@pikku/core 0.12.62 → 0.12.64

package/src/wirings/ai-agent/voice-input.ts

@@ -1,5 +1,6 @@
 import type { AIAgentRunnerService } from '../../services/ai-agent-runner-service.js'
 import { pikkuAIMiddleware } from '../../types/core.types.js'
+import { safeFetch } from '../../utils/safe-fetch.js'
 import type { AIContentPart } from './ai-agent.types.js'
 
 function base64ToUint8Array(base64: string): Uint8Array {
@@ -13,45 +14,15 @@ function base64ToUint8Array(base64: string): Uint8Array {
 
 const MAX_AUDIO_SIZE = 50 * 1024 * 1024
 
-// Portable SSRF guard: @pikku/core runs in edge runtimes (CF Workers) with no
-// Node `dns`, so we cannot resolve hostnames to check for private targets.
-// Reject the obvious internal literals; callers wanting stricter control pass
-// an explicit `allowedAudioHosts` allowlist. (Does not defend against a public
-// hostname that resolves to a private IP / DNS rebinding — out of reach here.)
-function isPrivateHost(hostname: string): boolean {
-  const host = hostname.replace(/^\[|\]$/g, '').toLowerCase()
-  if (host === 'localhost' || host === '0.0.0.0' || host === '::1') return true
-  if (host.startsWith('fe80:') || host.startsWith('fc') || host.startsWith('fd'))
-    return true
-  const v4 = host.match(/^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.\d{1,3}$/)
-  if (v4) {
-    const [a, b] = [Number(v4[1]), Number(v4[2])]
-    if (a === 127 || a === 10 || a === 0) return true
-    if (a === 169 && b === 254) return true // link-local incl. cloud metadata
-    if (a === 172 && b >= 16 && b <= 31) return true
-    if (a === 192 && b === 168) return true
-  }
-  return false
-}
-
 async function fetchAsUint8Array(
   url: string,
   allowedAudioHosts?: string[]
 ): Promise<Uint8Array> {
-  const parsed = new URL(url)
-  if (parsed.protocol !== 'https:' && parsed.protocol !== 'http:') {
-    throw new Error('Only HTTP(S) URLs are supported for audio')
-  }
-  if (allowedAudioHosts) {
-    if (!allowedAudioHosts.includes(parsed.hostname)) {
-      throw new Error(`Audio URL host is not allowed: ${parsed.hostname}`)
-    }
-  } else if (isPrivateHost(parsed.hostname)) {
-    throw new Error(
-      `Refusing to fetch audio from a private/internal host: ${parsed.hostname}`
-    )
-  }
-  const response = await fetch(url)
+  const response = await safeFetch(
+    url,
+    {},
+    { allowedHosts: allowedAudioHosts }
+  )
   const contentLength = response.headers.get('content-length')
   if (contentLength && parseInt(contentLength, 10) > MAX_AUDIO_SIZE) {
     throw new Error('Audio file exceeds maximum size')

package/src/wirings/channel/channel-common.ts

@@ -85,7 +85,6 @@ export const runChannelLifecycleWithMiddleware = async ({
       data: () => data as any,
       wire,
       tags: meta.tags ?? [],
-      inheritedPermissions: meta.permissions,
       packageName: meta.packageName ?? null,
     })
   }

package/src/wirings/channel/channel-handler.ts

@@ -102,11 +102,7 @@ export const processMessageHandlers = (
       routingProperty,
       routerValue
     )
-    const {
-      packageName,
-      middleware: routeInheritedMiddleware,
-      permissions: inheritedPermissions,
-    } = routeMeta
+    const { packageName, middleware: routeInheritedMiddleware } = routeMeta
 
     const pikkuFuncId = routeMeta.pikkuFuncId
 
@@ -132,8 +128,6 @@ export const processMessageHandlers = (
     // Inherited middleware comes from metadata (tag groups, non-inline wire)
     const inheritedMiddleware = routeInheritedMiddleware || []
 
-    const wirePermissions = isWrapper ? onMessage.permissions : undefined
-
     // Create unique cache key that includes routing info to avoid cache collisions
     // when multiple message handlers use the same function
     const cacheKey = routingProperty
@@ -150,8 +144,6 @@ export const processMessageHandlers = (
       wireMiddleware,
       inheritedChannelMiddleware: channelMeta?.channelMiddleware,
       wireChannelMiddleware: wireChannelMiddleware as any,
-      inheritedPermissions,
-      wirePermissions,
       coerceDataFromSchema: true,
       tags: channelConfig.tags,
       sessionService: userSession,

package/src/wirings/channel/channel-middleware-runner.test.ts

@@ -69,17 +69,17 @@ describe('combineChannelMiddleware', () => {
     void execution
   })
 
