@pikku/core 0.12.82 → 0.12.84

package/src/agent-naming.test.ts

@@ -0,0 +1,68 @@
+import { describe, test } from 'node:test'
+import assert from 'node:assert/strict'
+import { readFileSync } from 'node:fs'
+import { fileURLToPath } from 'node:url'
+import { join, dirname } from 'node:path'
+
+const packageRoot = join(dirname(fileURLToPath(import.meta.url)), '..')
+const reportPath = join(packageRoot, 'api-report.md')
+
+/**
+ * `AI` described the model provider, never the agent runtime, so #596 renamed
+ * every agent symbol to `Agent`. The names below are the ones that survived,
+ * because each really does wrap a provider call.
+ *
+ * Listing them here is what makes the rule checkable: anything else exported as
+ * `AI*` is a symbol that slipped back to the old naming, and this fails rather
+ * than letting it reach a consumer.
+ */
+const PROVIDER_SYMBOLS = new Set([
+  'AIEmbeddingService',
+  'AIEmbedManyParams',
+  'AIEmbedManyResult',
+  'AIEmbedParams',
+  'AIEmbedResult',
+  'AIGenerateImageParams',
+  'AIGenerateImagePrompt',
+  'AIGenerateImageResult',
+  'AIGenerateSpeechParams',
+  'AIGenerateSpeechResult',
+  'AIProviderAuthError',
+  'AIProviderNotConfiguredError',
+  'AIProviderOptions',
+  'AIRerankParams',
+  'AIRerankResult',
+  'AITranscriptionParams',
+  'AITranscriptionResult',
+])
+
+describe('the agent runtime is not exported under the AI name', () => {
+  test('every AI* symbol in the public surface is a provider wrapper', () => {
+    const report = readFileSync(reportPath, 'utf-8')
+    const found = new Set(report.match(/\bAI[A-Z][A-Za-z]*/g) ?? [])
+
+    const strays = [...found].filter((name) => !PROVIDER_SYMBOLS.has(name))
+
+    assert.deepEqual(
+      strays,
+      [],
+      'these are exported as `AI*` but are not provider wrappers — rename them ' +
+        'to `Agent*`, or add them to PROVIDER_SYMBOLS if they genuinely wrap a ' +
+        'model provider call'
+    )
+  })
+
+  test('the agent entry points are the renamed ones', () => {
+    const { exports } = JSON.parse(
+      readFileSync(join(packageRoot, 'package.json'), 'utf-8')
+    )
+
+    assert.ok(exports['./agent'], 'expected the ./agent entry point')
+    assert.ok(
+      exports['./agent-scorer'],
+      'expected the ./agent-scorer entry point'
+    )
+    assert.equal(exports['./ai-agent'], undefined)
+    assert.equal(exports['./ai-scorer'], undefined)
+  })
+})

package/src/ecosystem/agent-scorer.ts

@@ -0,0 +1,24 @@
+export { gradeRun } from '../wirings/agent-scorer/agent-scorer-grade.js'
+export { addAgentScorer } from '../wirings/agent-scorer/agent-scorer-registry.js'
+export {
+  enableScoreSnapshots,
+  getScoreSnapshot,
+} from '../wirings/agent-scorer/agent-scorer-snapshots.js'
+export { wireAgentScorerQueueWorkers } from '../wirings/agent-scorer/agent-scorer-worker.js'
+export {
+  pikkuAgentJudge,
+  pikkuAgentScorer,
+} from '../wirings/agent-scorer/agent-scorer.js'
+export type { ScorerMeta } from '../wirings/agent-scorer/agent-scorer.types.js'
+
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type {
+  PikkuAgentScorer,
+  ScoreJob,
+  ScorerInput,
+  ScorerOutput,
+} from '../wirings/agent-scorer/agent-scorer.types.js'

