@pikku/core 0.12.80 → 0.12.82

package/dist/wirings/cli/channel/index.js

@@ -1,4 +1,3 @@
 export { executeCLIViaChannel } from './cli-channel-runner.js';
 export { handleRawCLI } from './cli-raw-channel-runner.js';
 export { executeRawCLIViaChannel } from './cli-raw-client-runner.js';
-export { APPROVAL_FLAGS, approverForMode, createTerminalApprover, takeApprovalFlags, } from './cli-approval.js';

package/dist/wirings/cli/cli-runner.js

@@ -87,7 +87,19 @@ function registerCLICommands(commands, path = [], inheritedOptions = {}, program
                 programs[program].commandMiddleware[commandId] = command.middleware;
             }
         }
-        addFunction(funcName, unwrapFunc(command), currentMeta?.packageName);
+        // Merge the command-level auth/permissions into the registered config so
+        // they are actually enforced by the function runner. They were accepted by
+        // the types but dropped here, making a command's declared access control a
+        // silent no-op. Command-level wins over the handler's own, then falls back
+        // to it.
+        const unwrapped = unwrapFunc(command);
+        const commandAuth = typeof command === 'object' ? command.auth : undefined;
+        const commandPermissions = typeof command === 'object' ? command.permissions : undefined;
+        addFunction(funcName, {
+            ...unwrapped,
+            auth: commandAuth ?? unwrapped.auth,
+            permissions: commandPermissions ?? unwrapped.permissions,
+        }, currentMeta?.packageName);
         if (typeof command === 'object' && command.render) {
             if (programs[program]) {
                 programs[program].renderers[commandId] = command.render;

package/dist/wirings/credential/index.d.ts

@@ -1,3 +1,3 @@
 export { defineCredential } from './define-credential.js';
 export { validateAndBuildCredentialDefinitionsMeta } from './validate-credential-definitions.js';
-export type { CoreCredential, CredentialDefinitionMeta, CredentialDefinitionsMeta, CredentialDefinitions, } from './credential.types.js';
+export type { CoreCredential, CredentialDefinitionsMeta, CredentialDefinitions, } from './credential.types.js';

package/dist/wirings/gateway/index.d.ts

@@ -1,2 +1,2 @@
 export { wireGateway, createListenerMessageHandler, resolveGatewayAdapter, } from './gateway-runner.js';
-export type { GatewayAdapter, GatewayAdapterFactory, GatewayAttachment, GatewayInboundMessage, GatewayOutboundMessage, GatewayMeta, GatewaysMeta, GatewayTransportType, CoreGateway, PikkuGateway, WebhookVerificationResult, } from './gateway.types.js';
+export type { GatewayAdapter, GatewayAdapterFactory, GatewayInboundMessage, GatewayOutboundMessage, GatewaysMeta, GatewayTransportType, CoreGateway, WebhookVerificationResult, } from './gateway.types.js';

package/dist/wirings/http/http-runner.js

@@ -173,6 +173,7 @@ const executeRoute = async (services, matchedRoute, http, options) => {
         getSession: () => userSession.get(),
         hasSessionChanged: () => userSession.sessionChanged,
     };
+    const statusBeforeRoute = http?.response?.statusCode;
     try {
         result = await runPikkuFunc('http', `${meta.method}:${meta.route}`, meta.pikkuFuncId, {
             singletonServices,
@@ -209,17 +210,22 @@ const executeRoute = async (services, matchedRoute, http, options) => {
         http?.response?.flushHeaders?.();
     }
     else {
+        const statusSetByRoute = http?.response?.statusCode !== statusBeforeRoute;
         if (result instanceof Response) {
             await applyWebResponse(http.response, result);
         }
         else if (result === undefined || result === null) {
-            http?.response?.status(204);
+            if (!statusSetByRoute) {
+                http?.response?.status(204);
+            }
         }
         else if (route.returnsJSON === false) {
             http?.response?.arrayBuffer(result);
         }
         else {
-            http?.response?.status(200);
+            if (!statusSetByRoute) {
+                http?.response?.status(200);
+            }
             http?.response?.json(result);
         }
     }

package/dist/wirings/http/index.d.ts

@@ -1,8 +1,7 @@
 export { PikkuFetchHTTPRequest, DEFAULT_MAX_BODY_SIZE, } from './pikku-fetch-http-request.js';
-export type { PikkuFetchHTTPRequestOptions } from './pikku-fetch-http-request.js';
 export { PikkuFetchHTTPResponse } from './pikku-fetch-http-response.js';
 export { logRoutes } from './log-http-routes.js';
 export { fetch, fetchData, wireHTTP, addHTTPMiddleware } from './http-runner.js';
 export { wireHTTPRoutes, defineHTTPRoutes } from './http-routes.js';
 export { toWebRequest, applyWebResponse } from './web-request.js';
-export type { AssertHTTPWiringParams, CoreHTTPFunctionWiring, HTTPMethod, HTTPRouteBaseConfig, HTTPRouteContract, HTTPRouteMap, HTTPWiringsMeta, PikkuHTTPRequest, PikkuHTTPResponse, PikkuQuery, RunHTTPWiringOptions, } from './http.types.js';
+export type { AssertHTTPWiringParams, CoreHTTPFunctionWiring, HTTPMethod, HTTPRouteBaseConfig, HTTPRouteContract, HTTPRouteMap, HTTPWiringsMeta, PikkuHTTP, PikkuHTTPRequest, PikkuHTTPResponse, PikkuQuery, RunHTTPWiringOptions, } from './http.types.js';

