@pikku/core 0.12.143 → 0.12.144

package/src/public-surface.json

@@ -1,637 +0,0 @@
-{
-  ".": [],
-  "./types": [],
-  "./middleware": [
-    "ADDON_HEADER",
-    "addGlobalMiddleware",
-    "addGlobalPermission",
-    "addTagMiddleware",
-    "addonScopeCap",
-    "authAPIKey",
-    "authBearer",
-    "authCookie",
-    "cors",
-    "isAllowedOrigin",
-    "pikkuAgentMiddleware",
-    "pikkuChannelMiddleware",
-    "pikkuChannelMiddlewareFactory",
-    "pikkuMiddleware",
-    "pikkuMiddlewareFactory",
-    "pikkuRemoteAuthMiddleware",
-    "remoteJobsSecret",
-    "requireOrigin",
-    "runMiddleware",
-    "telemetryInner",
-    "telemetryOuter",
-    "toOrigin"
-  ],
-  "./function": [
-    "AbandonedError",
-    "PikkuRequest",
-    "addFunction",
-    "checkAuthPermissions",
-    "getAllFunctionNames",
-    "pikkuApprovalDescription",
-    "pikkuAuth",
-    "pikkuPermission",
-    "pikkuPermissionFactory",
-    "runPikkuFunc"
-  ],
-  "./channel": [
-    "ChannelDeploymentService",
-    "ChannelRPCError",
-    "ChannelRPCRegistry",
-    "ChannelStore",
-    "EventHubStore",
-    "PikkuAbstractChannelHandler",
-    "addChannelMiddleware",
-    "combineChannelMiddleware",
-    "defineChannelRoutes",
-    "logChannels",
-    "unsupportedChannelRemote",
-    "wireChannel"
-  ],
-  "./workflow": [
-    "DEFAULT_STEP_LEASE_MS",
-    "DEFAULT_STEP_RETRIES",
-    "PikkuWorkflowService",
-    "WorkflowApprovalForbiddenError",
-    "WorkflowApprovalResolvedError",
-    "WorkflowCancelledException",
-    "WorkflowDispatchException",
-    "WorkflowNotFoundError",
-    "WorkflowRunForbiddenError",
-    "WorkflowRunNotFoundError",
-    "WorkflowStepFunctionMismatchError",
-    "WorkflowStepLeaseExpiredError",
-    "WorkflowStepSupersededError",
-    "WorkflowSuspendedException",
-    "addWorkflow",
-    "assertWorkflowRunOwner",
-    "buildRunTimeline",
-    "createGraph",
-    "deriveInvocationId",
-    "isRef",
-    "isStepLeaseLive",
-    "leaseAttemptsExhausted",
-    "pikkuWorkflowGraph",
-    "reconstructFinalState",
-    "reconstructStateAt",
-    "streamWorkflowRunStatus",
-    "template",
-    "uuidv5"
-  ],
-  "./scenario": [
-    "PikkuScenarioService",
-    "SCENARIO_SURFACES",
-    "ScenarioBrowserUnavailable",
-    "ScenarioHookError",
-    "ScenarioNoSurfaceBinding",
-    "ScenarioNoWitness",
-    "ScenarioUnwitnessedAssertion",
-    "ScenarioVirtualUserRequired",
-    "ScenarioWitnessDisagreement",
-    "addFeature",
-    "composeStepProse",
-    "createCookieJar",
-    "createScenarioRunner",
-    "pollUntil",
-    "renderStepTemplate",
-    "requireScenarioEnv",
-    "resolveFeatureScenarios",
-    "resolveScenarioSurfaces"
-  ],
-  "./scenario/coverage": [
-    "aggregateScenarioCoverageGaps",
-    "readScenarioCoverage"
-  ],
-  "./workflow/timeline": [
-    "buildRunTimeline",
-    "reconstructFinalState",
-    "reconstructStateAt"
-  ],
-  "./workflow/types": [],
-  "./virtual-user/conversation": [
