@pikku/core 0.12.83 → 0.12.86
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +492 -0
- package/README.md +1 -1
- package/dist/bootstrap-compat/root.d.ts +20 -0
- package/dist/classification/column-form.d.ts +32 -0
- package/dist/classification/column-form.js +42 -0
- package/dist/classification/data-classification.d.ts +64 -0
- package/dist/classification/index.d.ts +13 -0
- package/dist/classification/index.js +2 -0
- package/dist/classification/secret-value.d.ts +56 -0
- package/dist/classification/secret-value.js +46 -0
- package/dist/crypto-utils.d.ts +1 -1
- package/dist/ecosystem/agent-scorer.d.ts +12 -0
- package/dist/ecosystem/agent-scorer.js +5 -0
- package/dist/ecosystem/agent.d.ts +21 -0
- package/dist/ecosystem/agent.js +6 -0
- package/dist/ecosystem/channel/local.d.ts +3 -0
- package/dist/ecosystem/channel/local.js +3 -0
- package/dist/ecosystem/channel/serverless.d.ts +9 -0
- package/dist/ecosystem/channel/serverless.js +1 -0
- package/dist/ecosystem/channel.d.ts +15 -0
- package/dist/ecosystem/channel.js +5 -0
- package/dist/ecosystem/cli/channel.d.ts +16 -0
- package/dist/ecosystem/cli/channel.js +2 -0
- package/dist/ecosystem/cli.d.ts +9 -0
- package/dist/ecosystem/cli.js +2 -0
- package/dist/ecosystem/credential.d.ts +10 -0
- package/dist/ecosystem/credential.js +1 -0
- package/dist/ecosystem/crypto-utils.d.ts +8 -0
- package/dist/ecosystem/crypto-utils.js +1 -0
- package/dist/ecosystem/dev.d.ts +9 -0
- package/dist/ecosystem/dev.js +2 -0
- package/dist/ecosystem/errors.d.ts +8 -0
- package/dist/ecosystem/errors.js +2 -0
- package/dist/ecosystem/function.d.ts +13 -0
- package/dist/ecosystem/function.js +2 -0
- package/dist/ecosystem/gateway.d.ts +1 -0
- package/dist/ecosystem/hmac.d.ts +1 -0
- package/dist/ecosystem/hmac.js +1 -0
- package/dist/ecosystem/http.d.ts +13 -0
- package/dist/ecosystem/http.js +5 -0
- package/dist/ecosystem/mcp.d.ts +3 -0
- package/dist/ecosystem/mcp.js +2 -0
- package/dist/ecosystem/middleware.d.ts +18 -0
- package/dist/ecosystem/middleware.js +7 -0
- package/dist/ecosystem/node-host-resolver.d.ts +1 -0
- package/dist/ecosystem/node-host-resolver.js +1 -0
- package/dist/ecosystem/node.d.ts +1 -0
- package/dist/ecosystem/oauth2.d.ts +1 -0
- package/dist/ecosystem/oauth2.js +1 -0
- package/dist/ecosystem/persona.d.ts +17 -0
- package/dist/ecosystem/persona.js +5 -0
- package/dist/ecosystem/queue.d.ts +13 -0
- package/dist/ecosystem/queue.js +4 -0
- package/dist/ecosystem/remote.d.ts +8 -0
- package/dist/ecosystem/remote.js +1 -0
- package/dist/ecosystem/role.d.ts +4 -0
- package/dist/ecosystem/role.js +2 -0
- package/dist/ecosystem/rpc.d.ts +6 -0
- package/dist/ecosystem/rpc.js +3 -0
- package/dist/ecosystem/safe-fetch.d.ts +7 -0
- package/dist/ecosystem/safe-fetch.js +1 -0
- package/dist/ecosystem/scenario.d.ts +21 -0
- package/dist/ecosystem/scenario.js +8 -0
- package/dist/ecosystem/scheduler.d.ts +3 -0
- package/dist/ecosystem/scheduler.js +2 -0
- package/dist/ecosystem/schema.d.ts +2 -0
- package/dist/ecosystem/schema.js +1 -0
- package/dist/ecosystem/scope.d.ts +5 -0
- package/dist/ecosystem/scope.js +3 -0
- package/dist/ecosystem/secret.d.ts +11 -0
- package/dist/ecosystem/secret.js +2 -0
- package/dist/ecosystem/services/istanbul-coverage.d.ts +1 -0
- package/dist/ecosystem/services/istanbul-coverage.js +1 -0
- package/dist/ecosystem/services/local-content-request-handler.d.ts +9 -0
- package/dist/ecosystem/services/local-content-request-handler.js +1 -0
- package/dist/ecosystem/services/local-content.d.ts +2 -0
- package/dist/ecosystem/services/local-content.js +1 -0
- package/dist/ecosystem/services/local-meta.d.ts +1 -0
- package/dist/ecosystem/services/local-meta.js +1 -0
- package/dist/ecosystem/services/v8-coverage.d.ts +1 -0
- package/dist/ecosystem/services/v8-coverage.js +1 -0
- package/dist/ecosystem/services.d.ts +36 -0
- package/dist/ecosystem/services.js +12 -0
- package/dist/ecosystem/testing.d.ts +7 -0
- package/dist/ecosystem/testing.js +1 -0
- package/dist/ecosystem/trigger.d.ts +2 -0
- package/dist/ecosystem/trigger.js +1 -0
- package/dist/ecosystem/types.d.ts +12 -0
- package/dist/ecosystem/types.js +6 -0
- package/dist/ecosystem/variable.d.ts +9 -0
- package/dist/ecosystem/variable.js +1 -0
- package/dist/ecosystem/virtual-user.d.ts +24 -0
- package/dist/ecosystem/virtual-user.js +8 -0
- package/dist/ecosystem/workflow.d.ts +20 -0
- package/dist/ecosystem/workflow.js +6 -0
- package/dist/errors/index.d.ts +8 -0
- package/dist/errors/index.js +1 -0
- package/dist/errors/serialized-error.d.ts +7 -0
- package/dist/errors/serialized-error.js +1 -0
- package/dist/function/function-meta.types.d.ts +139 -0
- package/dist/function/function-meta.types.js +1 -0
- package/dist/function/function-runner.d.ts +3 -2
- package/dist/function/function-runner.js +31 -11
- package/dist/function/functions.types.d.ts +10 -2
- package/dist/function/index.d.ts +8 -2
- package/dist/function/index.js +4 -1
- package/dist/function/pikku-request.d.ts +8 -0
- package/dist/function/pikku-request.js +15 -0
- package/dist/index.d.ts +8 -8
- package/dist/index.js +3 -3
- package/dist/middleware/auth-apikey.d.ts +2 -10
- package/dist/middleware/auth-apikey.js +1 -1
- package/dist/middleware/auth-bearer.d.ts +2 -10
- package/dist/middleware/auth-bearer.js +1 -1
- package/dist/middleware/auth-cookie.d.ts +2 -10
- package/dist/middleware/auth-cookie.js +1 -1
- package/dist/middleware/cors.d.ts +5 -11
- package/dist/middleware/cors.js +13 -6
- package/dist/middleware/index.d.ts +3 -0
- package/dist/middleware/index.js +1 -0
- package/dist/middleware/middleware-factories.d.ts +9 -0
- package/dist/middleware/middleware-factories.js +19 -0
- package/dist/middleware/middleware.types.d.ts +27 -0
