@pikku/addon-console 0.12.49 → 0.12.51

package/dist/src/functions/secret-scopes.function.test.js

@@ -0,0 +1,60 @@
+import assert from 'node:assert/strict';
+import { test } from 'node:test';
+import { MissingScopeError } from '#pikku/addon/error';
+import { verifyScopes } from '@pikku/core/scope';
+import { secretGet } from './secret-get.function.js';
+import { secretHas } from './secret-has.function.js';
+import { secretSet } from './secret-set.function.js';
+const readers = [
+    ['secretGet', secretGet],
+    ['secretHas', secretHas],
+];
+for (const [name, reader] of readers) {
+    test(`${name} refuses a caller with no session`, () => {
+        assert.throws(() => verifyScopes(reader.scopes, undefined), MissingScopeError);
+    });
+    test(`${name} refuses a console user without the secrets scope`, () => {
+        assert.throws(() => verifyScopes(reader.scopes, {
+            userId: 'alice',
+            scopes: ['pikku:console:wirings:read'],
+        }), MissingScopeError);
+    });
+    test(`${name} admits a holder of the secrets read scope`, () => {
+        assert.doesNotThrow(() => verifyScopes(reader.scopes, {
+            userId: 'root',
+            scopes: ['pikku:console:secrets:read'],
+        }));
+    });
+    test(`${name} admits a holder of the console root`, () => {
+        assert.doesNotThrow(() => verifyScopes(reader.scopes, { userId: 'root', scopes: ['pikku:console'] }));
+    });
+}
+test('secretSet refuses a caller with no session', () => {
+    assert.throws(() => verifyScopes(secretSet.scopes, undefined), MissingScopeError);
+});
+test('secretSet refuses a console user without the secrets scope', () => {
+    assert.throws(() => verifyScopes(secretSet.scopes, {
+        userId: 'alice',
+        scopes: ['pikku:console:wirings:read'],
+    }), MissingScopeError);
+});
+// Reading a secret and overwriting one are separate grants.
+test('secretSet refuses a holder of only the secrets read scope', () => {
+    assert.throws(() => verifyScopes(secretSet.scopes, {
+        userId: 'alice',
+        scopes: ['pikku:console:secrets:read'],
+    }), MissingScopeError);
+});
+test('secretSet admits a holder of the secrets write scope', () => {
+    assert.doesNotThrow(() => verifyScopes(secretSet.scopes, {
+        userId: 'root',
+        scopes: ['pikku:console:secrets:write'],
+    }));
+});
+test('secretSet admits a holder of the console root', () => {
+    assert.doesNotThrow(() => verifyScopes(secretSet.scopes, {
+        userId: 'root',
+        scopes: ['pikku:console'],
+    }));
+});
+//# sourceMappingURL=secret-scopes.function.test.js.map

package/dist/src/functions/secret-scopes.function.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-scopes.function.test.js","sourceRoot":"","sources":["../../../src/functions/secret-scopes.function.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAA;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAEhD,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AAEpD,MAAM,OAAO,GAAG;IACd,CAAC,WAAW,EAAE,SAAS,CAAC;IACxB,CAAC,WAAW,EAAE,SAAS,CAAC;CAChB,CAAA;AAEV,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;IACrC,IAAI,CAAC,GAAG,IAAI,mCAAmC,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,EAC5C,iBAAiB,CAClB,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,GAAG,IAAI,mDAAmD,EAAE,GAAG,EAAE;QACpE,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CACH,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE;YAC1B,MAAM,EAAE,OAAO;YACf,MAAM,EAAE,CAAC,4BAA4B,CAAC;SACvC,CAAC,EACJ,iBAAiB,CAClB,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,GAAG,IAAI,4CAA4C,EAAE,GAAG,EAAE;QAC7D,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,CACvB,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE;YAC1B,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,CAAC,4BAA4B,CAAC;SACvC,CAAC,CACH,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,GAAG,IAAI,sCAAsC,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,CACvB,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC,CAC3E,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,IAAI,CAAC,4CAA4C,EAAE,GAAG,EAAE;IACtD,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,EAC/C,iBAAiB,CAClB,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,4DAA4D,EAAE,GAAG,EAAE;IACtE,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CACH,YAAY,CAAC,SAAS,CAAC,MAAM,EAAE;QAC7B,MAAM,EAAE,OAAO;QACf,MAAM,EAAE,CAAC,4BAA4B,CAAC;KACvC,CAAC,EACJ,iBAAiB,CAClB,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,4DAA4D;AAC5D,IAAI,CAAC,2DAA2D,EAAE,GAAG,EAAE;IACrE,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CACH,YAAY,CAAC,SAAS,CAAC,MAAM,EAAE;QAC7B,MAAM,EAAE,OAAO;QACf,MAAM,EAAE,CAAC,4BAA4B,CAAC;KACvC,CAAC,EACJ,iBAAiB,CAClB,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,sDAAsD,EAAE,GAAG,EAAE;IAChE,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,CACvB,YAAY,CAAC,SAAS,CAAC,MAAM,EAAE;QAC7B,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,CAAC,6BAA6B,CAAC;KACxC,CAAC,CACH,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,+CAA+C,EAAE,GAAG,EAAE;IACzD,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,CACvB,YAAY,CAAC,SAAS,CAAC,MAAM,EAAE;QAC7B,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,CAAC,eAAe,CAAC;KAC1B,CAAC,CACH,CAAA;AACH,CAAC,CAAC,CAAA"}