-    "runConversation"
-  ],
-  "./virtual-user": [
-    "APP_SCOPE_ROOT",
-    "DEFAULT_MAX_INTERVAL_MS",
-    "DEFAULT_MIN_INTERVAL_MS",
-    "DISPOSITIONS",
-    "HttpVirtualUser",
-    "IntentStack",
-    "PRODUCTION_DISPOSITION",
-    "STALE_RUN_AFTER_MS",
-    "VIRTUAL_USER_VARIABLES",
-    "appScopeId",
-    "authMount",
-    "buildAppScopeDefinition",
-    "catalogueClassification",
-    "catalogueLookup",
-    "createCookieJar",
-    "createHttpVirtualUsers",
-    "defineVirtualUsers",
-    "deriveCatalogue",
-    "deriveIntents",
-    "dispositionProfile",
-    "executeVirtualUserRun",
-    "inProcessSignIn",
-    "intentsForVirtualUser",
-    "isDue",
-    "isReadOnly",
-    "isRunnableVirtualUser",
-    "logVirtualUserTick",
-    "nextRunAt",
-    "postScenarioJson",
-    "prepareVirtualUserRun",
-    "reachableCatalogue",
-    "readScenarioHttpResponse",
-    "requireVirtualUserRunStore",
-    "requireVirtualUserScheduleStore",
-    "roleMismatchMessage",
-    "runVirtualUser",
-    "runnableVirtualUser",
-    "runnableVirtualUsers",
-    "serializeVirtualUserRun",
-    "serializeVirtualUserSchedule",
-    "serializeVirtualUserSteps",
-    "startVirtualUserRun",
-    "statementSignIn",
-    "tickVirtualUserSchedules",
-    "unreachableCatalogue",
-    "validateAndBuildVirtualUsersMeta",
-    "verifyVirtualUserRoles",
-    "virtualUserEmail",
-    "virtualUserEmails",
-    "virtualUserEnvironmentErrors",
-    "virtualUserEnvironmentRefusal",
-    "virtualUserScheduleRunInput",
-    "virtualUserScopes",
-    "virtualUserTarget",
-    "writeVirtualUserSchedule"
-  ],
-  "./channel/local": [
-    "LocalEventHubService",
-    "PikkuLocalChannelHandler",
-    "runLocalChannel"
-  ],
-  "./channel/serverless": [
-    "runChannelConnect",
-    "runChannelDisconnect",
-    "runChannelMessage"
-  ],
-  "./http": [
-    "DEFAULT_MAX_BODY_SIZE",
-    "PikkuFetchHTTPRequest",
-    "PikkuFetchHTTPResponse",
-    "addHTTPMiddleware",
-    "applyWebResponse",
-    "defineHTTPRoutes",
-    "fetch",
-    "fetchData",
-    "httpRouter",
-    "logRoutes",
-    "toWebRequest",
-    "wireHTTP",
-    "wireHTTPRoutes"
-  ],
-  "./remote": [
-    "buildRemoteHeaders"
-  ],
-  "./queue": [
-    "QueueJobDiscardedError",
-    "QueueJobFailedError",
-    "SignedQueueService",
-    "registerQueueWorkers",
-    "runQueueJob",
-    "wireQueueWorker"
-  ],
-  "./scheduler": [
-    "ScheduledTaskNotFoundError",
-    "getScheduledTasks",
-    "logSchedulers",
-    "runScheduledTask",
-    "wireScheduler"
-  ],
-  "./trigger": [
-    "PIKKU_INCOMING_WEBHOOK_QUEUE_NAME",
-    "PikkuTriggerService",
-    "declaredTriggerSources",
-    "disableTriggerSource",
-    "dispatchWebhookSourceJob",
-    "enableTriggerSource",
-    "receiveWebhookSourceRequest",
-    "reconcileTriggerSources",
-    "reconcileWebhookRegistrations",
-    "runWebhookSourceLifecycle",
-    "subscribedWebhookEvents",
-    "teardownTriggerSources",
-    "webhookSecretCredentialName",