-  test('deduplicates middleware and returns cached results until the cache is cleared', () => {
+  test('caches the statically-resolved inherited middleware until the cache is cleared', () => {
     const shared = async () => {}
     addChannelMiddleware('chat:outbound', [shared])
 
     const first = combineChannelMiddleware('channel', 'cached-1', {
       wireInheritedChannelMiddleware: [{ type: 'tag', tag: 'chat:outbound' }],
-      wireChannelMiddleware: [shared],
     })
 
     assert.deepEqual(first, [shared])
 
+    // Re-registering after the first resolve does not change the cached result.
     addChannelMiddleware('chat:outbound', [async () => {}])
 
     const cached = combineChannelMiddleware('channel', 'cached-1', {
@@ -97,6 +97,32 @@ describe('combineChannelMiddleware', () => {
     assert.notStrictEqual(refreshed[0], shared)
   })
 
+  test('does not cache per-run wireChannelMiddleware across calls (C4 cross-run leak)', () => {
+    const shared = async () => {}
+    addChannelMiddleware('chat:outbound', [shared])
+
+    const runA = async () => {}
+    const first = combineChannelMiddleware('agent', 'stream:bot', {
+      wireInheritedChannelMiddleware: [{ type: 'tag', tag: 'chat:outbound' }],
+      wireChannelMiddleware: [runA],
+    })
+    assert.deepEqual(first, [shared, runA])
+
+    const runB = async () => {}
+    const second = combineChannelMiddleware('agent', 'stream:bot', {
+      wireInheritedChannelMiddleware: [{ type: 'tag', tag: 'chat:outbound' }],
+      wireChannelMiddleware: [runB],
+    })
+    assert.deepEqual(second, [shared, runB])
+    assert.strictEqual(second[1], runB)
+    assert.notStrictEqual(second[1], runA)
+
+    const third = combineChannelMiddleware('agent', 'stream:bot', {
+      wireInheritedChannelMiddleware: [{ type: 'tag', tag: 'chat:outbound' }],
+    })
+    assert.deepEqual(third, [shared])
+  })
+
   test('ignores missing named middleware references', () => {
     const combined = combineChannelMiddleware('channel', 'missing-wire', {
       wireInheritedChannelMiddleware: [{ type: 'wire', name: 'missing' }],

package/src/wirings/channel/channel-middleware-runner.ts

@@ -36,6 +36,18 @@ export const clearChannelMiddlewareCache = () => {
   }
 }
 
+/**
+ * Combine the inherited (tag/named) channel middleware with any per-run
+ * middleware for a wiring.
+ *
+ * Only the statically-resolved inherited middleware is deterministic per `uid`
+ * and safe to cache. `wireChannelMiddleware` is a per-run set of closures (e.g.
+ * an AI agent's per-invocation stream middleware holding that run's
+ * thread/session state) and MUST NOT be cached — caching it lets a later run of
+ * the same `uid` reuse an earlier run's closures, leaking that run's state (and
+ * growing memory) across invocations. It is therefore appended fresh on every
+ * call after the cached inherited slice.
+ */
 export const combineChannelMiddleware = (
   wireType: string,
   uid: string,
@@ -50,40 +62,40 @@ export const combineChannelMiddleware = (
   } = {}
 ): readonly CorePikkuChannelMiddleware[] => {
   const cacheKey = `${wireType}:${uid}`
-  if (channelMiddlewareCache[cacheKey]) {
-    return channelMiddlewareCache[cacheKey]
-  }
-
-  const resolved: CorePikkuChannelMiddleware[] = []
-
-  if (wireInheritedChannelMiddleware) {
-    for (const meta of wireInheritedChannelMiddleware) {
-      if (meta.type === 'tag') {
-        const groups = getTagGroups(
-          pikkuState(packageName, 'channelMiddleware', 'tagGroup'),
-          meta.tag
-        )
-        for (const group of groups) {
-          resolved.push(...group)
-        }
-      } else if (meta.type === 'wire') {
-        const middleware = getChannelMiddlewareByName(meta.name)
-        if (middleware) {
-          resolved.push(middleware)
+  let inherited = channelMiddlewareCache[cacheKey]
+  if (!inherited) {
+    const resolved: CorePikkuChannelMiddleware[] = []
+    if (wireInheritedChannelMiddleware) {
+      for (const meta of wireInheritedChannelMiddleware) {
+        if (meta.type === 'tag') {
+          const groups = getTagGroups(
+            pikkuState(packageName, 'channelMiddleware', 'tagGroup'),
+            meta.tag
+          )
+          for (const group of groups) {
+            resolved.push(...group)
+          }
+        } else if (meta.type === 'wire') {
+          const middleware = getChannelMiddlewareByName(meta.name)
+          if (middleware) {
+            resolved.push(middleware)
+          }
         }
       }
     }
+    inherited = channelMiddlewareCache[cacheKey] = freezeDedupe(
+      resolved
+    ) as readonly CorePikkuChannelMiddleware[]
   }
 
