@pikku/core 0.12.83 → 0.12.84

package/knowledge/decisions/security/{ai-agent-sessionless-deployments-have-no-thread-ownership.md → agent-sessionless-deployments-have-no-thread-ownership.md}

@@ -2,14 +2,14 @@
 type: decision
 title: Agent thread ownership fails closed when there is no principal
 description: A sessionless caller gets an ephemeral owner and reaches no stored thread, rather than reaching all of them
-tags: ai-agent
+tags: agent
 ---
 
 # Agent thread ownership fails closed when there is no principal
 
 `canAccessThread` returns `false` and `threadOwnerConstraint` returns `[]` when
 the session carries neither `userId` nor `orgId`
-(`packages/core/src/wirings/ai-agent/ai-agent-prepare.ts`).
+(`packages/core/src/wirings/agent/agent-prepare.ts`).
 `resolveOwnerResourceId` never accepts the client-supplied `resourceId` as an
 ownership key; without a principal it mints an ephemeral `anon-<uuid>` owner
 memoized on the request's params object.
@@ -17,8 +17,8 @@ memoized on the request's params object.
 Agent wirings default to `auth: false`, so "no session" is the common case
 rather than an exotic one. Treating it as "no ownership model to enforce" made
 every ownership check vacuous: a caller named any `resourceId` and reached that
-thread, and because `undefined` on `AgentRunService.listThreads` means *no
-filter* rather than *no rows*, a sessionless `getAgentThreads` returned every
+thread, and because `undefined` on `AgentRunService.listThreads` means _no
+filter_ rather than _no rows_, a sessionless `getAgentThreads` returned every
 thread in the deployment. The ephemeral owner is what keeps one-shot
 conversations working while denying continuity — it is unguessable, so nothing
 stored can be reached, and it is stable within a request, so a sub-agent
@@ -32,7 +32,7 @@ field, never in its body.
 
 **What this rules out:** returning `undefined` from `threadOwnerConstraint` for
 any caller; deriving `owners` from request input instead of the session; reading
-`auth: false` as permission to skip ownership on a *stored* thread; and
+`auth: false` as permission to skip ownership on a _stored_ thread; and
 persisting the anonymous owner anywhere, which would turn an ephemeral identity
 into a forgeable one. Cross-request thread continuity without a session is not
 available by design — wire a session to get it back. See

package/knowledge/decisions/security/{ai-agent-thread-ownership-composes-the-session-principal.md → agent-thread-ownership-composes-the-session-principal.md}

@@ -2,12 +2,12 @@
 type: decision
 title: An agent thread key is always prefixed with the trusted principal
 description: Ownership keys are composed as principal:resourceId, so a client id can sub-divide its own boundary but never widen it
-tags: ai-agent
+tags: agent
 ---
 
 # An agent thread key is always prefixed with the trusted principal
 
-`resolveOwnerResourceId` in `packages/core/src/wirings/ai-agent/ai-agent-prepare.ts`
+`resolveOwnerResourceId` in `packages/core/src/wirings/agent/agent-prepare.ts`
 composes the ownership key for a thread or run as `principal:resourceId`. The
 principal is the trusted one — `session.userId` for the default `'user'`
 `SessionScope`, `session.orgId` for `'org'` — and the client-supplied

package/knowledge/decisions/security/{ai-agent-tool-filtering-reads-the-live-function-config.md → agent-tool-filtering-reads-the-live-function-config.md}

@@ -2,12 +2,12 @@
 type: decision
 title: Agent tool permission filtering reads the live function config, not the metadata
 description: The pikkuAuth brand survives only on live permission objects, so a metadata-driven check would silently admit every gated tool
-tags: ai-agent
+tags: agent
 ---
 