-    "wireTrigger",
-    "wireTriggerSource",
-    "wireTriggerWebhookSource"
-  ],
-  "./rpc": [
-    "PikkuRPCService",
-    "RPCNotFoundError",
-    "RemoteAddonConfigError",
-    "RemoteAddonRequestError",
-    "rpcService"
-  ],
-  "./addon": [
-    "RemoteAddonAuthError",
-    "defineScreens",
-    "resolveRemoteAddonToken",
-    "wireAddon",
-    "wireRemoteAddon"
-  ],
-  "./safe-fetch": [
-    "assertFetchableUrl",
-    "isPrivateHost",
-    "safeFetch",
-    "setDefaultHostResolver"
-  ],
-  "./node-host-resolver": [
-    "installNodeHostResolver",
-    "nodeHostResolver"
-  ],
-  "./mcp": [
-    "MCPEndpointRegistry",
-    "MCPError",
-    "getMCPPromptsMeta",
-    "getMCPResourcesMeta",
-    "getMCPToolsMeta",
-    "mcpEveryTargetRequiresSession",
-    "mcpResolveWireName",
-    "mcpTargetRequiresSession",
-    "mcpWireName",
-    "runMCPPrompt",
-    "runMCPResource",
-    "runMCPTool",
-    "wireMCPPrompt",
-    "wireMCPResource"
-  ],
-  "./agent": [
-    "AgentInterruptedError",
-    "NoSpeechDetectedError",
-    "SPOKEN_TRANSCRIPT",
-    "SPOKEN_TURN",
-    "ToolApprovalRequired",
-    "ToolCredentialRequired",
-    "addAgent",
-    "agent",
-    "agentApprove",
-    "agentCallOptions",
-    "agentInterrupt",
-    "agentResume",
-    "agentStream",
-    "canAccessThread",
-    "interruptAgent",
-    "isOwnedByPrincipal",
-    "resolveModelAlias",
-    "resumeAgent",
-    "resumeAgentSync",
-    "runAgent",
-    "signalRunInterrupt",
-    "streamAgent",
-    "threadOwnerConstraint",
-    "unspeakableScripts",
-    "voiceForText",
-    "voiceInput",
-    "voiceOutput",
-    "wrapChannelWithAGUI"
-  ],
-  "./agent-scorer": [
-    "addAgentScorer",
-    "enableScoreSnapshots",
-    "getAgentScorers",
-    "getAgentScorersMeta",
-    "getScoreSnapshot",
-    "gradeRun",
-    "pikkuAgentJudge",
-    "pikkuAgentScorer",
-    "wireAgentScorerQueueWorkers"
-  ],
-  "./analytics": [
-    "LoggerAnalyticsService",
-    "anonymousAnalyticsIdentity",
-    "composeAnalyticsIdentity",
-    "cookieAnalyticsIdentity",
-    "createInvocationAnalytics",
-    "defineAnalyticsEvents",
-    "fanOutAnalytics",
-    "flattenAnalyticsEvent",
-    "mintCookie",
-    "randomDigits"
-  ],
-  "./gateway": [
-    "createListenerMessageHandler",
-    "resolveGatewayAdapter",
-    "wireGateway"
-  ],
-  "./cli": [
-    "CLIError",
-    "defineCLICommands",
-    "executeCLI",
-    "formatCLIError",
-    "generateCommandHelp",
-    "parseCLIArguments",
-    "pikkuCLIRender",
-    "runCLICommand",
-    "wantsStackTrace",
-    "wireCLI"
-  ],
-  "./cli/command-parser": [
-    "generateCommandHelp",
-    "parseCLIArguments"
-  ],
-  "./cli/channel": [
-    "executeCLIViaChannel",
-    "executeRawCLIViaChannel",
-    "handleRawCLI"
-  ],
-  "./node": [],
-  "./credential": [
-    "buildCredentialResolutions",
-    "credentialOverrideAliases",
-    "defineCredential",
-    "validateAndBuildCredentialDefinitionsMeta"
-  ],
-  "./scope": [
