npm - @pikku/cli - Versions diffs - 0.12.93 → 0.12.96 - Mend

@pikku/cli 0.12.93 → 0.12.96

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (180) hide show

package/console-app/index.html CHANGED Viewed

@@ -21,8 +21,8 @@
         }
       } catch (e) {}
     </script>
-    <script type="module" crossorigin src="/console/assets/index-CmAplHjZ.js"></script>
-    <link rel="stylesheet" crossorigin href="/console/assets/index-BYj7ZbUU.css">
+    <script type="module" crossorigin src="/console/assets/index-CeQodYfg.js"></script>
+    <link rel="stylesheet" crossorigin href="/console/assets/index-CyYHTGWZ.css">
   </head>
   <body>
     <div id="root"></div>

package/dist/.pikku/agent/pikku-agent-types.gen.d.ts CHANGED Viewed

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.93
+ * This file was generated by @pikku/cli@0.12.96
  */
 import { CoreAIAgent, PikkuAIMiddlewareHooks } from '@pikku/core/ai-agent';
 import type { PikkuPermission, PikkuMiddleware, Services, PikkuFunctionConfig } from '../function/pikku-function-types.gen.js';

package/dist/.pikku/channel/pikku-channel-types.gen.d.ts CHANGED Viewed

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.93
+ * This file was generated by @pikku/cli@0.12.96
  */
 /**
  * Channel-specific type definitions for tree-shaking optimization

package/dist/.pikku/channel/pikku-channel-types.gen.js CHANGED Viewed

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.93
+ * This file was generated by @pikku/cli@0.12.96
  */
 /**
  * Channel-specific type definitions for tree-shaking optimization

package/dist/.pikku/cli/pikku-cli-channel.d.ts CHANGED Viewed

@@ -1,3 +1,4 @@
+import { type RawCLIFrame } from '@pikku/core/cli/channel';
 export declare const cliHelp: import("../function/pikku-function-types.gen.js").PikkuFunctionConfig<{
     args?: string[];
 }, {
@@ -11,22 +12,19 @@ export declare const cliHelp: import("../function/pikku-function-types.gen.js").
 }, {
     help: string;
 }, "rpc" | "session", import("../function/pikku-function-types.gen.js").WiredServices>, undefined, undefined>;
+/**
+ * Raw entry point: the client forwards argv untouched and this side owns
+ * parsing, so a client binary never carries the command tree and its version
+ * is free to drift from the server's.
+ *
+ * Progressive output is streamed on the same channel rather than returned,
+ * and the terminating control frame carries the exit code so the client
+ * process can exit non-zero.
+ */
 export declare const cliRaw: import("../function/pikku-function-types.gen.js").PikkuFunctionConfig<{
     args: string[];
-}, {
-    help?: string;
-    result?: unknown;
-    error?: string;
-}, "rpc" | "session", import("../function/pikku-function-types.gen.js").PikkuFunctionSessionless<{
+}, RawCLIFrame, "rpc" | "session", import("../function/pikku-function-types.gen.js").PikkuFunctionSessionless<{
     args: string[];
-}, {
-    help?: string;
-    result?: unknown;
-    error?: string;
-}, "rpc" | "session", import("../function/pikku-function-types.gen.js").WiredServices> | import("../function/pikku-function-types.gen.js").PikkuFunction<{
+}, RawCLIFrame, "rpc" | "session", import("../function/pikku-function-types.gen.js").WiredServices> | import("../function/pikku-function-types.gen.js").PikkuFunction<{
     args: string[];
-}, {
-    help?: string;
-    result?: unknown;
-    error?: string;
-}, "rpc" | "session", import("../function/pikku-function-types.gen.js").WiredServices>, undefined, undefined>;
+}, RawCLIFrame, "rpc" | "session", import("../function/pikku-function-types.gen.js").WiredServices>, undefined, undefined>;