- package/dist/middleware/middleware.types.js +1 -0
- package/dist/middleware/remote-auth.d.ts +1 -1
- package/dist/middleware/remote-auth.js +1 -1
- package/dist/middleware/telemetry.d.ts +4 -20
- package/dist/middleware/telemetry.js +1 -1
- package/dist/middleware-runner.d.ts +2 -1
- package/dist/pikku-state.d.ts +2 -1
- package/dist/services/{ai-run-state-service.d.ts → agent-run-state-service.d.ts} +5 -5
- package/dist/services/agent-run-state-service.js +1 -0
- package/dist/services/{ai-agent-runner-service.d.ts → agent-runner-service.d.ts} +12 -12
- package/dist/services/agent-runner-service.js +1 -0
- package/dist/services/{ai-storage-service.d.ts → agent-storage-service.d.ts} +7 -7
- package/dist/services/agent-storage-service.js +1 -0
- package/dist/services/audit-service.d.ts +1 -1
- package/dist/services/credential-wire-service.js +1 -1
- package/dist/services/email-service.d.ts +1 -1
- package/dist/services/file-scenario-run-store.d.ts +58 -0
- package/dist/services/file-scenario-run-store.js +214 -0
- package/dist/services/http-personas.d.ts +1 -1
- package/dist/services/http-personas.js +3 -3
- package/dist/services/{in-memory-ai-run-state-service.d.ts → in-memory-agent-run-state-service.d.ts} +5 -5
- package/dist/services/{in-memory-ai-run-state-service.js → in-memory-agent-run-state-service.js} +1 -1
- package/dist/services/in-memory-workflow-service.d.ts +1 -1
- package/dist/services/index.d.ts +9 -5
- package/dist/services/index.js +4 -1
- package/dist/services/local-secrets.d.ts +1 -1
- package/dist/services/local-secrets.js +1 -1
- package/dist/services/logger.d.ts +7 -7
- package/dist/services/meta-service.d.ts +5 -4
- package/dist/services/scoped-secret-service.d.ts +1 -1
- package/dist/services/secret-service.d.ts +1 -1
- package/dist/services/typed-secret-service.d.ts +16 -2
- package/dist/services/typed-secret-service.js +5 -0
- package/dist/services/webhook-service.d.ts +1 -1
- package/dist/services/workflow-service.d.ts +2 -1
- package/dist/testing/index.d.ts +1 -0
- package/dist/testing/index.js +1 -0
- package/dist/testing/service-tests/agent-run-service-tests.d.ts +1 -1
- package/dist/testing/service-tests/agent-run-service-tests.js +3 -3
- package/dist/testing/service-tests/agent-storage-service-tests.d.ts +3 -0
- package/dist/testing/service-tests/{ai-storage-service-tests.js → agent-storage-service-tests.js} +4 -4
- package/dist/testing/service-tests.d.ts +4 -4
- package/dist/testing/service-tests.js +4 -4
- package/dist/types/core.types.d.ts +37 -187
- package/dist/types/core.types.js +1 -19
- package/dist/types/index.d.ts +2 -0
- package/dist/types/index.js +1 -0
- package/dist/types/state.types.d.ts +8 -6
- package/dist/utils.d.ts +13 -0
- package/dist/utils.js +2 -0
- package/dist/wirings/actor-flow/run-conversation.d.ts +2 -2
- package/dist/wirings/addon/addon-runner.d.ts +17 -0
- package/dist/wirings/addon/addon-runner.js +150 -0
- package/dist/wirings/addon/index.d.ts +6 -0
- package/dist/wirings/addon/index.js +3 -0
- package/dist/wirings/addon/remote-addon-auth.d.ts +16 -0
- package/dist/wirings/addon/remote-addon-auth.js +39 -0
- package/dist/wirings/addon/wire-addon.d.ts +80 -0
- package/dist/wirings/addon/wire-addon.js +120 -0
- package/dist/wirings/addon/wire-remote-addon.d.ts +22 -0
- package/dist/wirings/addon/wire-remote-addon.js +11 -0
- package/dist/wirings/{ai-agent/ai-agent-agui.d.ts → agent/agent-agui.d.ts} +2 -2
- package/dist/wirings/{ai-agent/ai-agent-agui.js → agent/agent-agui.js} +1 -1
- package/dist/wirings/{ai-agent/ai-agent-finalize.d.ts → agent/agent-finalize.d.ts} +10 -10
- package/dist/wirings/{ai-agent/ai-agent-finalize.js → agent/agent-finalize.js} +7 -7
- package/dist/wirings/{ai-agent/ai-agent-helpers.d.ts → agent/agent-helpers.d.ts} +1 -1
- package/dist/wirings/{ai-agent/ai-agent-interrupt.d.ts → agent/agent-interrupt.d.ts} +4 -4
- package/dist/wirings/{ai-agent/ai-agent-interrupt.js → agent/agent-interrupt.js} +2 -2
- package/dist/wirings/{ai-agent/ai-agent-memory.d.ts → agent/agent-memory.d.ts} +14 -14
- package/dist/wirings/{ai-agent/ai-agent-memory.js → agent/agent-memory.js} +1 -1
- package/dist/wirings/{ai-agent/ai-agent-model-config.js → agent/agent-model-config.js} +1 -1
- package/dist/wirings/{ai-agent/ai-agent-prepare.d.ts → agent/agent-prepare.d.ts} +24 -24
- package/dist/wirings/{ai-agent/ai-agent-prepare.js → agent/agent-prepare.js} +17 -17
- package/dist/wirings/agent/agent-registry.d.ts +16 -0
- package/dist/wirings/{ai-agent/ai-agent-registry.js → agent/agent-registry.js} +9 -9
- package/dist/wirings/{ai-agent → agent}/agent-rpc.js +8 -8
- package/dist/wirings/agent/agent-runner.d.ts +7 -0
- package/dist/wirings/{ai-agent/ai-agent-runner.js → agent/agent-runner.js} +49 -50
- package/dist/wirings/{ai-agent/ai-agent-stream.d.ts → agent/agent-stream.d.ts} +15 -15
- package/dist/wirings/{ai-agent/ai-agent-stream.js → agent/agent-stream.js} +78 -78
- package/dist/wirings/{ai-agent/ai-agent-turn.d.ts → agent/agent-turn.d.ts} +5 -5
- package/dist/wirings/{ai-agent/ai-agent-turn.js → agent/agent-turn.js} +4 -4
- package/dist/wirings/agent/agent-utils.d.ts +14 -0
- package/dist/wirings/agent/agent-utils.js +17 -0
- package/dist/wirings/{ai-agent/ai-agent.types.d.ts → agent/agent.types.d.ts} +47 -46
- package/dist/wirings/agent/agent.types.js +1 -0
- package/dist/wirings/agent/index.d.ts +12 -0
- package/dist/wirings/agent/index.js +10 -0
- package/dist/wirings/{ai-agent → agent}/voice-input.d.ts +1 -1
- package/dist/wirings/{ai-agent → agent}/voice-input.js +5 -5
- package/dist/wirings/{ai-agent → agent}/voice-output.d.ts +2 -3
- package/dist/wirings/{ai-agent → agent}/voice-output.js +8 -8
- package/dist/wirings/{ai-scorer/ai-scorer-grade.d.ts → agent-scorer/agent-scorer-grade.d.ts} +3 -3