 # Agent tool permission filtering reads the live function config, not the metadata
 
-`buildToolDefs` in `packages/core/src/wirings/ai-agent/ai-agent-prepare.ts`
+`buildToolDefs` in `packages/core/src/wirings/agent/agent-prepare.ts`
 decides which tools and sub-agents to expose to the model by calling
 `checkAuthPermissions` against the permission objects held in the live function
 (or agent) config in `pikkuState`, using the metadata only to learn that a

package/knowledge/decisions/security/an-agent-approval-is-claimed-before-the-tool-runs.md

@@ -2,7 +2,7 @@
 type: decision
 title: An agent approval is claimed before the tool runs
 description: resolveApproval is a compare-and-swap returning whether this caller won, because the read that precedes it is not a claim and ten concurrent approvals would otherwise mean ten refunds
-tags: ai-agent
+tags: agent
 ---
 
 # An agent approval is claimed before the tool runs
@@ -15,7 +15,7 @@ same tool call all observed `suspended`, all snapshotted the same list, and all
 reached `execute`. `resolveApproval` returned `void`, so a loser could not even
 tell.
 
-`resolveApproval` is now the claim, and returns whether *this* caller made it.
+`resolveApproval` is now the claim, and returns whether _this_ caller made it.
 The stores implement it as a compare-and-swap: Kysely updates the run row only
 while `status = 'suspended'` and `pendingApprovals` still equals the list it
 read; the tool-call stores move the row off `approvalStatus = 'pending'` and
@@ -23,7 +23,7 @@ count the rows they changed. Both resume paths run the tool only for the ids the
 claimed, and a caller that claimed nothing gets an error rather than a silent
 re-run.
 
-The claim is per tool call, not per run, so concurrent approvals of *different*
+The claim is per tool call, not per run, so concurrent approvals of _different_
 tool calls on one run all proceed — which is the case that made a run-level
 `claimSuspendedRun` the worse fit.
 

package/knowledge/decisions/security/an-empty-owners-constraint-matches-nothing.md

@@ -2,13 +2,13 @@
 type: decision
 title: An empty owners constraint matches nothing
 description: owners is an authorization boundary, so every storage backend must treat [] as no rows rather than no filter
-tags: ai-agent, storage
+tags: agent, storage
 ---
 
 # An empty owners constraint matches nothing
 
 Every `AgentRunService.listThreads` implementation returns `[]` immediately when
-`owners` is present and empty — `kysely-ai-agent-run-service.ts`,
+`owners` is present and empty — `kysely-agent-run-service.ts`,
 `redis-agent-run-service.ts`, `mongodb-agent-run-service.ts`. The conformance
 suite in `packages/core/src/testing/service-tests.ts` pins it, so a new backend
 inherits the requirement instead of rediscovering it.
@@ -27,4 +27,4 @@ return; the two decisions only hold together.
 `if (owners)` path; treating `owners: []` as equivalent to `owners: undefined`
 at any layer; and adding a backend without the conformance suite.
 
-See [[ai-agent-sessionless-deployments-have-no-thread-ownership]].
+See [[agent-sessionless-deployments-have-no-thread-ownership]].

package/knowledge/decisions/security/console-addon-privileged-functions-gate-themselves.md

@@ -2,7 +2,7 @@
 type: decision
 title: The console addon's privileged functions gate themselves
 description: Thread listing is owner-scoped unless the caller holds admin, and addon installation requires an admin session, rather than trusting the host to register a global permission
-tags: addon, ai-agent, rpc
+tags: addon, agent, rpc
 ---
 
 # The console addon's privileged functions gate themselves
@@ -27,14 +27,18 @@ runner's, which for a `pikkuSessionlessFunc` fires only when the function itself
 sets `auth: true`.
 