package/dist/src/functions/secret-set.function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"secret-set.function.d.ts","sourceRoot":"","sources":["../../../src/functions/secret-set.function.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,SAAS;cACR,MAAM;WAAS,OAAO;;aACvB,OAAO;;cADN,MAAM;WAAS,OAAO;;aACvB,OAAO;;cADN,MAAM;WAAS,OAAO;;aACvB,OAAO;oGASlB,CAAA"}
+{"version":3,"file":"secret-set.function.d.ts","sourceRoot":"","sources":["../../../src/functions/secret-set.function.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,SAAS;cACR,MAAM;WAAS,OAAO;;aACvB,OAAO;;cADN,MAAM;WAAS,OAAO;;aACvB,OAAO;;cADN,MAAM;WAAS,OAAO;;aACvB,OAAO;oGAUlB,CAAA"}

package/dist/src/functions/secret-set.function.js

@@ -3,6 +3,7 @@ export const secretSet = pikkuFunc({
     title: 'Set Secret',
     description: 'Sets the value of a secret.',
     expose: true,
+    scopes: ['pikku:console:secrets:write'],
     func: async ({ secretAdminService }, { secretId, value }) => {
         await secretAdminService.write(secretId, value);
         return { success: true };

package/dist/src/functions/secret-set.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"secret-set.function.js","sourceRoot":"","sources":["../../../src/functions/secret-set.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AAEjD,MAAM,CAAC,MAAM,SAAS,GAAG,SAAS,CAGhC;IACA,KAAK,EAAE,YAAY;IACnB,WAAW,EAAE,6BAA6B;IAC1C,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,KAAK,EAAE,EAAE,kBAAkB,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE;QAC1D,MAAM,kBAAkB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;QAC/C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"secret-set.function.js","sourceRoot":"","sources":["../../../src/functions/secret-set.function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AAEjD,MAAM,CAAC,MAAM,SAAS,GAAG,SAAS,CAGhC;IACA,KAAK,EAAE,YAAY;IACnB,WAAW,EAAE,6BAA6B;IAC1C,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC,6BAA6B,CAAC;IACvC,IAAI,EAAE,KAAK,EAAE,EAAE,kBAAkB,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE;QAC1D,MAAM,kBAAkB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;QAC/C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pikku/addon-console",
-  "version": "0.12.49",
+  "version": "0.12.51",
   "description": "Console addon for Pikku — functions powering the Pikku Console UI",
   "type": "module",
   "imports": {
@@ -29,15 +29,15 @@
     "dist"
   ],
   "scripts": {
-    "build": "pikku all && tsc && (cp .pikku/addon/rpc/*.d.ts dist/.pikku/addon/rpc/ 2>/dev/null || true) && (cp .pikku/addon/agent/*.d.ts dist/.pikku/addon/agent/ 2>/dev/null || true) && (cp .pikku/addon/workflow/*.d.ts dist/.pikku/addon/workflow/ 2>/dev/null || true) && (mkdir -p dist/.pikku/addon/function && cp .pikku/addon/function/*-verbose.gen.json dist/.pikku/addon/function/ 2>/dev/null || true) && (mkdir -p dist/types && cp types/*.d.ts dist/types/)",
+    "build": "rm -rf dist && pikku all && tsc && (cp .pikku/addon/rpc/*.d.ts dist/.pikku/addon/rpc/ 2>/dev/null || true) && (cp .pikku/addon/agent/*.d.ts dist/.pikku/addon/agent/ 2>/dev/null || true) && (cp .pikku/addon/workflow/*.d.ts dist/.pikku/addon/workflow/ 2>/dev/null || true) && (mkdir -p dist/.pikku/addon/function && cp .pikku/addon/function/*-verbose.gen.json dist/.pikku/addon/function/ 2>/dev/null || true) && (mkdir -p dist/types && cp types/*.d.ts dist/types/) && (mkdir -p dist/.pikku/addon/db && cp .pikku/addon/db/pikku-db-meta.gen.json dist/.pikku/addon/db/)",
     "pikku": "pikku all",
     "pretest": "pikku all",
     "test": "tsc --noEmit",
     "test:coverage": "bash run-tests.sh --coverage"
   },
   "peerDependencies": {
-    "@pikku/better-auth": "^0.12.26",
-    "@pikku/core": "^0.12.90"
+    "@pikku/better-auth": "^0.12.37",
+    "@pikku/core": "^0.12.106"
   },
   "peerDependenciesMeta": {
     "@pikku/better-auth": {
@@ -45,9 +45,9 @@
     }
   },
   "devDependencies": {
-    "@pikku/better-auth": "^0.12.26",
-    "@pikku/cli": "^0.12.132",
-    "@pikku/core": "^0.12.90",
+    "@pikku/better-auth": "^0.12.37",
+    "@pikku/cli": "^0.12.141",
+    "@pikku/core": "^0.12.106",
     "oauth2-mock-server": "^9.1.0",
     "typescript": "^6.0.3"
   },