- package/dist/wirings/{ai-scorer/ai-scorer-grade.js → agent-scorer/agent-scorer-grade.js} +6 -6
- package/dist/wirings/agent-scorer/agent-scorer-judge.d.ts +30 -0
- package/dist/wirings/{ai-scorer/ai-scorer-judge.js → agent-scorer/agent-scorer-judge.js} +57 -5
- package/dist/wirings/{ai-scorer/ai-scorer-live.d.ts → agent-scorer/agent-scorer-live.d.ts} +1 -1
- package/dist/wirings/{ai-scorer/ai-scorer-live.js → agent-scorer/agent-scorer-live.js} +3 -3
- package/dist/wirings/{ai-scorer/ai-scorer-registry.d.ts → agent-scorer/agent-scorer-registry.d.ts} +6 -6
- package/dist/wirings/{ai-scorer/ai-scorer-registry.js → agent-scorer/agent-scorer-registry.js} +4 -4
- package/dist/wirings/{ai-scorer/ai-scorer-snapshots.d.ts → agent-scorer/agent-scorer-snapshots.d.ts} +1 -1
- package/dist/wirings/{ai-scorer/ai-scorer-worker.d.ts → agent-scorer/agent-scorer-worker.d.ts} +3 -3
- package/dist/wirings/{ai-scorer/ai-scorer-worker.js → agent-scorer/agent-scorer-worker.js} +9 -7
- package/dist/wirings/{ai-scorer/ai-scorer.d.ts → agent-scorer/agent-scorer.d.ts} +12 -6
- package/dist/wirings/{ai-scorer/ai-scorer.js → agent-scorer/agent-scorer.js} +4 -3
- package/dist/wirings/{ai-scorer/ai-scorer.types.d.ts → agent-scorer/agent-scorer.types.d.ts} +24 -4
- package/dist/wirings/agent-scorer/agent-scorer.types.js +4 -0
- package/dist/wirings/agent-scorer/index.d.ts +6 -0
- package/dist/wirings/agent-scorer/index.js +5 -0
- package/dist/wirings/channel/channel-common.d.ts +2 -1
- package/dist/wirings/channel/channel-middleware-runner.d.ts +2 -1
- package/dist/wirings/channel/channel-rpc.types.d.ts +2 -2
- package/dist/wirings/channel/channel.types.d.ts +1 -1
- package/dist/wirings/channel/serverless/index.d.ts +1 -0
- package/dist/wirings/cli/channel/index.d.ts +1 -1
- package/dist/wirings/cli/cli-runner.d.ts +2 -1
- package/dist/wirings/cli/cli-runner.js +4 -1
- package/dist/wirings/cli/cli.types.d.ts +21 -2
- package/dist/wirings/cli/command-parser.js +157 -23
- package/dist/wirings/gateway/gateway.types.d.ts +2 -1
- package/dist/wirings/http/http-runner.d.ts +1 -1
- package/dist/wirings/http/http-runner.js +1 -1
- package/dist/wirings/http/http.types.d.ts +2 -2
- package/dist/wirings/http/index.d.ts +1 -0
- package/dist/wirings/http/index.js +1 -0
- package/dist/wirings/http/pikku-fetch-http-request.js +1 -1
- package/dist/wirings/http/pikku-fetch-http-response.js +2 -2
- package/dist/wirings/mcp/mcp.types.d.ts +1 -1
- package/dist/wirings/persona/index.d.ts +1 -1
- package/dist/wirings/persona/index.js +1 -1
- package/dist/wirings/persona/persona.types.d.ts +14 -0
- package/dist/wirings/queue/queue.types.d.ts +1 -1
- package/dist/wirings/queue/signed-queue-service.d.ts +1 -1
- package/dist/wirings/rpc/index.d.ts +0 -6
- package/dist/wirings/rpc/index.js +0 -3
- package/dist/wirings/rpc/remote-addon-auth.d.ts +1 -1
- package/dist/wirings/rpc/remote-addon-auth.js +1 -1
- package/dist/wirings/rpc/rpc-runner.d.ts +1 -1
- package/dist/wirings/rpc/rpc-runner.js +4 -4
- package/dist/wirings/rpc/rpc-types.d.ts +1 -1
- package/dist/wirings/rpc/wire-addon.d.ts +1 -1
- package/dist/wirings/scheduler/scheduler.types.d.ts +2 -1
- package/dist/wirings/scope/index.d.ts +1 -0
- package/dist/wirings/scope/index.js +1 -0
- package/dist/wirings/secret/secret.types.d.ts +10 -0
- package/dist/wirings/secret/validate-secret-definitions.js +2 -0
- package/dist/wirings/variable/validate-variable-definitions.js +2 -0
- package/dist/wirings/variable/variable.types.d.ts +9 -0
- package/dist/wirings/virtual-user/index.d.ts +1 -1
- package/dist/wirings/virtual-user/index.js +1 -1
- package/dist/wirings/virtual-user/prepare-virtual-user-run.d.ts +1 -1
- package/dist/wirings/virtual-user/prepare-virtual-user-run.js +1 -1
- package/dist/wirings/virtual-user/virtual-user-agents.d.ts +1 -1
- package/dist/wirings/virtual-user/virtual-user-derive.d.ts +1 -1
- package/dist/wirings/workflow/graph/graph-node.d.ts +9 -2
- package/dist/wirings/workflow/graph/graph-node.js +2 -0
- package/dist/wirings/workflow/graph/graph-runner.d.ts +1 -0
- package/dist/wirings/workflow/graph/graph-runner.js +283 -31
- package/dist/wirings/workflow/graph/workflow-graph.types.d.ts +16 -1
- package/dist/wirings/workflow/index.d.ts +2 -0
- package/dist/wirings/workflow/index.js +1 -0
- package/dist/wirings/workflow/pikku-scenario-service.d.ts +14 -4
- package/dist/wirings/workflow/pikku-scenario-service.js +44 -16
- package/dist/wirings/workflow/pikku-workflow-service.d.ts +2 -1
- package/dist/wirings/workflow/pikku-workflow-service.js +3 -4
- package/dist/wirings/workflow/run-timeline.d.ts +2 -3
- package/dist/wirings/workflow/scenario-run.types.d.ts +171 -0
- package/dist/wirings/workflow/scenario-run.types.js +1 -0
- package/dist/wirings/workflow/scenario-step-guards.d.ts +1 -2
- package/dist/wirings/workflow/scenario-step-guards.js +0 -8
- package/dist/wirings/workflow/scenario-step.types.d.ts +27 -12
- package/dist/wirings/workflow/workflow-approval.js +2 -1
- package/dist/wirings/workflow/workflow-run-engine.types.d.ts +2 -1
- package/dist/wirings/workflow/workflow.types.d.ts +2 -1
- package/knowledge/decisions/index.md +2 -0
- package/knowledge/decisions/internals/{a-non-streaming-agent-run-registers-with-airunstate-too.md → a-non-streaming-agent-run-registers-with-agentrunstate-too.md} +6 -6
- package/knowledge/decisions/internals/a-resumed-agent-turn-is-as-interruptible-as-the-first.md +1 -1
- package/knowledge/decisions/internals/a-scenario-step-template-is-offered-unfilled.md +1 -1
- package/knowledge/decisions/internals/a-secret-that-fails-to-decrypt-fails-the-whole-read.md +1 -1
- package/knowledge/decisions/internals/a-virtual-user-run-is-not-a-workflow-and-not-a-queued-job.md +2 -2