package/dist/.pikku/cli/pikku-cli-channel.js CHANGED Viewed

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.93
+ * This file was generated by @pikku/cli@0.12.96
  */
 /**
  * WebSocket channel backend for 'pikku' CLI commands
@@ -32,11 +32,16 @@ import { dbReset } from '../../src/functions/commands/db-reset.js';
 import { dbAudit } from '../../src/functions/commands/db-audit.js';
 import { scopesAudit } from '../../src/functions/commands/scopes-audit.js';
 import { scopesPrune } from '../../src/functions/commands/scopes-prune.js';
+import { rolesAudit } from '../../src/functions/commands/roles-audit.js';
+import { rolesPrune } from '../../src/functions/commands/roles-prune.js';
 import { knowledgeValidate } from '../../src/functions/commands/knowledge-validate.js';
 import { knowledgeIndex } from '../../src/functions/commands/knowledge-index.js';
 import { workspaceValidate } from '../../src/functions/commands/workspace-validate.js';
 import { scenarioRun } from '../../src/functions/commands/scenario.js';
 import { scenarioList } from '../../src/functions/commands/scenario.js';
+import { personaRun } from '../../src/functions/commands/persona.js';
+import { personaSync } from '../../src/functions/commands/persona-sync.js';
+import { personaList } from '../../src/functions/commands/persona.js';
 import { FabricValidate } from '../../src/fabric/functions/validate.function.js';
 import { FabricSmoke } from '../../src/fabric/functions/smoke.function.js';
 import { FabricLogin } from '../../src/fabric/functions/login.function.js';
@@ -150,14 +155,48 @@ export const cliHelp = pikkuSessionlessFunc({
         return { help: helpText };
     },
 });
+/**
+ * Raw entry point: the client forwards argv untouched and this side owns
+ * parsing, so a client binary never carries the command tree and its version
+ * is free to drift from the server's.
+ *
+ * Progressive output is streamed on the same channel rather than returned,
+ * and the terminating control frame carries the exit code so the client
+ * process can exit non-zero.
+ */
 export const cliRaw = pikkuSessionlessFunc({
     auth: false,
-    func: async (services, data) => {
-        return handleRawCLI({
+    func: async (services, data, { channel, session }) => {
+        const { help, result, error, exitCode, commandId } = await handleRawCLI({
             programName: 'pikku',
             args: data.args,
             singletonServices: services,
+            createWireServices: pikkuState(null, 'package', 'factories')?.createWireServices,
+            // The connection authenticated during its upgrade — commands run as it.
+            session,
+            // The socket the command arrived on, so `channel.remote(...)` inside a
+            // command reaches the client that invoked it.
+            transport: channel,
+            onOutput: (output, commandId) => channel?.send({ action: 'cli-output', commandId, data: output }),
         });
+        // A failed parse carries both: the error says what was wrong, the help
+        // says what was available. The error goes last so it is the line still on
+        // screen after the help text has scrolled past.
+        if (help !== undefined) {
+            await channel?.send({ action: 'cli-help', help });
+            if (error !== undefined) {
+                await channel?.send({ action: 'cli-error', error });
+            }
+        }
+        else if (error !== undefined) {
+            await channel?.send({ action: 'cli-error', error });
+        }
+        else if (result !== undefined) {
+            await channel?.send({ action: 'cli-result', commandId, result });
+        }
+        // Returned rather than sent so the runtime tags it with the routing key,
+        // and so the terminal frame cannot be emitted before the ones above it.
+        return { action: 'cli-control', event: 'complete', exitCode };
     },
 });
 wireChannel({
@@ -266,6 +305,14 @@ wireChannel({
                 func: scopesPrune,
                 middleware: [cliCloseOnComplete],
             },
+            'roles.audit': {
+                func: rolesAudit,
+                middleware: [cliCloseOnComplete],
+            },
+            'roles.prune': {
+                func: rolesPrune,
+                middleware: [cliCloseOnComplete],
+            },
             'knowledge.validate': {
                 func: knowledgeValidate,
                 middleware: [cliCloseOnComplete],
@@ -286,6 +333,18 @@ wireChannel({
                 func: scenarioList,
                 middleware: [cliCloseOnComplete],
             },
+            'persona.run': {
+                func: personaRun,
+                middleware: [cliCloseOnComplete],
+            },
+            'persona.sync': {
+                func: personaSync,
+                middleware: [cliCloseOnComplete],
+            },
+            'persona.list': {
+                func: personaList,
+                middleware: [cliCloseOnComplete],
+            },
             'fabric.validate': {
                 func: FabricValidate,
                 middleware: [cliCloseOnComplete],

