@pikku/core 0.12.83 → 0.12.84

package/dist/ecosystem/services.d.ts

@@ -0,0 +1,28 @@
+export type { AuditDurability, AuditEvent, AuditEventBatch, } from '../services/audit-service.js';
+export type { DeploymentConfig, DeploymentService, DeploymentServiceConfig, } from '../services/deployment-service.js';
+export { InMemoryAgentRunStateService } from '../services/in-memory-agent-run-state-service.js';
+export type { AgentMeta, AgentsMeta, EmailTemplateMeta, EmailsMeta, GroupMeta, MCPMeta, MetaService, MiddlewareDefinitionMeta, MiddlewareGroupsMeta, MiddlewareInstanceMeta, PermissionDefinitionMeta, PermissionsGroupsMeta, RPCMetaRecord, ServiceMeta, ServicesMetaRecord, } from '../services/meta-service.js';
+export type { ResolvedPersona, ScenarioPersonas, } from '../services/personas-service.js';
+export { pikkuWebhookWorkerFunc } from '../services/queue-webhook-service.js';
+export type { ScheduledTaskInfo, ScheduledTaskSummary, } from '../services/scheduler-service.js';
+export type { Role } from '../services/scope-service.js';
+export { getStubTracker, spy } from '../services/stub-tracker.js';
+export type { CredentialMetaInfo } from '../services/typed-credential-service.js';
+export type { CredentialMeta } from '../services/typed-secret-service.js';
+export { TypedVariablesService } from '../services/typed-variables-service.js';
+export type { VariableMeta } from '../services/typed-variables-service.js';
+export { PikkuSessionService, createMiddlewareSessionWireProps, } from '../services/user-session-service.js';
+export type { CoverageFunctionMeta, CoverageService, FunctionCoverageEntry, FunctionCoverageReport, ScriptCoverage, } from '../services/v8-coverage-service.js';
+export { PIKKU_OUTGOING_WEBHOOK_QUEUE_NAME } from '../services/webhook-service.js';
+export type { SendWebhookInput, SendWebhookResult, WebhookAttemptResult, WebhookDeliveryRecord, WebhookDeliveryWithAttempts, } from '../services/webhook-service.js';
+export type { FunctionMeta, FunctionsMeta, MiddlewareMetadata as MiddlewareMeta, PermissionMetadata as PermissionMeta, } from '../types/core.types.js';
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type { Logger } from '../services/logger.js';
+export type { StubTracker } from '../services/stub-tracker.js';
+export type { SessionService } from '../services/user-session-service.js';
+export type { WebhookJobData, WebhookService, } from '../services/webhook-service.js';
+export type { CoreUserSession } from '../types/core.types.js';

package/dist/ecosystem/services.js

@@ -0,0 +1,6 @@
+export { InMemoryAgentRunStateService } from '../services/in-memory-agent-run-state-service.js';
+export { pikkuWebhookWorkerFunc } from '../services/queue-webhook-service.js';
+export { getStubTracker, spy } from '../services/stub-tracker.js';
+export { TypedVariablesService } from '../services/typed-variables-service.js';
+export { PikkuSessionService, createMiddlewareSessionWireProps, } from '../services/user-session-service.js';
+export { PIKKU_OUTGOING_WEBHOOK_QUEUE_NAME } from '../services/webhook-service.js';

package/dist/ecosystem/testing.d.ts

@@ -0,0 +1,7 @@
+export { defineServiceTests } from '../testing/service-tests.js';
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type { ServiceTestConfig } from '../testing/service-tests.js';

package/dist/ecosystem/testing.js

@@ -0,0 +1 @@
+export { defineServiceTests } from '../testing/service-tests.js';

package/dist/ecosystem/trigger.d.ts

@@ -0,0 +1 @@
+export type { CorePikkuTriggerFunction, CorePikkuTriggerFunctionConfig, CoreTrigger, TriggerMeta, TriggerSourceMeta, } from '../wirings/trigger/trigger.types.js';

package/dist/ecosystem/trigger.js

@@ -0,0 +1 @@
+export {};

package/dist/ecosystem/types.d.ts

@@ -0,0 +1,9 @@
+export { isExpectedError } from '../errors/error-handler.js';
+export type { CorePermissionGroup } from '../function/functions.types.js';
+export { PikkuRequest } from '../pikku-request.js';
+export type { AuditFacets, AuditQuery, AuditQueryResult, } from '../services/audit-service.js';
+export { parseDurationString } from '../time-utils.js';
+export type { RelativeTimeInput } from '../time-utils.js';
+export type { AuthInstance, FunctionServicesMeta, FunctionWiresMeta, JSONValue, MiddlewareMetadata, PermissionMetadata, PikkuWire, PikkuWiringTypes, PostgresConfig, SecretlessServices, SecurityAuditIssue, SecurityAuditReport, SecurityAuditUpdate, SecuritySeverity, SecurityUpdateLevel, SerializedError, } from '../types/core.types.js';
+export { isSerializable } from '../utils.js';
+export { formatVersionedId, isVersionedId, parseVersionedId, } from '../version.js';