- package/knowledge/decisions/internals/a-wall-clock-threshold-is-a-load-test-in-disguise.md +6 -6
- package/knowledge/decisions/internals/a-workflow-wire-is-built-from-the-run-not-from-the-rpc-service.md +1 -1
- package/knowledge/decisions/internals/actor-flow-drives-the-target-through-a-transport-seam.md +1 -1
- package/knowledge/decisions/internals/addon-singleton-services-are-cached-per-namespace-not-per-package.md +1 -1
- package/knowledge/decisions/internals/addon-workflow-names-are-prefixed-with-the-consumer-namespace.md +1 -1
- package/knowledge/decisions/internals/{ai-agent-agui-bridge-obeys-the-client-ordering-contract.md → agent-agui-bridge-obeys-the-client-ordering-contract.md} +5 -5
- package/knowledge/decisions/internals/{ai-agent-audio-chunks-carry-the-format-the-provider-returned.md → agent-audio-chunks-carry-the-format-the-provider-returned.md} +2 -2
- package/knowledge/decisions/internals/agent-context-waits-for-a-tool-result-still-being-written.md +1 -1
- package/knowledge/decisions/internals/{ai-agent-credential-suspensions-hide-the-tool-result.md → agent-credential-suspensions-hide-the-tool-result.md} +2 -2
- package/knowledge/decisions/internals/{ai-agent-delegate-and-supervise-hide-different-text.md → agent-delegate-and-supervise-hide-different-text.md} +4 -4
- package/knowledge/decisions/internals/{ai-agent-llm-tool-arguments-have-nulls-stripped.md → agent-llm-tool-arguments-have-nulls-stripped.md} +3 -3
- package/knowledge/decisions/internals/{ai-agent-model-config-stays-a-single-resolution-seam.md → agent-model-config-stays-a-single-resolution-seam.md} +3 -3
- package/knowledge/decisions/internals/{ai-agent-onerror-hooks-cannot-change-the-failure.md → agent-onerror-hooks-cannot-change-the-failure.md} +6 -6
- package/knowledge/decisions/internals/{ai-agent-runner-methods-must-keep-their-receiver.md → agent-runner-methods-must-keep-their-receiver.md} +4 -4
- package/knowledge/decisions/internals/agent-speech-travels-as-a-custom-agui-event.md +1 -1
- package/knowledge/decisions/internals/{ai-agent-stream-persistence-is-best-effort.md → agent-stream-persistence-is-best-effort.md} +4 -4
- package/knowledge/decisions/internals/{ai-agent-sub-agents-inherit-the-parent-context-block.md → agent-sub-agents-inherit-the-parent-context-block.md} +3 -3
- package/knowledge/decisions/internals/{ai-agent-tool-execute-failures-are-logged-unconditionally.md → agent-tool-execute-failures-are-logged-unconditionally.md} +3 -3
- package/knowledge/decisions/internals/{ai-agent-voice-input-transcribes-audio-parts-in-place.md → agent-voice-input-transcribes-audio-parts-in-place.md} +2 -2
- package/knowledge/decisions/internals/{ai-agent-working-memory-is-persisted-only-when-valid.md → agent-working-memory-is-persisted-only-when-valid.md} +2 -2
- package/knowledge/decisions/internals/an-addon-scope-root-loses-to-a-root-the-host-already-declares.md +1 -1
- package/knowledge/decisions/internals/an-agent-interrupt-is-not-a-failure.md +2 -2
- package/knowledge/decisions/internals/an-agent-run-owned-by-another-instance-says-so.md +3 -3
- package/knowledge/decisions/internals/an-agent-stream-send-must-return-the-inner-sends-promise.md +2 -2
- package/knowledge/decisions/internals/an-empty-text-part-is-omitted-from-an-agent-message.md +1 -1
- package/knowledge/decisions/internals/an-empty-transcript-is-not-recorded.md +1 -1
- package/knowledge/decisions/internals/channel-message-handlers-accept-three-config-shapes.md +1 -1
- package/knowledge/decisions/internals/channel-middleware-caches-only-statically-resolved-middleware.md +1 -1
- package/knowledge/decisions/internals/channel-user-id-is-persisted-after-onconnect-middleware-runs.md +1 -1
- package/knowledge/decisions/internals/cli-option-names-are-camelcase-in-state-and-kebab-on-the-command-line.md +1 -1
- package/knowledge/decisions/internals/cli-parse-errors-are-routed-by-message-prefix.md +1 -1
- package/knowledge/decisions/internals/cli-unknown-long-options-warn-instead-of-failing.md +1 -1
- package/knowledge/decisions/internals/core-column-form-is-an-axis-of-its-own.md +4 -4
- package/knowledge/decisions/internals/core-data-classification-brand-is-an-optional-property.md +1 -1
- package/knowledge/decisions/internals/core-function-runner-restores-the-wire-fields-it-overwrites.md +3 -3
- package/knowledge/decisions/internals/core-hot-reload-merges-generated-meta-never-replaces-it.md +2 -2
- package/knowledge/decisions/internals/core-hot-reload-owns-its-module-registry.md +2 -2
- package/knowledge/decisions/internals/core-middleware-order-is-scope-then-priority.md +1 -1
- package/knowledge/decisions/internals/core-schema-defaults-apply-on-every-transport.md +1 -1
- package/knowledge/decisions/internals/core-scopes-are-an-and-gate-separate-from-permissions.md +3 -3
- package/knowledge/decisions/internals/gateway-adapters-resolve-lazily-and-are-promise-cached.md +1 -1
- package/knowledge/decisions/internals/gateway-listener-middleware-runs-without-an-rpc-on-the-wire.md +4 -4
- package/knowledge/decisions/internals/gateway-wiring-is-a-meta-wiring-over-http-and-channels.md +1 -1
- package/knowledge/decisions/internals/http-router-matches-normalized-paths-but-returns-registered-ones.md +1 -1
- package/knowledge/decisions/internals/in-a-scenario-a-4xx-is-data-not-an-exception.md +1 -1
- package/knowledge/decisions/internals/in-memory-workflow-history-aliases-the-live-step-object.md +1 -1
- package/knowledge/decisions/internals/index.md +4 -2
- package/knowledge/decisions/internals/istanbul-statement-counts-attach-to-the-start-line-only.md +1 -1
- package/knowledge/decisions/internals/one-project-shape-check-two-validators.md +1 -1
- package/knowledge/decisions/internals/queue-jobs-always-carry-an-explicit-attempts-count.md +1 -1
