@pikku/core 0.12.82 → 0.12.84

package/CHANGELOG.md

@@ -1,3 +1,104 @@
+## 0.12.84
+
+### Patch Changes
+
+- 7406bfe: Rename the agent runtime from `AI*` to `Agent*` (#596)
+
+  `AI` described the model provider, not the thing being named. Every symbol that
+  belongs to the agent runtime now says `Agent`; the symbols that genuinely wrap a
+  model provider — `AIEmbeddingService`, `AIProviderOptions`, `AIEmbedParams`,
+  `AITranscriptionParams`, `AIGenerateImageParams` and their siblings, and the
+  `@pikku/ai-vercel` / `@pikku/ai-deepinfra` / `@pikku/ai-voice` packages — keep
+  their names.
+
+  **Wiring**
+  - `pikkuAIAgent` → `pikkuAgent`, `pikkuAIScorer` → `pikkuAgentScorer`,
+    `pikkuAIJudge` → `pikkuAgentJudge`
+  - `CoreAIAgent` → `CoreAgent`, `AIAgentInput` → `AgentInput`, `AIAgentStep` →
+    `AgentStep`, `AIMessage` → `AgentMessage`, and the rest of the agent types
+  - `AIAgentRunnerService` → `AgentRunnerService`, `AIStorageService` →
+    `AgentStorageService`, `AIRunStateService` → `AgentRunStateService`
+
+  **Entry points**
+
+  `@pikku/core/agent` → `@pikku/core/agent`, `@pikku/core/agent-scorer` →
+  `@pikku/core/agent-scorer`.
+
+  **Queues**
+
+  The scorer queues are now `agent-score-fast` and `agent-score-slow`. Drain the
+  old `ai-score-fast` / `ai-score-slow` queues before deploying — jobs still
+  sitting on them when the new workers start will never be picked up.
+
+  **Scaffolds**
+
+  The agent scaffold pikku wrote for your project — `<scaffold>/agent/agent.gen.ts`
+  and its schemas file — imports `@pikku/core/ai-agent`, which no longer exists. A
+  scaffold is normally written once and then left alone, so `pikku all` would find
+  it present and leave the broken import in place. It now deletes an agent scaffold
+  importing either removed entry point and regenerates it in the same run. Anything
+  you added to that file goes with it, so move local edits out first.
+
+  **Database**
+
+  The agent tables are renamed: `ai_threads`, `ai_message`, `ai_tool_call`,
+  `ai_working_memory`, `ai_run` and `ai_run_score` become `agent_threads`,
+  `agent_message`, `agent_tool_call`, `agent_working_memory`, `agent_run` and
+  `agent_run_score`, along with their indexes and the `ai_working_memory_pk`
+  constraint. The same rename applies to the MongoDB collections.
+
+  `ensurePikkuSchema` creates tables it cannot find, so an existing database will
+  get empty `agent_*` tables and leave the old data stranded in `ai_*`. Rename
+  them before the first boot on the new version:
+
+  ```sql
+  ALTER TABLE ai_threads        RENAME TO agent_threads;
+  ALTER TABLE ai_message        RENAME TO agent_message;
+  ALTER TABLE ai_tool_call      RENAME TO agent_tool_call;
+  ALTER TABLE ai_working_memory RENAME TO agent_working_memory;
+  ALTER TABLE ai_run            RENAME TO agent_run;
+  ALTER TABLE ai_run_score      RENAME TO agent_run_score;
+  ```
+
+- 6794681: Publish the ecosystem surface as per-area sub-barrels under `@pikku/core/ecosystem/*`, and point generated code, the CLI, the inspector and the runtime adapters at them.
+
+  348 names that only generated code, the toolchain or a runtime adapter ever imports now have a second home on `@pikku/core/ecosystem/<area>` — one sub-barrel per area, matching how core already publishes its entrypoints, so no single barrel grows without bound and a consumer only pulls in the area it uses.
+
+  This step is additive: every name is still exported from the entrypoint it was published from before, so nothing downstream breaks. Removing them from the app-facing barrels is a later change, and needs a release carrying `./ecosystem/*` first.
+
+## 0.12.83
+
+### Patch Changes
+
+- 02c4fe5: fix(core,inspector): let a host grant an addon secrets it could not declare
+
+  Scoping an addon's `SecretService` to its `declaredSecrets` left generic addons
+  with nothing readable: `declaredSecrets` is derived from the addon package's own
+  source, but the secrets an addon like `@pikku/addon-graph` reads are named by the
+  consuming app's workflow nodes at runtime. Every authenticated `graph:httpRequest`
+  threw.
+
+  `wireAddon` now takes `secretGrants: string[]` and `credentialGrants: string[]`,
+  completing the grant family alongside `secretOverrides` (grant + rename) and
+  `globalSecrets` (grant everything, with a reason). Grants name the secret as the
+  addon reads it, since the scope check runs before the override map renames it —
+  which is also why an override's key grants and its value does not.
+
+  A grant naming a secret the project does not declare is an `INVALID_VALUE`
+  critical at codegen, resolved through the override map before lookup.
+
+- 438b776: Move the scenario and feature surface off `@pikku/core/workflow` and onto
+  `@pikku/core/scenario`. Scenarios extend workflows, so the production workflow
+  wiring no longer names a scenario module in its import graph. Feature and
+  scenario types are declared in their own `scenario.types.ts` rather than in
+  `workflow.types.ts`. Import `requireActor`, `requireScenarioEnv`, `pollUntil`,
+  `createCookieJar`, `addFeature`, `ScenarioHttpResponse` and the rest from
+  `@pikku/core/scenario`; `HttpPersonasConfig` now comes from
+  `@pikku/core/persona` rather than `@pikku/core/services`.
+- 438b776: Remove the `@pikku/core/internal` entry point. It aliased the same file as
+  `@pikku/core/ecosystem`, so the two published an identical set of names under
+  two specifiers. Import from `@pikku/core/ecosystem`.
+
 ## 0.12.82
 