package/dist/ecosystem/types.js

@@ -0,0 +1,5 @@
+export { isExpectedError } from '../errors/error-handler.js';
+export { PikkuRequest } from '../pikku-request.js';
+export { parseDurationString } from '../time-utils.js';
+export { isSerializable } from '../utils.js';
+export { formatVersionedId, isVersionedId, parseVersionedId, } from '../version.js';

package/dist/ecosystem/variable.d.ts

@@ -0,0 +1,8 @@
+export { validateAndBuildVariableDefinitionsMeta } from '../wirings/variable/validate-variable-definitions.js';
+export type { CoreVariable, VariableDefinitionMeta, VariableDefinitions, VariableDefinitionsMeta, } from '../wirings/variable/variable.types.js';
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type { SchemaRefLike } from '../types/core.types.js';

package/dist/ecosystem/variable.js

@@ -0,0 +1 @@
+export { validateAndBuildVariableDefinitionsMeta } from '../wirings/variable/validate-variable-definitions.js';

package/dist/ecosystem/virtual-user.d.ts

@@ -0,0 +1,21 @@
+export { personaScopes, prepareVirtualUserRun, } from '../wirings/virtual-user/prepare-virtual-user-run.js';
+export { catalogueClassification, isReadOnly, reachableCatalogue, unreachableCatalogue, } from '../wirings/virtual-user/virtual-user-catalogue.js';
+export { DISPOSITIONS, dispositionProfile, } from '../wirings/virtual-user/virtual-user-dispositions.js';
+export type { DispositionProfile } from '../wirings/virtual-user/virtual-user-dispositions.js';
+export { intentsForPersona } from '../wirings/virtual-user/virtual-user-intents.js';
+export type { VirtualUserRunOutcome, VirtualUserRunRecord, VirtualUserRunStart, VirtualUserRunStore, } from '../wirings/virtual-user/virtual-user-run-store.js';
+export { PRODUCTION_DISPOSITION } from '../wirings/virtual-user/virtual-user.types.js';
+export type { IntentSource, VirtualUserFinding, VirtualUserRunResult, } from '../wirings/virtual-user/virtual-user.types.js';
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type { FunctionsMeta } from '../types/core.types.js';
+export type { SystemRoleDefinitions, SystemRoleDefinitionsMeta, } from '../wirings/role/role.types.js';
+export type { VirtualUserPreparation } from '../wirings/virtual-user/prepare-virtual-user-run.js';
+export type { AgentReachability } from '../wirings/virtual-user/virtual-user-agents.js';
+export type { SchemaMap } from '../wirings/virtual-user/virtual-user-derive.js';
+export type { VirtualUserTuning } from '../wirings/virtual-user/virtual-user-dispositions.js';
+export type { ApiCatalogueEntry, VirtualUserDisposition, } from '../wirings/virtual-user/virtual-user.types.js';
+export type { WorkflowsMeta } from '../wirings/workflow/workflow.types.js';

package/dist/ecosystem/virtual-user.js

@@ -0,0 +1,5 @@
+export { personaScopes, prepareVirtualUserRun, } from '../wirings/virtual-user/prepare-virtual-user-run.js';
+export { catalogueClassification, isReadOnly, reachableCatalogue, unreachableCatalogue, } from '../wirings/virtual-user/virtual-user-catalogue.js';
+export { DISPOSITIONS, dispositionProfile, } from '../wirings/virtual-user/virtual-user-dispositions.js';
+export { intentsForPersona } from '../wirings/virtual-user/virtual-user-intents.js';
+export { PRODUCTION_DISPOSITION } from '../wirings/virtual-user/virtual-user.types.js';