package/dist/wirings/mcp/index.d.ts

@@ -1,4 +1,4 @@
 export { MCPEndpointRegistry } from './mcp-endpoint-registry.js';
 export { MCPError, wireMCPResource, wireMCPPrompt, runMCPResource, runMCPTool, runMCPPrompt, } from './mcp-runner.js';
 export { getMCPResourcesMeta, getMCPToolsMeta, getMCPPromptsMeta, } from './mcp-runner.js';
-export type { AssertMCPResourceURIParams, CoreMCPPrompt, CoreMCPResource, CoreMCPTool, MCPPromptResponse, MCPResourceMeta, MCPResourceResponse, MCPToolMeta, MCPToolResponse, MCPPromptMeta, PikkuMCP, } from './mcp.types.js';
+export type { AssertMCPResourceURIParams, CoreMCPPrompt, CoreMCPResource, MCPPromptResponse, MCPResourceMeta, MCPResourceResponse, MCPToolMeta, MCPToolResponse, MCPPromptMeta, PikkuMCP, } from './mcp.types.js';

package/dist/wirings/mcp/mcp-runner.d.ts

@@ -1,3 +1,4 @@
+import type { PikkuHTTP } from '../http/http.types.js';
 import type { CoreMCPResource, CoreMCPPrompt, JsonRpcRequest, JsonRpcResponse, JsonRpcErrorResponse, PikkuMCP } from './mcp.types.js';
 import type { CorePikkuFunctionConfig, CorePikkuFunctionSessionless } from '../../function/functions.types.js';
 export declare class MCPError extends Error {
@@ -6,6 +7,20 @@ export declare class MCPError extends Error {
 }
 export type RunMCPEndpointParams<Tools extends string = any> = {
     mcp?: PikkuMCP<Tools>;
+    /**
+     * The HTTP request the MCP call arrived on, when it arrived over HTTP.
+     *
+     * Auth middleware reads the session off `wire.http.request` — every
+     * implementation opens with `if (!http?.request) return` — so without this an
+     * MCP call reaches the function unauthenticated no matter what middleware the
+     * app has registered, and a tool fronting a session-requiring function can
+     * only ever answer 'Authentication required'.
+     *
+     * Left undefined for transports that have no request to offer, such as stdio.
+     * Those remain anonymous, which is a property of the transport rather than a
+     * default chosen here.
+     */
+    http?: PikkuHTTP;
     /** Defaults to enabled outside production. */
     exposeErrors?: boolean;
 };

package/dist/wirings/mcp/mcp-runner.js

@@ -48,6 +48,11 @@ export async function runMCPResource(request, params, uri) {
     let extractedParams = {};
     const metas = pikkuState(null, 'mcp', 'resourcesMeta');
     const endpoints = pikkuState(null, 'mcp', 'resources');
+    // The key the resource's meta (and its middleware) is stored under. For a
+    // templated resource this is the template, not the concrete request URI — so
+    // it must be carried forward, or the meta lookup downstream misses and the
+    // resource's declared middleware (including auth) is silently skipped.
+    let metaKey = uri;
     if (endpoints.has(uri)) {
         endpoint = endpoints.get(uri);
         pikkuFuncId = metas[uri]?.pikkuFuncId;
@@ -60,6 +65,7 @@ export async function runMCPResource(request, params, uri) {
             const match = uri.match(regex);
             if (match) {
                 endpoint = value;
+                metaKey = uriTemplate;
                 pikkuFuncId = metas[uriTemplate]?.pikkuFuncId;
                 for (let i = 0; i < paramNames.length; i++) {
                     extractedParams[paramNames[i]] = match[i + 1]; // match[0] is the full match
@@ -71,7 +77,7 @@ export async function runMCPResource(request, params, uri) {
     return await runMCPPikkuFunc({
         ...request,
         params: { ...request.params, ...extractedParams },
-    }, 'resource', uri, endpoint, pikkuFuncId, { ...params, mcp: { ...params.mcp, uri } });
+    }, 'resource', uri, endpoint, pikkuFuncId, { ...params, mcp: { ...params.mcp, uri } }, metaKey);
 }
 export async function runMCPTool(request, params, name) {
     const meta = pikkuState(null, 'mcp', 'toolsMeta')[name];
@@ -82,7 +88,11 @@ export async function runMCPPrompt(request, params, name) {
     const meta = pikkuState(null, 'mcp', 'promptsMeta')[name];
     return await runMCPPikkuFunc(request, 'prompt', name, endpoint, meta?.pikkuFuncId, params);
 }
-async function runMCPPikkuFunc(request, type, name, mcp, pikkuFuncId, { mcp: mcpWire, exposeErrors = !isProduction() }) {
+async function runMCPPikkuFunc(request, type, name, mcp, pikkuFuncId, { mcp: mcpWire, http, exposeErrors = !isProduction() }, 
+// The key the endpoint's meta is stored under. Differs from `name` only for a
+// templated resource, where `name` is the concrete URI and the meta lives
+// under the template. Defaults to `name` for tools and prompts.
+metaKey = name) {
     const singletonServices = getSingletonServices();
     const createWireServices = getCreateWireServices();
     try {
@@ -99,17 +109,20 @@ async function runMCPPikkuFunc(request, type, name, mcp, pikkuFuncId, { mcp: mcp
         const mcpSessionService = new PikkuSessionService(singletonServices.sessionStore);
         const wire = {
             mcp: mcpWire,
+            // Only when the transport supplied one. Setting `http: undefined`
+            // explicitly would be the same to a reader and different to a spread.
+            ...(http ? { http } : {}),
             ...createMiddlewareSessionWireProps(mcpSessionService),
         };
         let meta;
         if (type === 'resource') {
-            meta = pikkuState(null, 'mcp', 'resourcesMeta')[name];
+            meta = pikkuState(null, 'mcp', 'resourcesMeta')[metaKey];
         }
         else if (type === 'tool') {
-            meta = pikkuState(null, 'mcp', 'toolsMeta')[name];
+            meta = pikkuState(null, 'mcp', 'toolsMeta')[metaKey];
         }
         else if (type === 'prompt') {
-            meta = pikkuState(null, 'mcp', 'promptsMeta')[name];
+            meta = pikkuState(null, 'mcp', 'promptsMeta')[metaKey];
         }
         let resolvedFuncName = pikkuFuncId;
         let resolvedPackageName = meta?.packageName ?? null;

