@pikku/deploy-standalone 0.12.12 → 0.12.17

package/dist/adapter.js

@@ -1,11 +1,282 @@
-import { nodeBuiltinExternals } from '@pikku/deploy';
+import { nodeBuiltinExternals, SERVER_READY_MARKER } from '@pikku/deploy';
+/**
+ * Directory the built frontend is copied to, both inside the unit and beside
+ * the shipped bundle. The node entry resolves it relative to itself at runtime,
+ * so the two have to agree.
+ */
+export const STANDALONE_FRONTEND_DIR = 'frontend';
+/**
+ * Module the bun entry imports its embedded assets from. It stays out of the
+ * esbuild bundle — esbuild rejects the `with { type: 'file' }` attribute the
+ * manifest is built on — and is resolved by `bun build --compile` instead.
+ */
+export const STANDALONE_FRONTEND_MANIFEST = './frontend-assets.gen.js';
+/**
+ * Lines every standalone entry ends with, whatever the runtime.
+ *
+ * The ready line is the handshake a parent process — `pikku dev --spawn`, or
+ * the desktop shell that runs this binary as a sidecar — blocks on. It carries
+ * `server.port` rather than the requested port because a shell passes `PORT=0`:
+ * picking a free port in the parent and handing it down races anything else
+ * that binds it in between, so the server binds first and reports back.
+ */
+const sidecarHandshakeLines = () => [
+    `  watchParentProcess()`,
+    `  console.log(\`${SERVER_READY_MARKER} on http://\${hostname}:\${server.port}\`)`,
+];
+/**
+ * The runtime helpers the entry imports. The database ones are left out of a
+ * build with no database, so the bundle carries no migrator it can never run.
+ */
+const runtimeImport = (ctx) => {
+    const names = ['watchParentProcess', 'parseStandaloneCommand'];
+    if (ctx.db)
+        names.push('runStandaloneCommand', 'resolveMigrationsDir');
+    return `import { ${names.join(', ')} } from '@pikku/deploy-standalone/runtime'`;
+};
+/**
+ * Environment variable naming the directory the SQLite file lives in.
+ *
+ * The database has to outlive a release. A deploy that swaps the artifact
+ * directory would take the database with it if the file sat beside the bundle,
+ * so the path comes from the environment and points somewhere the operator
+ * keeps stable across releases, rather than being derived from the bundle's own
+ * location the way the frontend directory is.
+ */
+const DATA_DIR_VAR = 'PIKKU_DATA_DIR';
+/**
+ * Full override for the database file, for when it must match a path something
+ * else already decided — notably `pikku db migrate`, which has to open the same
+ * file this opens or the app runs against an unmigrated database.
+ */
+const DATABASE_FILE_VAR = 'PIKKU_DATABASE_FILE';
+const DEFAULT_DATABASE_FILENAME = 'pikku.db';
+/**
+ * The dialect factory each runtime opens SQLite with. bun cannot use the node
+ * one — `bun:sqlite` is a different driver, and the node build reaches for
+ * `node:sqlite`, which a compiled bun binary does not carry.
+ */
+const SQLITE_FACTORY = {
+    node: {
+        specifier: '@pikku/kysely-node-sqlite',
+        fn: 'createNodeSqliteKysely',
+    },
+    bun: { specifier: '@pikku/kysely-bun-sqlite', fn: 'createBunSqliteKysely' },
+};
+/**
+ * The environment variable a Postgres build reads its connection string from.
+ *
+ * The same name every other pikku host uses, so an artifact dropped onto a
+ * machine that already runs a pikku app needs no new variable.
+ */
+const DATABASE_URL_VAR = 'DATABASE_URL';
+/** Imports the coercion plugin, for an app that generated a map. */
+const coercionImportLines = (coercionImportPath) => [
+    `import { createCoercionPlugin } from '@pikku/kysely'`,
+    `import { coercionMap as __pikkuCoercionMap } from '${coercionImportPath}'`,
+];
+/** Imports a database-backed entry needs on top of the common set. */
+const dbImportLines = (runtime, db) => [
+    ...(db.engine === 'sqlite'
+        ? [
+            `import { ${SQLITE_FACTORY[runtime].fn} } from '${SQLITE_FACTORY[runtime].specifier}'`,
+            `import { mkdirSync as __pikkuMkdirSync } from 'node:fs'`,
+        ]
+        : [`import { PikkuKysely } from '@pikku/kysely-postgres'`]),
+    ...(db.coercionImportPath ? coercionImportLines(db.coercionImportPath) : []),
+];
+/**
+ * Opens the database before services are built, so `createSingletonServices`
+ * receives `kysely` exactly as a hosted runtime would hand it over.