 The addon's original authorization story was a single package-scoped
-`addGlobalPermission([isAdmin], '@pikku/addon-console')` that the *host*
+`addGlobalPermission([isAdmin], '@pikku/addon-console')` that the _host_
 registered, which `runPermissions` resolves in the callee's package namespace and
 applies to every function at once. Nothing generated that call — the scaffold
 emitted only a comment recommending it, and `resolveGlobalPermissions` returns an
 empty list when the host registered none, which `runPermissions` treats as
 allow. An app that followed the scaffold and stopped there had a fully open
-console surface. The scaffold now emits `wireAddon({ …, scopes: ['admin'] })`
-instead, which the function runner enforces on every function in the package.
+console surface. Every console function now declares its own
+`pikku:console:<area>:<action>` scope instead, which the function runner
+enforces per call. A blanket `wireAddon({ …, scopes: ['admin'] })` stood in for
+that briefly; it is gone, because a single grant covering secrets, source
+editing and the audit trail alike is not something an operator can reason
+about.
 
 The two functions whose failure mode is worst still do not depend on any
 package-wide gate:
@@ -51,16 +55,19 @@ storage backend already treats as no rows.
 attacker-chosen package name and write a wiring file into the project. They were
 `pikkuSessionlessFunc` with `auth: false`, which — behind a `no-auth` RPC route
 and with no host global permission — meant an unauthenticated POST reached
-`execFileSync`. They now declare `auth: true` and `scopes: ['admin']`, enforced
-by `verifyScopes` in the function runner before the body runs. Both gates are
-checked whether or not the host registered a global permission, and whether or
-not the addon itself was wired with scopes — an app that hand-wires
-`wireAddon({ name: 'console', package: '@pikku/addon-console' })` without them
+`execFileSync`. They now declare `auth: true` and
+`scopes: ['pikku:console:addons:install']`, enforced by `verifyScopes` in the
+function runner before the body runs. Both gates are
+checked whether or not the host registered a global permission — an app that
+hand-wires `wireAddon({ name: 'console', package: '@pikku/addon-console' })`
 still cannot reach `execFileSync` unauthenticated.
 
-`admin` is spelled as a literal here because it is a scope id in the addon's own
-`wireScope` tree, the same tree the `pikku:scopes:*` gates on the scope-admin
-functions come from.
+The scopes are spelled as literals here because they are scope ids in the
+addon's own `wireScope` tree — the same tree the `pikku:console:scopes:*` gates
+on the scope-admin functions come from. The generated secret and variable
+brokers live in the app's own scaffold rather than the addon, so the addon
+boundary never covered them; they carry `pikku:console:secrets:*` and
+`pikku:console:variables:*` themselves.
 
 **What this rules out:** treating the host's `addGlobalPermission` as the only
 gate in front of an operation that installs code or reads another principal's
@@ -72,5 +79,5 @@ is-this-localhost test.
 
 See [[addon-scopes-are-resolved-where-the-function-runs]],
 [[an-empty-owners-constraint-matches-nothing]],
-[[ai-agent-sessionless-deployments-have-no-thread-ownership]] and
+[[agent-sessionless-deployments-have-no-thread-ownership]] and
 [[global-permissions-and-function-permissions-are-independent-gates]].