 ### Patch Changes

package/README.md

@@ -30,7 +30,7 @@ Wire them to HTTP, queues, cron, channels or MCP, then run `npx pikku` to
 regenerate the bootstrap files and typed clients.
 
 Subpath exports cover the individual wiring types — `@pikku/core/http`,
-`@pikku/core/workflow`, `@pikku/core/channel`, `@pikku/core/ai-agent` and more.
+`@pikku/core/workflow`, `@pikku/core/channel`, `@pikku/core/agent` and more.
 
 ## Docs
 

package/dist/ecosystem/agent-scorer.d.ts

@@ -0,0 +1,12 @@
+export { gradeRun } from '../wirings/agent-scorer/agent-scorer-grade.js';
+export { addAgentScorer } from '../wirings/agent-scorer/agent-scorer-registry.js';
+export { enableScoreSnapshots, getScoreSnapshot, } from '../wirings/agent-scorer/agent-scorer-snapshots.js';
+export { wireAgentScorerQueueWorkers } from '../wirings/agent-scorer/agent-scorer-worker.js';
+export { pikkuAgentJudge, pikkuAgentScorer, } from '../wirings/agent-scorer/agent-scorer.js';
+export type { ScorerMeta } from '../wirings/agent-scorer/agent-scorer.types.js';
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type { PikkuAgentScorer, ScoreJob, ScorerInput, ScorerOutput, } from '../wirings/agent-scorer/agent-scorer.types.js';

package/dist/ecosystem/agent-scorer.js

@@ -0,0 +1,5 @@
+export { gradeRun } from '../wirings/agent-scorer/agent-scorer-grade.js';
+export { addAgentScorer } from '../wirings/agent-scorer/agent-scorer-registry.js';
+export { enableScoreSnapshots, getScoreSnapshot, } from '../wirings/agent-scorer/agent-scorer-snapshots.js';
+export { wireAgentScorerQueueWorkers } from '../wirings/agent-scorer/agent-scorer-worker.js';
+export { pikkuAgentJudge, pikkuAgentScorer, } from '../wirings/agent-scorer/agent-scorer.js';

package/dist/ecosystem/agent.d.ts

@@ -0,0 +1,18 @@
+export { agent, agentApprove, agentResume, agentStream, } from '../wirings/agent/agent-helpers.js';
+export { resolveModelAlias } from '../wirings/agent/agent-model-config.js';
+export { canAccessThread, isOwnedByPrincipal, threadOwnerConstraint, } from '../wirings/agent/agent-prepare.js';
+export { addAgent } from '../wirings/agent/agent-registry.js';
+export type { AgentInput, AgentMemoryConfig, AgentsMeta, AgentStep, AgentContentPart, AgentRunRow, AgentRunService, CoreAgent, PendingApproval, PikkuAgentMiddlewareHooks, } from '../wirings/agent/agent.types.js';
+export { voiceInput } from '../wirings/agent/voice-input.js';
+export { voiceOutput } from '../wirings/agent/voice-output.js';
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type { LogLevel } from '../services/logger.js';
+export type { WebhookServiceConfig } from '../services/webhook-service.js';
+export type { CoreSingletonServices, PostgresConfig, } from '../types/core.types.js';
+export type { SpeakableScripts } from '../wirings/agent/voice-output.js';
+export type { WorkflowServiceConfig } from '../wirings/workflow/workflow.types.js';
+export type { VoiceOutputState } from '../wirings/agent/voice-output.js';