+ *
+ * Creating the directory rather than requiring it is deliberate: the artifact
+ * is expected to start on a machine where nothing has run yet, and a missing
+ * parent directory is the difference between a first boot that works and one
+ * that needs a documented mkdir nobody reads.
+ */
+const dbSetupLines = (runtime, db) => {
+    const plugins = db.coercionImportPath
+        ? `[createCoercionPlugin({ map: __pikkuCoercionMap })]`
+        : `[]`;
+    if (db.engine === 'sqlite') {
+        return [
+            `  const __pikkuDbFile = process.env.${DATABASE_FILE_VAR}`,
+            `    ? process.env.${DATABASE_FILE_VAR}`,
+            `    : __pikkuJoin(__pikkuRequireDataDir(), '${DEFAULT_DATABASE_FILENAME}')`,
+            `  __pikkuMkdirSync(__pikkuDirname(__pikkuDbFile), { recursive: true })`,
+            `  const kysely = ${SQLITE_FACTORY[runtime].fn}({`,
+            `    filename: __pikkuDbFile,`,
+            `    plugins: ${plugins},`,
+            `  })`,
+        ];
+    }
+    return [
+        `  const __pikkuDbUrl = process.env.${DATABASE_URL_VAR}`,
+        `  if (!__pikkuDbUrl) {`,
+        `    throw new Error(`,
+        `      'This build connects to Postgres, so it needs ${DATABASE_URL_VAR} set to the database it should open.'`,
+        `    )`,
+        `  }`,
+        `  const __pikkuPg = new PikkuKysely(logger, __pikkuDbUrl)`,
+        `  await __pikkuPg.init()`,
+        ...(db.coercionImportPath
+            ? [
+                `  const kysely = __pikkuPg.kysely.withPlugin(`,
+                `    createCoercionPlugin({ map: __pikkuCoercionMap })`,
+                `  )`,
+            ]
+            : [`  const kysely = __pikkuPg.kysely`]),
+    ];
+};
+/**
+ * Where the migrations sit relative to the running artifact.
+ *
+ * A node bundle reads them from its own directory. A compiled bun binary has no
+ * directory — `import.meta.url` points inside the embedded filesystem — so it
+ * resolves them beside the executable, which is where an operator unpacking an
+ * artifact puts them.
+ */
+const bundleDirExpression = (runtime) => runtime === 'node'
+    ? `__pikkuDirname(__pikkuFileURLToPath(import.meta.url))`
+    : `__pikkuDirname(process.execPath)`;
+/**
+ * The command line, parsed before anything is opened.
+ *
+ * `version` and `help` have to answer without a database, a config factory or a
+ * port, because the machine asking may be one where none of the three work yet
+ * — which is exactly when someone runs them.
+ */
+const commandParseLines = (ctx) => [
+    `const __pikkuCommand = parseStandaloneCommand(process.argv.slice(2), {`,
+    `  version: '${(ctx.version ?? 'unknown').replace(/'/g, "\\'")}',`,
+    `  hasDb: ${Boolean(ctx.db)},`,
+    ...(ctx.db ? [`  engine: '${ctx.db.engine}',`] : []),
+    `})`,
+    `if (__pikkuCommand.kind === 'exit') process.exit(__pikkuCommand.code)`,
+];
+/**
+ * Runs a non-serve command against the database the app itself just opened, and
+ * stops before a port is bound.
+ *
+ * Reusing the app's own connection is the point: a command that resolved its
+ * own would be free to migrate a different database than the next `serve`
+ * reads, and the two would only disagree once in production.