-  if (wireChannelMiddleware) {
-    resolved.push(...wireChannelMiddleware)
+  if (!wireChannelMiddleware?.length) {
+    return inherited
   }
 
-  channelMiddlewareCache[cacheKey] = freezeDedupe(
-    resolved
-  ) as readonly CorePikkuChannelMiddleware[]
-
-  return channelMiddlewareCache[cacheKey]
+  return freezeDedupe([
+    ...inherited,
+    ...wireChannelMiddleware,
+  ]) as readonly CorePikkuChannelMiddleware[]
 }
 
 export function wrapChannelWithMiddleware<Out>(

package/src/wirings/channel/channel.types.ts

@@ -6,7 +6,6 @@ import type {
 import type {
   CorePikkuMiddleware,
   MiddlewareMetadata,
-  PermissionMetadata,
 } from '../../types/core.types.js'
 
 export type BinaryData = ArrayBuffer | Uint8Array
@@ -23,7 +22,6 @@ export type CorePikkuChannelMiddlewareFactory<
   Event = unknown,
 > = (input: In) => CorePikkuChannelMiddleware<Services, Event>
 import type {
-  CorePermissionGroup,
   CorePikkuFunction,
   CorePikkuFunctionConfig,
   CorePikkuFunctionSessionless,
@@ -52,7 +50,6 @@ export interface ChannelMessageMeta {
   errors?: string[]
   tags?: string[]
   middleware?: MiddlewareMetadata[]
-  permissions?: PermissionMetadata[]
 }
 
 export interface ChannelMeta {
@@ -72,7 +69,6 @@ export interface ChannelMeta {
   errors?: string[]
   tags?: string[]
   middleware?: MiddlewareMetadata[] // Pre-resolved middleware chain (tag + explicit)
-  permissions?: PermissionMetadata[] // Pre-resolved permission chain (tag + explicit)
   channelMiddleware?: MiddlewareMetadata[]
 }
 
@@ -123,7 +119,6 @@ export type CoreChannel<
       | ChannelFunctionMessage
       | {
           func: ChannelFunctionMessage
-          permissions?: CorePermissionGroup<PikkuPermission>
           auth?: boolean
           middleware?: PikkuMiddleware[]
         }
@@ -133,7 +128,6 @@ export type CoreChannel<
   channelMiddleware?: Array<
     CorePikkuChannelMiddleware | CorePikkuChannelMiddlewareFactory
   >
-  permissions?: CorePermissionGroup<PikkuPermission>
   auth?: boolean
   binary?: boolean | null
   onBinaryMessage?: (

package/src/wirings/cli/cli-runner.ts

@@ -374,8 +374,6 @@ export async function runCLICommand({
       auth: false,
       inheritedMiddleware: currentCommand.middleware,
       wireMiddleware: allWireMiddleware,
-      inheritedPermissions: currentCommand.permissions,
-      wirePermissions: undefined,
       coerceDataFromSchema: true,
       tags: programData?.tags,
       wire,

package/src/wirings/cli/cli.types.ts

@@ -4,7 +4,6 @@ import type {
   CoreUserSession,
   CoreServices,
   MiddlewareMetadata,
-  PermissionMetadata,
 } from '../../types/core.types.js'
 import type {
   CorePikkuFunctionConfig,
@@ -80,7 +79,6 @@ export interface CLICommandMeta {
   tags?: string[]
   subcommands?: Record<string, CLICommandMeta>
   middleware?: MiddlewareMetadata[] // Pre-resolved middleware chain (tag + explicit)
-  permissions?: PermissionMetadata[] // Pre-resolved permission chain (tag + explicit)
   isDefault?: boolean
 }
 