package/dist/ecosystem/agent.js

@@ -0,0 +1,6 @@
+export { agent, agentApprove, agentResume, agentStream, } from '../wirings/agent/agent-helpers.js';
+export { resolveModelAlias } from '../wirings/agent/agent-model-config.js';
+export { canAccessThread, isOwnedByPrincipal, threadOwnerConstraint, } from '../wirings/agent/agent-prepare.js';
+export { addAgent } from '../wirings/agent/agent-registry.js';
+export { voiceInput } from '../wirings/agent/voice-input.js';
+export { voiceOutput } from '../wirings/agent/voice-output.js';

package/dist/ecosystem/ai-agent.d.ts

@@ -0,0 +1,18 @@
+export { agent, agentApprove, agentResume, agentStream, } from '../wirings/ai-agent/ai-agent-helpers.js';
+export { resolveModelAlias } from '../wirings/ai-agent/ai-agent-model-config.js';
+export { canAccessThread, isOwnedByPrincipal, threadOwnerConstraint, } from '../wirings/ai-agent/ai-agent-prepare.js';
+export { addAIAgent } from '../wirings/ai-agent/ai-agent-registry.js';
+export type { AIAgentInput, AIAgentMemoryConfig, AIAgentMeta, AIAgentStep, AIContentPart, AgentRunRow, AgentRunService, CoreAIAgent, PendingApproval, PikkuAIMiddlewareHooks, } from '../wirings/ai-agent/ai-agent.types.js';
+export { voiceInput } from '../wirings/ai-agent/voice-input.js';
+export { voiceOutput } from '../wirings/ai-agent/voice-output.js';
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type { LogLevel } from '../services/logger.js';
+export type { WebhookServiceConfig } from '../services/webhook-service.js';
+export type { CoreSingletonServices, PostgresConfig, } from '../types/core.types.js';
+export type { SpeakableScripts } from '../wirings/ai-agent/voice-output.js';
+export type { WorkflowServiceConfig } from '../wirings/workflow/workflow.types.js';
+export type { VoiceOutputState } from '../wirings/ai-agent/voice-output.js';

package/dist/ecosystem/ai-agent.js

@@ -0,0 +1,6 @@
+export { agent, agentApprove, agentResume, agentStream, } from '../wirings/ai-agent/ai-agent-helpers.js';
+export { resolveModelAlias } from '../wirings/ai-agent/ai-agent-model-config.js';
+export { canAccessThread, isOwnedByPrincipal, threadOwnerConstraint, } from '../wirings/ai-agent/ai-agent-prepare.js';
+export { addAIAgent } from '../wirings/ai-agent/ai-agent-registry.js';
+export { voiceInput } from '../wirings/ai-agent/voice-input.js';
+export { voiceOutput } from '../wirings/ai-agent/voice-output.js';

package/dist/ecosystem/ai-scorer.d.ts

@@ -0,0 +1,12 @@
+export { gradeRun } from '../wirings/ai-scorer/ai-scorer-grade.js';
+export { addAIScorer } from '../wirings/ai-scorer/ai-scorer-registry.js';
+export { enableScoreSnapshots, getScoreSnapshot, } from '../wirings/ai-scorer/ai-scorer-snapshots.js';
+export { wireAIScorerQueueWorkers } from '../wirings/ai-scorer/ai-scorer-worker.js';
+export { pikkuAIJudge, pikkuAIScorer } from '../wirings/ai-scorer/ai-scorer.js';
+export type { ScorerMeta } from '../wirings/ai-scorer/ai-scorer.types.js';
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type { PikkuAIScorer, ScoreJob, ScorerInput, ScorerOutput, } from '../wirings/ai-scorer/ai-scorer.types.js';