package/dist/ecosystem/workflow.d.ts

@@ -0,0 +1,18 @@
+export type { WorkflowService } from '../services/workflow-service.js';
+export type { ApprovalStepMeta, ArrayPredicateStepMeta, BranchStepMeta, CancelStepMeta, Condition, FanoutStepMeta, FilterStepMeta, InlineStepMeta, InputSource, OutputBinding, ParallelGroupStepMeta, PikkuWorkflowWire, RpcStepMeta, SetStepMeta, SleepStepMeta, SuspendStepMeta, SwitchCaseMeta, SwitchStepMeta, WorkflowStepMeta, WorkflowStepOptions, WorkflowWireDoRPC, } from '../wirings/workflow/dsl/workflow-dsl.types.js';
+export { template } from '../wirings/workflow/graph/template.js';
+export type { PikkuWorkflowGraphConfig, PikkuWorkflowGraphResult, } from '../wirings/workflow/graph/wire-workflow-graph.js';
+export { isRef } from '../wirings/workflow/graph/workflow-graph.types.js';
+export { buildRunTimeline, reconstructFinalState, reconstructStateAt, } from '../wirings/workflow/run-timeline.js';
+export type { ReconstructedRunState, RunTimeline, } from '../wirings/workflow/run-timeline.js';
+export { assertWorkflowRunOwner } from '../wirings/workflow/workflow-run-ownership.js';
+export type { ContextVariable, CoreWorkflow, StepState, StepStatus, WorkflowContext, WorkflowPlannedStep, WorkflowQueueOptions, WorkflowRun, WorkflowRunMirror, WorkflowRunService, WorkflowRunStatus, WorkflowRunWire, WorkflowStatus, WorkflowVersionStatus, WorkflowsMeta, WorkflowsRuntimeMeta, } from '../wirings/workflow/workflow.types.js';
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type { CoreUserSession } from '../types/core.types.js';
+export type { TemplateString } from '../wirings/workflow/graph/template.js';
+export type { RefValue } from '../wirings/workflow/graph/workflow-graph.types.js';
+export type { HistoryEntry } from '../wirings/workflow/run-timeline.js';

package/dist/ecosystem/workflow.js

@@ -0,0 +1,4 @@
+export { template } from '../wirings/workflow/graph/template.js';
+export { isRef } from '../wirings/workflow/graph/workflow-graph.types.js';
+export { buildRunTimeline, reconstructFinalState, reconstructStateAt, } from '../wirings/workflow/run-timeline.js';
+export { assertWorkflowRunOwner } from '../wirings/workflow/workflow-run-ownership.js';