+ */
+const commandDispatchLines = (runtime, ctx) => {
+    if (!ctx.db) {
+        return [`  if (__pikkuCommand.kind !== 'serve') process.exit(0)`, ``];
+    }
+    const dir = `__pikkuJoin(${bundleDirExpression(runtime)}, 'db', '${ctx.db.engine}')`;
+    const handle = ctx.db.engine === 'sqlite'
+        ? `databaseFile: __pikkuDbFile,`
+        : `sql: __pikkuPg.sql,`;
+    return [
+        `  const __pikkuDbCommandTarget = {`,
+        `    engine: '${ctx.db.engine}',`,
+        `    migrationsDir: resolveMigrationsDir(${dir}),`,
+        `    ${handle}`,
+        `  }`,
+        `  if ((await runStandaloneCommand(__pikkuCommand, __pikkuDbCommandTarget)) === 'done') {`,
+        ...(ctx.db.engine === 'postgres' ? [`    await __pikkuPg.close()`] : []),
+        `    return`,
+        `  }`,
+        ``,
+    ];
+};
+/** Imports the app's own lifecycle module, when it declares one. */
+const lifecycleImportLines = (lifecycle) => [
+    `import { ${lifecycle.variable} as __pikkuLifecycle } from '${lifecycle.importPath}'`,
+];
+/**
+ * Runs the app's start hooks around the port opening, the same order and the
+ * same services `pikku dev` gives them.
+ *
+ * `beforeStart` runs after `init` so a hook can rely on everything the server
+ * resolved, and before `start` so work that must finish before the first
+ * request — a seeded admin account, a schema probe — is finished when one
+ * arrives.
+ */
+const lifecycleStartLines = () => [
+    `  await __pikkuLifecycle?.beforeStart?.(singletonServices)`,
+];
+const lifecycleAfterStartLines = () => [
+    `  await __pikkuLifecycle?.afterStart?.(singletonServices)`,
+];
+/**
+ * Hands the stop hooks to the signal handler that owns the shutdown.
+ *
+ * The connection pool is closed in `afterStop`, once the app's own hook and the
+ * server have both finished with it — a pool closed any earlier takes the
+ * queries they are still allowed to make down with it. SQLite needs no
+ * counterpart: the process exiting releases the file.
+ */
+const shutdownHooksArg = (ctx) => {
+    const before = [];
+    const after = [];
+    if (ctx.lifecycle) {
+        before.push(`await __pikkuLifecycle?.beforeStop?.(singletonServices)`);
+        after.push(`await __pikkuLifecycle?.afterStop?.(singletonServices)`);
+    }
+    if (ctx.db?.engine === 'postgres') {
+        after.push(`await __pikkuPg.close()`);
+    }
+    if (before.length === 0 && after.length === 0)
+        return '';
+    const hooks = [];
+    if (before.length > 0) {
+        hooks.push(`beforeStop: async () => { ${before.join('; ')} }`);
+    }
+    if (after.length > 0) {
+        hooks.push(`afterStop: async () => { ${after.join('; ')} }`);
+    }
+    return `{ ${hooks.join(', ')} }`;
+};
+/**
+ * Fails with the variable's name rather than whatever SQLite says about a path
+ * of `undefined/pikku.db`, which is the error an operator would otherwise have
+ * to work backwards from.
+ */
+const dataDirHelperLines = () => [
+    `function __pikkuRequireDataDir() {`,
+    `  const dir = process.env.${DATA_DIR_VAR}`,
+    `  if (!dir) {`,
+    `    throw new Error(`,
+    `      'This build bundles a SQLite database, so it needs somewhere to keep it. Set ${DATA_DIR_VAR} to a writable directory that survives a release swap, or set ${DATABASE_FILE_VAR} to the database file itself.'`,
+    `    )`,
+    `  }`,
+    `  return dir`,
+    `}`,
+];
+/**
+ * `rustc -vV`, or nothing when no toolchain is installed. The triple then falls
+ * back to the Node platform pair, which is right for every ordinary host — the
+ * cases rustc knows better about (musl, Rosetta) are the ones where a Rust
+ * toolchain is present anyway.