package/dist/ecosystem/ai-scorer.js

@@ -0,0 +1,5 @@
+export { gradeRun } from '../wirings/ai-scorer/ai-scorer-grade.js';
+export { addAIScorer } from '../wirings/ai-scorer/ai-scorer-registry.js';
+export { enableScoreSnapshots, getScoreSnapshot, } from '../wirings/ai-scorer/ai-scorer-snapshots.js';
+export { wireAIScorerQueueWorkers } from '../wirings/ai-scorer/ai-scorer-worker.js';
+export { pikkuAIJudge, pikkuAIScorer } from '../wirings/ai-scorer/ai-scorer.js';

package/dist/ecosystem/channel/local.d.ts

@@ -0,0 +1 @@
+export { PikkuLocalChannelHandler } from '../../wirings/channel/local/local-channel-handler.js';

package/dist/ecosystem/channel/local.js

@@ -0,0 +1 @@
+export { PikkuLocalChannelHandler } from '../../wirings/channel/local/local-channel-handler.js';

package/dist/ecosystem/channel.d.ts

@@ -0,0 +1,12 @@
+export { addChannelMiddleware } from '../wirings/channel/channel-middleware-runner.js';
+export type { Capabilities } from '../wirings/channel/channel-rpc.types.js';
+export type { BinaryData, ChannelMessageMeta, ChannelMeta, ChannelsMeta, CoreChannel, CorePikkuChannelMiddleware, CorePikkuChannelMiddlewareFactory, PikkuChannelHandlerFactory, } from '../wirings/channel/channel.types.js';
+export { EventHubStore } from '../wirings/channel/eventhub-store.js';
+export { logChannels } from '../wirings/channel/log-channels.js';
+export { PikkuAbstractChannelHandler } from '../wirings/channel/pikku-abstract-channel-handler.js';
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type { Logger } from '../services/logger.js';

package/dist/ecosystem/channel.js

@@ -0,0 +1,4 @@
+export { addChannelMiddleware } from '../wirings/channel/channel-middleware-runner.js';
+export { EventHubStore } from '../wirings/channel/eventhub-store.js';
+export { logChannels } from '../wirings/channel/log-channels.js';
+export { PikkuAbstractChannelHandler } from '../wirings/channel/pikku-abstract-channel-handler.js';

package/dist/ecosystem/cli/channel.d.ts

@@ -0,0 +1,16 @@
+export { handleRawCLI } from '../../wirings/cli/channel/cli-raw-channel-runner.js';
+export type { RawCLIFrame } from '../../wirings/cli/channel/cli-raw-channel-runner.js';
+export { executeRawCLIViaChannel } from '../../wirings/cli/channel/cli-raw-client-runner.js';
+export type { CorePikkuCLIClientRender } from '../../wirings/cli/channel/cli-raw-client-runner.js';
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type { LogLevel } from '../../services/logger.js';
+export type { WebhookServiceConfig } from '../../services/webhook-service.js';
+export type { CoreSingletonServices, CoreUserSession, CreateWireServices, PostgresConfig, } from '../../types/core.types.js';
+export type { ApprovalRequester, Capabilities, } from '../../wirings/channel/channel-rpc.types.js';
+export type { PikkuChannel } from '../../wirings/channel/channel.types.js';
+export type { RawCLIResult } from '../../wirings/cli/channel/cli-raw-channel-runner.js';
+export type { WorkflowServiceConfig } from '../../wirings/workflow/workflow.types.js';

package/dist/ecosystem/cli/channel.js

@@ -0,0 +1,2 @@
+export { handleRawCLI } from '../../wirings/cli/channel/cli-raw-channel-runner.js';
+export { executeRawCLIViaChannel } from '../../wirings/cli/channel/cli-raw-client-runner.js';

package/dist/ecosystem/cli.d.ts

@@ -0,0 +1,9 @@
+export { CLIError, executeCLI } from '../wirings/cli/cli-runner.js';
+export type { CLICommandMeta, CLIMeta, CLIProgramMeta, CoreCLI, CoreCLICommandConfig, CorePikkuCLIRender, } from '../wirings/cli/cli.types.js';
+export { generateCommandHelp } from '../wirings/cli/command-parser.js';
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type { CreateConfig, CreateSingletonServices, CreateWireServices, } from '../types/core.types.js';

package/dist/ecosystem/cli.js

@@ -0,0 +1,2 @@
+export { CLIError, executeCLI } from '../wirings/cli/cli-runner.js';
+export { generateCommandHelp } from '../wirings/cli/command-parser.js';