package/dist/index.d.ts

@@ -1,18 +1,18 @@
 /**
  * @module @pikku/core
  */
-export type { AuthInstance, CommonWireMeta, CoreConfig, CorePikkuMiddleware, CorePikkuMiddlewareConfig, CorePikkuMiddlewareFactory, CorePikkuMiddlewareGroup, CoreServices, CoreSecretlessSingletonServices, CoreSingletonServices, CoreUserSession, SecretlessServices, CreateConfig, ServerLifecycle, FunctionMeta, FunctionServicesMeta, FunctionWiresMeta, FunctionsMeta, FunctionsRuntimeMeta, JSONValue, MakeRequired, MiddlewareMetadata, MiddlewarePriority, PermissionMetadata, PickOptional, PickRequired, PikkuAIMiddlewareHooks, PikkuWire, PikkuRawWire, PikkuWiringTypes, PostgresConfig, RequireAtLeastOne, SecurityAuditIssue, SecurityAuditReport, SecurityAuditSummary, SecurityAuditUpdate, SecuritySeverity, SecurityUpdateLevel, SerializedError, } from './types/core.types.js';
-export { pikkuAIMiddleware, pikkuChannelMiddleware, pikkuChannelMiddlewareFactory, pikkuMiddleware, pikkuMiddlewareFactory, } from './types/core.types.js';
+export type { AuthInstance, CommonWireMeta, CoreConfig, CorePikkuMiddleware, CorePikkuMiddlewareConfig, CorePikkuMiddlewareFactory, CorePikkuMiddlewareGroup, CoreServices, CoreSecretlessSingletonServices, CoreSingletonServices, CoreUserSession, SecretlessServices, CreateConfig, ServerLifecycle, FunctionMeta, FunctionServicesMeta, FunctionWiresMeta, FunctionsMeta, FunctionsRuntimeMeta, JSONValue, MakeRequired, MiddlewareMetadata, MiddlewarePriority, PermissionMetadata, PickOptional, PickRequired, PikkuAgentMiddlewareHooks, PikkuWire, PikkuRawWire, PikkuWiringTypes, PostgresConfig, RequireAtLeastOne, SecurityAuditIssue, SecurityAuditReport, SecurityAuditSummary, SecurityAuditUpdate, SecuritySeverity, SecurityUpdateLevel, SerializedError, } from './types/core.types.js';
+export { pikkuAgentMiddleware, pikkuChannelMiddleware, pikkuChannelMiddlewareFactory, pikkuMiddleware, pikkuMiddlewareFactory, } from './types/core.types.js';
 export type { CorePikkuAuth, CorePikkuAuthConfig, CorePikkuFunction, CorePikkuFunctionConfig, CorePikkuPermission, CorePikkuPermissionConfig, CorePikkuPermissionFactory, CorePikkuApprovalDescription, CorePermissionGroup, } from './function/functions.types.js';
 export { pikkuAuth, pikkuPermission, pikkuPermissionFactory, pikkuApprovalDescription, } from './function/functions.types.js';
 export { getAllFunctionNames } from './function/index.js';
-export type { ListInput, ListOutput, Filter, } from './function/list.types.js';
+export type { ListInput, ListOutput, Filter } from './function/list.types.js';
 export { pikkuCLIRender } from './wirings/cli/cli-runner.js';
 export { PikkuRequest } from './pikku-request.js';
 export { getRelativeTimeOffsetFromNow, parseDurationString, } from './time-utils.js';
 export type { RelativeTimeInput } from './time-utils.js';
 export { formatVersionedId, isVersionedId, parseVersionedId, } from './version.js';
-export { AbandonedError, type AbortScope, } from './function/abort-scope.js';
+export { AbandonedError, type AbortScope } from './function/abort-scope.js';
 export { fetch } from './wirings/http/http-runner.js';
 export type { MCPToolResponse, MCPResourceResponse, MCPPromptResponse, } from './wirings/mcp/mcp.types.js';
 export { AIProviderAuthError, AIProviderNotConfiguredError, BadGatewayError, BadRequestError, ConflictError, ExpectationFailedError, ForbiddenError, GatewayTimeoutError, GoneError, HTTPVersionNotSupportedError, InternalServerError, InvalidMiddlewareWireError, InvalidOriginError, InvalidSessionError, LengthRequiredError, LocalEnvironmentOnlyError, LockedError, MaxComputeTimeReachedError, MethodNotAllowedError, MissingCredentialError, MissingSchemaError, MissingScopeError, MissingServiceError, MissingSessionError, NotAcceptableError, NotFoundError, NotImplementedError, PayloadTooLargeError, PaymentRequiredError, PikkuMissingMetaError, PreconditionFailedError, ProxyAuthenticationRequiredError, RangeNotSatisfiableError, ReadonlySessionError, RequestTimeoutError, ServiceUnavailableError, TooManyRequestsError, URITooLongError, UnauthorizedError, UnprocessableContentError, UnsupportedMediaTypeError, } from './errors/errors.js';
@@ -34,10 +34,10 @@ export type { SchemaService } from './services/schema-service.js';
 export type { SessionService } from './services/user-session-service.js';
 export { NoopAuditService, createInvocationAudit, } from './services/audit-service.js';
 export type { AuditConfig, AuditDurability, AuditEvent, AuditEventBatch, AuditFacets, AuditLog, AuditQuery, AuditQueryResult, AuditService, AuditUserIdentity, ResolvedAuditConfig, } from './services/audit-service.js';
-export type { AIAgentRunnerService, } from './services/ai-agent-runner-service.js';
+export type { AgentRunnerService } from './services/agent-runner-service.js';
 export type { AIEmbeddingService } from './services/ai-embedding-service.js';
-export type { AIRunStateService } from './services/ai-run-state-service.js';
-export type { AIStorageService } from './services/ai-storage-service.js';
+export type { AgentRunStateService } from './services/agent-run-state-service.js';
+export type { AgentStorageService } from './services/agent-storage-service.js';
 export type { EmailsMeta, EmailTemplateMeta, MetaService, } from './services/meta-service.js';
 export type { HTTPMethod } from './wirings/http/http.types.js';
 export type { GraphNodeConfig } from './wirings/workflow/graph/workflow-graph.types.js';
@@ -55,6 +55,6 @@ export { clearPikkuRuntimeState } from './test-utils.js';
 export { type ScheduledTaskInfo, type ScheduledTaskSummary, } from './services/scheduler-service.js';
 export { SchedulerService } from './services/scheduler-service.js';
 export type { Private, Pii, Secret, Classification, AnonymizeStrategy, ClassificationManifest, ColumnForm, WrappedValue, SealedValue, HashedValue, } from './data-classification.js';
-export { hashToken, } from './column-form.js';
+export { hashToken } from './column-form.js';
 export type { SecretValue, Safe } from './secret-value.js';
 export { createSecretValue, isSecretValue, SecretCoercionError, REDACTED, } from './secret-value.js';