package/src/wirings/http/http-routes.ts

@@ -128,7 +128,6 @@ function processRouteMap(
  * - tags: Merges (parent + child)
  * - middleware: Merges (parent runs first)
  * - auth: Inner overrides outer
- * - permissions: Inner overrides outer
  */
 function mergeGroupConfig(
   parent: HTTPRoutesGroupConfig,
@@ -139,7 +138,6 @@ function mergeGroupConfig(
     tags: [...(parent.tags || []), ...(child.tags || [])],
     middleware: [...(parent.middleware || []), ...(child.middleware || [])],
     auth: child.auth ?? parent.auth,
-    permissions: child.permissions ?? parent.permissions,
   }
 }
 
@@ -162,7 +160,6 @@ function registerRoute(
       ...(groupConfig.middleware || []),
       ...(route.middleware || []),
     ],
-    permissions: route.permissions ?? groupConfig.permissions,
     contentType: route.contentType,
     timeout: route.timeout,
     headers: route.headers,

package/src/wirings/http/http-runner.test.ts

@@ -4,7 +4,6 @@ import { NotFoundError } from '../../errors/errors.js'
 import type { JSONValue, CorePikkuMiddleware } from '../../types/core.types.js'
 import {
   addHTTPMiddleware,
-  addHTTPPermission,
   createHTTPWire,
   fetch,
   fetchData,
@@ -253,23 +252,14 @@ describe('http-runner helpers', () => {
     } as any)
   })
 
-  test('addHTTPMiddleware and addHTTPPermission register route groups', () => {
+  test('addHTTPMiddleware registers a route middleware group', () => {
     const middleware = [sessionMiddleware]
-    const permissions = [async () => true]
 
     assert.strictEqual(addHTTPMiddleware('/api/*', middleware), middleware)
-    assert.strictEqual(
-      addHTTPPermission('/api/*', permissions as any),
-      permissions
-    )
     assert.strictEqual(
       pikkuState(null, 'middleware', 'httpGroup')['/api/*'],
       middleware
     )
-    assert.strictEqual(
-      pikkuState(null, 'permissions', 'httpGroup')['/api/*'],
-      permissions
-    )
   })
 
   test('addHTTPMiddleware composes repeated registrations for the same pattern', () => {

package/src/wirings/http/http-runner.ts

@@ -11,7 +11,6 @@ import type {
   CorePikkuFunction,
   CorePikkuFunctionSessionless,
   CorePikkuPermission,
-  CorePermissionGroup,
 } from '../../function/functions.types.js'
 import type {
   CoreUserSession,
@@ -35,6 +34,7 @@ import {
 import { PikkuSessionService } from '../../services/user-session-service.js'
 import { getErrorResponse } from '../../errors/error-handler.js'
 import { handleHTTPError } from '../../handle-error.js'
+import { isProduction } from '../../env.js'
 import { pikkuState } from '../../pikku-state.js'
 import { PikkuFetchHTTPResponse } from './pikku-fetch-http-response.js'
 import { PikkuFetchHTTPRequest } from './pikku-fetch-http-request.js'
@@ -105,42 +105,23 @@ export const addHTTPMiddleware = <PikkuMiddleware extends CorePikkuMiddleware>(
 }
 
 /**
- * Registers HTTP permissions for a specific route pattern.
- *
- * This function registers permissions at runtime that will be applied to
- * HTTP routes matching the specified pattern.
- *
- * For tree-shaking benefits, wrap in a factory function:
- * `export const x = () => addHTTPPermission('pattern', [...])`
- *
- * @template PikkuPermission The permission type.
- * @param {string} pattern - Route pattern (e.g., '*' for all routes, '/api/*' for specific routes).
- * @param {CorePermissionGroup | CorePikkuPermission[]} permissions - Permissions for this route pattern.
- *
- * @returns {CorePermissionGroup | CorePikkuPermission[]} The permissions (for chaining/wrapping).
- *
- * @example
- * ```typescript
- * // Recommended: tree-shakeable
- * export const httpGlobalPermissions = () => addHTTPPermission('*', [
- *   authenticatedPermission,
- *   rateLimitPermission
- * ])
- *
- * // Also works: no tree-shaking
- * export const apiPermissions = addHTTPPermission('/api/*', [
- *   adminPermission
- * ])
- * ```
+ * @deprecated HTTP-route-level permissions were removed in #972 — permissions
+ * are now function-scoped only (declare them on the function via
+ * `pikkuFunc({ permissions })`). This throwing stub exists solely so the pinned
+ * bootstrap CLI (which still generates an `addHTTPPermission` wrapper) can
+ * resolve the import at build time; it is never called. Delete once
+ * `PIKKU_CLI_VERSION` in the CLI build is bumped past the release that removes
+ * HTTP-route permissions.
  */
-export const addHTTPPermission = <PikkuPermission extends CorePikkuPermission>(
-  pattern: string,
-  permissions: CorePermissionGroup | CorePikkuPermission[],
-  packageName: string | null = null
-): CorePermissionGroup | CorePikkuPermission[] => {
-  const httpGroups = pikkuState(packageName, 'permissions', 'httpGroup')
-  httpGroups[pattern] = permissions
-  return permissions
+export const addHTTPPermission = (
+  _pattern: string,
+  _permissions:
+    | Record<string, CorePikkuPermission | CorePikkuPermission[]>
+    | CorePikkuPermission[]
+): never => {
+  throw new Error(
+    'addHTTPPermission was removed in #972 — HTTP-route-level permissions no longer exist. Declare permissions on the function definition instead: pikkuFunc({ permissions }).'
+  )
 }
 