- package/knowledge/decisions/internals/remote-addons-dispatch-over-http-instead-of-local-meta.md +1 -1
- package/knowledge/decisions/internals/rpc-names-resolve-through-package-scope-before-root.md +1 -1
- package/knowledge/decisions/internals/scenario-given-and-when-are-sugar-but-then-is-not.md +2 -2
- package/knowledge/decisions/internals/scenarios-live-in-files-named-for-them.md +5 -5
- package/knowledge/decisions/internals/speech-synthesis-picks-a-voice-per-sentence-and-warns-once.md +1 -1
- package/knowledge/decisions/internals/the-actor-prompt-says-json-because-of-json-object-mode.md +1 -1
- package/knowledge/decisions/internals/the-agent-done-event-goes-through-the-middleware-and-is-awaited.md +1 -1
- package/knowledge/decisions/internals/the-api-report-pins-members-not-just-names.md +1 -1
- package/knowledge/decisions/internals/the-ecosystem-entry-point-carries-the-adapter-surface.md +43 -19
- package/knowledge/decisions/internals/the-embedding-model-is-pinned-per-service-and-doc-query-embedding-is-split.md +1 -1
- package/knowledge/decisions/internals/the-per-invocation-rpc-view-is-a-class.md +5 -5
- package/knowledge/decisions/internals/the-persona-runtime-is-exported-from-the-persona-entry-point.md +1 -1
- package/knowledge/decisions/internals/the-transcript-event-is-sent-ahead-of-the-run.md +2 -2
- package/knowledge/decisions/internals/the-worker-disposition-is-the-one-that-is-not-testing.md +1 -1
- package/knowledge/decisions/internals/thread-history-records-the-transcript-not-the-audio.md +2 -2
- package/knowledge/decisions/internals/validate-runs-checks-by-precondition.md +3 -3
- package/knowledge/decisions/internals/virtual-user-step-order-comes-from-insertion-order.md +1 -1
- package/knowledge/decisions/internals/voice-output-speaks-unless-voice-input-explicitly-says-otherwise.md +1 -1
- package/knowledge/decisions/internals/webhook-delivery-history-records-every-attempt-best-effort.md +1 -1
- package/knowledge/decisions/internals/wiring-registries-erase-the-generics-their-wire-functions-capture.md +1 -1
- package/knowledge/decisions/internals/workflow-approval-expiry-is-decided-from-a-recorded-deadline.md +1 -1
- package/knowledge/decisions/internals/workflow-core-never-imports-a-browser-driver.md +1 -1
- package/knowledge/decisions/internals/workflow-inline-runs-report-their-run-id-before-they-can-fail.md +1 -1
- package/knowledge/decisions/internals/workflow-invocation-id-is-the-dedupe-key-not-step-id.md +1 -1
- package/knowledge/decisions/internals/workflow-run-capabilities-are-extensions-not-subclasses.md +1 -1
- package/knowledge/decisions/internals/workflow-run-timeline-is-a-pure-fold-over-durable-history.md +1 -1
- package/knowledge/decisions/internals/workflow-scenario-assertions-never-retry-and-record-one-step.md +9 -5
- package/knowledge/decisions/internals/workflow-scenario-hooks-are-a-scenario-only-affordance.md +1 -1
- package/knowledge/decisions/internals/workflow-step-rpc-name-is-provenance-only.md +2 -2
- package/knowledge/decisions/internals/workflow-suspend-and-approval-reasons-are-durable-step-identities.md +1 -1
- package/knowledge/decisions/security/a-function-never-receives-the-secret-service.md +1 -1
- package/knowledge/decisions/security/a-step-runs-the-function-the-workflow-dispatched-it-with.md +1 -1
- package/knowledge/decisions/security/a-virtual-user-is-never-offered-a-step-that-would-forge-its-own-oracle.md +2 -3
- package/knowledge/decisions/security/actor-sign-in-is-proven-by-set-cookie-not-a-non-empty-jar.md +1 -1
- package/knowledge/decisions/security/addon-auth-and-tags-only-tighten.md +1 -1
- package/knowledge/decisions/security/{ai-agent-approval-forwarding-requires-a-symbol-brand.md → agent-approval-forwarding-requires-a-symbol-brand.md} +3 -3
- package/knowledge/decisions/security/{ai-agent-credential-requests-are-symbol-branded.md → agent-credential-requests-are-symbol-branded.md} +4 -4
- package/knowledge/decisions/security/{ai-agent-gate-requires-a-session-only-when-auth-is-true.md → agent-gate-requires-a-session-only-when-auth-is-true.md} +4 -4
- package/knowledge/decisions/security/{ai-agent-ownership-failures-never-echo-the-resource.md → agent-ownership-failures-never-echo-the-resource.md} +2 -2
- package/knowledge/decisions/security/{ai-agent-resume-re-runs-the-authorization-gate.md → agent-resume-re-runs-the-authorization-gate.md} +4 -4
- package/knowledge/decisions/security/{ai-agent-sessionless-deployments-have-no-thread-ownership.md → agent-sessionless-deployments-have-no-thread-ownership.md} +5 -5
- package/knowledge/decisions/security/{ai-agent-thread-ownership-composes-the-session-principal.md → agent-thread-ownership-composes-the-session-principal.md} +2 -2
- package/knowledge/decisions/security/{ai-agent-tool-filtering-reads-the-live-function-config.md → agent-tool-filtering-reads-the-live-function-config.md} +2 -2
- package/knowledge/decisions/security/an-agent-approval-is-claimed-before-the-tool-runs.md +3 -3
- package/knowledge/decisions/security/an-approval-answer-outlives-the-run-it-answered.md +3 -3
- package/knowledge/decisions/security/an-empty-owners-constraint-matches-nothing.md +3 -3
- package/knowledge/decisions/security/console-addon-privileged-functions-gate-themselves.md +21 -13
- package/knowledge/decisions/security/core-safe-fetch-blocks-ssrf-by-host-literal-not-dns.md +1 -1
- package/knowledge/decisions/security/gateway-middleware-sessions-must-be-bridged-onto-the-wire.md +2 -2
- package/knowledge/decisions/security/global-permissions-and-function-permissions-are-independent-gates.md +1 -1
- package/knowledge/decisions/security/http-request-bodies-are-bounded-before-they-are-buffered.md +2 -2
- package/knowledge/decisions/security/index.md +3 -2