package/dist/ecosystem/credential.d.ts

@@ -0,0 +1,9 @@
+export type { CredentialDefinitions } from '../wirings/credential/credential.types.js';
+export { validateAndBuildCredentialDefinitionsMeta } from '../wirings/credential/validate-credential-definitions.js';
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type { SchemaRefLike } from '../types/core.types.js';
+export type { CredentialDefinitionsMeta } from '../wirings/credential/credential.types.js';

package/dist/ecosystem/credential.js

@@ -0,0 +1 @@
+export { validateAndBuildCredentialDefinitionsMeta } from '../wirings/credential/validate-credential-definitions.js';

package/dist/ecosystem/dev.d.ts

@@ -0,0 +1,8 @@
+export { reconcileAddonRegistry, reloadGeneratedMeta, } from '../dev/reload-meta.js';
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type { ReloadGeneratedMetaOptions } from '../dev/reload-meta.js';
+export type { Logger } from '../services/logger.js';

package/dist/ecosystem/dev.js

@@ -0,0 +1 @@
+export { reconcileAddonRegistry, reloadGeneratedMeta, } from '../dev/reload-meta.js';

package/dist/ecosystem/function.d.ts

@@ -0,0 +1,13 @@
+export { getAllFunctionNames } from '../function/function-runner.js';
+export { pikkuAuth } from '../function/functions.types.js';
+export type { CorePikkuAuth, CorePikkuAuthConfig, CorePikkuFunction, CorePikkuFunctionConfig, CorePikkuFunctionSessionless, CorePikkuPermission, CorePikkuSessionlessFunctionConfig, } from '../function/functions.types.js';
+export type { ListInput, ListOutput } from '../function/list.types.js';
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type { LogLevel } from '../services/logger.js';
+export type { WebhookServiceConfig } from '../services/webhook-service.js';
+export type { CoreSecretlessSingletonServices, CoreSingletonServices, CoreUserSession, PostgresConfig, SecretlessServices, } from '../types/core.types.js';
+export type { WorkflowServiceConfig } from '../wirings/workflow/workflow.types.js';

package/dist/ecosystem/function.js

@@ -0,0 +1,2 @@
+export { getAllFunctionNames } from '../function/function-runner.js';
+export { pikkuAuth } from '../function/functions.types.js';

package/dist/ecosystem/gateway.d.ts

@@ -0,0 +1 @@
+export type { GatewayTransportType, GatewaysMeta, } from '../wirings/gateway/gateway.types.js';

package/dist/ecosystem/gateway.js

@@ -0,0 +1 @@
+export {};

package/dist/ecosystem/hmac.d.ts

@@ -0,0 +1 @@
+export { hmacSha256Hex, timingSafeStringEqual } from '../utils/hmac.js';

package/dist/ecosystem/hmac.js

@@ -0,0 +1 @@
+export { hmacSha256Hex, timingSafeStringEqual } from '../utils/hmac.js';

package/dist/ecosystem/http.d.ts

@@ -0,0 +1,11 @@
+export type { AssertHTTPWiringParams, CoreHTTPFunctionWiring, HTTPMethod, HTTPRouteBaseConfig, HTTPWiringsMeta, PikkuHTTP, PikkuHTTPResponse, PikkuQuery, RunHTTPWiringOptions, } from '../wirings/http/http.types.js';
+export { logRoutes } from '../wirings/http/log-http-routes.js';
+export { DEFAULT_MAX_BODY_SIZE } from '../wirings/http/pikku-fetch-http-request.js';
+export { toWebRequest } from '../wirings/http/web-request.js';
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type { Logger } from '../services/logger.js';
+export type { PikkuHTTPRequest } from '../wirings/http/http.types.js';

package/dist/ecosystem/http.js

@@ -0,0 +1,3 @@
+export { logRoutes } from '../wirings/http/log-http-routes.js';
+export { DEFAULT_MAX_BODY_SIZE } from '../wirings/http/pikku-fetch-http-request.js';
+export { toWebRequest } from '../wirings/http/web-request.js';

package/dist/ecosystem/mcp.d.ts

@@ -0,0 +1,3 @@
+export { MCPEndpointRegistry } from '../wirings/mcp/mcp-endpoint-registry.js';
+export { MCPError, getMCPPromptsMeta, getMCPResourcesMeta, getMCPToolsMeta, } from '../wirings/mcp/mcp-runner.js';
+export type { AssertMCPResourceURIParams, CoreMCPPrompt, CoreMCPResource, MCPPromptMeta, MCPResourceMeta, MCPToolMeta, MCPToolResponse, PikkuMCP, } from '../wirings/mcp/mcp.types.js';