package/knowledge/decisions/security/index.md

@@ -15,7 +15,7 @@ A rule about who may do what, and which way it fails when it is unsure.
 - [A permission gets a wire it cannot reply on](a-permission-gets-a-wire-it-cannot-reply-on.md) — The permission wire is typed with Out = never so a permission cannot send on the channel; that narrowing is not a subtype, so the call site asserts
 - [A step runs the function the workflow dispatched it with](a-step-runs-the-function-the-workflow-dispatched-it-with.md) — StepState records the step's function name so the worker can reject a queue message naming a different one, because the step executes under the run owner's identity
 - [A virtual user is never offered a scenario, platform or addon step](a-virtual-user-is-never-offered-a-step-that-would-forge-its-own-oracle.md) — Being able to invoke "the webhook arrives" lets the user manufacture the outcome it exists to discover, which invalidates every finding downstream
-- [A workflow run is read by its owner, and answered by whoever its gate declares](a-workflow-run-is-read-and-approved-by-its-owner.md) — A run started through a session records that user and only that user may read it; who may answer an approval gate is the gate's own declaration, and a run with no recorded owner has no ownership to enforce
+- [A workflow run is read and approved by its owner](a-workflow-run-is-read-and-approved-by-its-owner.md) — A run started through a session records that user and only that user may read it or answer its approval gates; a run with no recorded owner has no ownership to enforce
 - [An actor's missing approval decision defaults to denied](actor-flow-missing-approval-decisions-default-to-denied.md) — Every pending tool call gets an explicit decision; an id the persona LLM omitted is denied, so a dropped field can never read as consent
 - [Actor sign-in is proven by Set-Cookie, not a non-empty jar](actor-sign-in-is-proven-by-set-cookie-not-a-non-empty-jar.md) — HttpScenarioActor tracks its own signedIn flag and requires the sign-in response itself to set a cookie, because a populated jar proves nothing
 - [Actor sign-in only works for actor-flagged users](actor-sign-in-only-works-for-actor-flagged-users.md) — The scenario actor secret mints sessions for user rows flagged actor and nothing else, so holding it never impersonates a real user
@@ -31,7 +31,6 @@ A rule about who may do what, and which way it fails when it is unsure.
 - [An agent thread key is always prefixed with the trusted principal](ai-agent-thread-ownership-composes-the-session-principal.md) — Ownership keys are composed as principal:resourceId, so a client id can sub-divide its own boundary but never widen it
 - [Agent tool permission filtering reads the live function config, not the metadata](ai-agent-tool-filtering-reads-the-live-function-config.md) — The pikkuAuth brand survives only on live permission objects, so a metadata-driven check would silently admit every gated tool
 - [An agent approval is claimed before the tool runs](an-agent-approval-is-claimed-before-the-tool-runs.md) — resolveApproval is a compare-and-swap returning whether this caller won, because the read that precedes it is not a claim and ten concurrent approvals would otherwise mean ten refunds
-- [An approval answer outlives the run it answered](an-approval-answer-outlives-the-run-it-answered.md) — Run state holds a decision only while the gate is open, so the settled answer carries decidedBy/decidedAt into the step result and every attempt is written to the audit sink, which has no foreign key to the run
 - [An empty owners constraint matches nothing](an-empty-owners-constraint-matches-nothing.md) — owners is an authorization boundary, so every storage backend must treat [] as no rows rather than no filter
 - [An exposed function with no gate is reported at codegen, not at boot](an-exposed-ungated-function-is-a-codegen-warning.md) — The check runs in the inspector where function meta and every wireAddon declaration are both in hand, because neither source alone can tell a gated function from an ungated one
 - [An upload is counted as it arrives, not buffered and then measured](an-upload-is-counted-as-it-arrives-not-buffered-then-measured.md) — Reading the whole body before checking its size hands an unauthenticated caller a way to spend the server's memory

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pikku/core",
-  "version": "0.12.83",
+  "version": "0.12.84",
   "description": "The Pikku runtime — functions, wirings, services, middleware and types",
   "author": "yasser.fadl@gmail.com",
   "license": "MIT",
@@ -49,8 +49,8 @@
     "./safe-fetch": "./dist/utils/safe-fetch.js",
     "./node-host-resolver": "./dist/utils/node-host-resolver.js",
     "./mcp": "./dist/wirings/mcp/index.js",
-    "./ai-agent": "./dist/wirings/ai-agent/index.js",
-    "./ai-scorer": "./dist/wirings/ai-scorer/index.js",
+    "./agent": "./dist/wirings/agent/index.js",
+    "./agent-scorer": "./dist/wirings/agent-scorer/index.js",
     "./gateway": "./dist/wirings/gateway/index.js",
     "./cli": "./dist/wirings/cli/index.js",
     "./cli/command-parser": "./dist/wirings/cli/command-parser.js",
@@ -74,6 +74,7 @@
     "./crypto-utils": "./dist/crypto-utils.js",
     "./hmac": "./dist/utils/hmac.js",
     "./ecosystem": "./dist/ecosystem.js",
+    "./ecosystem/*": "./dist/ecosystem/*.js",
     "./schema": "./dist/schema.js",
     "./testing": "./dist/testing/index.js",
     "./dev": "./dist/dev/hot-reload.js"