package/dist/wirings/persona/index.d.ts

@@ -1,12 +1,11 @@
 export { definePersonas } from './define-personas.js';
 export { isRunnablePersona, roleMismatchMessage, runnablePersonas, validateAndBuildPersonasMeta, verifyPersonaRoles, } from './validate-personas.js';
 export type { RoleVerification } from './validate-personas.js';
-export { personaEnvironmentErrors, personaEnvironmentRefusal, resolvePersonaEnvironments, } from './persona-environments.js';
+export { personaEnvironmentErrors, personaEnvironmentRefusal, } from './persona-environments.js';
 export type { PersonaEnvironment, PersonaEnvironmentSubject, } from './persona-environments.js';
-export { personaEmail, personaEmailLabel, personaEmails, } from './persona-email.js';
-export { allowedLinks, applyMailboxAllowlist, isAllowedSender, } from './persona-mailbox.js';
+export { personaEmail, personaEmails, } from './persona-email.js';
 export type { MailboxAllowlist, PersonaMailbox, ReceivedEmail, } from './persona-mailbox.js';
-export type { CorePersona, CorePersonaAccount, CorePersonas, PersonaAccountMeta, PersonaDefinitions, PersonaMeta, PersonasMeta, } from './persona.types.js';
+export type { CorePersona, CorePersonas, PersonaAccountMeta, PersonaDefinitions, PersonaMeta, PersonasMeta, } from './persona.types.js';
 /**
  * Signing in as a persona and talking to a stage over HTTP.
  *

package/dist/wirings/persona/index.js

@@ -1,8 +1,7 @@
 export { definePersonas } from './define-personas.js';
 export { isRunnablePersona, roleMismatchMessage, runnablePersonas, validateAndBuildPersonasMeta, verifyPersonaRoles, } from './validate-personas.js';
-export { personaEnvironmentErrors, personaEnvironmentRefusal, resolvePersonaEnvironments, } from './persona-environments.js';
-export { personaEmail, personaEmailLabel, personaEmails, } from './persona-email.js';
-export { allowedLinks, applyMailboxAllowlist, isAllowedSender, } from './persona-mailbox.js';
+export { personaEnvironmentErrors, personaEnvironmentRefusal, } from './persona-environments.js';
+export { personaEmail, personaEmails, } from './persona-email.js';
 /**
  * Signing in as a persona and talking to a stage over HTTP.
  *

package/dist/wirings/queue/index.d.ts

@@ -1,9 +1,7 @@
 export type { ConfigValidationResult, CoreQueueWorker, GroupConcurrencyConfig, JobGroup, JobOptions, PikkuJobConfig, PikkuWorkerConfig, PikkuQueue, QueueJob, QueueJobStatus, QueueService, QueueWorkers, QueueWorkersMeta, } from './queue.types.js';
-export { wireQueueWorker, runQueueJob, getQueueWorkers, removeQueueWorker, QueueJobDiscardedError, QueueJobFailedError, } from './queue-runner.js';
-export { QUEUE_IDENTITY_CLAIM_VERSION, QUEUE_IDENTITY_INFO, QUEUE_IDENTITY_SECRET_NAME, getQueueIdentitySecret, resolveQueueJobIdentity, signQueueIdentity, verifyQueueIdentity, } from './queue-identity.js';
+export { wireQueueWorker, runQueueJob, QueueJobDiscardedError, QueueJobFailedError, } from './queue-runner.js';
 export type { QueueIdentityBinding } from './queue-identity.js';
 export { SignedQueueService } from './signed-queue-service.js';
-export { validateWorkerConfig } from './validate-worker-config.js';
 export type { QueueConfigMapping } from './validate-worker-config.js';
 export { registerQueueWorkers } from './register-queue-helper.js';
 export type { QueueRegistrationCallback } from './register-queue-helper.js';