-    "declareScopes",
-    "defineScope",
-    "flattenScopeDefinitions",
-    "hasScopes",
-    "intersectScopes",
-    "validateAndBuildScopeDefinitionsMeta",
-    "verifyScopes"
-  ],
-  "./role": [
-    "defineSystemRole",
-    "flattenSystemRoleDefinitions",
-    "validateAndBuildSystemRoleDefinitionsMeta"
-  ],
-  "./secret": [
-    "defineSecret",
-    "deriveOAuth2AppSecrets",
-    "validateAndBuildSecretDefinitionsMeta"
-  ],
-  "./variable": [
-    "defineVariable",
-    "validateAndBuildVariableDefinitionsMeta"
-  ],
-  "./webhook": [
-    "defineOutgoingWebhook"
-  ],
-  "./oauth2": [],
-  "./errors": [
-    "AIProviderAuthError",
-    "AIProviderNotConfiguredError",
-    "BadGatewayError",
-    "BadRequestError",
-    "ConflictError",
-    "CredentialRejectedError",
-    "ExpectationFailedError",
-    "FeatureUnavailableError",
-    "ForbiddenError",
-    "GatewayTimeoutError",
-    "GoneError",
-    "HTTPVersionNotSupportedError",
-    "InternalServerError",
-    "InvalidMiddlewareWireError",
-    "InvalidOriginError",
-    "InvalidSessionError",
-    "LengthRequiredError",
-    "LocalEnvironmentOnlyError",
-    "LockedError",
-    "MaxComputeTimeReachedError",
-    "MethodNotAllowedError",
-    "MissingCredentialError",
-    "MissingSchemaError",
-    "MissingScopeError",
-    "MissingServiceError",
-    "MissingSessionError",
-    "NotAcceptableError",
-    "NotFoundError",
-    "NotImplementedError",
-    "PayloadTooLargeError",
-    "PaymentRequiredError",
-    "PikkuError",
-    "PikkuMissingMetaError",
-    "PreconditionFailedError",
-    "ProxyAuthenticationRequiredError",
-    "RangeNotSatisfiableError",
-    "ReadonlySessionError",
-    "RequestTimeoutError",
-    "ServiceUnavailableError",
-    "SystemRoleImmutableError",
-    "SystemRoleShadowedError",
-    "TooManyRequestsError",
-    "URITooLongError",
-    "UnauthorizedError",
-    "UnprocessableContentError",
-    "UnsupportedMediaTypeError",
-    "WeakKeyMaterialError",
-    "addError",
-    "isExpectedError"
-  ],
-  "./services": [
-    "ConsoleLogger",
-    "DEFAULT_WEBHOOK_RETRIES",
-    "InMemoryAgentRunStateService",
-    "InMemoryLeaseService",
-    "InMemoryQueueService",
-    "InMemorySessionStore",
-    "InMemoryTriggerService",
-    "InMemoryTriggerSourceStore",
-    "InMemoryWorkflowService",
-    "IncomingWebhookService",
-    "JsonConsoleLogger",
-    "LeaseLostError",
-    "LeaseTakenError",
-    "LocalCredentialService",
-    "LocalEmailService",
-    "LocalGatewayService",
-    "LocalSecretService",
-    "LocalVariablesService",
-    "LogLevel",
-    "NoopAuditService",
-    "PIKKU_OUTGOING_WEBHOOK_QUEUE_NAME",
-    "PikkuCredentialWireService",
-    "PikkuSessionService",
-    "QueueWebhookService",
-    "REMOTE_JOBS_SECRET_HEADER",
-    "REMOTE_JOBS_SECRET_VARIABLE",
-    "REMOTE_QUEUE_JOB_PATH",
-    "REMOTE_SCHEDULER_JOB_PATH",
-    "SchedulerService",
-    "ScopedContentService",
-    "ScopedCredentialService",
-    "ScopedSecretService",