package/scripts/generate-api-report.mts

@@ -22,7 +22,7 @@
  *
  * Run: yarn api-report
  */
-import { readFileSync, writeFileSync } from 'node:fs'
+import { readdirSync, readFileSync, writeFileSync } from 'node:fs'
 import { resolve, dirname } from 'node:path'
 import { fileURLToPath } from 'node:url'
 import ts from 'typescript'
@@ -32,15 +32,36 @@ const pkg = JSON.parse(
   readFileSync(resolve(packageRoot, 'package.json'), 'utf-8')
 )
 
-const entryPoints = Object.entries(pkg.exports as Record<string, string>).map(
-  ([subpath, dist]) => ({
+/**
+ * A wildcard subpath stands for as many entry points as there are files behind
+ * it, and the report is per entry point. Left as a pattern it resolves to no
+ * source file at all, so every sub-barrel it publishes goes unreported.
+ */
+const expand = ([subpath, dist]: [string, string]): [string, string][] => {
+  if (!subpath.includes('*')) return [[subpath, dist]]
+  const [prefix] = dist.split('*') as [string]
+  return readdirSync(
+    resolve(packageRoot, prefix.replace('./dist/', './src/')),
+    {
+      recursive: true,
+      encoding: 'utf-8',
+    }
+  )
+    .filter((file) => file.endsWith('.ts') && !file.endsWith('.d.ts'))
+    .map((file) => file.slice(0, -'.ts'.length))
+    .sort()
+    .map((area) => [subpath.replace('*', area), dist.replace('*', area)])
+}
+
+const entryPoints = Object.entries(pkg.exports as Record<string, string>)
+  .flatMap(expand)
+  .map(([subpath, dist]) => ({
     subpath,
     file: resolve(
       packageRoot,
       dist.replace('./dist/', './src/').replace(/\.js$/, '.ts')
     ),
-  })
-)
+  }))
 
 const program = ts.createProgram(
   entryPoints.map((e) => e.file),
@@ -218,7 +239,10 @@ const signature = (exported: ts.Symbol): string => {
  *
  * knowledge: decisions/internals/the-ecosystem-entry-point-carries-the-adapter-surface.md
  */
-const ECOSYSTEM_SUBPATHS = new Set(['./ecosystem', './internal'])
+const isEcosystem = (subpath: string) =>
+  subpath === './ecosystem' ||
+  subpath === './internal' ||
+  subpath.startsWith('./ecosystem/')
 
 type Exported = { name: string; members: number; signature: string }
 
@@ -264,7 +288,7 @@ for (const { subpath, file } of entryPoints) {
 const tierOf = new Map<string, string>()
 const membersOf = new Map<string, number>()
 for (const [subpath, exports] of modules) {
-  const tier = ECOSYSTEM_SUBPATHS.has(subpath) ? 'ecosystem' : 'stable'
+  const tier = isEcosystem(subpath) ? 'ecosystem' : 'stable'
   for (const { name, members } of exports) {
     if (tier === 'stable' || !tierOf.has(name)) tierOf.set(name, tier)
     membersOf.set(name, Math.max(membersOf.get(name) ?? 0, members))
@@ -275,7 +299,7 @@ const tally = (tier: string) => {
   const names = [...tierOf].filter(([, t]) => t === tier).map(([n]) => n)
   return {
     entryPoints: [...modules.keys()].filter(
-      (s) => (ECOSYSTEM_SUBPATHS.has(s) ? 'ecosystem' : 'stable') === tier
+      (s) => (isEcosystem(s) ? 'ecosystem' : 'stable') === tier
     ).length,
     names: names.length,
     members: names.reduce((total, n) => total + (membersOf.get(n) ?? 0), 0),