package/dist/ecosystem/mcp.js

@@ -0,0 +1,2 @@
+export { MCPEndpointRegistry } from '../wirings/mcp/mcp-endpoint-registry.js';
+export { MCPError, getMCPPromptsMeta, getMCPResourcesMeta, getMCPToolsMeta, } from '../wirings/mcp/mcp-runner.js';

package/dist/ecosystem/middleware.d.ts

@@ -0,0 +1,17 @@
+export { runMiddleware } from '../middleware-runner.js';
+export { authAPIKey } from '../middleware/auth-apikey.js';
+export { authCookie } from '../middleware/auth-cookie.js';
+export { pikkuRemoteAuthMiddleware } from '../middleware/remote-auth.js';
+export { telemetryInner, telemetryOuter } from '../middleware/telemetry.js';
+export { addGlobalPermission } from '../permissions.js';
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type { CorePermissionGroup, CorePikkuPermission, } from '../function/functions.types.js';
+export type { LogLevel } from '../services/logger.js';
+export type { WebhookServiceConfig } from '../services/webhook-service.js';
+export type { RelativeTimeInput } from '../time-utils.js';
+export type { CorePikkuMiddleware, CorePikkuMiddlewareFactory, CoreSingletonServices, CoreUserSession, PostgresConfig, } from '../types/core.types.js';
+export type { WorkflowServiceConfig } from '../wirings/workflow/workflow.types.js';

package/dist/ecosystem/middleware.js

@@ -0,0 +1,6 @@
+export { runMiddleware } from '../middleware-runner.js';
+export { authAPIKey } from '../middleware/auth-apikey.js';
+export { authCookie } from '../middleware/auth-cookie.js';
+export { pikkuRemoteAuthMiddleware } from '../middleware/remote-auth.js';
+export { telemetryInner, telemetryOuter } from '../middleware/telemetry.js';
+export { addGlobalPermission } from '../permissions.js';

package/dist/ecosystem/node-host-resolver.d.ts

@@ -0,0 +1 @@
+export { installNodeHostResolver } from '../utils/node-host-resolver.js';

package/dist/ecosystem/node-host-resolver.js

@@ -0,0 +1 @@
+export { installNodeHostResolver } from '../utils/node-host-resolver.js';

package/dist/ecosystem/node.d.ts

@@ -0,0 +1 @@
+export type { CoreNodeConfig, NodeType, NodesMeta, } from '../wirings/node/node.types.js';

package/dist/ecosystem/node.js

@@ -0,0 +1 @@
+export {};

package/dist/ecosystem/oauth2.d.ts

@@ -0,0 +1 @@
+export type { OAuth2AppCredential, OAuth2Token, } from '../wirings/oauth2/oauth2.types.js';

package/dist/ecosystem/oauth2.js

@@ -0,0 +1 @@
+export {};

package/dist/ecosystem/persona.d.ts

@@ -0,0 +1,15 @@
+export { HttpPersona, createHttpPersonas } from '../services/http-personas.js';
+export type { HttpPersonasConfig } from '../services/http-personas.js';
+export { personaEmails } from '../wirings/persona/persona-email.js';
+export { personaEnvironmentErrors, personaEnvironmentRefusal, } from '../wirings/persona/persona-environments.js';
+export type { CorePersona, PersonaAccountMeta, PersonaDefinitions, } from '../wirings/persona/persona.types.js';
+export { roleMismatchMessage, validateAndBuildPersonasMeta, verifyPersonaRoles, } from '../wirings/persona/validate-personas.js';
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type { ScenarioPersonas } from '../services/personas-service.js';
+export type { PersonaEnvironment, PersonaEnvironmentSubject, } from '../wirings/persona/persona-environments.js';
+export type { PersonasMeta } from '../wirings/persona/persona.types.js';
+export type { RoleVerification } from '../wirings/persona/validate-personas.js';

package/dist/ecosystem/persona.js

@@ -0,0 +1,4 @@
+export { HttpPersona, createHttpPersonas } from '../services/http-personas.js';
+export { personaEmails } from '../wirings/persona/persona-email.js';
+export { personaEnvironmentErrors, personaEnvironmentRefusal, } from '../wirings/persona/persona-environments.js';
+export { roleMismatchMessage, validateAndBuildPersonasMeta, verifyPersonaRoles, } from '../wirings/persona/validate-personas.js';