-    "SecretAccessDeniedError",
-    "SecretHostNotAllowedError",
-    "StubTracker",
-    "TypedCredentialService",
-    "TypedSecretService",
-    "TypedVariablesService",
-    "VIRTUAL_USER_IN_PROCESS_ENDPOINT",
-    "VIRTUAL_USER_SIGNING_KEY_VARIABLE",
-    "VIRTUAL_USER_STATEMENT_ALGORITHM",
-    "VIRTUAL_USER_STATEMENT_MAX_TTL_SECONDS",
-    "VIRTUAL_USER_STATEMENT_TTL_SECONDS",
-    "VIRTUAL_USER_VERIFY_KEY_VARIABLE",
-    "VirtualUserStatementError",
-    "WebhookService",
-    "assertSecretAllowedForHost",
-    "createInvocationAudit",
-    "createMiddlewareSessionWireProps",
-    "createStubProxy",
-    "getStubTracker",
-    "holdLease",
-    "isTestRun",
-    "pikkuRemoteQueueJobFunc",
-    "pikkuRemoteScheduledJobFunc",
-    "pikkuWebhookWorkerFunc",
-    "renderEmail",
-    "spy",
-    "stub",
-    "withoutSecrets"
-  ],
-  "./flag": [
-    "CachedFlagSource",
-    "assertFeatureAvailable",
-    "bucketOf",
-    "compiledFallbackSnapshot",
-    "defineFeatureFlags",
-    "flattenFeatureFlagDefinitions",
-    "resolveFlag",
-    "resolveFlagForClient",
-    "resolveFlagsForClient",
-    "subjectIdOf",
-    "validateAndBuildFeatureFlagDefinitionsMeta"
-  ],
-  "./services/local-meta": [
-    "LocalMetaService"
-  ],
-  "./services/v8-coverage": [
-    "V8CoverageService"
-  ],
-  "./services/istanbul-coverage": [
-    "IstanbulCoverageService"
-  ],
-  "./services/local-content": [
-    "CONTENT_VISIBILITIES",
-    "LocalContent",
-    "PUBLIC_URL_SEGMENT",
-    "UploadTooLargeError",
-    "parseContentSizeLimit",
-    "parseContentUrlPath",
-    "resolveContentRequestTarget",
-    "resolveVisibilityPath",
-    "signedContentPath",
-    "streamUploadToFile"
-  ],
-  "./services/local-content-request-handler": [
-    "createLocalContentRequestHandler",
-    "verifySignedContentRequest"
-  ],
-  "./services/temporary-file-service": [
-    "TemporaryFileInstance",
-    "TemporaryFileService"
-  ],
-  "./services/file-scenario-run-store": [
-    "FileScenarioRunStore",
-    "scenarioArtifactContentType",
-    "scenarioRunSummary"
-  ],
-  "./crypto-utils": [
-    "MIN_KEY_MATERIAL_LENGTH",
-    "REMOTE_SESSION_INFO",
-    "assertStrongKeyMaterial",
-    "decodeBase64UrlText",
-    "decryptJSON",
-    "decryptWithKeyMaterial",
-    "deriveKEK",
-    "encodeBase64UrlText",
-    "encryptJSON",
-    "encryptWithKeyMaterial",
-    "envelopeDecrypt",
-    "envelopeEncrypt",
-    "envelopeRewrap",
-    "generateDEK",
-    "generateKEKSalt",
-    "signWithKeyMaterial",
-    "unwrapDEK",
-    "verifyWithKeyMaterial",
-    "wrapDEK"
-  ],
-  "./hmac": [
-    "hmacDigest",
-    "hmacSha256Hex",
-    "timingSafeStringEqual",
-    "verifyHmacSignature",
-    "verifyPublicKeySignature"
-  ],
-  "./state": [
-    "addPackageServiceFactories",
-    "getAllPackageStates",
-    "getCreateWireServices",
-    "getSingletonServices",
-    "initializePikkuState",
-    "pikkuState",
-    "resetPikkuState",
-    "setSingletonServices"