 /**
@@ -232,7 +213,6 @@ const getMatchingRoute = (requestType: string, requestPath: string) => {
       matchedPath,
       params: matchedPath.params,
       route,
-      permissions: route.permissions,
       meta: meta!,
     }
   }
@@ -431,8 +411,6 @@ const executeRoute = async (
         data,
         inheritedMiddleware: meta.middleware,
         wireMiddleware: route.middleware,
-        inheritedPermissions: meta.permissions,
-        wirePermissions: route.permissions,
         coerceDataFromSchema: options.coerceDataFromSchema,
         tags: route.tags,
         wire,
@@ -549,7 +527,8 @@ export const fetchData = async <In, Out>(
     logWarningsForStatusCodes = [],
     coerceDataFromSchema = true,
     bubbleErrors = false,
-    exposeErrors = false,
+    // Surface the error message + stack on unexpected 500s unless in production.
+    exposeErrors = !isProduction(),
     generateRequestId,
     traceId: externalTraceId,
   }: RunHTTPWiringOptions = {}

package/src/wirings/http/http.types.ts

@@ -8,7 +8,6 @@ import type {
   CorePikkuFunction,
   CorePikkuFunctionSessionless,
   CorePikkuPermission,
-  CorePermissionGroup,
   CorePikkuFunctionConfig,
 } from '../../function/functions.types.js'
 
@@ -138,7 +137,6 @@ export type CoreHTTPFunctionWiring<
         PikkuPermission,
         PikkuMiddleware
       >
-      permissions?: CorePermissionGroup<PikkuPermission>
       auth?: true
       middleware?: PikkuMiddleware[]
       sse?: undefined
@@ -151,7 +149,6 @@ export type CoreHTTPFunctionWiring<
         PikkuPermission,
         PikkuMiddleware
       >
-      permissions?: undefined
       auth?: false
       middleware?: PikkuMiddleware[]
       sse?: undefined
@@ -164,7 +161,6 @@ export type CoreHTTPFunctionWiring<
         PikkuPermission,
         PikkuMiddleware
       >
-      permissions?: CorePermissionGroup<PikkuPermission>
       auth?: true
       middleware?: PikkuMiddleware[]
       sse?: boolean
@@ -177,7 +173,6 @@ export type CoreHTTPFunctionWiring<
         PikkuPermission,
         PikkuMiddleware
       >
-      permissions?: undefined
       auth?: false
       middleware?: PikkuMiddleware[]
       sse?: boolean
@@ -190,7 +185,6 @@ export type CoreHTTPFunctionWiring<
         PikkuPermission,
         PikkuMiddleware
       >
-      permissions?: CorePermissionGroup<PikkuPermission>
       auth?: true
       middleware?: PikkuMiddleware[]
       query?: Array<keyof In>
@@ -204,7 +198,6 @@ export type CoreHTTPFunctionWiring<
         PikkuPermission,
         PikkuMiddleware
       >
-      permissions?: undefined
       auth?: false
       middleware?: PikkuMiddleware[]
       query?: Array<keyof In>
@@ -305,9 +298,8 @@ export type HTTPRouteConfig<
   route: string
   func: CorePikkuFunctionConfig<PikkuFunction, PikkuPermission, PikkuMiddleware>
 