package/dist/index.js

@@ -1,11 +1,11 @@
-export { pikkuAIMiddleware, pikkuChannelMiddleware, pikkuChannelMiddlewareFactory, pikkuMiddleware, pikkuMiddlewareFactory, } from './types/core.types.js';
+export { pikkuAgentMiddleware, pikkuChannelMiddleware, pikkuChannelMiddlewareFactory, pikkuMiddleware, pikkuMiddlewareFactory, } from './types/core.types.js';
 export { pikkuAuth, pikkuPermission, pikkuPermissionFactory, pikkuApprovalDescription, } from './function/functions.types.js';
 export { getAllFunctionNames } from './function/index.js';
 export { pikkuCLIRender } from './wirings/cli/cli-runner.js';
 export { PikkuRequest } from './pikku-request.js';
 export { getRelativeTimeOffsetFromNow, parseDurationString, } from './time-utils.js';
 export { formatVersionedId, isVersionedId, parseVersionedId, } from './version.js';
-export { AbandonedError, } from './function/abort-scope.js';
+export { AbandonedError } from './function/abort-scope.js';
 export { fetch } from './wirings/http/http-runner.js';
 export { AIProviderAuthError, AIProviderNotConfiguredError, BadGatewayError, BadRequestError, ConflictError, ExpectationFailedError, ForbiddenError, GatewayTimeoutError, GoneError, HTTPVersionNotSupportedError, InternalServerError, InvalidMiddlewareWireError, InvalidOriginError, InvalidSessionError, LengthRequiredError, LocalEnvironmentOnlyError, LockedError, MaxComputeTimeReachedError, MethodNotAllowedError, MissingCredentialError, MissingSchemaError, MissingScopeError, MissingServiceError, MissingSessionError, NotAcceptableError, NotFoundError, NotImplementedError, PayloadTooLargeError, PaymentRequiredError, PikkuMissingMetaError, PreconditionFailedError, ProxyAuthenticationRequiredError, RangeNotSatisfiableError, ReadonlySessionError, RequestTimeoutError, ServiceUnavailableError, TooManyRequestsError, URITooLongError, UnauthorizedError, UnprocessableContentError, UnsupportedMediaTypeError, } from './errors/errors.js';
 export { PikkuError, isExpectedError } from './errors/error-handler.js';
@@ -21,5 +21,5 @@ export { hasScopes, verifyScopes } from './scopes.js';
 export { isSerializable, stopSingletonServices, pikkuServerLifecycle, } from './utils.js';
 export { clearPikkuRuntimeState } from './test-utils.js';
 export { SchedulerService } from './services/scheduler-service.js';
-export { hashToken, } from './column-form.js';
+export { hashToken } from './column-form.js';
 export { createSecretValue, isSecretValue, SecretCoercionError, REDACTED, } from './secret-value.js';

package/dist/middleware/auth-apikey.d.ts

@@ -5,7 +5,7 @@ export declare const authAPIKey: import("../types/core.types.js").CorePikkuMiddl
     secrets?: {
         requireAllowedHosts?: boolean;
     };
-    workflow?: import("../wirings/workflow/workflow.types.js").WorkflowServiceConfig;
+    workflow?: import("../ecosystem/agent.js").WorkflowServiceConfig;
     webhook?: import("../services/webhook-service.js").WebhookServiceConfig;
     postgres?: import("../types/core.types.js").PostgresConfig;
 }>, import("../types/core.types.js").CoreUserSession>;

package/dist/middleware/auth-bearer.d.ts

@@ -17,7 +17,7 @@ export declare const authBearer: import("../types/core.types.js").CorePikkuMiddl
     secrets?: {
         requireAllowedHosts?: boolean;
     };
-    workflow?: import("../wirings/workflow/workflow.types.js").WorkflowServiceConfig;
+    workflow?: import("../ecosystem/agent.js").WorkflowServiceConfig;
     webhook?: import("../services/webhook-service.js").WebhookServiceConfig;
     postgres?: import("../types/core.types.js").PostgresConfig;
 }>, CoreUserSession>;

package/dist/middleware/auth-cookie.d.ts

@@ -9,7 +9,7 @@ export declare const authCookie: import("../types/core.types.js").CorePikkuMiddl
     secrets?: {
         requireAllowedHosts?: boolean;
     };
-    workflow?: import("../wirings/workflow/workflow.types.js").WorkflowServiceConfig;
+    workflow?: import("../ecosystem/agent.js").WorkflowServiceConfig;
     webhook?: import("../services/webhook-service.js").WebhookServiceConfig;
     postgres?: import("../types/core.types.js").PostgresConfig;
 }>, import("../types/core.types.js").CoreUserSession>;

package/dist/middleware/cors.d.ts

@@ -15,7 +15,7 @@ export declare const cors: import("../types/core.types.js").CorePikkuMiddlewareF
     secrets?: {
         requireAllowedHosts?: boolean;
     };
-    workflow?: import("../wirings/workflow/workflow.types.js").WorkflowServiceConfig;
+    workflow?: import("../ecosystem/agent.js").WorkflowServiceConfig;
     webhook?: import("../services/webhook-service.js").WebhookServiceConfig;
     postgres?: import("../types/core.types.js").PostgresConfig;
 }>, import("../types/core.types.js").CoreUserSession>;

package/dist/middleware/remote-auth.d.ts

@@ -3,7 +3,7 @@ export declare const pikkuRemoteAuthMiddleware: import("../types/core.types.js")
     secrets?: {
         requireAllowedHosts?: boolean;
     };
-    workflow?: import("../wirings/workflow/workflow.types.js").WorkflowServiceConfig;
+    workflow?: import("../ecosystem/agent.js").WorkflowServiceConfig;
     webhook?: import("../services/webhook-service.js").WebhookServiceConfig;
     postgres?: import("../types/core.types.js").PostgresConfig;
 }>, import("../types/core.types.js").CoreUserSession>;