+ */
+const rustcHostOutput = async () => {
+    try {
+        const { execFileSync } = await import('node:child_process');
+        return execFileSync('rustc', ['-vV'], { encoding: 'utf-8', stdio: 'pipe' });
+    }
+    catch {
+        return undefined;
+    }
+};
 export class StandaloneProviderAdapter {
     name = 'standalone';
     deployDirName = 'standalone';
     singleUnit = true;
     runtime;
+    desktop;
+    projectDir;
+    desktopIdentifier;
+    desktopUrl;
     constructor(options = {}) {
         this.runtime = options.runtime ?? 'node';
+        this.desktop = options.desktop ?? Boolean(options.desktopUrl);
+        this.projectDir = options.projectDir;
+        this.desktopIdentifier = options.desktopIdentifier;
+        this.desktopUrl = options.desktopUrl;
     }
     generateEntrySource(ctx) {
         if (this.runtime === 'bun') {
@@ -24,6 +295,15 @@ export class StandaloneProviderAdapter {
             `import { PikkuNodeHTTPServer } from '@pikku/node-http-server'`,
             `import { DEFAULT_WS_MAX_PAYLOAD, pikkuWebsocketHandler } from '@pikku/ws'`,
             `import { WebSocketServer } from 'ws'`,
+            runtimeImport(ctx),
+            ...(ctx.frontend || ctx.db
+                ? [
+                    `import { dirname as __pikkuDirname, join as __pikkuJoin } from 'node:path'`,
+                    `import { fileURLToPath as __pikkuFileURLToPath } from 'node:url'`,
+                ]
+                : []),
+            ...(ctx.db ? dbImportLines('node', ctx.db) : []),
+            ...(ctx.lifecycle ? lifecycleImportLines(ctx.lifecycle) : []),
             ``,
             ctx.configImport,
             ctx.servicesImport,
@@ -35,6 +315,8 @@ export class StandaloneProviderAdapter {
             `const port = parseInt(process.env.PORT || '3000', 10)`,
             `const hostname = process.env.HOST || '0.0.0.0'`,
             ``,
+            ...commandParseLines(ctx),
+            ``,
             `async function main() {`,
             `  const config = await ${ctx.configVar}()`,
             `  const schedulerService = new InMemorySchedulerService()`,
@@ -44,8 +326,11 @@ export class StandaloneProviderAdapter {
             `  const eventHub = new LocalEventHubService()`,
             `  workflowService.wireQueueWorkers()`,
             `  wireAgentScorerQueueWorkers()`,
+            ...(ctx.db ? dbSetupLines('node', ctx.db) : []),
+            ...commandDispatchLines('node', ctx),
             `  const singletonServices = await ${ctx.servicesVar}(config, {`,
             `    logger,`,
+            ...(ctx.db ? [`    kysely,`] : []),
             `    schedulerService,`,
             `    queueService,`,
             `    workflowService,`,
@@ -55,9 +340,21 @@ export class StandaloneProviderAdapter {
             `  })`,
             `  pikkuState(null, 'package', 'singletonServices', singletonServices)`,
             ``,
+            ...(ctx.frontend
+                ? [
+                    // Resolved from the running bundle rather than baked in at build
+                    // time, so the distributable stays movable.
+                    `  const staticMounts = [{`,
+                    `    urlPrefix: '${ctx.frontend.urlPrefix}',`,
+                    `    directory: __pikkuJoin(__pikkuDirname(__pikkuFileURLToPath(import.meta.url)), '${STANDALONE_FRONTEND_DIR}'),`,
+                    `    spaFallback: ${ctx.frontend.spaFallback},`,
+                    `  }]`,
+                    ``,
+                ]
+                : []),
             `  const wss = new WebSocketServer({ noServer: true, maxPayload: DEFAULT_WS_MAX_PAYLOAD })`,
             `  const server = new PikkuNodeHTTPServer(`,
-            `    { ...config, port, hostname },`,
+            `    { ...config, port, hostname${ctx.frontend ? ', staticMounts' : ''} },`,
             `    logger,`,
             `    {`,
             `      ${ctx.mcpServerOption}configureServer: (httpServer) => {`,
@@ -68,8 +365,11 @@ export class StandaloneProviderAdapter {
             `  await server.init()`,
             `  await schedulerService.start()`,
             `  await triggerService.start()`,
-            `  server.enableExitOnSignals()`,
+            ...(ctx.lifecycle ? lifecycleStartLines() : []),
+            `  server.enableExitOnSignals(${shutdownHooksArg(ctx)})`,
             `  await server.start()`,
+            ...(ctx.lifecycle ? lifecycleAfterStartLines() : []),
+            ...sidecarHandshakeLines(),
             `}`,
             ``,
             `main().catch((err) => {`,
@@ -77,16 +377,28 @@ export class StandaloneProviderAdapter {
             `  process.exit(1)`,
             `})`,