package/dist/.pikku/addon/index.d.ts

@@ -1,8 +0,0 @@
-/**
- * This file was generated by @pikku/cli@0.12.105
- */
-/**
- * Subpath entry — `#pikku/addon` resolves here.
- */
-export * from './pikku-addon-types.gen.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/.pikku/addon/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../.pikku/addon/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;GAEG;AAEH,cAAc,4BAA4B,CAAA"}

package/dist/.pikku/addon/index.js

@@ -1,8 +0,0 @@
-/**
- * This file was generated by @pikku/cli@0.12.105
- */
-/**
- * Subpath entry — `#pikku/addon` resolves here.
- */
-export * from './pikku-addon-types.gen.js';
-//# sourceMappingURL=index.js.map

package/dist/.pikku/addon/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../.pikku/addon/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;GAEG;AAEH,cAAc,4BAA4B,CAAA"}

package/dist/.pikku/addon/pikku-addon-types.gen.d.ts

@@ -1,66 +0,0 @@
-/**
- * This file was generated by @pikku/cli@0.12.105
- */
-/**
- * Addon package types for pikkuAddonConfig and pikkuAddonServices
- */
-import type { CreateConfig } from '@pikku/core/types';
-import type { PikkuWire } from '@pikku/core/types';
-import type { SingletonServices } from '../../types/application-types.d.js';
-import type { Config } from '../../types/application-types.d.js';
-import type { RequiredSingletonServices } from '../pikku-services.gen.js';
-import { TypedSecretService } from '../secrets/pikku-secrets.gen.js';
-import { TypedVariablesService } from '../variables/pikku-variables.gen.js';
-/**
- * Base services provided to addon package service factories.
- * These are always available from the parent application.
- */
-export type AddonBaseServices = {
-    logger: SingletonServices['logger'];
-    variables: TypedVariablesService;
-    secrets: TypedSecretService;
-};
-/**
- * Creates a Pikku config factory for addon packages.
- * Unlike pikkuConfig, this receives AddonBaseServices (logger, variables, secrets)
- * from the parent application, so addon packages can read variables/secrets during config creation.
- */
-export declare const pikkuAddonConfig: <ExistingServices extends Omit<Partial<SingletonServices>, "variables" | "secrets"> & AddonBaseServices>(func: (services: ExistingServices) => Promise<Config>) => CreateConfig<Config>;
-/**
- * Creates a Pikku singleton services factory for addon packages.
- * Unlike pikkuServices, this expects the parent application to provide
- * logger, variables, and secrets - no fallbacks needed.
- *
- * @param func - Addon services factory function that receives config and base services
- * @returns The singleton services factory function
- *
- * @example
- * ```typescript
- * export const createSingletonServices = pikkuAddonServices(async (
- *   config,
- *   { secrets }
- * ) => {
- *   const creds = await secrets.getSecret<GithubCredentials>('GITHUB_CREDENTIALS')
- *   const github = new GithubService(creds.reveal())
- *   return { github }
- * })
- * ```
- */
-export declare const pikkuAddonServices: <T extends Record<string, any>, ExistingServices extends Omit<Partial<SingletonServices>, "variables" | "secrets"> & AddonBaseServices>(func: (config: Config, services: ExistingServices) => Promise<T>) => (config: Config, existingServices?: Partial<SingletonServices>) => Promise<RequiredSingletonServices>;
-/**
- * Creates a Pikku wire services factory for addon packages.
- * Wire services are created per-request and have access to the HTTP request context.
- *
- * @param func - Wire services factory function that receives singleton services and the wire context
- * @returns The wire services factory function
- *
- * @example
- * ```typescript
- * export const createWireServices = pikkuAddonWireServices(async (services, wire) => {
- *   const authHeader = wire.http?.request?.header('authorization')
- *   return { myService: new MyService(authHeader) }
- * })
- * ```
- */
-export declare const pikkuAddonWireServices: <ExistingServices extends Omit<Partial<SingletonServices>, "variables" | "secrets"> & AddonBaseServices>(func: (services: ExistingServices, wire: PikkuWire) => Promise<Record<string, any>>) => any;
-//# sourceMappingURL=pikku-addon-types.gen.d.ts.map

package/dist/.pikku/addon/pikku-addon-types.gen.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"pikku-addon-types.gen.d.ts","sourceRoot":"","sources":["../../../.pikku/addon/pikku-addon-types.gen.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;GAEG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AACrD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAClD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAA;AAC3E,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oCAAoC,CAAA;AAChE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAA;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAA;AACpE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAA;AAM3E;;;GAGG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,MAAM,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAA;IACnC,SAAS,EAAE,qBAAqB,CAAA;IAChC,OAAO,EAAE,kBAAkB,CAAA;CAC5B,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,GAAI,gBAAgB,SAAS,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC,GAAG,iBAAiB,EACrI,MAAM,CAAC,QAAQ,EAAE,gBAAgB,KAAK,OAAO,CAAC,MAAM,CAAC,KACpD,YAAY,CAAC,MAAM,CAKrB,CAAA;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,kBAAkB,GAAI,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,gBAAgB,SAAS,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC,GAAG,iBAAiB,EACtK,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,gBAAgB,KAAK,OAAO,CAAC,CAAC,CAAC,MAElD,QAAQ,MAAM,EAAE,mBAAmB,OAAO,CAAC,iBAAiB,CAAC,KAAG,OAAO,CAAC,yBAAyB,CAchH,CAAA;AAED;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,sBAAsB,GAAI,gBAAgB,SAAS,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC,GAAG,iBAAiB,EAC3I,MAAM,CAAC,QAAQ,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,KAM7E,GACP,CAAA"}

