feat: Add Command.withHidden to hide subcommands from help and completions

.changeset/add-command-hidden.md

@@ -0,0 +1,19 @@
+---
+"effect": patch
+---
+
+Add `Command.withHidden` to hide subcommands from `--help` output, shell completions, and "did you mean?" suggestions, while keeping them fully invocable by exact name.
+
+Useful for experimental or internal subcommands that should be accepted but not advertised on the public CLI surface.
+
+```ts
+import { Command } from "effect/unstable/cli"
+
+const experimental = Command.make("experimental").pipe(
+  Command.withHidden
+)
+
+const root = Command.make("mycli").pipe(
+  Command.withSubcommands([experimental])
+)
+```

.changeset/add-stream-broadcastn.md

@@ -1,5 +1,5 @@
 ---
-"effect": minor
+"effect": patch
 ---
 
 Add Stream.broadcastN for fixed-size stream broadcasts.

.changeset/green-rings-prove.md

@@ -0,0 +1,5 @@
+---
+"effect": patch
+---
+
+update Model uuid helpers

.changeset/platform-crypto-service.md

@@ -0,0 +1,9 @@
+---
+"effect": patch
+"@effect/platform-node": patch
+"@effect/platform-node-shared": patch
+"@effect/platform-bun": patch
+"@effect/platform-browser": patch
+---
+
+Add a platform-agnostic `Crypto` service for cryptographic random bytes, secure random generators, UUIDv4 / UUIDv7 generation, and digest operations. UUID generation should now use the `Crypto` service's `randomUUIDv4` or `randomUUIDv7`, which format bytes from the platform `Crypto` service; UUIDv7 also uses the `Clock` service timestamp. `Random.nextUUIDv4` has been removed because the base `Random` service is not cryptographically secure.

.changeset/pre.json

@@ -59,6 +59,7 @@
     "add-schema-string-encoding",
     "add-sql-pglite",
     "add-standard-jsdoc-rule",
+    "add-stream-broadcastn",
     "add-unstable-encoding-export",
     "afraid-cobras-like",
     "ai-openai-config-field-leak",
@@ -292,6 +293,7 @@
     "green-chips-wash",
     "green-moons-smile",
     "green-pugs-play",
+    "green-rings-prove",
     "happy-mirrors-dream",
     "heavy-loops-cut",
     "heavy-trams-fix",
@@ -354,6 +356,7 @@
     "olive-poems-visit",
     "open-hotels-remain",
     "petite-months-allow",
+    "platform-crypto-service",
     "plenty-moons-pull",
     "polite-brooms-tickle",
     "polite-pigs-speak",
@@ -392,6 +395,7 @@
     "ripe-lies-battle",
     "rpc-middleware-provides-fix",
     "schema-as-class",
+    "schema-asserts-signature",
     "schema-clean-up-additionalProperties",
     "schema-datetime-utc-from-string",
     "schema-decoding-defaults-services",
@@ -415,6 +419,7 @@
     "shiny-trains-hug",
     "short-cows-relate",
     "short-foxes-admire",
+    "shy-cycles-flow",
     "shy-geckos-sniff",
     "silent-geckos-matter",
     "silent-needles-design",
@@ -445,6 +450,7 @@
     "soft-seals-allow",
     "solid-doors-ring",
     "solid-items-tease",
+    "solid-towns-smoke",
     "sour-canyons-rescue",
     "sparkly-bears-act",
     "sparkly-coins-sit",

.changeset/schema-asserts-signature.md

@@ -0,0 +1,5 @@
+---
+"effect": patch
+---
+
+Change `Schema.asserts` and `SchemaParser.asserts` to assert a value directly with `asserts(schema, input)` and remove `Schema.Codec.ToAsserts`.

.github/workflows/bundle-comment.yml

@@ -24,14 +24,16 @@ jobs:
       - name: Download Artifact
         uses: actions/download-artifact@v8
         with:
+          name: bundle-stats
+          path: bundle-stats
           run-id: ${{ github.event.workflow_run.id }}
           github-token: ${{ secrets.GITHUB_TOKEN }}
       - name: Get stats
         id: stats
         run: |
           {
             echo 'stats<<EOF'
-            cat artifact/stats.txt
+            cat bundle-stats/stats.txt
             echo EOF
           } >> $GITHUB_OUTPUT
       # https://github.com/orgs/community/discussions/25220#discussioncomment-11300118

.github/workflows/check.yml

@@ -104,7 +104,9 @@ jobs:
         if: github.event_name == 'pull_request'
         uses: actions/upload-artifact@v4
         with:
+          name: bundle-stats
           path: stats.txt
+          if-no-files-found: error
 
   test:
     name: Test
@@ -146,33 +148,6 @@ jobs:
         if: matrix.runtime == 'Deno'
         run: deno task test --shard ${{ matrix.shard }}
 
-  jsdoc-analysis:
-    name: JSDoc Analysis
-    if: github.event_name == 'pull_request'
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-    timeout-minutes: 5
-    steps:
-      - uses: actions/checkout@v6
-      - name: Install node
-        uses: actions/setup-node@v6
-      - name: Generate JSDoc Analysis
-        shell: bash
-        run: |
-          # Run JSDoc analysis and format output for GitHub
-          node scripts/analyze-jsdoc.mjs > jsdoc-analysis.txt 2>&1 || true
-          echo "<!-- JSDoc Analysis PR Report -->" > jsdoc-stats.md
-          echo "" >> jsdoc-stats.md
-          echo "\`\`\`" >> jsdoc-stats.md
-          cat jsdoc-analysis.txt >> jsdoc-stats.md
-          echo "\`\`\`" >> jsdoc-stats.md
-      - name: Upload JSDoc stats artifact
-        uses: actions/upload-artifact@v4
-        with:
-          name: jsdoc-stats
-          path: jsdoc-stats.md
-
   docgen:
     name: Documentation Generation
     runs-on: ubuntu-latest

.gitignore

@@ -15,9 +15,6 @@ node_modules/
 coverage/
 docs/
 tmp/
-stats.html
-jsdoc-analysis-results.json
-jsdoc-stats.md
 
 # Generated by MacOS
 .DS_Store

.specs/README.md

@@ -1,3 +1,4 @@
 # Specifications
 
 - [Effect SQL UniqueViolation SqlError Reason](./effect-sql-unique-violation.md) — Adds a `UniqueViolation` SQL error reason with a `constraint` property and updates driver classification for UNIQUE constraint violations.
+- [Effect Platform Crypto Service](./effect-platform-crypto.md) — Adds a platform-agnostic `Crypto` service for cryptographic random bytes, native UUIDv4 generation, and digest operations.