package/src/ecosystem/agent.ts

@@ -0,0 +1,42 @@
+export {
+  agent,
+  agentApprove,
+  agentResume,
+  agentStream,
+} from '../wirings/agent/agent-helpers.js'
+export { resolveModelAlias } from '../wirings/agent/agent-model-config.js'
+export {
+  canAccessThread,
+  isOwnedByPrincipal,
+  threadOwnerConstraint,
+} from '../wirings/agent/agent-prepare.js'
+export { addAgent } from '../wirings/agent/agent-registry.js'
+export type {
+  AgentInput,
+  AgentMemoryConfig,
+  AgentsMeta,
+  AgentStep,
+  AgentContentPart,
+  AgentRunRow,
+  AgentRunService,
+  CoreAgent,
+  PendingApproval,
+  PikkuAgentMiddlewareHooks,
+} from '../wirings/agent/agent.types.js'
+export { voiceInput } from '../wirings/agent/voice-input.js'
+export { voiceOutput } from '../wirings/agent/voice-output.js'
+
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type { LogLevel } from '../services/logger.js'
+export type { WebhookServiceConfig } from '../services/webhook-service.js'
+export type {
+  CoreSingletonServices,
+  PostgresConfig,
+} from '../types/core.types.js'
+export type { SpeakableScripts } from '../wirings/agent/voice-output.js'
+export type { WorkflowServiceConfig } from '../wirings/workflow/workflow.types.js'
+export type { VoiceOutputState } from '../wirings/agent/voice-output.js'

package/src/ecosystem/channel/local.ts

@@ -0,0 +1 @@
+export { PikkuLocalChannelHandler } from '../../wirings/channel/local/local-channel-handler.js'

package/src/ecosystem/channel.ts

@@ -0,0 +1,22 @@
+export { addChannelMiddleware } from '../wirings/channel/channel-middleware-runner.js'
+export type { Capabilities } from '../wirings/channel/channel-rpc.types.js'
+export type {
+  BinaryData,
+  ChannelMessageMeta,
+  ChannelMeta,
+  ChannelsMeta,
+  CoreChannel,
+  CorePikkuChannelMiddleware,
+  CorePikkuChannelMiddlewareFactory,
+  PikkuChannelHandlerFactory,
+} from '../wirings/channel/channel.types.js'
+export { EventHubStore } from '../wirings/channel/eventhub-store.js'
+export { logChannels } from '../wirings/channel/log-channels.js'
+export { PikkuAbstractChannelHandler } from '../wirings/channel/pikku-abstract-channel-handler.js'
+
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type { Logger } from '../services/logger.js'

package/src/ecosystem/cli/channel.ts

@@ -0,0 +1,25 @@
+export { handleRawCLI } from '../../wirings/cli/channel/cli-raw-channel-runner.js'
+export type { RawCLIFrame } from '../../wirings/cli/channel/cli-raw-channel-runner.js'
+export { executeRawCLIViaChannel } from '../../wirings/cli/channel/cli-raw-client-runner.js'
+export type { CorePikkuCLIClientRender } from '../../wirings/cli/channel/cli-raw-client-runner.js'
+
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type { LogLevel } from '../../services/logger.js'
+export type { WebhookServiceConfig } from '../../services/webhook-service.js'
+export type {
+  CoreSingletonServices,
+  CoreUserSession,
+  CreateWireServices,
+  PostgresConfig,
+} from '../../types/core.types.js'
+export type {
+  ApprovalRequester,
+  Capabilities,
+} from '../../wirings/channel/channel-rpc.types.js'
+export type { PikkuChannel } from '../../wirings/channel/channel.types.js'
+export type { RawCLIResult } from '../../wirings/cli/channel/cli-raw-channel-runner.js'
+export type { WorkflowServiceConfig } from '../../wirings/workflow/workflow.types.js'

package/src/ecosystem/cli.ts

@@ -0,0 +1,21 @@
+export { CLIError, executeCLI } from '../wirings/cli/cli-runner.js'
+export type {
+  CLICommandMeta,
+  CLIMeta,
+  CLIProgramMeta,
+  CoreCLI,
+  CoreCLICommandConfig,
+  CorePikkuCLIRender,
+} from '../wirings/cli/cli.types.js'
+export { generateCommandHelp } from '../wirings/cli/command-parser.js'
+
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type {
+  CreateConfig,
+  CreateSingletonServices,
+  CreateWireServices,
+} from '../types/core.types.js'