package/dist/middleware/telemetry.d.ts

@@ -7,7 +7,7 @@ export declare const telemetryOuter: import("../types/core.types.js").CorePikkuM
     secrets?: {
         requireAllowedHosts?: boolean;
     };
-    workflow?: import("../wirings/workflow/workflow.types.js").WorkflowServiceConfig;
+    workflow?: import("../ecosystem/agent.js").WorkflowServiceConfig;
     webhook?: import("../services/webhook-service.js").WebhookServiceConfig;
     postgres?: import("../types/core.types.js").PostgresConfig;
 }>, import("../types/core.types.js").CoreUserSession>;
@@ -20,7 +20,7 @@ export declare const telemetryInner: import("../types/core.types.js").CorePikkuM
     secrets?: {
         requireAllowedHosts?: boolean;
     };
-    workflow?: import("../wirings/workflow/workflow.types.js").WorkflowServiceConfig;
+    workflow?: import("../ecosystem/agent.js").WorkflowServiceConfig;
     webhook?: import("../services/webhook-service.js").WebhookServiceConfig;
     postgres?: import("../types/core.types.js").PostgresConfig;
 }>, import("../types/core.types.js").CoreUserSession>;

package/dist/services/agent-run-state-service.d.ts

@@ -0,0 +1,29 @@
+import type { AgentRunState, PendingApproval } from '../wirings/agent/agent.types.js';
+import type { AgentRunScore } from '../wirings/agent-scorer/agent-scorer.types.js';
+export type CreateRunInput = Omit<AgentRunState, 'runId'>;
+export type SaveScoreInput = Omit<AgentRunScore, 'createdAt'>;
+export interface AgentRunStateService {
+    createRun(run: CreateRunInput): Promise<string>;
+    updateRun(runId: string, updates: Partial<AgentRunState>): Promise<void>;
+    getRun(runId: string): Promise<AgentRunState | null>;
+    getRunsByThread(threadId: string): Promise<AgentRunState[]>;
+    /**
+     * Claims an approval: removes it from the run's pending list and records the
+     * decision, as one atomic step. Returns whether THIS caller made the claim —
+     * concurrent approvals of the same tool call produce exactly one `true`, and
+     * only that caller may run the tool.
+     */
+    resolveApproval(toolCallId: string, status: 'approved' | 'denied'): Promise<boolean>;
+    findRunByToolCallId(toolCallId: string): Promise<{
+        run: AgentRunState;
+        approval: PendingApproval;
+    } | null>;
+    /**
+     * Record one scorer's grade of a finished run. A run accumulates one row per
+     * scorer, and a scorer may grade the same run more than once — a retried job
+     * appends rather than replaces, so a re-grade never silently overwrites the
+     * grade that was acted on.
+     */
+    saveScore(score: SaveScoreInput): Promise<void>;
+    getScores(runId: string): Promise<AgentRunScore[]>;
+}

package/dist/services/agent-run-state-service.js

@@ -0,0 +1 @@
+export {};