             ``,
+            ...(ctx.db?.engine === 'sqlite' ? [...dataDirHelperLines(), ``] : []),
         ].join('\n');
     }
     generateBunEntrySource(ctx) {
         return [
             `// Generated standalone entry (bun runtime) — all functions in one process`,
             `import { ConsoleLogger, InMemoryQueueService, InMemoryTriggerService, InMemoryWorkflowService } from '@pikku/core/services'`,
+            runtimeImport(ctx),
             `import { pikkuState } from '@pikku/core/state'`,
             `import { wireAgentScorerQueueWorkers } from '@pikku/core/agent-scorer'`,
             `import { InMemorySchedulerService } from '@pikku/schedule'`,
             `import { PikkuBunServer, BunEventHubService } from '@pikku/bun-server'`,
+            ...(ctx.frontend
+                ? [`import { frontendAssets } from '${STANDALONE_FRONTEND_MANIFEST}'`]
+                : []),
+            ...(ctx.db
+                ? [
+                    `import { dirname as __pikkuDirname, join as __pikkuJoin } from 'node:path'`,
+                ]
+                : []),
+            ...(ctx.db ? dbImportLines('bun', ctx.db) : []),
+            ...(ctx.lifecycle ? lifecycleImportLines(ctx.lifecycle) : []),
             ``,
             ctx.configImport,
             ctx.servicesImport,
@@ -98,6 +410,8 @@ export class StandaloneProviderAdapter {
             `const port = parseInt(process.env.PORT || '3000', 10)`,
             `const hostname = process.env.HOST || '0.0.0.0'`,
             ``,
+            ...commandParseLines(ctx),
+            ``,
             `async function main() {`,
             `  const config = await ${ctx.configVar}()`,
             `  const schedulerService = new InMemorySchedulerService()`,
@@ -107,8 +421,11 @@ export class StandaloneProviderAdapter {
             `  const eventHub = new BunEventHubService()`,
             `  workflowService.wireQueueWorkers()`,
             `  wireAgentScorerQueueWorkers()`,
+            ...(ctx.db ? dbSetupLines('bun', ctx.db) : []),
+            ...commandDispatchLines('bun', ctx),
             `  const singletonServices = await ${ctx.servicesVar}(config, {`,
             `    logger,`,
+            ...(ctx.db ? [`    kysely,`] : []),
             `    schedulerService,`,
             `    queueService,`,
             `    workflowService,`,
@@ -118,12 +435,28 @@ export class StandaloneProviderAdapter {
             `  })`,
             `  pikkuState(null, 'package', 'singletonServices', singletonServices)`,
             ``,
-            `  const server = new PikkuBunServer({ ...config, port, hostname }, logger, { ${ctx.mcpServerOption}eventHub })`,
+            ...(ctx.frontend
+                ? [
+                    // A compiled binary has no directory to read: every file was
+                    // embedded, and the map is the only way back to it.
+                    `  const staticMounts = [{`,
+                    `    urlPrefix: '${ctx.frontend.urlPrefix}',`,
+                    `    directory: '',`,
+                    `    spaFallback: ${ctx.frontend.spaFallback},`,
+                    `    assets: frontendAssets,`,
+                    `  }]`,
+                    ``,
+                ]
+                : []),
+            `  const server = new PikkuBunServer({ ...config, port, hostname${ctx.frontend ? ', staticMounts' : ''} }, logger, { ${ctx.mcpServerOption}eventHub })`,
             `  await server.init()`,
             `  await schedulerService.start()`,
             `  await triggerService.start()`,
-            `  server.enableExitOnSignals()`,
+            ...(ctx.lifecycle ? lifecycleStartLines() : []),
+            `  server.enableExitOnSignals(${shutdownHooksArg(ctx)})`,
             `  await server.start()`,
+            ...(ctx.lifecycle ? lifecycleAfterStartLines() : []),
+            ...sidecarHandshakeLines(),
             `}`,
             ``,
             `main().catch((err) => {`,
@@ -131,6 +464,7 @@ export class StandaloneProviderAdapter {
             `  process.exit(1)`,
             `})`,
             ``,
+            ...(ctx.db?.engine === 'sqlite' ? [...dataDirHelperLines(), ``] : []),
         ].join('\n');
     }
     generateUnitConfigs() {
@@ -148,16 +482,58 @@ export class StandaloneProviderAdapter {
             // Bun-native builtins are provided by the runtime and resolved by
             // `bun build --compile` — leave them as imports rather than inlining.
             externals.push('bun', 'bun:*', 'bun:sqlite', 'bun:ffi');
+            externals.push(STANDALONE_FRONTEND_MANIFEST);
         }
         return externals;
     }
+    /**
+     * The SQLite driver this runtime cannot load.