package/src/ecosystem/credential.ts

@@ -0,0 +1,10 @@
+export type { CredentialDefinitions } from '../wirings/credential/credential.types.js'
+export { validateAndBuildCredentialDefinitionsMeta } from '../wirings/credential/validate-credential-definitions.js'
+
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type { SchemaRefLike } from '../types/core.types.js'
+export type { CredentialDefinitionsMeta } from '../wirings/credential/credential.types.js'

package/src/ecosystem/dev.ts

@@ -0,0 +1,12 @@
+export {
+  reconcileAddonRegistry,
+  reloadGeneratedMeta,
+} from '../dev/reload-meta.js'
+
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type { ReloadGeneratedMetaOptions } from '../dev/reload-meta.js'
+export type { Logger } from '../services/logger.js'

package/src/ecosystem/function.ts

@@ -0,0 +1,28 @@
+export { getAllFunctionNames } from '../function/function-runner.js'
+export { pikkuAuth } from '../function/functions.types.js'
+export type {
+  CorePikkuAuth,
+  CorePikkuAuthConfig,
+  CorePikkuFunction,
+  CorePikkuFunctionConfig,
+  CorePikkuFunctionSessionless,
+  CorePikkuPermission,
+  CorePikkuSessionlessFunctionConfig,
+} from '../function/functions.types.js'
+export type { ListInput, ListOutput } from '../function/list.types.js'
+
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type { LogLevel } from '../services/logger.js'
+export type { WebhookServiceConfig } from '../services/webhook-service.js'
+export type {
+  CoreSecretlessSingletonServices,
+  CoreSingletonServices,
+  CoreUserSession,
+  PostgresConfig,
+  SecretlessServices,
+} from '../types/core.types.js'
+export type { WorkflowServiceConfig } from '../wirings/workflow/workflow.types.js'

package/src/ecosystem/gateway.ts

@@ -0,0 +1,4 @@
+export type {
+  GatewayTransportType,
+  GatewaysMeta,
+} from '../wirings/gateway/gateway.types.js'

package/src/ecosystem/hmac.ts

@@ -0,0 +1 @@
+export { hmacSha256Hex, timingSafeStringEqual } from '../utils/hmac.js'

package/src/ecosystem/http.ts

@@ -0,0 +1,22 @@
+export type {
+  AssertHTTPWiringParams,
+  CoreHTTPFunctionWiring,
+  HTTPMethod,
+  HTTPRouteBaseConfig,
+  HTTPWiringsMeta,
+  PikkuHTTP,
+  PikkuHTTPResponse,
+  PikkuQuery,
+  RunHTTPWiringOptions,
+} from '../wirings/http/http.types.js'
+export { logRoutes } from '../wirings/http/log-http-routes.js'
+export { DEFAULT_MAX_BODY_SIZE } from '../wirings/http/pikku-fetch-http-request.js'
+export { toWebRequest } from '../wirings/http/web-request.js'
+
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type { Logger } from '../services/logger.js'
+export type { PikkuHTTPRequest } from '../wirings/http/http.types.js'

package/src/ecosystem/mcp.ts

@@ -0,0 +1,17 @@
+export { MCPEndpointRegistry } from '../wirings/mcp/mcp-endpoint-registry.js'
+export {
+  MCPError,
+  getMCPPromptsMeta,
+  getMCPResourcesMeta,
+  getMCPToolsMeta,
+} from '../wirings/mcp/mcp-runner.js'
+export type {
+  AssertMCPResourceURIParams,
+  CoreMCPPrompt,
+  CoreMCPResource,
+  MCPPromptMeta,
+  MCPResourceMeta,
+  MCPToolMeta,
+  MCPToolResponse,
+  PikkuMCP,
+} from '../wirings/mcp/mcp.types.js'