package/dist/wirings/queue/index.js

@@ -1,5 +1,3 @@
-export { wireQueueWorker, runQueueJob, getQueueWorkers, removeQueueWorker, QueueJobDiscardedError, QueueJobFailedError, } from './queue-runner.js';
-export { QUEUE_IDENTITY_CLAIM_VERSION, QUEUE_IDENTITY_INFO, QUEUE_IDENTITY_SECRET_NAME, getQueueIdentitySecret, resolveQueueJobIdentity, signQueueIdentity, verifyQueueIdentity, } from './queue-identity.js';
+export { wireQueueWorker, runQueueJob, QueueJobDiscardedError, QueueJobFailedError, } from './queue-runner.js';
 export { SignedQueueService } from './signed-queue-service.js';
-export { validateWorkerConfig } from './validate-worker-config.js';
 export { registerQueueWorkers } from './register-queue-helper.js';

package/dist/wirings/rpc/addon-runner.d.ts

@@ -4,6 +4,10 @@ export type AddonInstance = {
     secretOverrides?: Record<string, string>;
     variableOverrides?: Record<string, string>;
     credentialOverrides?: Record<string, string>;
+    /** Set by the consuming app to opt this instance out of secret scoping. */
+    globalSecrets?: string;
+    /** Set by the consuming app to opt this instance out of credential scoping. */
+    globalCredentials?: string;
 };
 export declare const getOrCreatePackageSingletonServices: (packageName: string, parentServices: CoreSingletonServices, addonInstance?: AddonInstance) => Promise<CoreSingletonServices>;
 export declare const addonInstanceForNamespace: (namespace: string | undefined, expectedPackage: string) => AddonInstance | undefined;

package/dist/wirings/rpc/addon-runner.js

@@ -1,4 +1,6 @@
 import { pikkuState } from '../../pikku-state.js';
+import { ScopedSecretService } from '../../services/scoped-secret-service.js';
+import { ScopedCredentialService } from '../../services/scoped-credential-service.js';
 const aliasSecretService = (secrets, overrides) => {
     const map = (key) => overrides[key] ?? key;
     return {
@@ -79,9 +81,6 @@ export const getOrCreatePackageSingletonServices = async (packageName, parentSer
         return cachedServices;
     }
     const factories = pikkuState(packageName, 'package', 'factories');
-    if (!factories || !factories.createSingletonServices) {
-        return parentServices;
-    }
     let existingServices = parentServices;
     if (addonInstance?.secretOverrides && parentServices.secrets) {
         existingServices = {
@@ -95,6 +94,21 @@ export const getOrCreatePackageSingletonServices = async (packageName, parentSer
             variables: aliasVariablesService(parentServices.variables, addonInstance.variableOverrides),
         };
     }
+    if (!addonInstance?.globalSecrets && existingServices.secrets) {
+        existingServices = {
+            ...existingServices,
+            secrets: new ScopedSecretService(existingServices.secrets, new Set(pikkuState(packageName, 'package', 'declaredSecrets') ?? [])),
+        };
+    }
+    if (!addonInstance?.globalCredentials && existingServices.credentialService) {
+        existingServices = {
+            ...existingServices,
+            credentialService: new ScopedCredentialService(existingServices.credentialService, new Set(Object.keys(pikkuState(packageName, 'package', 'credentialsMeta') ?? {}))),
+        };
+    }
+    if (!factories || !factories.createSingletonServices) {
+        return existingServices;
+    }
     let config = existingServices.config;
     if (factories.createConfig) {
         config = await factories.createConfig(existingServices.variables);
@@ -118,5 +132,7 @@ export const addonInstanceForNamespace = (namespace, expectedPackage) => {
         secretOverrides: cfg.secretOverrides,
         variableOverrides: cfg.variableOverrides,
         credentialOverrides: cfg.credentialOverrides,
+        globalSecrets: cfg.globalSecrets,
+        globalCredentials: cfg.globalCredentials,
     };
 };

package/dist/wirings/rpc/rpc-runner.js

@@ -203,6 +203,8 @@ export class ContextAwareRPCService {
                 secretOverrides: resolved.addonConfig?.secretOverrides,
                 variableOverrides: resolved.addonConfig?.variableOverrides,
                 credentialOverrides: resolved.addonConfig?.credentialOverrides,
+                globalSecrets: resolved.addonConfig?.globalSecrets,
+                globalCredentials: resolved.addonConfig?.globalCredentials,
             },
         };
     }

package/dist/wirings/rpc/rpc-types.d.ts

@@ -48,6 +48,10 @@ export interface ResolvedFunction {
         secretOverrides?: Record<string, string>;
         variableOverrides?: Record<string, string>;
         credentialOverrides?: Record<string, string>;
+        /** Set by the consuming app: hand this instance the unscoped `SecretService` */
+        globalSecrets?: string;
+        /** Set by the consuming app: hand this instance the unscoped `CredentialService` */
+        globalCredentials?: string;
         /** Set by `wireRemoteAddon`: dispatch this namespace's RPCs over HTTP */
         remote?: boolean;
         serverUrl?: string | ((services: any) => string | Promise<string>);