-  ],
-  "./classification": [
-    "DEFAULT_KEY_ID",
-    "REDACTED",
-    "SecretCoercionError",
-    "SecretValue",
-    "createSecretValue",
-    "hashToken",
-    "isSecretValue",
-    "unsafeAsHashed",
-    "unsafeAsSealed",
-    "unsafeAsWrapped"
-  ],
-  "./utils": [
-    "closeWireServices",
-    "createWeakUID",
-    "formatVersionedId",
-    "freezeDedupe",
-    "getDurationInMilliseconds",
-    "getRelativeTimeOffset",
-    "getRelativeTimeOffsetFromNow",
-    "getTagGroups",
-    "isSerializable",
-    "isVersionedId",
-    "parseDurationString",
-    "parseJson",
-    "parseVersionedId",
-    "pikkuServerLifecycle",
-    "stopSingletonServices"
-  ],
-  "./lifecycle": [
-    "onShutdownSignals",
-    "pikkuServerLifecycle",
-    "stopSingletonServices"
-  ],
-  "./schema": [
-    "addSchema",
-    "applyDefaultsFromSchema",
-    "coerceTopLevelDataFromSchema",
-    "compileAllSchemas",
-    "getSchema",
-    "validateSchema"
-  ],
-  "./testing": [
-    "clearPikkuRuntimeState",
-    "defineServiceTests"
-  ],
-  "./dev": [
-    "pikkuDevReloader",
-    "reconcileAddonRegistry",
-    "reloadGeneratedMeta"
-  ]
-}

package/src/public-surface.json.README

@@ -1,43 +0,0 @@
-`public-surface.json` pins every runtime export reachable through a
-`package.json` `exports` subpath. `public-surface.test.ts` fails when the two
-disagree, so widening the API is a visible diff rather than a side effect of an
-`export *`.
-
-Types are not pinned: they are erased before the test can enumerate them.
-
-A wildcard subpath is expanded to the files it matches, so it is pinned as one
-entry per area rather than as a pattern — otherwise a new sub-barrel joins the
-published API without a diff.
-
-Regenerate after an intentional change, from `packages/core`:
-
-```bash
-cat > src/__gen-surface.mts <<'EOF'
-import { readdirSync, readFileSync, writeFileSync } from 'node:fs'
-import { resolve } from 'node:path'
-import { pathToFileURL } from 'node:url'
-
-const pkg = JSON.parse(readFileSync('package.json', 'utf-8'))
-const expand = ([sub, dist]: [string, string]): [string, string][] => {
-  if (!sub.includes('*')) return [[sub, dist]]
-  const [prefix] = dist.split('*') as [string]
-  return readdirSync(resolve(prefix.replace('./dist/', './src/')), {
-    recursive: true,
-    encoding: 'utf-8',
-  })
-    .filter((f) => f.endsWith('.ts') && !f.endsWith('.d.ts'))
-    .map((f) => f.slice(0, -'.ts'.length))
-    .sort()
-    .map((area) => [sub.replace('*', area), dist.replace('*', area)])
-}
-const surface: Record<string, string[]> = {}
-for (const [sub, dist] of Object.entries(
-  pkg.exports as Record<string, string>
-).flatMap(expand)) {
-  const src = pathToFileURL(resolve(dist.replace('./dist/', './src/'))).href
-  surface[sub] = Object.keys(await import(src)).sort()
-}
-writeFileSync('src/public-surface.json', JSON.stringify(surface, null, 2) + '\n')
-EOF
-npx tsx src/__gen-surface.mts && rm src/__gen-surface.mts
-```