package/src/ecosystem/middleware.ts

@@ -0,0 +1,27 @@
+export { runMiddleware } from '../middleware-runner.js'
+export { authAPIKey } from '../middleware/auth-apikey.js'
+export { authCookie } from '../middleware/auth-cookie.js'
+export { pikkuRemoteAuthMiddleware } from '../middleware/remote-auth.js'
+export { telemetryInner, telemetryOuter } from '../middleware/telemetry.js'
+export { addGlobalPermission } from '../permissions.js'
+
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type {
+  CorePermissionGroup,
+  CorePikkuPermission,
+} from '../function/functions.types.js'
+export type { LogLevel } from '../services/logger.js'
+export type { WebhookServiceConfig } from '../services/webhook-service.js'
+export type { RelativeTimeInput } from '../time-utils.js'
+export type {
+  CorePikkuMiddleware,
+  CorePikkuMiddlewareFactory,
+  CoreSingletonServices,
+  CoreUserSession,
+  PostgresConfig,
+} from '../types/core.types.js'
+export type { WorkflowServiceConfig } from '../wirings/workflow/workflow.types.js'

package/src/ecosystem/node-host-resolver.ts

@@ -0,0 +1 @@
+export { installNodeHostResolver } from '../utils/node-host-resolver.js'

package/src/ecosystem/node.ts

@@ -0,0 +1,5 @@
+export type {
+  CoreNodeConfig,
+  NodeType,
+  NodesMeta,
+} from '../wirings/node/node.types.js'

package/src/ecosystem/oauth2.ts

@@ -0,0 +1,4 @@
+export type {
+  OAuth2AppCredential,
+  OAuth2Token,
+} from '../wirings/oauth2/oauth2.types.js'

package/src/ecosystem/persona.ts

@@ -0,0 +1,30 @@
+export { HttpPersona, createHttpPersonas } from '../services/http-personas.js'
+export type { HttpPersonasConfig } from '../services/http-personas.js'
+export { personaEmails } from '../wirings/persona/persona-email.js'
+export {
+  personaEnvironmentErrors,
+  personaEnvironmentRefusal,
+} from '../wirings/persona/persona-environments.js'
+export type {
+  CorePersona,
+  PersonaAccountMeta,
+  PersonaDefinitions,
+} from '../wirings/persona/persona.types.js'
+export {
+  roleMismatchMessage,
+  validateAndBuildPersonasMeta,
+  verifyPersonaRoles,
+} from '../wirings/persona/validate-personas.js'
+
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type { ScenarioPersonas } from '../services/personas-service.js'
+export type {
+  PersonaEnvironment,
+  PersonaEnvironmentSubject,
+} from '../wirings/persona/persona-environments.js'
+export type { PersonasMeta } from '../wirings/persona/persona.types.js'
+export type { RoleVerification } from '../wirings/persona/validate-personas.js'

package/src/ecosystem/queue.ts

@@ -0,0 +1,23 @@
+export {
+  QueueJobDiscardedError,
+  QueueJobFailedError,
+} from '../wirings/queue/queue-runner.js'
+export type {
+  ConfigValidationResult,
+  CoreQueueWorker,
+  JobOptions,
+  PikkuJobConfig,
+  PikkuWorkerConfig,
+  QueueWorkers,
+  QueueWorkersMeta,
+} from '../wirings/queue/queue.types.js'
+export { registerQueueWorkers } from '../wirings/queue/register-queue-helper.js'
+export type { QueueConfigMapping } from '../wirings/queue/validate-worker-config.js'
+
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type { Logger } from '../services/logger.js'
+export type { QueueRegistrationCallback } from '../wirings/queue/register-queue-helper.js'

package/src/ecosystem/remote.ts

@@ -0,0 +1,9 @@
+export { buildRemoteHeaders } from '../remote.js'
+
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type { JWTService } from '../services/jwt-service.js'
+export type { SecretService } from '../services/secret-service.js'