package/dist/.pikku/addon/pikku-addon-types.gen.js

@@ -1,78 +0,0 @@
-/**
- * This file was generated by @pikku/cli@0.12.105
- */
-/**
- * Addon package types for pikkuAddonConfig and pikkuAddonServices
- */
-import { TypedSecretService } from '../secrets/pikku-secrets.gen.js';
-import { TypedVariablesService } from '../variables/pikku-variables.gen.js';
-/**
- * Creates a Pikku config factory for addon packages.
- * Unlike pikkuConfig, this receives AddonBaseServices (logger, variables, secrets)
- * from the parent application, so addon packages can read variables/secrets during config creation.
- */
-export const pikkuAddonConfig = (func) => {
-    return (async (_variables, existingServices) => {
-        const { secrets, variables, ...rest } = (existingServices ?? {});
-        return func({ ...rest, secrets: new TypedSecretService(secrets), variables: new TypedVariablesService(variables) });
-    });
-};
-/**
- * Creates a Pikku singleton services factory for addon packages.
- * Unlike pikkuServices, this expects the parent application to provide
- * logger, variables, and secrets - no fallbacks needed.
- *
- * @param func - Addon services factory function that receives config and base services
- * @returns The singleton services factory function
- *
- * @example
- * ```typescript
- * export const createSingletonServices = pikkuAddonServices(async (
- *   config,
- *   { secrets }
- * ) => {
- *   const creds = await secrets.getSecret<GithubCredentials>('GITHUB_CREDENTIALS')
- *   const github = new GithubService(creds.reveal())
- *   return { github }
- * })
- * ```
- */
-export const pikkuAddonServices = (func) => {
-    return async (config, existingServices) => {
-        const { logger, variables, secrets, schema } = (existingServices ?? {});
-        const typedVariables = new TypedVariablesService(variables);
-        const typedSecrets = new TypedSecretService(secrets);
-        const result = await func(config, { ...existingServices, logger, variables: typedVariables, secrets: typedSecrets });
-        return {
-            config,
-            logger,
-            schema,
-            variables: typedVariables,
-            secrets: typedSecrets,
-            ...result,
-        };
-    };
-};
-/**
- * Creates a Pikku wire services factory for addon packages.
- * Wire services are created per-request and have access to the HTTP request context.
- *
- * @param func - Wire services factory function that receives singleton services and the wire context
- * @returns The wire services factory function
- *
- * @example
- * ```typescript
- * export const createWireServices = pikkuAddonWireServices(async (services, wire) => {
- *   const authHeader = wire.http?.request?.header('authorization')
- *   return { myService: new MyService(authHeader) }
- * })
- * ```
- */
-export const pikkuAddonWireServices = (func) => {
-    return ((services, wire) => {
-        const typedVariables = new TypedVariablesService(services.variables);
-        const typedSecrets = new TypedSecretService(services.secrets);
-        return func({ ...services, variables: typedVariables, secrets: typedSecrets }, wire);
-    });
-};
-//# sourceMappingURL=pikku-addon-types.gen.js.map

package/dist/.pikku/addon/pikku-addon-types.gen.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"pikku-addon-types.gen.js","sourceRoot":"","sources":["../../../.pikku/addon/pikku-addon-types.gen.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;GAEG;AAOH,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAA;AACpE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAA;AAgB3E;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,IAAqD,EAC/B,EAAE;IACxB,OAAO,CAAC,KAAK,EAAE,UAAe,EAAE,gBAA6C,EAAmB,EAAE;QAChG,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,gBAAgB,IAAI,EAAE,CAAiC,CAAA;QAChG,OAAO,IAAI,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,IAAI,kBAAkB,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,qBAAqB,CAAC,SAAS,CAAC,EAAsB,CAAC,CAAA;IACzI,CAAC,CAAoC,CAAA;AACvC,CAAC,CAAA;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAChC,IAAgE,EAChE,EAAE;IACF,OAAO,KAAK,EAAE,MAAc,EAAE,gBAA6C,EAAsC,EAAE;QACjH,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,gBAAgB,IAAI,EAAE,CAAiC,CAAA;QACvG,MAAM,cAAc,GAAG,IAAI,qBAAqB,CAAC,SAAS,CAAC,CAAA;QAC3D,MAAM,YAAY,GAAG,IAAI,kBAAkB,CAAC,OAAO,CAAC,CAAA;QACpD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,EAAE,GAAG,gBAAgB,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,YAAY,EAAsB,CAAC,CAAA;QACxI,OAAO;YACL,MAAM;YACN,MAAM;YACN,MAAM;YACN,SAAS,EAAE,cAAc;YACzB,OAAO,EAAE,YAAY;YACrB,GAAG,MAAM;SAC8B,CAAA;IAC3C,CAAC,CAAA;AACH,CAAC,CAAA;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,IAAmF,EACnF,EAAE;IACF,OAAO,CAAC,CAAC,QAAa,EAAE,IAAe,EAAE,EAAE;QACzC,MAAM,cAAc,GAAG,IAAI,qBAAqB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAA;QACpE,MAAM,YAAY,GAAG,IAAI,kBAAkB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;QAC7D,OAAO,IAAI,CAAC,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,YAAY,EAAsB,EAAE,IAAI,CAAC,CAAA;IAC1G,CAAC,CAAQ,CAAA;AACX,CAAC,CAAA"}