package/dist/.pikku/cli/pikku-cli-client.gen.d.ts CHANGED Viewed

@@ -1,10 +1,20 @@
 /**
- * This file was generated by @pikku/cli@0.12.93
+ * This file was generated by @pikku/cli@0.12.96
  */
-import '../pikku-bootstrap.gen.js';
+import type { Capabilities } from '@pikku/core/channel';
 /**
  * Pikku CLI Client (via WebSocket Channel)
- * Executes CLI commands over a WebSocket connection
+ *
+ * Forwards argv to the server untouched — the command tree is never parsed
+ * here, so this client stays valid as the server's commands change. Renderers
+ * are matched by the command id the server reports; anything it doesn't
+ * recognise falls back to JSON.
+ *
+ * `capabilities` are the functions this client agrees to run on the server's
+ * behalf (a git sha, a local path). It is an allowlist, not a convenience —
+ * nothing outside it is reachable from the server. A bare function is
+ * unclassified and so needs approval before every call; write
+ * `{ execute, needsApproval: false }` for one that may run unattended.
  */
-export declare function PikkuCLIClient(ws: WebSocket, args?: string[]): Promise<void>;
+export declare function PikkuCLIClient(ws: WebSocket, args?: string[], capabilities?: Capabilities): Promise<number>;
 export default PikkuCLIClient;

package/dist/.pikku/cli/pikku-cli-client.gen.js CHANGED Viewed

@@ -1,24 +1,33 @@
 /**
- * This file was generated by @pikku/cli@0.12.93
+ * This file was generated by @pikku/cli@0.12.96
  */
-import { executeCLIViaChannel } from '@pikku/core/cli/channel';
+import { executeRawCLIViaChannel } from '@pikku/core/cli/channel';
 import { CorePikkuWebsocket } from '@pikku/websocket';
-import '../pikku-bootstrap.gen.js';
 import { defaultCLIRenderer } from '../../src/services.js';
 /**
  * Pikku CLI Client (via WebSocket Channel)
- * Executes CLI commands over a WebSocket connection
+ *
+ * Forwards argv to the server untouched — the command tree is never parsed
+ * here, so this client stays valid as the server's commands change. Renderers
+ * are matched by the command id the server reports; anything it doesn't
+ * recognise falls back to JSON.
+ *
+ * `capabilities` are the functions this client agrees to run on the server's
+ * behalf (a git sha, a local path). It is an allowlist, not a convenience —
+ * nothing outside it is reachable from the server. A bare function is
+ * unclassified and so needs approval before every call; write
+ * `{ execute, needsApproval: false }` for one that may run unattended.
  */
-export async function PikkuCLIClient(ws, args) {
+export async function PikkuCLIClient(ws, args, capabilities = {}) {
     // Create Pikku WebSocket wrapper
     const pikkuWS = new CorePikkuWebsocket(ws);
     // Register renderers for CLI commands
     const renderers = {};
-    await executeCLIViaChannel({
-        programName: 'pikku',
+    return executeRawCLIViaChannel({
         pikkuWS,
         args,
         renderers,
+        capabilities,
         defaultRenderer: defaultCLIRenderer,
     });
 }
@@ -65,9 +74,10 @@ if (import.meta.url === `file://${process.argv[1]}`) {
     else {
         ws = new WebSocket(url);
     }
-    PikkuCLIClient(ws, process.argv.slice(2)).catch(error => {
+    PikkuCLIClient(ws, process.argv.slice(2))
+        .then((exitCode) => process.exit(exitCode))
+        .catch(error => {
         console.error('Fatal channel CLI error:', error);
-        // TODO: We get an error code even when it exists cleanly, investigate
-        // process.exit(1)
+        process.exit(1);
     });
 }

package/dist/.pikku/cli/pikku-cli-contracts-meta.gen.d.ts CHANGED Viewed

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.93
+ * This file was generated by @pikku/cli@0.12.96
  */
 import contractsMeta from './pikku-cli-contracts-meta.gen.json';
 export default contractsMeta;

package/dist/.pikku/cli/pikku-cli-contracts-meta.gen.js CHANGED Viewed

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.93
+ * This file was generated by @pikku/cli@0.12.96
  */
 import contractsMeta from './pikku-cli-contracts-meta.gen.json' with { type: 'json' };
 export default contractsMeta;

package/dist/.pikku/cli/pikku-cli-types.gen.d.ts CHANGED Viewed

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.93
+ * This file was generated by @pikku/cli@0.12.96
  */
 /**