package/src/agent-naming.test.ts

@@ -0,0 +1,68 @@
+import { describe, test } from 'node:test'
+import assert from 'node:assert/strict'
+import { readFileSync } from 'node:fs'
+import { fileURLToPath } from 'node:url'
+import { join, dirname } from 'node:path'
+
+const packageRoot = join(dirname(fileURLToPath(import.meta.url)), '..')
+const reportPath = join(packageRoot, 'api-report.md')
+
+/**
+ * `AI` described the model provider, never the agent runtime, so #596 renamed
+ * every agent symbol to `Agent`. The names below are the ones that survived,
+ * because each really does wrap a provider call.
+ *
+ * Listing them here is what makes the rule checkable: anything else exported as
+ * `AI*` is a symbol that slipped back to the old naming, and this fails rather
+ * than letting it reach a consumer.
+ */
+const PROVIDER_SYMBOLS = new Set([
+  'AIEmbeddingService',
+  'AIEmbedManyParams',
+  'AIEmbedManyResult',
+  'AIEmbedParams',
+  'AIEmbedResult',
+  'AIGenerateImageParams',
+  'AIGenerateImagePrompt',
+  'AIGenerateImageResult',
+  'AIGenerateSpeechParams',
+  'AIGenerateSpeechResult',
+  'AIProviderAuthError',
+  'AIProviderNotConfiguredError',
+  'AIProviderOptions',
+  'AIRerankParams',
+  'AIRerankResult',
+  'AITranscriptionParams',
+  'AITranscriptionResult',
+])
+
+describe('the agent runtime is not exported under the AI name', () => {
+  test('every AI* symbol in the public surface is a provider wrapper', () => {
+    const report = readFileSync(reportPath, 'utf-8')
+    const found = new Set(report.match(/\bAI[A-Z][A-Za-z]*/g) ?? [])
+
+    const strays = [...found].filter((name) => !PROVIDER_SYMBOLS.has(name))
+
+    assert.deepEqual(
+      strays,
+      [],
+      'these are exported as `AI*` but are not provider wrappers — rename them ' +
+        'to `Agent*`, or add them to PROVIDER_SYMBOLS if they genuinely wrap a ' +
+        'model provider call'
+    )
+  })
+
+  test('the agent entry points are the renamed ones', () => {
+    const { exports } = JSON.parse(
+      readFileSync(join(packageRoot, 'package.json'), 'utf-8')
+    )
+
+    assert.ok(exports['./agent'], 'expected the ./agent entry point')
+    assert.ok(
+      exports['./agent-scorer'],
+      'expected the ./agent-scorer entry point'
+    )
+    assert.equal(exports['./ai-agent'], undefined)
+    assert.equal(exports['./ai-scorer'], undefined)
+  })
+})

package/src/ecosystem/agent-scorer.ts

@@ -0,0 +1,24 @@
+export { gradeRun } from '../wirings/agent-scorer/agent-scorer-grade.js'
+export { addAgentScorer } from '../wirings/agent-scorer/agent-scorer-registry.js'
+export {
+  enableScoreSnapshots,
+  getScoreSnapshot,
+} from '../wirings/agent-scorer/agent-scorer-snapshots.js'
+export { wireAgentScorerQueueWorkers } from '../wirings/agent-scorer/agent-scorer-worker.js'
+export {
+  pikkuAgentJudge,
+  pikkuAgentScorer,
+} from '../wirings/agent-scorer/agent-scorer.js'
+export type { ScorerMeta } from '../wirings/agent-scorer/agent-scorer.types.js'
+
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type {
+  PikkuAgentScorer,
+  ScoreJob,
+  ScorerInput,
+  ScorerOutput,
+} from '../wirings/agent-scorer/agent-scorer.types.js'