-  // Auth & permissions
+  // Auth
   auth?: boolean
-  permissions?: CorePermissionGroup<PikkuPermission>
 
   // Middleware
   middleware?: PikkuMiddleware[]
@@ -331,7 +323,6 @@ export type HTTPRoutesGroupConfig<
   tags?: string[]
   auth?: boolean
   middleware?: PikkuMiddleware[]
-  permissions?: CorePermissionGroup<PikkuPermission>
 }
 
 /**

package/src/wirings/mcp/mcp-runner.ts

@@ -252,8 +252,6 @@ async function runMCPPikkuFunc(
         data: () => request.params,
         inheritedMiddleware: meta?.middleware,
         wireMiddleware: mcp?.middleware,
-        inheritedPermissions: meta?.permissions,
-        wirePermissions: mcp?.permissions,
         tags: mcp?.tags,
         wire,
         sessionService: mcpSessionService,

package/src/wirings/mcp/mcp.types.ts

@@ -1,5 +1,4 @@
 import type {
-  CorePermissionGroup,
   CorePikkuFunctionConfig,
   CorePikkuFunctionSessionless,
   CorePikkuPermission,
@@ -7,7 +6,6 @@ import type {
 import type {
   CorePikkuMiddleware,
   MiddlewareMetadata,
-  PermissionMetadata,
 } from '../../types/core.types.js'
 
 /**
@@ -49,12 +47,11 @@ export type PikkuMCP<Tools extends string = any> = {
  */
 export type MCPResourceMeta = Record<
   string,
-  Omit<CoreMCPResource, 'func' | 'middleware' | 'permissions'> & {
+  Omit<CoreMCPResource, 'func' | 'middleware'> & {
     pikkuFuncId: string
     inputSchema: string | null
     outputSchema: string | null
     middleware?: MiddlewareMetadata[] // Pre-resolved middleware chain (tag + explicit)
-    permissions?: PermissionMetadata[] // Pre-resolved permission chain (tag + explicit)
   }
 >
 
@@ -63,12 +60,11 @@ export type MCPResourceMeta = Record<
  */
 export type MCPToolMeta = Record<
   string,
-  Omit<CoreMCPTool, 'func' | 'middleware' | 'permissions'> & {
+  Omit<CoreMCPTool, 'func' | 'middleware'> & {
     pikkuFuncId: string
     inputSchema: string | null
     outputSchema: string | null
     middleware?: MiddlewareMetadata[] // Pre-resolved middleware chain (tag + explicit)
-    permissions?: PermissionMetadata[] // Pre-resolved permission chain (tag + explicit)
   }
 >
 
@@ -77,7 +73,7 @@ export type MCPToolMeta = Record<
  */
 export type MCPPromptMeta = Record<
   string,
-  Omit<CoreMCPPrompt, 'func' | 'middleware' | 'permissions'> & {
+  Omit<CoreMCPPrompt, 'func' | 'middleware'> & {
     pikkuFuncId: string
     inputSchema: string | null
     outputSchema: string | null
@@ -87,7 +83,6 @@ export type MCPPromptMeta = Record<
       required: boolean
     }>
     middleware?: MiddlewareMetadata[] // Pre-resolved middleware chain (tag + explicit)
-    permissions?: PermissionMetadata[] // Pre-resolved permission chain (tag + explicit)
   }
 >
 
@@ -112,7 +107,6 @@ export type CoreMCPResource<
   func: PikkuFunctionConfig
   tags?: string[]
   middleware?: PikkuMiddleware[]
-  permissions?: CorePermissionGroup<PikkuPermission>
 }
 
 /**
@@ -134,7 +128,6 @@ export type CoreMCPTool<
   tags?: string[]
   streaming?: boolean
   middleware?: PikkuMiddleware[]
-  permissions?: CorePermissionGroup<PikkuPermission>
 }
 
 /**
@@ -154,7 +147,6 @@ export type CoreMCPPrompt<
   func: PikkuFunctionConfig
   tags?: string[]
   middleware?: PikkuMiddleware[]
-  permissions?: CorePermissionGroup<PikkuPermission>
 }
 
 export type JsonRpcRequest = {

package/src/wirings/oauth2/index.ts

@@ -1,4 +1 @@
-export { OAuth2Client } from './oauth2-client.js'
-export { createOAuth2Handler } from './oauth2-routes.js'
-export type { CreateOAuth2HandlerOptions } from './oauth2-routes.js'
 export type { OAuth2AppCredential, OAuth2Token } from './oauth2.types.js'