package/dist/wirings/rpc/wire-addon.d.ts

@@ -11,6 +11,19 @@ export type WireAddonConfig = {
     secretOverrides?: Record<string, string>;
     variableOverrides?: Record<string, string>;
     credentialOverrides?: Record<string, string>;
+    /**
+     * Hands this instance the whole `SecretService` instead of one scoped to the
+     * secrets it declared. The value is the reason, recorded in the deploy
+     * manifest — an addon that names secrets at runtime cannot be scoped, and
+     * only the consuming app, never the addon, can grant it.
+     */
+    globalSecrets?: string;
+    /**
+     * Hands this instance the whole `CredentialService` instead of one narrowed
+     * to the credentials it declared. The value is the reason, recorded in the
+     * deploy manifest, and only the consuming app can grant it.
+     */
+    globalCredentials?: string;
 };
 export declare const wireAddon: (config: WireAddonConfig) => void;
 /**

package/dist/wirings/rpc/wire-addon.js

@@ -16,6 +16,10 @@ export const wireAddon = (config) => {
         ...(config.credentialOverrides
             ? { credentialOverrides: config.credentialOverrides }
             : {}),
+        ...(config.globalSecrets ? { globalSecrets: config.globalSecrets } : {}),
+        ...(config.globalCredentials
+            ? { globalCredentials: config.globalCredentials }
+            : {}),
     });
 };
 /**

package/dist/wirings/scheduler/index.d.ts

@@ -1,3 +1,3 @@
 export { runScheduledTask, wireScheduler, getScheduledTasks, } from './scheduler-runner.js';
 export { logSchedulers } from './log-schedulers.js';
-export type { CoreScheduledTask, ScheduledTasksMeta, PikkuScheduledTask, } from './scheduler.types.js';
+export type { CoreScheduledTask, ScheduledTasksMeta, } from './scheduler.types.js';

package/dist/wirings/trigger/index.d.ts

@@ -1,3 +1,3 @@
 export { wireTrigger, wireTriggerSource } from './trigger-runner.js';
 export { PikkuTriggerService } from './pikku-trigger-service.js';
-export type { TriggerMeta, TriggerSourceMeta, CorePikkuTriggerFunction, CorePikkuTriggerFunctionConfig, CoreTrigger, PikkuTrigger, } from './trigger.types.js';
+export type { TriggerMeta, TriggerSourceMeta, CorePikkuTriggerFunction, CorePikkuTriggerFunctionConfig, CoreTrigger, } from './trigger.types.js';

package/dist/wirings/virtual-user/index.d.ts

@@ -16,15 +16,14 @@
  * {@link VirtualUserTarget}, which in production is an `HttpPersona`
  * signed in as a real user against staging or production.
  */
-export type { ApiCatalogueEntry, IntentRecord, IntentSource, IntentStatus, StepRecord, VirtualUserAction, VirtualUserBudget, VirtualUserDisposition, VirtualUserFinding, VirtualUserFindingKind, VirtualUserRunResult, VirtualUserTally, VirtualUserTarget, } from './virtual-user.types.js';
+export type { ApiCatalogueEntry, IntentSource, VirtualUserDisposition, VirtualUserFinding, VirtualUserRunResult, VirtualUserTarget, } from './virtual-user.types.js';
 export { PRODUCTION_DISPOSITION } from './virtual-user.types.js';
-export { runVirtualUser, rememberIds, type RunVirtualUserParams, type VirtualUserCallContext, } from './run-virtual-user.js';
+export { runVirtualUser, type RunVirtualUserParams, } from './run-virtual-user.js';
 export { personaScopes, prepareVirtualUserRun, type VirtualUserPreparation, } from './prepare-virtual-user-run.js';
 export type { VirtualUserRunOutcome, VirtualUserRunRecord, VirtualUserRunStart, VirtualUserRunStore, } from './virtual-user-run-store.js';
 export { DISPOSITIONS, dispositionProfile, type DispositionProfile, type VirtualUserTuning, } from './virtual-user-dispositions.js';
-export { catalogueClassification, catalogueIndex, catalogueLookup, describeEntry, isReadOnly, reachableCatalogue, renderCatalogue, unreachableCatalogue, } from './virtual-user-catalogue.js';
-export { reachableAgents, type AgentReachability, type ReachableAgent, } from './virtual-user-agents.js';
-export { IntentStack, intentsForPersona, type IntentMove, type ScheduledTick, } from './virtual-user-intents.js';
-export { createRng, type VirtualUserRng } from './virtual-user-rng.js';
+export { catalogueClassification, catalogueLookup, isReadOnly, reachableCatalogue, unreachableCatalogue, } from './virtual-user-catalogue.js';
+export { type AgentReachability, type ReachableAgent, } from './virtual-user-agents.js';
+export { IntentStack, intentsForPersona, } from './virtual-user-intents.js';
 export { deriveCatalogue, deriveIntents, type SchemaMap, } from './virtual-user-derive.js';
 export { personaVirtualUserTarget, type PersonaTargetOptions, } from './virtual-user-target.js';