- package/knowledge/decisions/security/mcp-internal-error-details-are-double-gated-on-production.md +1 -1
- package/knowledge/decisions/security/queue-jobs-carry-the-producers-pikku-user-id.md +3 -3
- package/knowledge/decisions/security/remote-addon-tokens-are-client-credentials-not-mesh-trust.md +1 -1
- package/knowledge/decisions/security/scaffold-features-are-authenticated-unless-opted-out.md +2 -2
- package/knowledge/decisions/security/self-authentication-is-declared-not-detected.md +1 -1
- package/knowledge/decisions/security/signed-content-urls-bind-the-request-path.md +2 -2
- package/knowledge/index.md +3 -1
- package/knowledge/questions/channel-middleware-accepts-bare-factories-that-nothing-resolves.md +1 -1
- package/knowledge/questions/index.md +2 -0
- package/package.json +16 -14
- package/run-tests.sh +0 -0
- package/scripts/generate-api-report.d.mts +1 -1
- package/scripts/generate-api-report.mjs +67 -60
- package/scripts/generate-api-report.mts +37 -47
- package/src/agent-naming.test.ts +68 -0
- package/src/api-report.test.ts +70 -1
- package/src/app-alias-surface.test.ts +179 -0
- package/src/app-leaf-surface.test.ts +217 -0
- package/src/bootstrap-compat/root.ts +20 -0
- package/src/{column-form.test.ts → classification/column-form.test.ts} +2 -2
- package/src/{data-classification.ts → classification/data-classification.ts} +1 -5
- package/src/classification/index.ts +38 -0
- package/src/{secret-value.test.ts → classification/secret-value.test.ts} +2 -2
- package/src/{secret-value.ts → classification/secret-value.ts} +1 -6
- package/src/crypto-utils.ts +1 -1
- package/src/dev/reload-meta.test.ts +1 -1
- package/src/errors/index.ts +9 -0
- package/src/errors/serialized-error.ts +9 -0
- package/src/factory-functions.test.ts +4 -2
- package/src/function/function-meta.types.ts +151 -0
- package/src/function/function-runner.test.ts +4 -2
- package/src/function/function-runner.ts +47 -14
- package/src/function/functions.types.ts +11 -7
- package/src/function/index.ts +24 -5
- package/src/function/list.types.ts +1 -3
- package/src/middleware/auth-apikey.ts +4 -2
- package/src/middleware/auth-bearer.test.ts +1 -1
- package/src/middleware/auth-bearer.ts +4 -2
- package/src/middleware/auth-cookie.ts +4 -1
- package/src/middleware/cors.test.ts +126 -5
- package/src/middleware/cors.ts +19 -8
- package/src/middleware/index.ts +16 -0
- package/src/middleware/middleware-factories.ts +62 -0
- package/src/middleware/middleware.types.ts +61 -0
- package/src/middleware/remote-auth.test.ts +1 -1
- package/src/middleware/remote-auth.ts +1 -1
- package/src/middleware/telemetry.ts +4 -2
- package/src/middleware-runner.test.ts +2 -3
- package/src/middleware-runner.ts +2 -2
- package/src/no-root-barrel.test.ts +114 -0
- package/src/permissions.ts +2 -4
- package/src/pikku-state.ts +6 -4
- package/src/public-surface.json +90 -170
- package/src/public-surface.json.README +20 -2
- package/src/public-surface.test.ts +31 -3
- package/src/remote.test.ts +1 -1
- package/src/removed-legacy-exports.test.ts +5 -1
- package/src/services/{ai-run-state-service.ts → agent-run-state-service.ts} +5 -5
- package/src/services/{ai-agent-runner-service.ts → agent-runner-service.ts} +18 -18
- package/src/services/{ai-storage-service.ts → agent-storage-service.ts} +7 -7
- package/src/services/audit-service.ts +1 -1
- package/src/services/credential-wire-service.ts +1 -1
- package/src/services/email-service.ts +2 -4
- package/src/services/file-scenario-run-store.test.ts +349 -0
- package/src/services/file-scenario-run-store.ts +282 -0
- package/src/services/http-personas-converse.test.ts +3 -3
- package/src/services/http-personas.ts +4 -4
- package/src/services/{in-memory-ai-run-state-service.ts → in-memory-agent-run-state-service.ts} +7 -7
- package/src/services/in-memory-workflow-service.ts +1 -1
- package/src/services/index.ts +22 -10
- package/src/services/local-content-request-handler.ts +1 -2
- package/src/services/local-secrets.ts +1 -1
- package/src/services/logger.ts +7 -7
- package/src/services/meta-service.ts +5 -5
- package/src/services/queue-webhook-service.test.ts +1 -1
- package/src/services/scoped-secret-service.ts +1 -1
- package/src/services/secret-service.ts +1 -1
- package/src/services/typed-secret-service.test.ts +52 -0
- package/src/services/typed-secret-service.ts +26 -2
- package/src/services/webhook-service.ts +1 -1
- package/src/services/workflow-service.ts +2 -1
- package/src/template-alias-surface.test.ts +240 -0
- package/src/testing/index.ts +1 -0
- package/src/testing/service-tests/agent-run-service-tests.ts +4 -4
- package/src/testing/service-tests/{ai-storage-service-tests.ts → agent-storage-service-tests.ts} +8 -8
- package/src/testing/service-tests.ts +10 -8
- package/src/types/core.types.ts +40 -292
- package/src/types/index.ts +2 -0
- package/src/types/state.types.ts +12 -14
- package/src/types/typed-credentials.test.ts +72 -0
- package/src/utils.ts +34 -0
- package/src/wirings/actor-flow/run-conversation.test.ts +2 -2
- package/src/wirings/actor-flow/run-conversation.ts +7 -9
- package/src/wirings/{rpc → addon}/addon-scopes.test.ts +1 -1
- package/src/wirings/addon/index.ts +12 -0
- package/src/wirings/{rpc → addon}/remote-addon-auth.ts +4 -1
- package/src/wirings/{rpc → addon}/wire-addon.ts +37 -2
- package/src/wirings/{ai-agent/ai-agent-agui.test.ts → agent/agent-agui.test.ts} +126 -105
- package/src/wirings/{ai-agent/ai-agent-agui.ts → agent/agent-agui.ts} +7 -7
- package/src/wirings/{ai-agent/ai-agent-authorization.test.ts → agent/agent-authorization.test.ts} +6 -6
- package/src/wirings/{ai-agent/ai-agent-finalize.test.ts → agent/agent-finalize.test.ts} +17 -16
- package/src/wirings/{ai-agent/ai-agent-finalize.ts → agent/agent-finalize.ts} +22 -22