package/dist/.pikku/agent/index.d.ts

@@ -1,8 +0,0 @@
-/**
- * This file was generated by @pikku/cli@0.12.105
- */
-/**
- * Subpath entry — `#pikku/agent` resolves here.
- */
-export * from './pikku-agent-types.gen.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/.pikku/agent/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../.pikku/agent/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;GAEG;AAEH,cAAc,4BAA4B,CAAA"}

package/dist/.pikku/agent/index.js

@@ -1,8 +0,0 @@
-/**
- * This file was generated by @pikku/cli@0.12.105
- */
-/**
- * Subpath entry — `#pikku/agent` resolves here.
- */
-export * from './pikku-agent-types.gen.js';
-//# sourceMappingURL=index.js.map

package/dist/.pikku/agent/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../.pikku/agent/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;GAEG;AAEH,cAAc,4BAA4B,CAAA"}

package/dist/.pikku/agent/pikku-agent-map.gen.d.ts

@@ -1,4 +0,0 @@
-/**
- * This file was generated by @pikku/cli@0.12.105
- */
-export type AgentMap = {}

package/dist/.pikku/agent/pikku-agent-types.gen.d.ts

@@ -1,54 +0,0 @@
-/**
- * This file was generated by @pikku/cli@0.12.105
- */
-import { CoreAgent } from '@pikku/core/agent';
-import { pikkuAgentScorer as corePikkuAgentScorer, pikkuAgentJudge as corePikkuAgentJudge } from '@pikku/core/agent-scorer';
-import type { Services, PikkuFunctionConfig } from '../function/pikku-function-types.gen.js';
-import type { PikkuPermission } from '../auth/pikku-auth-types.gen.js';
-import type { PikkuMiddleware } from '../middleware/pikku-middleware-types.gen.js';
-import type { StandardSchemaV1 } from '@standard-schema/spec';
-import type { AgentMemoryConfig, AgentInput } from '@pikku/core/agent';
-import type { AgentMap } from './pikku-agent-map.gen.d.js';
-import type { ScopeId } from '../scopes/pikku-scopes.gen.js';
-import type { ScorerName } from './pikku-scorer-names.gen.d.js';
-type AgentConfig<InputSchema extends StandardSchemaV1 | undefined = undefined, OutputSchema extends StandardSchemaV1 | undefined = undefined> = Omit<CoreAgent<PikkuPermission, PikkuMiddleware, ScopeId, ScorerName>, 'tools' | 'agents' | 'workflows' | 'memory' | 'input' | 'output'> & {
-    input?: InputSchema;
-    output?: OutputSchema;
-    memory?: Omit<AgentMemoryConfig, 'workingMemory'> & {
-        workingMemory?: StandardSchemaV1;
-    };
-    tools?: object[];
-    agents?: AgentConfig<StandardSchemaV1 | undefined, StandardSchemaV1 | undefined>[];
-    workflows?: object[];
-};
-export declare const pikkuAgent: <InputSchema extends StandardSchemaV1 | undefined = undefined, OutputSchema extends StandardSchemaV1 | undefined = undefined>(agent: AgentConfig<InputSchema, OutputSchema>) => AgentConfig<InputSchema, OutputSchema>;
-export declare const pikkuAgentScorer: (config: Parameters<typeof corePikkuAgentScorer<Services>>[0]) => import("@pikku/core/agent-scorer").PikkuAgentScorer<Services>;
-export declare const pikkuAgentJudge: (config: Parameters<typeof corePikkuAgentJudge<Services>>[0]) => import("@pikku/core/agent-scorer").PikkuAgentScorer<Services>;
-export declare const agent: <Name extends keyof AgentMap>(agentName: Name) => PikkuFunctionConfig<AgentInput, {
-    runId: string;
-    result: AgentMap[Name]["output"];
-    usage: {
-        inputTokens: number;
-        outputTokens: number;
-    };
-}, "session" | "rpc">;
-export declare const agentStream: <Name extends keyof AgentMap>(agentName?: Name | undefined) => PikkuFunctionConfig<{
-    agentName?: string;
-    message: string;
-    threadId: string;
-    resourceId: string;
-}, void, "session" | "rpc">;
-export declare const agentResume: () => PikkuFunctionConfig<{
-    runId: string;
-    toolCallId: string;
-    approved: boolean;
-}, void, "session" | "rpc">;
-export declare const agentApprove: <Name extends keyof AgentMap>(agentName: Name) => PikkuFunctionConfig<{
-    runId: string;
-    approvals: {
-        toolCallId: string;
-        approved: boolean;
-    }[];
-}, unknown, "session" | "rpc">;
-export {};
-//# sourceMappingURL=pikku-agent-types.gen.d.ts.map