package/dist/wirings/virtual-user/index.js

@@ -1,10 +1,8 @@
 export { PRODUCTION_DISPOSITION } from './virtual-user.types.js';
-export { runVirtualUser, rememberIds, } from './run-virtual-user.js';
+export { runVirtualUser, } from './run-virtual-user.js';
 export { personaScopes, prepareVirtualUserRun, } from './prepare-virtual-user-run.js';
 export { DISPOSITIONS, dispositionProfile, } from './virtual-user-dispositions.js';
-export { catalogueClassification, catalogueIndex, catalogueLookup, describeEntry, isReadOnly, reachableCatalogue, renderCatalogue, unreachableCatalogue, } from './virtual-user-catalogue.js';
-export { reachableAgents, } from './virtual-user-agents.js';
+export { catalogueClassification, catalogueLookup, isReadOnly, reachableCatalogue, unreachableCatalogue, } from './virtual-user-catalogue.js';
 export { IntentStack, intentsForPersona, } from './virtual-user-intents.js';
-export { createRng } from './virtual-user-rng.js';
 export { deriveCatalogue, deriveIntents, } from './virtual-user-derive.js';
 export { personaVirtualUserTarget, } from './virtual-user-target.js';

package/dist/wirings/workflow/dsl/workflow-dsl.types.d.ts

@@ -53,6 +53,19 @@ export interface WorkflowExpectServiceOptions extends WorkflowStepOptions {
     /** Assert the exact number of matching calls. Default: at least one. */
     times?: number;
 }
+/** Options for workflow.expectScore() */
+export interface WorkflowExpectScoreOptions extends WorkflowStepOptions {
+    /** Fail below this score. Defaults to 0.5 — a scorer that answered at all. */
+    atLeast?: number;
+    /** Fail above this score, for a scorer where high is the failure. */
+    atMost?: number;
+    /**
+     * The known-correct answer, which is what a reference-based judge grades
+     * against. Live traffic has no answer key, so a judge declared
+     * `requiresReference` is only ever reachable from a scenario.
+     */
+    reference?: string;
+}
 /**
  * Type signature for workflow.do() RPC form - used by inspector
  */
@@ -80,10 +93,50 @@ export type WorkflowWireSleep = (stepName: string, duration: string) => Promise<
  * loops, like dynamic `do()` step names.
  */
 export type WorkflowWireSuspend = (reason: string) => Promise<void>;
+/**
+ * Who is allowed to answer an approval gate, relative to the user who started
+ * the run.
+ *
+ * - `any` — anyone the approve entrypoint lets through. The gate is a pause for
+ *   a decision, not an authorization boundary.
+ * - `owner` — only the user who started the run, so a gate can be used to
+ *   confirm an action against the same person who requested it.
+ * - `not-initiator` — anyone *except* the user who started the run: four-eyes.
+ *   A run with no recorded initiator has nobody to exclude, so this degrades to
+ *   requiring a signed-in decider.
+ */
+export type WorkflowApprovalApprovers = 'any' | 'owner' | 'not-initiator';
+/**
+ * Who may answer an approval gate. Declared on the gate rather than the
+ * entrypoint because it is a property of the decision being made, and because
+ * one workflow can hold several gates with different requirements.
+ */
+export interface WorkflowApprovalPolicy {
+    /**
+     * Defaults to `any`. See {@link WorkflowApprovalApprovers}.
+     */
+    approvers?: WorkflowApprovalApprovers;
+    /**
+     * Additionally require the decider's session to hold this scope, so
+     * "a second pair of eyes" can be narrowed to "a second pair of *senior*
+     * eyes". Combines with `approvers` — both must pass.
+     */
+    approverScope?: string;
+}
+/**
+ * The decider, reduced to the two facts a policy can be expressed in terms of.
+ * Recorded alongside the decision so the gate can be judged on replay — the
+ * session itself is long gone by then — and carried into the settled outcome so
+ * the answer keeps its provenance.
+ */
+export interface ApprovalDecider {
+    userId?: string;
+    scopes?: string[];
+}
 /**
  * Options for workflow.approval().
  */
-export interface WorkflowApprovalOptions<TSchema extends StandardSchemaV1 = StandardSchemaV1> {
+export interface WorkflowApprovalOptions<TSchema extends StandardSchemaV1 = StandardSchemaV1> extends WorkflowApprovalPolicy {
     /**
      * Schema the decision payload is validated against. This is a VALUE, not a