- package/src/wirings/{ai-agent/ai-agent-helpers.test.ts → agent/agent-helpers.test.ts} +1 -1
- package/src/wirings/{ai-agent/ai-agent-helpers.ts → agent/agent-helpers.ts} +1 -1
- package/src/wirings/{ai-agent/ai-agent-interrupt.test.ts → agent/agent-interrupt.test.ts} +67 -77
- package/src/wirings/{ai-agent/ai-agent-interrupt.ts → agent/agent-interrupt.ts} +5 -5
- package/src/wirings/{ai-agent/ai-agent-memory.test.ts → agent/agent-memory.test.ts} +12 -12
- package/src/wirings/{ai-agent/ai-agent-memory.ts → agent/agent-memory.ts} +36 -36
- package/src/wirings/{ai-agent/ai-agent-model-config.test.ts → agent/agent-model-config.test.ts} +2 -5
- package/src/wirings/{ai-agent/ai-agent-model-config.ts → agent/agent-model-config.ts} +1 -1
- package/src/wirings/{ai-agent/ai-agent-prepare.test.ts → agent/agent-prepare.test.ts} +18 -18
- package/src/wirings/{ai-agent/ai-agent-prepare.ts → agent/agent-prepare.ts} +60 -56
- package/src/wirings/{ai-agent/ai-agent-registry.test.ts → agent/agent-registry.test.ts} +49 -43
- package/src/wirings/{ai-agent/ai-agent-registry.ts → agent/agent-registry.ts} +14 -14
- package/src/wirings/{ai-agent/ai-agent-resume-authorization.test.ts → agent/agent-resume-authorization.test.ts} +18 -18
- package/src/wirings/{ai-agent → agent}/agent-rpc.ts +16 -20
- package/src/wirings/{ai-agent/ai-agent-runner.test.ts → agent/agent-runner.test.ts} +105 -106
- package/src/wirings/{ai-agent/ai-agent-runner.ts → agent/agent-runner.ts} +91 -82
- package/src/wirings/{ai-agent/ai-agent-stream-output-hooks.test.ts → agent/agent-stream-output-hooks.test.ts} +25 -25
- package/src/wirings/{ai-agent/ai-agent-stream.test.ts → agent/agent-stream.test.ts} +147 -143
- package/src/wirings/{ai-agent/ai-agent-stream.ts → agent/agent-stream.ts} +148 -148
- package/src/wirings/{ai-agent/ai-agent-thread-ownership.test.ts → agent/agent-thread-ownership.test.ts} +24 -28
- package/src/wirings/{ai-agent/ai-agent-turn.test.ts → agent/agent-turn.test.ts} +3 -5
- package/src/wirings/{ai-agent/ai-agent-turn.ts → agent/agent-turn.ts} +7 -7
- package/src/wirings/agent/agent-utils.ts +20 -0
- package/src/wirings/{ai-agent/ai-agent.types.ts → agent/agent.types.ts} +54 -51
- package/src/wirings/agent/index.ts +57 -0
- package/src/wirings/{ai-agent → agent}/voice-input.test.ts +15 -15
- package/src/wirings/{ai-agent → agent}/voice-input.ts +11 -11
- package/src/wirings/{ai-agent → agent}/voice-output.test.ts +25 -27
- package/src/wirings/{ai-agent → agent}/voice-output.ts +11 -11
- package/src/wirings/{ai-scorer/ai-scorer-grade.test.ts → agent-scorer/agent-scorer-grade.test.ts} +8 -8
- package/src/wirings/{ai-scorer/ai-scorer-grade.ts → agent-scorer/agent-scorer-grade.ts} +9 -9
- package/src/wirings/agent-scorer/agent-scorer-judge.test.ts +285 -0
- package/src/wirings/agent-scorer/agent-scorer-judge.ts +180 -0
- package/src/wirings/{ai-scorer/ai-scorer-live.test.ts → agent-scorer/agent-scorer-live.test.ts} +11 -11
- package/src/wirings/{ai-scorer/ai-scorer-live.ts → agent-scorer/agent-scorer-live.ts} +3 -3
- package/src/wirings/{ai-scorer/ai-scorer-registry.ts → agent-scorer/agent-scorer-registry.ts} +11 -8
- package/src/wirings/{ai-scorer/ai-scorer-sampling.test.ts → agent-scorer/agent-scorer-sampling.test.ts} +1 -1
- package/src/wirings/{ai-scorer/ai-scorer-snapshots.test.ts → agent-scorer/agent-scorer-snapshots.test.ts} +2 -2
- package/src/wirings/{ai-scorer/ai-scorer-snapshots.ts → agent-scorer/agent-scorer-snapshots.ts} +1 -1
- package/src/wirings/{ai-scorer/ai-scorer-worker.test.ts → agent-scorer/agent-scorer-worker.test.ts} +15 -15
- package/src/wirings/{ai-scorer/ai-scorer-worker.ts → agent-scorer/agent-scorer-worker.ts} +9 -7
- package/src/wirings/{ai-scorer/ai-scorer.ts → agent-scorer/agent-scorer.ts} +15 -7
- package/src/wirings/{ai-scorer/ai-scorer.types.ts → agent-scorer/agent-scorer.types.ts} +27 -6
- package/src/wirings/agent-scorer/index.ts +23 -0
- package/src/wirings/channel/channel-common.ts +4 -2
- package/src/wirings/channel/channel-handler.ts +2 -5
- package/src/wirings/channel/channel-middleware-runner.ts +1 -1
- package/src/wirings/channel/channel-rpc.types.ts +3 -7
- package/src/wirings/channel/channel.types.ts +1 -2
- package/src/wirings/channel/local/local-channel-runner.test.ts +1 -2
- package/src/wirings/channel/serverless/index.ts +1 -0
- package/src/wirings/cli/channel/cli-raw-channel-runner.ts +2 -2
- package/src/wirings/cli/channel/index.ts +1 -3
- package/src/wirings/cli/cli-runner.test.ts +1 -1
- package/src/wirings/cli/cli-runner.ts +11 -7
- package/src/wirings/cli/cli.types.ts +24 -3
- package/src/wirings/cli/command-parser.test.ts +388 -1
- package/src/wirings/cli/command-parser.ts +189 -29
- package/src/wirings/gateway/gateway-runner.test.ts +1 -2
- package/src/wirings/gateway/gateway-runner.ts +3 -6
- package/src/wirings/gateway/gateway.types.ts +5 -4
- package/src/wirings/http/http-routes.test.ts +1 -2
- package/src/wirings/http/http-runner-addon-ref.test.ts +238 -0
- package/src/wirings/http/http-runner.test.ts +3 -8
- package/src/wirings/http/http-runner.ts +9 -3
- package/src/wirings/http/http.types.ts +3 -12
- package/src/wirings/http/index.ts +1 -0
- package/src/wirings/http/pikku-fetch-http-request.ts +1 -1
- package/src/wirings/http/pikku-fetch-http-response.ts +3 -2
- package/src/wirings/mcp/mcp-runner.test.ts +1 -1
- package/src/wirings/mcp/mcp.types.ts +1 -2
- package/src/wirings/persona/index.ts +1 -4
- package/src/wirings/persona/persona.types.ts +14 -0
- package/src/wirings/queue/queue-identity.test.ts +1 -1
- package/src/wirings/queue/queue.types.ts +2 -6
- package/src/wirings/queue/signed-queue-service.ts +1 -1
- package/src/wirings/rpc/index.ts +0 -12
- package/src/wirings/rpc/rpc-runner.test.ts +4 -4