package/dist/.pikku/cli/pikku-cli-types.gen.js CHANGED Viewed

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.93
+ * This file was generated by @pikku/cli@0.12.96
  */
 /**

package/dist/.pikku/cli/pikku-cli-wirings-meta.gen.js CHANGED Viewed

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.93
+ * This file was generated by @pikku/cli@0.12.96
  */
 import { pikkuState } from '@pikku/core/internal';
 import metaData from './pikku-cli-wirings-meta.gen.json' with { type: 'json' };

package/dist/.pikku/cli/pikku-cli-wirings-meta.gen.json CHANGED Viewed

@@ -304,6 +304,32 @@
                         }
                     }
                 },
+                "roles": {
+                    "pikkuFuncId": "",
+                    "positionals": [],
+                    "options": {},
+                    "description": "Inspect and maintain the roles declared with defineSystemRole",
+                    "subcommands": {
+                        "audit": {
+                            "pikkuFuncId": "rolesAudit",
+                            "positionals": [],
+                            "options": {},
+                            "description": "Report system roles in the database that are no longer declared in code, and how many people hold them"
+                        },
+                        "prune": {
+                            "pikkuFuncId": "rolesPrune",
+                            "positionals": [],
+                            "options": {
+                                "yes": {
+                                    "description": "Actually delete. Without it, prune only reports the blast radius",
+                                    "short": "y",
+                                    "default": false
+                                }
+                            },
+                            "description": "Remove system roles that are no longer declared in code, cascading them out of every user grant"
+                        }
+                    }
+                },
                 "knowledge": {
                     "pikkuFuncId": "",
                     "positionals": [],
@@ -380,9 +406,22 @@
                                     "default": false
                                 },
                                 "browser": {
-                                    "description": "Run scenarios with browser steps. --no-browser skips them (they are reported as skipped, not failed)",
+                                    "description": "Shorthand for --run default when false: takes the server-side path instead of driving a browser",
                                     "default": true
                                 },
+                                "run": {
+                                    "description": "Which surface every actor drives the system through: 'browser' (as a human), 'cli' (over the websocket), or 'default' (server-side, the fast path)",
+                                    "default": "default",
+                                    "choices": [
+                                        "cli",
+                                        "browser",
+                                        "default"
+                                    ]
+                                },
+                                "strict": {
+                                    "description": "Fail rather than pass a `then` that has no witness for --run, i.e. an assertion nobody checked on the surface its prose claims",
+                                    "default": false
+                                },
                                 "spawn": {
                                     "description": "Start `pikku dev` on the environment's apiUrl for the run and stop it afterwards. Without it, the environment must already be serving",
                                     "default": false
@@ -402,7 +441,7 @@
                                     "description": "Override the environment's appUrl for this run (the frontend browser steps navigate against)"
                                 }
                             },
-                            "description": "Run scenarios against a configured environment (scenarios.environments in pikku.config.json). Actor secret comes from SCENARIO_ACTOR_SECRET.",
+                            "description": "Run scenarios against a configured environment (environments in pikku.config.json). Actor secret comes from SCENARIO_ACTOR_SECRET.",
                             "parameters": "<environment>"
                         },
                         "list": {
@@ -413,6 +452,90 @@
                         }
                     }
                 },
+                "persona": {
+                    "pikkuFuncId": "",
+                    "positionals": [],
+                    "options": {},
+                    "description": "The people this app is for, and running one against a real stage",
+                    "subcommands": {
+                        "run": {
+                            "pikkuFuncId": "personaRun",
+                            "positionals": [
+                                {
+                                    "name": "environment",
+                                    "required": true
+                                },
+                                {
+                                    "name": "persona",
+                                    "required": true
+                                }
+                            ],
+                            "options": {
+                                "disposition": {
+                                    "description": "How they behave: realistic (default), careless, newcomer, stale, auditor, adversarial",
+                                    "short": "d"
+                                },
+                                "goals": {
+                                    "description": "Comma-separated goals in your own words, run alongside the persona's own and the ones derived from scenarios"
+                                },
+                                "steps": {
+                                    "description": "Model turns before it stops (default 40)"
+                                },
+                                "mutations": {
+                                    "description": "Non-read calls before it stops"
+                                },
+                                "duration": {
+                                    "description": "Wall clock before it stops, e.g. '30m'"
+                                },
+                                "seed": {
+                                    "description": "Replay a previous run — the same seed schedules the same run"
+                                },
+                                "model": {
+                                    "description": "Model they think with. Defaults to scenarios.model in pikku.config.json"
+                                },
+                                "allowApproval": {
+                                    "description": "Offer the endpoints the app marked as needing a human’s approval. Off by default: those are the ones that spend money"
+                                },
+                                "skipRoleCheck": {
+                                    "description": "Start without verifying the declared roles against the stage. For a target whose auth reports roles somewhere pikku cannot read — findings from an unverified run may be seed drift rather than product bugs"
+                                },
+                                "apiUrl": {
+                                    "description": "Override the environment's apiUrl for this run — for a target that only exists at run time, such as a freshly deployed sandbox"
+                                },
+                                "out": {
+                                    "description": "Write the whole run — every step, response and finding — as JSON to this path"
+                                }
+                            },
+                            "description": "Sign in as a declared persona and work the API in character against a configured environment. Not a test runner: it asserts nothing and reports what came back that should not have. The sign-in secret comes from SCENARIO_ACTOR_SECRET.",
+                            "parameters": "<environment> <persona>"
+                        },
+                        "sync": {
+                            "pikkuFuncId": "personaSync",
+                            "positionals": [
+                                {
+                                    "name": "environment",
+                                    "required": true
+                                }
+                            ],
+                            "options": {
+                                "dryRun": {
+                                    "description": "Report who would be provisioned, with which roles, and why anyone was skipped — without touching anything"
+                                },
+                                "apiUrl": {
+                                    "description": "Override the environment's apiUrl — for a target that only exists at run time, such as a freshly deployed sandbox"
+                                }
+                            },
+                            "description": "Provision the declared personas into an environment: create each account and apply the roles it declares. Additive — it never revokes. Needs both the environment's API (to sign in) and its database (to write the grants), and the sign-in secret from SCENARIO_ACTOR_SECRET.",
+                            "parameters": "<environment>"
+                        },
+                        "list": {
+                            "pikkuFuncId": "personaList",
+                            "positionals": [],
+                            "options": {},
+                            "description": "List the declared personas — who each one is, what they may do, and what they are trying to get done"
+                        }
+                    }
+                },
                 "fabric": {
                     "pikkuFuncId": "",
                     "positionals": [],
@@ -1706,6 +1829,10 @@
                     "description": "Fail the build on critical diagnostics. Always on; accepted for symmetry with --fail-on-error/--fail-on-warn.",
                     "default": true
                 },
+                "strictMeta": {
+                    "description": "Fail the build when an AI agent's tool has no description. Without one the model is offered the tool under its own name, so this is a quality gate rather than a correctness one — hence off by default. A 'title' does not satisfy it.",
+                    "default": false
+                },
                 "tsc": {
                     "description": "After codegen, run a real tsc --noEmit over the project's tsconfig and fail on type errors. Prints full diagnostics with code frames. Off by default.",
                     "default": false