+     *
+     * `loadSqliteRuntime` picks its driver by looking for `globalThis.Bun`, so a
+     * node process never runs the bun branch — but esbuild still follows the
+     * import, and `bun:sqlite` sits at the top of that module as a static import
+     * it cannot resolve. Left in, the bundle fails to build; marked external, it
+     * becomes a top-level import node fails to load. Stubbing removes the branch
+     * that was already dead.
+     */
+    getStubModules() {
+        if (this.runtime === 'bun')
+            return [];
+        return ['sqlite-runtime-bun'];
+    }
     getPlatform() {
         return 'node';
     }
     async deploy(options) {
         const { buildDir, logger } = options;
+        // Checked before anything expensive runs: a `--desktop` deploy that cannot
+        // produce a shell should say so now, not after a bun compile.
+        if (this.desktop) {
+            if (!this.desktopUrl && this.runtime !== 'bun') {
+                return {
+                    success: false,
+                    errors: [
+                        {
+                            step: 'desktop',
+                            error: `A desktop shell ships the server as a sidecar binary, which only the bun runtime produces. Re-run with --runtime bun (got '${this.runtime}').`,
+                        },
+                    ],
+                };
+            }
+            if (!this.projectDir) {
+                return {
+                    success: false,
+                    errors: [
+                        {
+                            step: 'desktop',
+                            error: 'No project directory was supplied, so there is nowhere to write src-tauri/.',
+                        },
+                    ],
+                };
+            }
+        }
         const { join, dirname } = await import('node:path');
-        const { readdir, writeFile, copyFile, mkdir } = await import('node:fs/promises');
+        const { cp, readdir, writeFile, copyFile, mkdir } = await import('node:fs/promises');
         const { existsSync } = await import('node:fs');
         // Find the unit dir with the bundle
         const entries = await readdir(buildDir);
@@ -179,6 +555,21 @@ export class StandaloneProviderAdapter {
             await copyFile(join(unitDir, 'bundle.js.map'), join(outDir, 'bundle.js.map'));
         }
         logger.info(`Bundle: ${join(outDir, 'bundle.js')}`);
+        // --- 2a. Frontend, when the build produced one ---
+        // Both runtimes need it here rather than only in the build directory: node
+        // resolves the mount relative to the shipped bundle, and `bun build
+        // --compile` follows the manifest import out of the copy it is given.
+        const frontendDir = join(unitDir, STANDALONE_FRONTEND_DIR);
+        if (existsSync(frontendDir)) {
+            await cp(frontendDir, join(outDir, STANDALONE_FRONTEND_DIR), {
+                recursive: true,
+            });
+            const manifestName = STANDALONE_FRONTEND_MANIFEST.replace('./', '');
+            if (existsSync(join(unitDir, manifestName))) {
+                await copyFile(join(unitDir, manifestName), join(outDir, manifestName));
+            }
+            logger.info(`Frontend: ${join(outDir, STANDALONE_FRONTEND_DIR)}`);
+        }
         // --- 2b. bun runtime: compile the bundle into a self-contained binary ---
         if (this.runtime === 'bun') {
             const { execFileSync } = await import('node:child_process');
@@ -206,6 +597,56 @@ export class StandaloneProviderAdapter {
                 };
             }
         }
+        // --- 2c. desktop: wrap the server in a shell, or point one at a remote ---
+        let targetTriple;
+        if (this.desktop && this.projectDir) {
+            const { generateTauriShell, tauriBundleIdentifier } = await import('./tauri/generate.js');
+            const { hostTargetTriple } = await import('./tauri/target-triple.js');
+            const { renderTauriNextSteps } = await import('./tauri/next-steps.js');
+            try {
+                const rustcVersionVerbose = await rustcHostOutput();
+                targetTriple = hostTargetTriple({ rustcVersionVerbose });
+                const shell = await generateTauriShell({
+                    projectDir: this.projectDir,
+                    appName,
+                    identifier: this.desktopIdentifier ?? tauriBundleIdentifier(appName),
+                    targetTriple,
+                    ...(this.desktopUrl
+                        ? { remoteUrl: this.desktopUrl }
+                        : { binaryPath: join(outDir, appName) }),
+                });
+                logger.info(`Desktop shell: ${shell.dir} (${shell.targetTriple})`);