package/dist/services/agent-runner-service.d.ts

@@ -0,0 +1,220 @@
+import type { AgentMessage, AgentStep, AgentToolDef, AgentStreamChannel } from '../wirings/agent/agent.types.js';
+export type AIProviderOptions = Record<string, Record<string, unknown>>;
+export type AgentRunnerParams = {
+    model: string;
+    temperature?: number;
+    instructions: string;
+    messages: AgentMessage[];
+    tools: AgentToolDef[];
+    maxSteps: number;
+    toolChoice: 'auto' | 'required' | 'none';
+    outputSchema?: Record<string, unknown>;
+    /** Pikku agent function name — forwarded to the LLM proxy (LiteLLM) as
+     *  request-level metadata so usage can be broken down per agent. */
+    agentId?: string;
+    /**
+     * Cancels the model call itself, not just delivery of its output. Set by
+     * `streamAgent` from the run's interrupt handle so a voice barge-in stops
+     * generation upstream rather than leaving tokens being billed into a stream
+     * nobody reads. A runner that ignores it degrades to "the caller stops
+     * listening", which is the behaviour before this field existed.
+     */
+    abortSignal?: AbortSignal;
+    /**
+     * Per-provider settings passed to the model untouched — the escape hatch for
+     * anything the shared params above cannot express because only one vendor
+     * has it.
+     *
+     * The setting that motivated it is `reasoningEffort`. A voice turn is heard
+     * rather than read, so the wait before the first word is most of the
+     * experience: `{ openai: { reasoningEffort: 'minimal' } }` on gpt-5-mini
+     * measured 0.9s to first token against 2.5s at the default, and 1.6s of
+     * silence is a long time to sit through having just finished speaking.
+     */
+    providerOptions?: AIProviderOptions;
+};
+export type AgentRunnerResult = {
+    text: string;
+    object?: unknown;
+    steps: AgentStep[];
+    usage: {
+        inputTokens: number;
+        outputTokens: number;
+    };
+};
+export type AgentStepResult = {
+    text: string;
+    object?: unknown;
+    toolCalls: {
+        toolCallId: string;
+        toolName: string;
+        args: unknown;
+    }[];
+    toolResults: {
+        toolCallId: string;
+        toolName: string;
+        result: unknown;
+        /**
+         * Set when the tool threw rather than returned. Carried as its own field
+         * because `result` is a rendered string by the time anything downstream
+         * reads it, and "did this tool fail" is not answerable by looking for an
+         * `Error:` prefix in text a tool could legitimately have returned.
+         */
+        error?: string;
+    }[];
+    usage: {
+        inputTokens: number;
+        outputTokens: number;
+    };
+    finishReason: 'stop' | 'tool-calls' | 'length' | 'error' | 'unknown';
+    reasoningContent?: string;
+};
+export type AITranscriptionParams = {
+    model: string;
+    audio: Uint8Array;
+    providerOptions?: AIProviderOptions;
+    maxRetries?: number;
+    abortSignal?: AbortSignal;
+    headers?: Record<string, string>;
+};
+export type AITranscriptionResult = {
+    text: string;
+    segments?: Array<{
+        text: string;
+        startSecond: number;
+        endSecond: number;
+    }>;
+    language?: string;
+    durationInSeconds?: number;
+    warnings?: unknown[];
+    providerMetadata?: Record<string, unknown>;
+    responses?: unknown[];
+};
+export type AIGenerateSpeechParams = {
+    model: string;
+    text: string;
+    voice?: string;
+    outputFormat?: string;
+    instructions?: string;
+    speed?: number;
+    language?: string;
+    providerOptions?: AIProviderOptions;
+    maxRetries?: number;
+    abortSignal?: AbortSignal;
+    headers?: Record<string, string>;
+};
+export type AIGenerateSpeechResult = {
+    audio: {
+        uint8Array: Uint8Array;
+        base64: string;
+        mediaType: string;
+        format: string;
+    };
+    warnings?: unknown[];
+    providerMetadata?: Record<string, unknown>;
+    responses?: unknown[];
+};
+export type AIGenerateImagePrompt = string | {
+    images: Array<Uint8Array | ArrayBuffer | string>;
+    text?: string;
+    mask?: Uint8Array | ArrayBuffer | string;
+};
+export type AIGenerateImageParams = {
+    model: string;
+    prompt: AIGenerateImagePrompt;
+    n?: number;
+    maxImagesPerCall?: number;
+    size?: `${number}x${number}`;
+    aspectRatio?: `${number}:${number}`;
+    seed?: number;
+    providerOptions?: AIProviderOptions;
+    maxRetries?: number;
+    abortSignal?: AbortSignal;
+    headers?: Record<string, string>;
+};
+export type AIGenerateImageResult = {
+    images: Array<{
+        uint8Array: Uint8Array;
+        base64: string;
+        mediaType: string;
+    }>;
+    warnings?: unknown[];
+    providerMetadata?: Record<string, unknown>;
+    responses?: unknown[];
+    usage?: {
+        inputTokens?: number;
+        outputTokens?: number;
+        totalTokens?: number;
+    };
+};
+export type AIEmbedParams = {
+    model: string;
+    value: string;
+    providerOptions?: AIProviderOptions;
+    maxRetries?: number;
+    abortSignal?: AbortSignal;
+    headers?: Record<string, string>;
+};
+export type AIEmbedResult = {
+    value: string;
+    embedding: number[];
+    usage?: {
+        tokens?: number;
+    };
+    warnings?: unknown[];
+    providerMetadata?: Record<string, unknown>;
+    response?: unknown;
+};
+export type AIEmbedManyParams = {
+    model: string;
+    values: string[];
+    providerOptions?: AIProviderOptions;
+    maxRetries?: number;
+    abortSignal?: AbortSignal;
+    headers?: Record<string, string>;
+    maxParallelCalls?: number;
+};
+export type AIEmbedManyResult = {
+    values: string[];
+    embeddings: number[][];
+    usage?: {
+        tokens?: number;
+    };
+    warnings?: unknown[];
+    providerMetadata?: Record<string, unknown>;
+    responses?: unknown[];
+};
+export type AIRerankParams<VALUE extends string | Record<string, unknown>> = {
+    model: string;
+    query: string;
+    documents: VALUE[];
+    topK?: number;
+    providerOptions?: AIProviderOptions;
+    maxRetries?: number;
+    abortSignal?: AbortSignal;
+    headers?: Record<string, string>;
+};
+export type AIRerankResult<VALUE extends string | Record<string, unknown>> = {
+    ranking: Array<{
+        index: number;
+        document: VALUE;
+        score: number;
+    }>;
+    rerankedDocuments: VALUE[];
+    originalDocuments: VALUE[];
+    providerMetadata?: Record<string, unknown>;
+    response?: unknown;
+};
+export interface AgentRunnerService {
+    stream(params: AgentRunnerParams, channel: AgentStreamChannel): Promise<AgentStepResult>;
+    run(params: AgentRunnerParams): Promise<AgentStepResult>;
+    transcribe?(params: AITranscriptionParams): Promise<AITranscriptionResult>;
+    generateSpeech?(params: AIGenerateSpeechParams): Promise<AIGenerateSpeechResult>;
+    generateImage?(params: AIGenerateImageParams): Promise<AIGenerateImageResult>;
+    embed?(params: AIEmbedParams): Promise<AIEmbedResult>;
+    embedMany?(params: AIEmbedManyParams): Promise<AIEmbedManyResult>;
+    rerank?<VALUE extends string | Record<string, unknown>>(params: AIRerankParams<VALUE>): Promise<AIRerankResult<VALUE>>;
+    /** Return a new runner that uses the given API key for every LLM call.
+     *  Optional — runners that don't support per-key scoping leave this undefined. */
+    withApiKey?(apiKey: string): AgentRunnerService;
+}