package/dist/.pikku/cli/pikku-cli-wirings.gen.d.ts CHANGED Viewed

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.93
+ * This file was generated by @pikku/cli@0.12.96
  */
 import '../../src/cli.wiring.js';
 import '../../src/services.js';

package/dist/.pikku/cli/pikku-cli-wirings.gen.js CHANGED Viewed

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.93
+ * This file was generated by @pikku/cli@0.12.96
  */
 /* The files with an wireCLI function call */
 import '../../src/cli.wiring.js';

package/dist/.pikku/cli/pikku-cli.gen.d.ts CHANGED Viewed

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.93
+ * This file was generated by @pikku/cli@0.12.96
  */
 import '../pikku-bootstrap.gen.js';
 export declare function PikkuCLI(args: string[]): Promise<void>;

package/dist/.pikku/cli/pikku-cli.gen.js CHANGED Viewed

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.93
+ * This file was generated by @pikku/cli@0.12.96
  */
 import { executeCLI, CLIError } from '@pikku/core/cli';
 import { createConfig as createConfig } from '../../src/services.js';

package/dist/.pikku/console/pikku-node-types.gen.d.ts CHANGED Viewed

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.93
+ * This file was generated by @pikku/cli@0.12.96
  */
 import type { FlattenedRPCMap } from '../rpc/pikku-rpc-wirings-map.internal.gen.js';
 export type NodeCategory = never;