package/src/ecosystem/role.ts

@@ -0,0 +1,13 @@
+export { defineSystemRole } from '../wirings/role/define-system-role.js'
+export type {
+  CoreSystemRole,
+  CoreSystemRoles,
+  SystemRole,
+  SystemRoleDefinitionMeta,
+  SystemRoleDefinitions,
+  SystemRoleDefinitionsMeta,
+} from '../wirings/role/role.types.js'
+export {
+  flattenSystemRoleDefinitions,
+  validateAndBuildSystemRoleDefinitionsMeta,
+} from '../wirings/role/validate-role-definitions.js'

package/src/ecosystem/rpc.ts

@@ -0,0 +1,7 @@
+export { wireAddon } from '../wirings/rpc/wire-addon.js'
+export type { WireAddonConfig } from '../wirings/rpc/wire-addon.js'
+export { wireRemoteAddon } from '../wirings/rpc/wire-remote-addon.js'
+export type {
+  RemoteAddonAuth,
+  WireRemoteAddonConfig,
+} from '../wirings/rpc/wire-remote-addon.js'

package/src/ecosystem/safe-fetch.ts

@@ -0,0 +1,8 @@
+export { safeFetch } from '../utils/safe-fetch.js'
+
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type { SafeFetchOptions } from '../utils/safe-fetch.js'

package/src/ecosystem/scenario.ts

@@ -0,0 +1,32 @@
+export type {
+  PikkuScenarioWire,
+  ScenarioStepMeta,
+} from '../wirings/workflow/dsl/workflow-dsl.types.js'
+export {
+  addFeature,
+  resolveFeatureScenarios,
+} from '../wirings/workflow/feature.js'
+export { PikkuScenarioService } from '../wirings/workflow/pikku-scenario-service.js'
+export { composeStepProse } from '../wirings/workflow/scenario-prose.js'
+export { SCENARIO_SURFACES } from '../wirings/workflow/scenario-step.types.js'
+export type {
+  PikkuBrowserWire,
+  ScenarioBrowserFailure,
+  ScenarioBrowserProvider,
+  ScenarioStepKind,
+  ScenarioStepOptions,
+  ScenarioStepPhase,
+} from '../wirings/workflow/scenario-step.types.js'
+export type {
+  CoreFeature,
+  FeaturesMeta,
+} from '../wirings/workflow/scenario.types.js'
+
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type { ScenarioSurface } from '../wirings/workflow/scenario-step.types.js'
+export type { FeaturePlanEntry } from '../wirings/workflow/scenario.types.js'
+export type { CoreWorkflow } from '../wirings/workflow/workflow.types.js'

package/src/ecosystem/scheduler.ts

@@ -0,0 +1,5 @@
+export { getScheduledTasks } from '../wirings/scheduler/scheduler-runner.js'
+export type {
+  CoreScheduledTask,
+  ScheduledTasksMeta,
+} from '../wirings/scheduler/scheduler.types.js'

package/src/ecosystem/schema.ts

@@ -0,0 +1 @@
+export { addSchema } from '../schema.js'

package/src/ecosystem/scope.ts

@@ -0,0 +1,14 @@
+export { defineScope } from '../wirings/scope/define-scope.js'
+export type {
+  CoreScopeNode,
+  CoreScopes,
+  FlatScope,
+  ScopeDefinitionMeta,
+  ScopeDefinitions,
+  ScopeDefinitionsMeta,
+  ScopeNodeMeta,
+} from '../wirings/scope/scope.types.js'
+export {
+  flattenScopeDefinitions,
+  validateAndBuildScopeDefinitionsMeta,
+} from '../wirings/scope/validate-scope-definitions.js'

package/src/ecosystem/secret.ts

@@ -0,0 +1,15 @@
+export type {
+  CoreSecret,
+  OAuth2CredentialConfig,
+  SecretDefinitionMeta,
+  SecretDefinitions,
+} from '../wirings/secret/secret.types.js'
+export { validateAndBuildSecretDefinitionsMeta } from '../wirings/secret/validate-secret-definitions.js'
+
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type { SchemaRefLike } from '../types/core.types.js'
+export type { SecretDefinitionsMeta } from '../wirings/secret/secret.types.js'