package/dist/ecosystem/queue.d.ts

@@ -0,0 +1,11 @@
+export { QueueJobDiscardedError, QueueJobFailedError, } from '../wirings/queue/queue-runner.js';
+export type { ConfigValidationResult, CoreQueueWorker, JobOptions, PikkuJobConfig, PikkuWorkerConfig, QueueWorkers, QueueWorkersMeta, } from '../wirings/queue/queue.types.js';
+export { registerQueueWorkers } from '../wirings/queue/register-queue-helper.js';
+export type { QueueConfigMapping } from '../wirings/queue/validate-worker-config.js';
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type { Logger } from '../services/logger.js';
+export type { QueueRegistrationCallback } from '../wirings/queue/register-queue-helper.js';

package/dist/ecosystem/queue.js

@@ -0,0 +1,2 @@
+export { QueueJobDiscardedError, QueueJobFailedError, } from '../wirings/queue/queue-runner.js';
+export { registerQueueWorkers } from '../wirings/queue/register-queue-helper.js';

package/dist/ecosystem/remote.d.ts

@@ -0,0 +1,8 @@
+export { buildRemoteHeaders } from '../remote.js';
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type { JWTService } from '../services/jwt-service.js';
+export type { SecretService } from '../services/secret-service.js';

package/dist/ecosystem/remote.js

@@ -0,0 +1 @@
+export { buildRemoteHeaders } from '../remote.js';

package/dist/ecosystem/role.d.ts

@@ -0,0 +1,3 @@
+export { defineSystemRole } from '../wirings/role/define-system-role.js';
+export type { CoreSystemRole, CoreSystemRoles, SystemRole, SystemRoleDefinitionMeta, SystemRoleDefinitions, SystemRoleDefinitionsMeta, } from '../wirings/role/role.types.js';
+export { flattenSystemRoleDefinitions, validateAndBuildSystemRoleDefinitionsMeta, } from '../wirings/role/validate-role-definitions.js';

package/dist/ecosystem/role.js

@@ -0,0 +1,2 @@
+export { defineSystemRole } from '../wirings/role/define-system-role.js';
+export { flattenSystemRoleDefinitions, validateAndBuildSystemRoleDefinitionsMeta, } from '../wirings/role/validate-role-definitions.js';

package/dist/ecosystem/rpc.d.ts

@@ -0,0 +1,4 @@
+export { wireAddon } from '../wirings/rpc/wire-addon.js';
+export type { WireAddonConfig } from '../wirings/rpc/wire-addon.js';
+export { wireRemoteAddon } from '../wirings/rpc/wire-remote-addon.js';
+export type { RemoteAddonAuth, WireRemoteAddonConfig, } from '../wirings/rpc/wire-remote-addon.js';

package/dist/ecosystem/rpc.js

@@ -0,0 +1,2 @@
+export { wireAddon } from '../wirings/rpc/wire-addon.js';
+export { wireRemoteAddon } from '../wirings/rpc/wire-remote-addon.js';

package/dist/ecosystem/safe-fetch.d.ts

@@ -0,0 +1,7 @@
+export { safeFetch } from '../utils/safe-fetch.js';
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type { SafeFetchOptions } from '../utils/safe-fetch.js';

package/dist/ecosystem/safe-fetch.js

@@ -0,0 +1 @@
+export { safeFetch } from '../utils/safe-fetch.js';

package/dist/ecosystem/scenario.d.ts

@@ -0,0 +1,15 @@
+export type { PikkuScenarioWire, ScenarioStepMeta, } from '../wirings/workflow/dsl/workflow-dsl.types.js';
+export { addFeature, resolveFeatureScenarios, } from '../wirings/workflow/feature.js';
+export { PikkuScenarioService } from '../wirings/workflow/pikku-scenario-service.js';
+export { composeStepProse } from '../wirings/workflow/scenario-prose.js';
+export { SCENARIO_SURFACES } from '../wirings/workflow/scenario-step.types.js';
+export type { PikkuBrowserWire, ScenarioBrowserFailure, ScenarioBrowserProvider, ScenarioStepKind, ScenarioStepOptions, ScenarioStepPhase, } from '../wirings/workflow/scenario-step.types.js';
+export type { CoreFeature, FeaturesMeta, } from '../wirings/workflow/scenario.types.js';
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type { ScenarioSurface } from '../wirings/workflow/scenario-step.types.js';
+export type { FeaturePlanEntry } from '../wirings/workflow/scenario.types.js';
+export type { CoreWorkflow } from '../wirings/workflow/workflow.types.js';