package/dist/.pikku/agent/pikku-agent-types.gen.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"pikku-agent-types.gen.d.ts","sourceRoot":"","sources":["../../../.pikku/agent/pikku-agent-types.gen.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAO7C,OAAO,EACL,gBAAgB,IAAI,oBAAoB,EACxC,eAAe,IAAI,mBAAmB,EACvC,MAAM,0BAA0B,CAAA;AACjC,OAAO,KAAK,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAA;AAC5F,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAA;AACtE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6CAA6C,CAAA;AAClF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAC7D,OAAO,KAAK,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AACtE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,4BAA4B,CAAA;AAC1D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAA;AAC5D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAA;AAE/D,KAAK,WAAW,CACd,WAAW,SAAS,gBAAgB,GAAG,SAAS,GAAG,SAAS,EAC5D,YAAY,SAAS,gBAAgB,GAAG,SAAS,GAAG,SAAS,IAC3D,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,eAAe,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,WAAW,GAAG,QAAQ,GAAG,OAAO,GAAG,QAAQ,CAAC,GAAG;IAC7I,KAAK,CAAC,EAAE,WAAW,CAAA;IACnB,MAAM,CAAC,EAAE,YAAY,CAAA;IACrB,MAAM,CAAC,EAAE,IAAI,CAAC,iBAAiB,EAAE,eAAe,CAAC,GAAG;QAAE,aAAa,CAAC,EAAE,gBAAgB,CAAA;KAAE,CAAA;IACxF,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;IAChB,MAAM,CAAC,EAAE,WAAW,CAAC,gBAAgB,GAAG,SAAS,EAAE,gBAAgB,GAAG,SAAS,CAAC,EAAE,CAAA;IAClF,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;CACrB,CAAA;AAED,eAAO,MAAM,UAAU,GACrB,WAAW,SAAS,gBAAgB,GAAG,SAAS,GAAG,SAAS,EAC5D,YAAY,SAAS,gBAAgB,GAAG,SAAS,GAAG,SAAS,EAE7D,OAAO,WAAW,CAAC,WAAW,EAAE,YAAY,CAAC,2CAG9C,CAAA;AAED,eAAO,MAAM,gBAAgB,GAC3B,QAAQ,UAAU,CAAC,OAAO,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,kEACnB,CAAA;AAE3C,eAAO,MAAM,eAAe,GAC1B,QAAQ,UAAU,CAAC,OAAO,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,kEACnB,CAAA;AAI1C,eAAO,MAAM,KAAK,GAAI,IAAI,SAAS,MAAM,QAAQ,EAC/C,WAAW,IAAI,KAEqD,mBAAmB,CACrF,UAAU,EACV;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;IAAC,KAAK,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,EACzG,SAAS,GAAG,KAAK,CAEpB,CAAA;AAED,eAAO,MAAM,WAAW,GAAI,IAAI,SAAS,MAAM,QAAQ,EACrD,4BAAgB,KAE0D,mBAAmB,CAC3F;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,EAC7E,IAAI,EACJ,SAAS,GAAG,KAAK,CAEpB,CAAA;AAED,eAAO,MAAM,WAAW,QACM,mBAAmB,CAC7C;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,EACxD,IAAI,EACJ,SAAS,GAAG,KAAK,CAEpB,CAAA;AAED,eAAO,MAAM,YAAY,GAAI,IAAI,SAAS,MAAM,QAAQ,EACtD,WAAW,IAAI,KAE4D,mBAAmB,CAC5F;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,EAAE,CAAA;CAAE,EACzE,OAAO,EACP,SAAS,GAAG,KAAK,CAEpB,CAAA"}

package/dist/.pikku/agent/pikku-agent-types.gen.js

@@ -1,20 +0,0 @@
-import { agent as coreAgent, agentStream as coreAgentStream, agentResume as coreAgentResume, agentApprove as coreAgentApprove, } from '@pikku/core/agent';
-import { pikkuAgentScorer as corePikkuAgentScorer, pikkuAgentJudge as corePikkuAgentJudge, } from '@pikku/core/agent-scorer';
-export const pikkuAgent = (agent) => {
-    return agent;
-};
-export const pikkuAgentScorer = (config) => corePikkuAgentScorer(config);
-export const pikkuAgentJudge = (config) => corePikkuAgentJudge(config);
-export const agent = (agentName) => {
-    return coreAgent(agentName);
-};
-export const agentStream = (agentName) => {
-    return coreAgentStream(agentName);
-};
-export const agentResume = () => {
-    return coreAgentResume();
-};
-export const agentApprove = (agentName) => {
-    return coreAgentApprove(agentName);
-};
-//# sourceMappingURL=pikku-agent-types.gen.js.map