package/src/ecosystem/services/istanbul-coverage.ts

@@ -0,0 +1 @@
+export { IstanbulCoverageService } from '../../services/istanbul-coverage-service.js'

package/src/ecosystem/services/local-content-request-handler.ts

@@ -0,0 +1,16 @@
+export {
+  createLocalContentRequestHandler,
+  verifySignedContentRequest,
+} from '../../services/local-content-request-handler.js'
+export type { LocalContentRequestHandler } from '../../services/local-content-request-handler.js'
+
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type { JWTService } from '../../services/jwt-service.js'
+export type {
+  LocalContentRequestHandlerOptions,
+  SignedContentVerification,
+} from '../../services/local-content-request-handler.js'

package/src/ecosystem/services/local-content.ts

@@ -0,0 +1 @@
+export { signedContentPath } from '../../services/local-content.js'

package/src/ecosystem/services/v8-coverage.ts

@@ -0,0 +1 @@
+export { V8CoverageService } from '../../services/v8-coverage-service.js'

package/src/ecosystem/services.ts

@@ -0,0 +1,82 @@
+export type {
+  AuditDurability,
+  AuditEvent,
+  AuditEventBatch,
+} from '../services/audit-service.js'
+export type {
+  DeploymentConfig,
+  DeploymentService,
+  DeploymentServiceConfig,
+} from '../services/deployment-service.js'
+export { InMemoryAgentRunStateService } from '../services/in-memory-agent-run-state-service.js'
+export type {
+  AgentMeta,
+  AgentsMeta,
+  EmailTemplateMeta,
+  EmailsMeta,
+  GroupMeta,
+  MCPMeta,
+  MetaService,
+  MiddlewareDefinitionMeta,
+  MiddlewareGroupsMeta,
+  MiddlewareInstanceMeta,
+  PermissionDefinitionMeta,
+  PermissionsGroupsMeta,
+  RPCMetaRecord,
+  ServiceMeta,
+  ServicesMetaRecord,
+} from '../services/meta-service.js'
+export type {
+  ResolvedPersona,
+  ScenarioPersonas,
+} from '../services/personas-service.js'
+export { pikkuWebhookWorkerFunc } from '../services/queue-webhook-service.js'
+export type {
+  ScheduledTaskInfo,
+  ScheduledTaskSummary,
+} from '../services/scheduler-service.js'
+export type { Role } from '../services/scope-service.js'
+export { getStubTracker, spy } from '../services/stub-tracker.js'
+export type { CredentialMetaInfo } from '../services/typed-credential-service.js'
+export type { CredentialMeta } from '../services/typed-secret-service.js'
+export { TypedVariablesService } from '../services/typed-variables-service.js'
+export type { VariableMeta } from '../services/typed-variables-service.js'
+export {
+  PikkuSessionService,
+  createMiddlewareSessionWireProps,
+} from '../services/user-session-service.js'
+export type {
+  CoverageFunctionMeta,
+  CoverageService,
+  FunctionCoverageEntry,
+  FunctionCoverageReport,
+  ScriptCoverage,
+} from '../services/v8-coverage-service.js'
+export { PIKKU_OUTGOING_WEBHOOK_QUEUE_NAME } from '../services/webhook-service.js'
+export type {
+  SendWebhookInput,
+  SendWebhookResult,
+  WebhookAttemptResult,
+  WebhookDeliveryRecord,
+  WebhookDeliveryWithAttempts,
+} from '../services/webhook-service.js'
+export type {
+  FunctionMeta,
+  FunctionsMeta,
+  MiddlewareMetadata as MiddlewareMeta,
+  PermissionMetadata as PermissionMeta,
+} from '../types/core.types.js'
+
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type { Logger } from '../services/logger.js'
+export type { StubTracker } from '../services/stub-tracker.js'
+export type { SessionService } from '../services/user-session-service.js'
+export type {
+  WebhookJobData,
+  WebhookService,
+} from '../services/webhook-service.js'
+export type { CoreUserSession } from '../types/core.types.js'