package/src/ecosystem/agent.ts

@@ -0,0 +1,42 @@
+export {
+  agent,
+  agentApprove,
+  agentResume,
+  agentStream,
+} from '../wirings/agent/agent-helpers.js'
+export { resolveModelAlias } from '../wirings/agent/agent-model-config.js'
+export {
+  canAccessThread,
+  isOwnedByPrincipal,
+  threadOwnerConstraint,
+} from '../wirings/agent/agent-prepare.js'
+export { addAgent } from '../wirings/agent/agent-registry.js'
+export type {
+  AgentInput,
+  AgentMemoryConfig,
+  AgentsMeta,
+  AgentStep,
+  AgentContentPart,
+  AgentRunRow,
+  AgentRunService,
+  CoreAgent,
+  PendingApproval,
+  PikkuAgentMiddlewareHooks,
+} from '../wirings/agent/agent.types.js'
+export { voiceInput } from '../wirings/agent/voice-input.js'
+export { voiceOutput } from '../wirings/agent/voice-output.js'
+
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type { LogLevel } from '../services/logger.js'
+export type { WebhookServiceConfig } from '../services/webhook-service.js'
+export type {
+  CoreSingletonServices,
+  PostgresConfig,
+} from '../types/core.types.js'
+export type { SpeakableScripts } from '../wirings/agent/voice-output.js'
+export type { WorkflowServiceConfig } from '../wirings/workflow/workflow.types.js'
+export type { VoiceOutputState } from '../wirings/agent/voice-output.js'

package/src/ecosystem/channel/local.ts

@@ -0,0 +1 @@
+export { PikkuLocalChannelHandler } from '../../wirings/channel/local/local-channel-handler.js'

package/src/ecosystem/channel.ts

@@ -0,0 +1,22 @@
+export { addChannelMiddleware } from '../wirings/channel/channel-middleware-runner.js'
+export type { Capabilities } from '../wirings/channel/channel-rpc.types.js'
+export type {
+  BinaryData,
+  ChannelMessageMeta,
+  ChannelMeta,
+  ChannelsMeta,
+  CoreChannel,
+  CorePikkuChannelMiddleware,
+  CorePikkuChannelMiddlewareFactory,
+  PikkuChannelHandlerFactory,
+} from '../wirings/channel/channel.types.js'
+export { EventHubStore } from '../wirings/channel/eventhub-store.js'
+export { logChannels } from '../wirings/channel/log-channels.js'
+export { PikkuAbstractChannelHandler } from '../wirings/channel/pikku-abstract-channel-handler.js'
+
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type { Logger } from '../services/logger.js'

package/src/ecosystem/cli/channel.ts

@@ -0,0 +1,25 @@
+export { handleRawCLI } from '../../wirings/cli/channel/cli-raw-channel-runner.js'
+export type { RawCLIFrame } from '../../wirings/cli/channel/cli-raw-channel-runner.js'
+export { executeRawCLIViaChannel } from '../../wirings/cli/channel/cli-raw-client-runner.js'
+export type { CorePikkuCLIClientRender } from '../../wirings/cli/channel/cli-raw-client-runner.js'
+
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type { LogLevel } from '../../services/logger.js'
+export type { WebhookServiceConfig } from '../../services/webhook-service.js'
+export type {
+  CoreSingletonServices,
+  CoreUserSession,
+  CreateWireServices,
+  PostgresConfig,
+} from '../../types/core.types.js'
+export type {
+  ApprovalRequester,
+  Capabilities,
+} from '../../wirings/channel/channel-rpc.types.js'
+export type { PikkuChannel } from '../../wirings/channel/channel.types.js'
+export type { RawCLIResult } from '../../wirings/cli/channel/cli-raw-channel-runner.js'
+export type { WorkflowServiceConfig } from '../../wirings/workflow/workflow.types.js'

package/src/ecosystem/cli.ts

@@ -0,0 +1,21 @@
+export { CLIError, executeCLI } from '../wirings/cli/cli-runner.js'
+export type {
+  CLICommandMeta,
+  CLIMeta,
+  CLIProgramMeta,
+  CoreCLI,
+  CoreCLICommandConfig,
+  CorePikkuCLIRender,
+} from '../wirings/cli/cli.types.js'
+export { generateCommandHelp } from '../wirings/cli/command-parser.js'
+
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type {
+  CreateConfig,
+  CreateSingletonServices,
+  CreateWireServices,
+} from '../types/core.types.js'