package/dist/.pikku/agent/pikku-agent-types.gen.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"pikku-agent-types.gen.js","sourceRoot":"","sources":["../../../.pikku/agent/pikku-agent-types.gen.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,KAAK,IAAI,SAAS,EAClB,WAAW,IAAI,eAAe,EAC9B,WAAW,IAAI,eAAe,EAC9B,YAAY,IAAI,gBAAgB,GACjC,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EACL,gBAAgB,IAAI,oBAAoB,EACxC,eAAe,IAAI,mBAAmB,GACvC,MAAM,0BAA0B,CAAA;AAsBjC,MAAM,CAAC,MAAM,UAAU,GAAG,CAIxB,KAA6C,EAC7C,EAAE;IACF,OAAO,KAAK,CAAA;AACd,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,MAA4D,EAC5D,EAAE,CAAC,oBAAoB,CAAW,MAAM,CAAC,CAAA;AAE3C,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,MAA2D,EAC3D,EAAE,CAAC,mBAAmB,CAAW,MAAM,CAAC,CAAA;AAI1C,MAAM,CAAC,MAAM,KAAK,GAAG,CACnB,SAAe,EACf,EAAE;IACF,OAAO,SAAS,CAAW,SAAoC,CAI9D,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,WAAW,GAAG,CACzB,SAAgB,EAChB,EAAE;IACF,OAAO,eAAe,CAAW,SAAoC,CAIpE,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,WAAW,GAAG,GAAG,EAAE;IAC9B,OAAO,eAAe,EAIrB,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,SAAe,EACf,EAAE;IACF,OAAO,gBAAgB,CAAW,SAAoC,CAIrE,CAAA;AACH,CAAC,CAAA"}

package/dist/.pikku/agent/pikku-model-aliases.gen.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=pikku-model-aliases.gen.d.ts.map

package/dist/.pikku/agent/pikku-model-aliases.gen.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"pikku-model-aliases.gen.d.ts","sourceRoot":"","sources":["../../../.pikku/agent/pikku-model-aliases.gen.ts"],"names":[],"mappings":""}

package/dist/.pikku/agent/pikku-model-aliases.gen.js

@@ -1,6 +0,0 @@
-/**
- * This file was generated by @pikku/cli@0.12.105
- */
-import { pikkuState } from '@pikku/core/state';
-pikkuState('@pikku/addon-console', 'agent', 'modelAliases', {});
-//# sourceMappingURL=pikku-model-aliases.gen.js.map

package/dist/.pikku/agent/pikku-model-aliases.gen.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"pikku-model-aliases.gen.js","sourceRoot":"","sources":["../../../.pikku/agent/pikku-model-aliases.gen.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAE9C,UAAU,CAAC,sBAAsB,EAAE,OAAO,EAAE,cAAc,EAAE,EAAE,CAAC,CAAA"}

package/dist/.pikku/agent/pikku-scorer-names.gen.d.ts

@@ -1,8 +0,0 @@
-/**
- * This file was generated by @pikku/cli@0.12.105
- */
-/**
- * The AI scorers declared in this project.
- */
-
-export type ScorerName = never

package/dist/.pikku/auth/auth.types.d.ts

@@ -1,5 +0,0 @@
-/**
- * This file was generated by @pikku/cli@0.12.105
- */
-export { pikkuBetterAuth } from '@pikku/better-auth';
-//# sourceMappingURL=auth.types.d.ts.map

package/dist/.pikku/auth/auth.types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.types.d.ts","sourceRoot":"","sources":["../../../.pikku/auth/auth.types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA"}

package/dist/.pikku/auth/auth.types.js

@@ -1,6 +0,0 @@
-/**
- * This file was generated by @pikku/cli@0.12.105
- */
-// AUTO-GENERATED by pikku CLI (bootstrap stub) — replaced by the typed wrapper after inspection
-export { pikkuBetterAuth } from '@pikku/better-auth';
-//# sourceMappingURL=auth.types.js.map

package/dist/.pikku/auth/auth.types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.types.js","sourceRoot":"","sources":["../../../.pikku/auth/auth.types.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,gGAAgG;AAEhG,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA"}

package/dist/.pikku/auth/index.d.ts

@@ -1,9 +0,0 @@
-/**
- * This file was generated by @pikku/cli@0.12.105
- */
-/**
- * Subpath entry — `#pikku/auth` resolves here.
- */
-export * from './pikku-auth-types.gen.js';
-export * from './auth.types.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/.pikku/auth/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../.pikku/auth/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;GAEG;AAEH,cAAc,2BAA2B,CAAA;AACzC,cAAc,iBAAiB,CAAA"}

package/dist/.pikku/auth/index.js

@@ -1,9 +0,0 @@
-/**
- * This file was generated by @pikku/cli@0.12.105
- */
-/**
- * Subpath entry — `#pikku/auth` resolves here.
- */
-export * from './pikku-auth-types.gen.js';
-export * from './auth.types.js';
-//# sourceMappingURL=index.js.map

package/dist/.pikku/auth/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../.pikku/auth/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;GAEG;AAEH,cAAc,2BAA2B,CAAA;AACzC,cAAc,iBAAiB,CAAA"}