      * type generic: the payload arrives from an untrusted caller over the approve
@@ -107,6 +160,14 @@ export interface WorkflowApprovalOptions<TSchema extends StandardSchemaV1 = Stan
 export type ApprovalOutcome<T> = {
     status: 'decided';
     data: T;
+    /**
+     * Who answered, and when. Run state holds the decision only while the gate
+     * is open — it is overwritten by the next write and cleared outright when a
+     * decision is refused — so the settled answer carries its own provenance
+     * into the step result, which is append-only.
+     */
+    decidedBy?: ApprovalDecider;
+    decidedAt?: string;
 } | {
     status: 'expired';
 };
@@ -386,6 +447,10 @@ export interface ApprovalStepMeta {
     outputVar?: string;
     /** Expiry duration, when one was given */
     expiry?: string | number;
+    /** Who may answer the gate, when the default was not used */
+    approvers?: WorkflowApprovalApprovers;
+    /** Scope the decider must hold, when one was required */
+    approverScope?: string;
 }
 /**
  * Filter step metadata (array.filter)
@@ -476,25 +541,21 @@ export interface PikkuWorkflowWire {
 /**
  * What a scenario has accumulated so far, shared by its body and its hooks.
  *
- * Typed as a partial of the scenario's own output because a scenario can fail
- * at any step: the shape describes what a *completed* run produces, and the
- * context holds however much of it this run reached. A scenario declaring no
- * object output gets an open record rather than `Partial<never>`.
+ * `Partial` because a scenario can fail at any step: `Out` describes what a
+ * *completed* run produces, and the context holds however much of it this run
+ * reached.
  *
- * `any` collapses to `any`, not to the union of both branches. `PikkuWire`'s
- * default depends on that: the wire type is also used as a generic *constraint*,
- * and a constraint carrying a concrete context would reject every wire whose
- * scenario output differs from it.
+ * The `0 extends 1 & Out` branch keeps `any` collapsing to `any` rather than to
+ * the union of the other two. `PikkuWire` and `PikkuFunctionConfig` both use
+ * this type as a generic *constraint*, and a constraint carrying a concrete
+ * context would reject every wire whose scenario output differs from it.
  */
 export type ScenarioContext<Out = unknown> = 0 extends 1 & Out ? any : Out extends object ? Partial<Out> : Record<string, unknown>;
 export interface PikkuScenarioWire<Out = unknown> extends PikkuWorkflowWire {
     /**
-     * Scratch the body writes and the `before`/`after` hooks read.
-     *
-     * A hook is a separate function, so it cannot see the body's locals — which
-     * is why teardown had nowhere to learn the ids the body minted. Assigning
-     * them here (`scenario.context.projectId = project.projectId`) hands them to
-     * `after`, which runs in a `finally` and so cleans up on a failed run too.
+     * Scratch the body writes and the `before`/`after` hooks read. A hook is a
+     * separate function and cannot see the body's locals, so this is how teardown
+     * learns the ids the body minted.
      *
      * Deliberately *not* a world: it is scoped to one run, and scenario steps
      * cannot reach it. Steps stay pure functions of their declared inputs, so the
@@ -510,6 +571,15 @@ export interface PikkuScenarioWire<Out = unknown> extends PikkuWorkflowWire {
     expectError: <TInput = any>(stepName: string, rpcName: string, data: TInput, options?: WorkflowExpectErrorOptions) => Promise<string>;
     /** Stub-assertion step: asserts `service.method` was called on the target server */
     expectService: (stepName: string, serviceMethod: string, options?: WorkflowExpectServiceOptions) => Promise<void>;
+    /**
+     * Grade-assertion step: runs one declared scorer against a finished agent run
+     * and asserts the score. Returns the grade, so a scenario can report the
+     * reason a judge gave rather than only that it fell short.
+     */
+    expectScore: (stepName: string, runId: string, scorerName: string, options?: WorkflowExpectScoreOptions) => Promise<{
+        score: number;
+        reason?: string;
+    }>;
     /**
      * Run a registered scenario step, as the setup the scenario starts from.
      *