package/src/ecosystem/credential.ts

@@ -0,0 +1,10 @@
+export type { CredentialDefinitions } from '../wirings/credential/credential.types.js'
+export { validateAndBuildCredentialDefinitionsMeta } from '../wirings/credential/validate-credential-definitions.js'
+
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type { SchemaRefLike } from '../types/core.types.js'
+export type { CredentialDefinitionsMeta } from '../wirings/credential/credential.types.js'

package/src/ecosystem/dev.ts

@@ -0,0 +1,12 @@
+export {
+  reconcileAddonRegistry,
+  reloadGeneratedMeta,
+} from '../dev/reload-meta.js'
+
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type { ReloadGeneratedMetaOptions } from '../dev/reload-meta.js'
+export type { Logger } from '../services/logger.js'

package/src/ecosystem/function.ts

@@ -0,0 +1,28 @@
+export { getAllFunctionNames } from '../function/function-runner.js'
+export { pikkuAuth } from '../function/functions.types.js'
+export type {
+  CorePikkuAuth,
+  CorePikkuAuthConfig,
+  CorePikkuFunction,
+  CorePikkuFunctionConfig,
+  CorePikkuFunctionSessionless,
+  CorePikkuPermission,
+  CorePikkuSessionlessFunctionConfig,
+} from '../function/functions.types.js'
+export type { ListInput, ListOutput } from '../function/list.types.js'
+
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type { LogLevel } from '../services/logger.js'
+export type { WebhookServiceConfig } from '../services/webhook-service.js'
+export type {
+  CoreSecretlessSingletonServices,
+  CoreSingletonServices,
+  CoreUserSession,
+  PostgresConfig,
+  SecretlessServices,
+} from '../types/core.types.js'
+export type { WorkflowServiceConfig } from '../wirings/workflow/workflow.types.js'

package/src/ecosystem/gateway.ts

@@ -0,0 +1,4 @@
+export type {
+  GatewayTransportType,
+  GatewaysMeta,
+} from '../wirings/gateway/gateway.types.js'

package/src/ecosystem/hmac.ts

@@ -0,0 +1 @@
+export { hmacSha256Hex, timingSafeStringEqual } from '../utils/hmac.js'

package/src/ecosystem/http.ts

@@ -0,0 +1,22 @@
+export type {
+  AssertHTTPWiringParams,
+  CoreHTTPFunctionWiring,
+  HTTPMethod,
+  HTTPRouteBaseConfig,
+  HTTPWiringsMeta,
+  PikkuHTTP,
+  PikkuHTTPResponse,
+  PikkuQuery,
+  RunHTTPWiringOptions,
+} from '../wirings/http/http.types.js'
+export { logRoutes } from '../wirings/http/log-http-routes.js'
+export { DEFAULT_MAX_BODY_SIZE } from '../wirings/http/pikku-fetch-http-request.js'
+export { toWebRequest } from '../wirings/http/web-request.js'
+
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type { Logger } from '../services/logger.js'
+export type { PikkuHTTPRequest } from '../wirings/http/http.types.js'

package/src/ecosystem/mcp.ts

@@ -0,0 +1,17 @@
+export { MCPEndpointRegistry } from '../wirings/mcp/mcp-endpoint-registry.js'
+export {
+  MCPError,
+  getMCPPromptsMeta,
+  getMCPResourcesMeta,
+  getMCPToolsMeta,
+} from '../wirings/mcp/mcp-runner.js'
+export type {
+  AssertMCPResourceURIParams,
+  CoreMCPPrompt,
+  CoreMCPResource,
+  MCPPromptMeta,
+  MCPResourceMeta,
+  MCPToolMeta,
+  MCPToolResponse,
+  PikkuMCP,
+} from '../wirings/mcp/mcp.types.js'