package/dist/.pikku/auth/pikku-auth-types.gen.d.ts

@@ -1,119 +0,0 @@
-/**
- * This file was generated by @pikku/cli@0.12.105
- */
-/**
- * Permission, auth gate and credential definitions
- */
-import type { PikkuWire, SecretlessServices } from '@pikku/core/types';
-import type { CorePermissionGroup, CorePikkuAuth, CorePikkuAuthConfig, CorePikkuPermission } from '@pikku/core/function';
-import type { Services, Session, SingletonServices, WiredServices, WiredSingletonServices } from '../function/pikku-function-types.gen.js';
-export { defineCredential } from '@pikku/core/credential';
-/** `WiredSingletonServices` without `secrets`, for auth gates. */
-type WiredAuthServices = SecretlessServices<WiredSingletonServices>;
-/**
- * Type-safe API permission definition that integrates with your application's session type.
- * Use this to define authorization logic for your API endpoints.
- *
- * @template In - The input type that the permission check will receive
- * @template RequiredServices - The services required for this permission check
- */
-export type PikkuPermission<In = unknown, RequiredServices extends SecretlessServices<Services> = WiredServices> = CorePikkuPermission<In, RequiredServices, PikkuWire<In, never, false, Session>>;
-/**
- * Configuration object for creating a permission with metadata
- */
-type PikkuPermissionConfig<In = unknown, RequiredServices extends SecretlessServices<Services> = WiredServices> = {
-    /** The permission function */
-    func: PikkuPermission<In, RequiredServices>;
-    /** Optional human-readable name for the permission */
-    name?: string;
-    /** Optional description of what the permission checks */
-    description?: string;
-};
-/**
- * Factory function for creating permissions with tree-shaking support.
- * Supports both direct function and configuration object syntax.
- *
- * @example
- * ```typescript
- * // Direct function syntax
- * const permission = pikkuPermission(async ({ logger }, data, { session }) => {
- *   const session = await session?.get()
- *   return session?.role === 'admin'
- * })
- *
- * // Configuration object syntax with metadata
- * const adminPermission = pikkuPermission({
- *   name: 'Admin Permission',
- *   description: 'Checks if user has admin role',
- *   func: async ({ logger }, data, { session }) => {
- *     const session = await session?.get()
- *     return session?.role === 'admin'
- *   }
- * })
- * ```
- */
-export declare const pikkuPermission: <In>(permission: PikkuPermission<In> | PikkuPermissionConfig<In>) => PikkuPermission<In>;
-/**
- * Type-safe auth-only permission that only needs services and session.
- * Use this for upfront authorization gates (MCP tools, AI agents, workflows)
- * where request data isn't available yet.
- *
- * @template RequiredServices - The services required for this auth check
- */
-type PikkuAuth<RequiredServices extends SecretlessServices<SingletonServices> = WiredAuthServices> = CorePikkuAuth<RequiredServices, Session>;
-/**
- * Configuration object for creating an auth permission with metadata
- */
-type PikkuAuthConfig<RequiredServices extends SecretlessServices<SingletonServices> = WiredAuthServices> = CorePikkuAuthConfig<RequiredServices, Session>;
-/**
- * Factory function for creating auth-only permissions with tree-shaking support.
- * Auth permissions only receive services and session (no request data),
- * making them evaluable before request data is available.
- *
- * @example
- * \`\`\`typescript
- * const isAuthenticated = pikkuAuth(async ({ logger }, session) => {
- *   return !!session
- * })
- *
- * const isAdmin = pikkuAuth({
- *   name: 'Admin Auth',
- *   description: 'Checks if user is an admin',
- *   func: async ({ logger }, session) => {
- *     return session?.role === 'admin'
- *   }
- * })
- * \`\`\`
- */
-export declare const pikkuAuth: <RequiredServices extends SecretlessServices<SingletonServices> = WiredAuthServices>(auth: PikkuAuth<RequiredServices> | PikkuAuthConfig<RequiredServices>) => PikkuPermission<any, any>;
-/**
- * Factory function for creating permission factories
- * Use this when your permission needs configuration/input parameters
- *
- * @example
- * ```typescript
- * export const requireRole = pikkuPermissionFactory<{ role: string }>(({
- *   role
- * }) => {
- *   return pikkuPermission(async ({ logger }, data, { session }) => {
- *     if (!session || session.role !== role) {
- *       logger.warn(`Permission denied: required role '${role}'`)
- *       return false
- *     }
- *     return true
- *   })
- * })
- * ```
- */
-export declare const pikkuPermissionFactory: <In = any>(factory: (input: In) => PikkuPermission<any>) => ((input: In) => PikkuPermission<any>);
-/**
- * Wire-agnostic global permissions. Runs at the top of every wiring's
- * permission resolution — before wire-, tag-, and function-level entries.
- *
- * Resolution order: global -> wire -> tag -> function.
- *
- * @example
- * addGlobalPermission([signedInUser])
- */
-export declare const addGlobalPermission: <In = unknown>(permissions: CorePermissionGroup<PikkuPermission<In>> | PikkuPermission<In>[]) => void;
-//# sourceMappingURL=pikku-auth-types.gen.d.ts.map