+                if (shell.written.length) {
+                    logger.info(`  wrote ${shell.written.join(', ')}`);
+                }
+                if (shell.preserved.length) {
+                    logger.info(`  kept your edits, not regenerated: ${shell.preserved.join(', ')}`);
+                }
+                if (shell.sidecar) {
+                    logger.info(`  sidecar: binaries/${shell.sidecar.fileName}`);
+                }
+                else {
+                    logger.info(`  window opens: ${this.desktopUrl}`);
+                }
+                for (const line of renderTauriNextSteps({
+                    shellDir: shell.dir,
+                    hasRust: rustcVersionVerbose !== undefined,
+                })) {
+                    logger.info(line);
+                }
+            }
+            catch (e) {
+                return {
+                    success: false,
+                    errors: [
+                        {
+                            step: 'desktop',
+                            error: e instanceof Error ? e.message : String(e),
+                        },
+                    ],
+                };
+            }
+        }
         // --- 3. config/ — empty template with .env example ---
         const configDir = join(outDir, 'config');
         await mkdir(configDir, { recursive: true });
@@ -228,6 +669,7 @@ export class StandaloneProviderAdapter {
             workersDeployed: [appName],
             resourcesCreated: [],
             errors: [],
+            targetTriple,
         };
     }
 }

package/dist/runtime/cli.d.ts

@@ -0,0 +1,75 @@
+/** Where the migrations live, when the operator has moved them. */
+export declare const MIGRATIONS_DIR_ENV = "PIKKU_MIGRATIONS_DIR";
+export interface StandaloneSqliteDb {
+    engine: 'sqlite';
+    migrationsDir: string;
+    /** The file the app itself opens, so a migration cannot target another one. */
+    databaseFile: string;
+}
+/**
+ * The postgres.js tagged template the app is already connected through.
+ *
+ * Taken rather than constructed so a migration runs on the app's own pool: a
+ * second connection would need the credentials resolved twice and could reach a
+ * different database than the one the next `serve` opens.
+ */
+export interface PostgresSql {
+    unsafe(query: string, parameters?: unknown[]): Promise<any> & {
+        simple(): Promise<any>;
+    };
+    begin<T>(handler: (sql: PostgresSql) => Promise<T>): Promise<T>;
+}
+export interface StandalonePostgresDb {
+    engine: 'postgres';
+    migrationsDir: string;
+    sql: PostgresSql;
+}
+export type StandaloneDb = StandaloneSqliteDb | StandalonePostgresDb;
+export type StandaloneCommand = {
+    kind: 'serve';
+} | {
+    kind: 'db';
+    action: 'migrate' | 'status';
+} | {
+    kind: 'backup';
+    destination: string;
+} | {
+    kind: 'exit';
+    code: number;
+};
+export interface ParseOptions {
+    version: string;
+    /** False for a build with no database, whose db commands cannot be answered. */
+    hasDb: boolean;
+    engine?: 'sqlite' | 'postgres';
+    write?: (line: string) => void;
+}
+export declare function parseStandaloneCommand(argv: string[], options: ParseOptions): StandaloneCommand;
+/**
+ * The migrations directory, honouring an operator who keeps them elsewhere.
+ *
+ * `bundleDir` is where the build put them, which is the same `db/<engine>/`
+ * path Fabric's build container stages into an artifact — so an artifact from
+ * either producer answers `db migrate` without being told where to look.
+ */
+export declare const resolveMigrationsDir: (bundleDir: string, env?: Record<string, string | undefined>) => string;
+export interface CommandOutput {
+    write(line: string): void;
+}
+export declare function runDbCommand(action: 'migrate' | 'status', db: StandaloneDb, out?: CommandOutput): Promise<void>;
+/**
+ * Copy the SQLite database somewhere else, while the app may be running.
+ *
+ * `VACUUM INTO` rather than copying the file: a plain copy taken while another
+ * process is mid-write captures a torn page and a write-ahead log it has no
+ * copy of, which restores as a corrupt database and only says so later.
+ */
+export declare function runBackupCommand(destination: string, db: StandaloneSqliteDb, out?: CommandOutput): Promise<void>;
+/**
+ * Run whatever the argv asked for, and say whether the caller should serve.
+ *
+ * The database is passed already open, because the entry has to open it the one
+ * way the app does — a command that resolved its own connection could migrate a
+ * different database than the next `serve` reads.
+ */
+export declare function runStandaloneCommand(command: StandaloneCommand, db: StandaloneDb | undefined, out?: CommandOutput): Promise<'serve' | 'done'>;