gen.js CHANGED Viewed

@@ -1,11 +1,11 @@
 /**
- * This file was generated by @pikku/cli@0.12.82
+ * This file was generated by @pikku/cli@0.12.85
  */
 /**
  * Core function, middleware, and permission types for all wirings
  */
 import { pikkuAuth as pikkuAuthCore } from '@pikku/core/function';
-import { addTagMiddleware as addTagMiddlewareCore, addGlobalMiddleware as addGlobalMiddlewareCore, addTagPermission as addTagPermissionCore, addGlobalPermission as addGlobalPermissionCore, } from '@pikku/core/middleware';
+import { addTagMiddleware as addTagMiddlewareCore, addGlobalMiddleware as addGlobalMiddlewareCore, addGlobalPermission as addGlobalPermissionCore, } from '@pikku/core/middleware';
 import { pikkuState as __pikkuState } from '@pikku/core/internal';
 /**
  * Factory function for creating permissions with tree-shaking support.
@@ -293,15 +293,6 @@ export const addTagMiddleware = (tag, middleware) => {
 export const addGlobalMiddleware = (middleware) => {
     addGlobalMiddlewareCore(middleware, null);
 };
-/**
- * Tag-scoped permissions. Applies to any wiring that carries the matching tag.
- *
- * @example
- * addTagPermission('admin', [adminPermission])
- */
-export const addTagPermission = (tag, permissions) => {
-    addTagPermissionCore(tag, permissions, null);
-};
 /**
  * Wire-agnostic global permissions. Runs at the top of every wiring's
  * permission resolution — before wire-, tag-, and function-level entries.
@@ -314,7 +305,7 @@ export const addTagPermission = (tag, permissions) => {
 export const addGlobalPermission = (permissions) => {
     addGlobalPermissionCore(permissions, null);
 };
-export { wireAddon } from '@pikku/core/rpc';
+export { wireAddon, wireRemoteAddon } from '@pikku/core/rpc';
 /**
  * Addon contract references. Generated from each wired addon's published
  * contract metadata — no addon source is imported. Functions are proxied via

package/dist/.pikku/function/pikku-functions-meta.gen.js CHANGED Viewed

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.82
+ * This file was generated by @pikku/cli@0.12.85
  */
 import { pikkuState } from '@pikku/core/internal';
 import metaData from './pikku-functions-meta.gen.json' with { type: 'json' };