@pikku/inspector 0.12.92 → 0.12.94

package/CHANGELOG.md

@@ -1,3 +1,27 @@
+## 0.12.94
+
+### Patch Changes
+
+- 4323bcf: Inline wiring functions now record their source file, so `pikku release` leaves scaffold-injected ones out of the API surface.
+
+## 0.12.93
+
+### Patch Changes
+
+- 658f047: A function whose services are all singletons no longer builds wire services, so an addon's credential-bound wire factory does not run for, or fail, a webhook `receive` step that needs no connection. The inspector decides this from the `Services` type and records it as `singletonServicesOnly` on the function's runtime meta; the runner only reads the flag.
+- 658f047: Webhook signing secrets live in the credential store. `WebhookSigningSecret.fromCredential(provider, credentialService, name)` reads the secret per delivery via `load()`, so a `setup` step (or a handshake) that stores a new one with `credentialService.set` takes effect without a deploy.
+
+  Breaking: `setup` no longer returns `secret`, `wireTriggerWebhookSource` no longer takes `secret`, lifecycle outcomes drop `secretName`/`secret`, and `pikku webhooks setup` drops `--secretsOut`.
+
+- 658f047: A webhook source's `method` may be a list, mounting one route per method, for providers that verify the URL with a GET and deliver events with a POST (WhatsApp, Strava, Onfleet, Mailchimp), or a HEAD (Trello, Mandrill, SurveyMonkey).
+- Updated dependencies [658f047]
+- Updated dependencies [de63ab2]
+- Updated dependencies [658f047]
+- Updated dependencies [658f047]
+- Updated dependencies [658f047]
+- Updated dependencies [658f047]
+  - @pikku/core@0.12.128
+
 ## 0.12.92
 
 ### Patch Changes

package/dist/add/add-trigger.js

@@ -1,5 +1,5 @@
 import * as ts from 'typescript';
-import { getPropertyValue, getCommonWireMetaData, } from '../utils/get-property-value.js';
+import { getArrayPropertyValue, getPropertyValue, getCommonWireMetaData, } from '../utils/get-property-value.js';
 import { extractFunctionName, makeContextBasedId, } from '../utils/extract-function-name.js';
 import { getPropertyAssignmentInitializer } from '../utils/type-utils.js';
 import { ensureInlineWiringFunction } from '../utils/ensure-function-metadata.js';
@@ -114,9 +114,10 @@ const addWireTriggerWebhookSource = (logger, node, checker, state, firstArg) =>
         logger.critical(ErrorCode.MISSING_NAME, `wireTriggerWebhookSource in ${node.getSourceFile().fileName} needs 'name' as a string literal.`);
         return;
     }
-    const method = getPropertyValue(obj, 'method') ?? 'post';
+    const method = getArrayPropertyValue(obj, 'method') ??
+        getPropertyValue(obj, 'method') ??
+        'post';
     const route = getPropertyValue(obj, 'route') ?? `/webhooks/${name}`;
-    let secret = getPropertyValue(obj, 'secret');
     const eventsInitializer = getPropertyAssignmentInitializer(obj, 'events', false, checker);
     const events = eventsInitializer
         ? checker
@@ -151,23 +152,11 @@ const addWireTriggerWebhookSource = (logger, node, checker, state, firstArg) =>
         steps[step] = pikkuFuncId;
         state.serviceAggregation.usedFunctions.add(pikkuFuncId);
     }
-    // An addon's receive reads the secret by its own name; the app may have
-    // renamed it for this instance.
-    const namespace = steps.receive?.includes(':')
-        ? steps.receive.slice(0, steps.receive.indexOf(':'))
-        : null;
-    const addon = namespace
-        ? state.rpc.wireAddonDeclarations.get(namespace)
-        : undefined;
-    if (secret && addon?.secretOverrides?.[secret]) {
-        secret = addon.secretOverrides[secret];
-    }
     const meta = {
         name,
         method: method,
         route,
         events,
-        ...(secret ? { secret } : {}),
         ...steps,
     };
     state.triggers.webhookSourceMeta[name] = meta;

package/dist/utils/ensure-function-metadata.js

@@ -176,6 +176,9 @@ export function ensureFunctionMetadata(state, pikkuFuncId, fallbackName, funcIni
         };
     }
     const meta = state.functions.meta[pikkuFuncId];
+    if (!meta.sourceFile && funcInitializer) {
+        meta.sourceFile = funcInitializer.getSourceFile().fileName;
+    }
     if (funcInitializer && checker) {
         let pikkuFuncCall = null;
         if (ts.isCallExpression(funcInitializer)) {

package/dist/utils/post-process.js

@@ -94,6 +94,24 @@ function extractAllServices(state) {
         state.serviceAggregation.allWireServices = extractTypeKeys(servicesType)
             .filter((name) => !singletonSet.has(name))
             .sort();
+        markSingletonServicesOnly(state, new Set(state.serviceAggregation.allWireServices));
+    }
+}
+/**
+ * Marks the functions that never read a wire service, so the runner can skip
+ * `createWireServices` for them. Only called once the `Services` type has
+ * resolved: an unresolved type yields no wire services, which would otherwise
+ * mark every function.
+ */
+function markSingletonServicesOnly(state, wireServices) {
+    for (const meta of Object.values(state.functions.meta)) {
+        if (meta.services?.optimized &&
+            !meta.services.services.some((name) => wireServices.has(name))) {
+            meta.singletonServicesOnly = true;
+        }
+        else {
+            delete meta.singletonServicesOnly;
+        }
     }
 }
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pikku/inspector",
-  "version": "0.12.92",
+  "version": "0.12.94",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/pikkujs/pikku.git",
@@ -54,10 +54,10 @@
     "zod": "^4.4.3"
   },
   "peerDependencies": {
-    "@pikku/core": "^0.12.127"
+    "@pikku/core": "^0.12.128"
   },
   "devDependencies": {
-    "@pikku/core": "^0.12.127",
+    "@pikku/core": "^0.12.128",
     "@types/node": "^24.13.3"
   },
   "engines": {