package/dist/ecosystem/scenario.js

@@ -0,0 +1,4 @@
+export { addFeature, resolveFeatureScenarios, } from '../wirings/workflow/feature.js';
+export { PikkuScenarioService } from '../wirings/workflow/pikku-scenario-service.js';
+export { composeStepProse } from '../wirings/workflow/scenario-prose.js';
+export { SCENARIO_SURFACES } from '../wirings/workflow/scenario-step.types.js';

package/dist/ecosystem/scheduler.d.ts

@@ -0,0 +1,2 @@
+export { getScheduledTasks } from '../wirings/scheduler/scheduler-runner.js';
+export type { CoreScheduledTask, ScheduledTasksMeta, } from '../wirings/scheduler/scheduler.types.js';

package/dist/ecosystem/scheduler.js

@@ -0,0 +1 @@
+export { getScheduledTasks } from '../wirings/scheduler/scheduler-runner.js';

package/dist/ecosystem/schema.d.ts

@@ -0,0 +1 @@
+export { addSchema } from '../schema.js';

package/dist/ecosystem/schema.js

@@ -0,0 +1 @@
+export { addSchema } from '../schema.js';

package/dist/ecosystem/scope.d.ts

@@ -0,0 +1,3 @@
+export { defineScope } from '../wirings/scope/define-scope.js';
+export type { CoreScopeNode, CoreScopes, FlatScope, ScopeDefinitionMeta, ScopeDefinitions, ScopeDefinitionsMeta, ScopeNodeMeta, } from '../wirings/scope/scope.types.js';
+export { flattenScopeDefinitions, validateAndBuildScopeDefinitionsMeta, } from '../wirings/scope/validate-scope-definitions.js';

package/dist/ecosystem/scope.js

@@ -0,0 +1,2 @@
+export { defineScope } from '../wirings/scope/define-scope.js';
+export { flattenScopeDefinitions, validateAndBuildScopeDefinitionsMeta, } from '../wirings/scope/validate-scope-definitions.js';

package/dist/ecosystem/secret.d.ts

@@ -0,0 +1,9 @@
+export type { CoreSecret, OAuth2CredentialConfig, SecretDefinitionMeta, SecretDefinitions, } from '../wirings/secret/secret.types.js';
+export { validateAndBuildSecretDefinitionsMeta } from '../wirings/secret/validate-secret-definitions.js';
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type { SchemaRefLike } from '../types/core.types.js';
+export type { SecretDefinitionsMeta } from '../wirings/secret/secret.types.js';

package/dist/ecosystem/secret.js

@@ -0,0 +1 @@
+export { validateAndBuildSecretDefinitionsMeta } from '../wirings/secret/validate-secret-definitions.js';

package/dist/ecosystem/services/istanbul-coverage.d.ts

@@ -0,0 +1 @@
+export { IstanbulCoverageService } from '../../services/istanbul-coverage-service.js';

package/dist/ecosystem/services/istanbul-coverage.js

@@ -0,0 +1 @@
+export { IstanbulCoverageService } from '../../services/istanbul-coverage-service.js';

package/dist/ecosystem/services/local-content-request-handler.d.ts

@@ -0,0 +1,9 @@
+export { createLocalContentRequestHandler, verifySignedContentRequest, } from '../../services/local-content-request-handler.js';
+export type { LocalContentRequestHandler } from '../../services/local-content-request-handler.js';
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type { JWTService } from '../../services/jwt-service.js';
+export type { LocalContentRequestHandlerOptions, SignedContentVerification, } from '../../services/local-content-request-handler.js';

package/dist/ecosystem/services/local-content-request-handler.js

@@ -0,0 +1 @@
+export { createLocalContentRequestHandler, verifySignedContentRequest, } from '../../services/local-content-request-handler.js';

package/dist/ecosystem/services/local-content.d.ts

@@ -0,0 +1 @@
+export { signedContentPath } from '../../services/local-content.js';

package/dist/ecosystem/services/local-content.js

@@ -0,0 +1 @@
+export { signedContentPath } from '../../services/local-content.js';

package/dist/ecosystem/services/v8-coverage.d.ts

@@ -0,0 +1 @@
+export { V8CoverageService } from '../../services/v8-coverage-service.js';

package/dist/ecosystem/services/v8-coverage.js

@@ -0,0 +1 @@
+export { V8CoverageService } from '../../services/v8-coverage-service.js';