package/dist/services/agent-runner-service.js

@@ -0,0 +1 @@
+export {};

package/dist/services/agent-storage-service.d.ts

@@ -0,0 +1,18 @@
+import type { AgentThread, AgentMessage } from '../wirings/agent/agent.types.js';
+export interface AgentStorageService {
+    createThread(resourceId: string, options?: {
+        threadId?: string;
+        title?: string;
+        metadata?: Record<string, unknown>;
+    }): Promise<AgentThread>;
+    getThread(threadId: string): Promise<AgentThread>;
+    getThreads(resourceId: string): Promise<AgentThread[]>;
+    deleteThread(threadId: string): Promise<void>;
+    getMessages(threadId: string, options?: {
+        lastN?: number;
+        cursor?: string;
+    }): Promise<AgentMessage[]>;
+    saveMessages(threadId: string, messages: AgentMessage[]): Promise<void>;
+    getWorkingMemory(id: string, scope: 'resource' | 'thread'): Promise<Record<string, unknown> | null>;
+    saveWorkingMemory(id: string, scope: 'resource' | 'thread', data: Record<string, unknown>): Promise<void>;
+}

package/dist/services/agent-storage-service.js

@@ -0,0 +1 @@
+export {};

package/dist/services/http-personas.d.ts

@@ -24,7 +24,7 @@ export interface HttpPersonasConfig {
     /**
      * Default model a persona thinks with when `converse(...)` is called without
      * an explicit `model`. Its own turns/approvals/evaluation run in-process via
-     * the configured `aiAgentRunner`.
+     * the configured `agentRunner`.
      */
     model?: string;
 }

package/dist/services/http-personas.js

@@ -53,8 +53,8 @@ export class HttpPersona {
         return readScenarioHttpResponse(res);
     }
     async converse(options) {
-        const { aiAgentRunner } = getSingletonServices();
-        if (!aiAgentRunner) {
+        const { agentRunner } = getSingletonServices();
+        if (!agentRunner) {
             throw new AIProviderNotConfiguredError();
         }
         const model = options.model ?? this.config.model;
@@ -72,7 +72,7 @@ export class HttpPersona {
             approvals: options.approvals,
             model,
             maxTurns: options.maxTurns,
-            llm: (params) => aiAgentRunner.run(params),
+            llm: (params) => agentRunner.run(params),
             target: {
                 run: (message) => this.agentRun(options.agent, message, threadId, resourceId),
                 approve: (runId, decisions) => this.agentApprove(options.agent, runId, decisions),

package/dist/services/in-memory-agent-run-state-service.d.ts

@@ -0,0 +1,19 @@
+import type { AgentRunStateService, CreateRunInput, SaveScoreInput } from './agent-run-state-service.js';
+import type { AgentRunState, PendingApproval } from '../wirings/agent/agent.types.js';
+import type { AgentRunScore } from '../wirings/agent-scorer/agent-scorer.types.js';
+export declare class InMemoryAgentRunStateService implements AgentRunStateService {
+    private runs;
+    private scores;
+    private counter;
+    createRun(run: CreateRunInput): Promise<string>;
+    updateRun(runId: string, updates: Partial<AgentRunState>): Promise<void>;
+    getRun(runId: string): Promise<AgentRunState | null>;
+    getRunsByThread(threadId: string): Promise<AgentRunState[]>;
+    resolveApproval(toolCallId: string, status: 'approved' | 'denied'): Promise<boolean>;
+    findRunByToolCallId(toolCallId: string): Promise<{
+        run: AgentRunState;
+        approval: PendingApproval;
+    } | null>;
+    saveScore(score: SaveScoreInput): Promise<void>;
+    getScores(runId: string): Promise<AgentRunScore[]>;
+}