package/dist/wirings/workflow/index.d.ts

@@ -2,23 +2,23 @@ export { PikkuWorkflowService } from './pikku-workflow-service.js';
 export { WorkflowCancelledException, WorkflowSuspendedException, WorkflowDispatchException, WorkflowNotFoundError, WorkflowRunNotFoundError, WorkflowApprovalResolvedError, WorkflowStepFunctionMismatchError, } from './workflow-errors.js';
 export { DEFAULT_STEP_RETRIES } from './workflow-constants.js';
 export { assertWorkflowRunOwner, WorkflowRunForbiddenError, } from './workflow-run-ownership.js';
-export type { RunLifecycleContext, WorkflowRunEngine, WorkflowRunExtension, } from './workflow-run-engine.types.js';
+export { WorkflowApprovalForbiddenError } from './workflow-approval-policy.js';
+export type { WorkflowRunEngine, WorkflowRunExtension, } from './workflow-run-engine.types.js';
 export { deriveInvocationId, uuidv5 } from './workflow-invocation-id.js';
 export { isRef } from './graph/workflow-graph.types.js';
 export type { RefValue } from './graph/workflow-graph.types.js';
 export { buildRunTimeline, reconstructStateAt, reconstructFinalState, } from './run-timeline.js';
-export type { RunTimeline, RunTimelineEvent, ReconstructedRunState, ReconstructedStep, RunPhase, } from './run-timeline.js';
+export type { RunTimeline, ReconstructedRunState, } from './run-timeline.js';
 export { addWorkflow } from './dsl/workflow-runner.js';
 export { addFeature, resolveFeatureScenarios } from './feature.js';
 export { template, type TemplateString } from './graph/template.js';
 export { pikkuWorkflowGraph, type PikkuWorkflowGraphConfig, type PikkuWorkflowGraphResult, } from './graph/wire-workflow-graph.js';
-export { pikkuWorkflowWorkerFunc, pikkuWorkflowOrchestratorFunc, pikkuWorkflowSleeperFunc, } from './workflow-queue-workers.js';
 export type { WorkflowStepInput as WorkflowStepQueueInput, PikkuWorkflowOrchestratorInput, PikkuWorkflowSleeperInput, } from './workflow-queue-workers.js';
-export type { WorkflowService, WorkflowQueueOptions, WorkflowServiceConfig, WorkflowPlannedStep, WorkflowRunWire, WorkflowStatus, WorkflowVersionStatus, StepStatus, WorkflowRun, WorkflowRunStatus, StepState, WorkflowRunService, WorkflowRunMirror, CoreWorkflow, CoreFeature, CoreFeatureScenario, FeatureMeta, FeatureMetaEntry, FeaturesMeta, FeaturePlanEntry, PikkuWorkflow, ContextVariable, WorkflowContext, WorkflowsMeta, WorkflowRuntimeMeta, WorkflowsRuntimeMeta, } from './workflow.types.js';
-export type { WorkflowStepOptions, WorkflowWireDoRPC, WorkflowWireDoInline, WorkflowWireSleep, WorkflowWireSuspend, WorkflowWireApproval, WorkflowApprovalOptions, ApprovalOutcome, InputSource, OutputBinding, RpcStepMeta, SimpleCondition, Condition, BranchCase, BranchStepMeta, ParallelGroupStepMeta, FanoutStepMeta, ReturnStepMeta, InlineStepMeta, SleepStepMeta, CancelStepMeta, SuspendStepMeta, ApprovalStepMeta, SetStepMeta, SwitchCaseMeta, SwitchStepMeta, FilterStepMeta, ArrayPredicateStepMeta, ScenarioStepInvocation, ScenarioStepMeta, WorkflowStepMeta, WorkflowStepWire, PikkuWorkflowWire, PikkuScenarioWire, } from './workflow.types.js';
+export type { WorkflowService, WorkflowQueueOptions, WorkflowServiceConfig, WorkflowPlannedStep, WorkflowRunWire, WorkflowStatus, WorkflowVersionStatus, StepStatus, WorkflowRun, WorkflowRunStatus, StepState, WorkflowRunService, WorkflowRunMirror, CoreWorkflow, CoreFeature, FeatureMeta, FeaturesMeta, FeaturePlanEntry, PikkuWorkflow, ContextVariable, WorkflowContext, WorkflowsMeta, WorkflowsRuntimeMeta, } from './workflow.types.js';
+export type { WorkflowStepOptions, WorkflowWireDoRPC, WorkflowApprovalOptions, ApprovalOutcome, InputSource, OutputBinding, RpcStepMeta, Condition, BranchStepMeta, ParallelGroupStepMeta, FanoutStepMeta, ReturnStepMeta, InlineStepMeta, SleepStepMeta, CancelStepMeta, SuspendStepMeta, ApprovalStepMeta, SetStepMeta, SwitchCaseMeta, SwitchStepMeta, FilterStepMeta, ArrayPredicateStepMeta, ScenarioStepInvocation, ScenarioStepMeta, WorkflowStepMeta, WorkflowStepWire, PikkuWorkflowWire, PikkuScenarioWire, } from './workflow.types.js';
 export type { ScenarioStepPhase, ScenarioStepKind, ScenarioStepOptions, PikkuScenarioStepWire, ScenarioEnvironment, ScenarioSurface, ScenarioSurfaceResolution, } from './scenario-step.types.js';
 export { SCENARIO_SURFACES } from './scenario-step.types.js';
-export { resolveScenarioSurfaces, witnessesAgree } from './scenario-surface.js';
+export { resolveScenarioSurfaces } from './scenario-surface.js';
 export { requireActor, requireScenarioEnv } from './scenario-step-guards.js';
 export { pollUntil, type PollOptions } from './scenario-poll.js';
 export { createCookieJar } from './scenario-cookie-jar.js';

package/dist/wirings/workflow/index.js

@@ -2,6 +2,7 @@ export { PikkuWorkflowService } from './pikku-workflow-service.js';
 export { WorkflowCancelledException, WorkflowSuspendedException, WorkflowDispatchException, WorkflowNotFoundError, WorkflowRunNotFoundError, WorkflowApprovalResolvedError, WorkflowStepFunctionMismatchError, } from './workflow-errors.js';
 export { DEFAULT_STEP_RETRIES } from './workflow-constants.js';
 export { assertWorkflowRunOwner, WorkflowRunForbiddenError, } from './workflow-run-ownership.js';
+export { WorkflowApprovalForbiddenError } from './workflow-approval-policy.js';
 export { deriveInvocationId, uuidv5 } from './workflow-invocation-id.js';
 export { isRef } from './graph/workflow-graph.types.js';
 export { buildRunTimeline, reconstructStateAt, reconstructFinalState, } from './run-timeline.js';
@@ -9,10 +10,9 @@ export { addWorkflow } from './dsl/workflow-runner.js';
 export { addFeature, resolveFeatureScenarios } from './feature.js';
 export { template } from './graph/template.js';
 export { pikkuWorkflowGraph, } from './graph/wire-workflow-graph.js';
-export { pikkuWorkflowWorkerFunc, pikkuWorkflowOrchestratorFunc, pikkuWorkflowSleeperFunc, } from './workflow-queue-workers.js';
 export { SCENARIO_SURFACES } from './scenario-step.types.js';
 // Which of a step's bindings run: one for an action, every witness for a `then`
-export { resolveScenarioSurfaces, witnessesAgree } from './scenario-surface.js';
+export { resolveScenarioSurfaces } from './scenario-surface.js';
 export { requireActor, requireScenarioEnv } from './scenario-step-guards.js';
 export { pollUntil } from './scenario-poll.js';
 export { createCookieJar } from './scenario-cookie-jar.js';