- package/src/wirings/rpc/rpc-runner.ts +5 -5
- package/src/wirings/rpc/rpc-types.ts +1 -1
- package/src/wirings/scheduler/scheduler.types.ts +2 -5
- package/src/wirings/scope/index.ts +1 -0
- package/src/wirings/secret/secret.types.ts +10 -0
- package/src/wirings/secret/validate-secret-definitions.test.ts +23 -0
- package/src/wirings/secret/validate-secret-definitions.ts +2 -0
- package/src/wirings/variable/validate-variable-definitions.test.ts +23 -0
- package/src/wirings/variable/validate-variable-definitions.ts +2 -0
- package/src/wirings/variable/variable.types.ts +9 -0
- package/src/wirings/virtual-user/index.ts +1 -4
- package/src/wirings/virtual-user/prepare-virtual-user-run.ts +2 -2
- package/src/wirings/virtual-user/run-virtual-user.test.ts +2 -2
- package/src/wirings/virtual-user/run-virtual-user.ts +3 -3
- package/src/wirings/virtual-user/virtual-user-agents.ts +1 -1
- package/src/wirings/virtual-user/virtual-user-derive.test.ts +1 -1
- package/src/wirings/virtual-user/virtual-user-derive.ts +1 -1
- package/src/wirings/virtual-user/virtual-user.types.ts +1 -5
- package/src/wirings/workflow/graph/graph-foreach-queued.test.ts +569 -0
- package/src/wirings/workflow/graph/graph-foreach.test.ts +626 -0
- package/src/wirings/workflow/graph/graph-node.ts +16 -1
- package/src/wirings/workflow/graph/graph-runner.ts +387 -61
- package/src/wirings/workflow/graph/workflow-graph.types.ts +28 -3
- package/src/wirings/workflow/index.ts +8 -0
- package/src/wirings/workflow/pikku-scenario-service.ts +59 -19
- package/src/wirings/workflow/pikku-workflow-service.ts +6 -8
- package/src/wirings/workflow/run-timeline.ts +2 -2
- package/src/wirings/workflow/scenario-expectations.test.ts +28 -13
- package/src/wirings/workflow/scenario-run.types.ts +186 -0
- package/src/wirings/workflow/scenario-step-guards.ts +1 -14
- package/src/wirings/workflow/scenario-step.test.ts +32 -7
- package/src/wirings/workflow/scenario-step.types.ts +27 -12
- package/src/wirings/workflow/workflow-approval-policy.test.ts +117 -47
- package/src/wirings/workflow/workflow-approval.ts +2 -1
- package/src/wirings/workflow/workflow-run-engine.types.ts +2 -1
- package/src/wirings/workflow/workflow.types.ts +4 -12
- package/src/wirings-stay-decoupled.test.ts +7 -4
- package/tsconfig.tsbuildinfo +1 -1
- package/tsconfig.type-tests.json +3 -2
- package/dist/testing/service-tests/ai-storage-service-tests.d.ts +0 -3
- package/dist/wirings/ai-agent/ai-agent-registry.d.ts +0 -16
- package/dist/wirings/ai-agent/ai-agent-runner.d.ts +0 -7
- package/dist/wirings/ai-agent/ai-agent-utils.d.ts +0 -1
- package/dist/wirings/ai-agent/ai-agent-utils.js +0 -1
- package/dist/wirings/ai-agent/index.d.ts +0 -12
- package/dist/wirings/ai-agent/index.js +0 -10
- package/dist/wirings/ai-scorer/ai-scorer-judge.d.ts +0 -17
- package/dist/wirings/ai-scorer/ai-scorer.types.js +0 -4
- package/dist/wirings/ai-scorer/index.d.ts +0 -6
- package/dist/wirings/ai-scorer/index.js +0 -5
- package/src/ecosystem.ts +0 -40
- package/src/index.ts +0 -255
- package/src/wirings/ai-agent/ai-agent-utils.ts +0 -1
- package/src/wirings/ai-agent/index.ts +0 -65
- package/src/wirings/ai-scorer/ai-scorer-judge.test.ts +0 -143
- package/src/wirings/ai-scorer/ai-scorer-judge.ts +0 -120
- package/src/wirings/ai-scorer/index.ts +0 -24
- /package/dist/{services/ai-agent-runner-service.js → bootstrap-compat/root.js} +0 -0
- /package/dist/{services/ai-run-state-service.js → classification/data-classification.js} +0 -0
- /package/dist/{services/ai-storage-service.js → ecosystem/gateway.js} +0 -0
- /package/dist/{wirings/ai-agent/ai-agent.types.js → ecosystem/node.js} +0 -0
- /package/dist/wirings/{ai-agent/ai-agent-helpers.js → agent/agent-helpers.js} +0 -0
- /package/dist/wirings/{ai-agent/ai-agent-model-config.d.ts → agent/agent-model-config.d.ts} +0 -0
- /package/dist/wirings/{ai-agent → agent}/agent-rpc.d.ts +0 -0
- /package/dist/wirings/{ai-scorer/ai-scorer-sampling.d.ts → agent-scorer/agent-scorer-sampling.d.ts} +0 -0
- /package/dist/wirings/{ai-scorer/ai-scorer-sampling.js → agent-scorer/agent-scorer-sampling.js} +0 -0
- /package/dist/wirings/{ai-scorer/ai-scorer-snapshots.js → agent-scorer/agent-scorer-snapshots.js} +0 -0
- /package/src/{column-form.ts → classification/column-form.ts} +0 -0
- /package/src/{pikku-request.test.ts → function/pikku-request.test.ts} +0 -0
- /package/src/{pikku-request.ts → function/pikku-request.ts} +0 -0
- /package/src/wirings/{rpc → addon}/addon-auth-tags.test.ts +0 -0
- /package/src/wirings/{rpc → addon}/addon-runner.ts +0 -0
- /package/src/wirings/{rpc → addon}/addon-secrets.test.ts +0 -0
- /package/src/wirings/{rpc → addon}/wire-addon.test.ts +0 -0
- /package/src/wirings/{rpc → addon}/wire-remote-addon.ts +0 -0
- /package/src/wirings/{ai-scorer/ai-scorer-sampling.ts → agent-scorer/agent-scorer-sampling.ts} +0 -0
|
@@ -0,0 +1,58 @@
|
|
|
1
|
+
import type { ScenarioArtifact, ScenarioResult, ScenarioRunRecord, ScenarioRunStore, ScenarioRunSummary } from '../wirings/workflow/scenario-run.types.js';
|
|
2
|
+
/** Counts and duration, derived rather than stored so they cannot disagree. */
|
|
3
|
+
export declare const scenarioRunSummary: (record: ScenarioRunRecord) => ScenarioRunSummary;
|
|
4
|
+
export declare const scenarioArtifactContentType: (path: string) => string;
|
|
5
|
+
export interface FileScenarioRunStoreOptions {
|
|
6
|
+
/** The directory runs live under — one folder per run, named by its id. */
|
|
7
|
+
dir: string;
|
|
8
|
+
/**
|
|
9
|
+
* How many runs to keep. Older ones are deleted, with their artifacts, as a
|
|
10
|
+
* new run opens.
|
|
11
|
+
*
|
|
12
|
+
* Bounded on purpose: a run with video is megabytes, and an unbounded history
|
|
13
|
+
* beside a project is a directory nobody notices until it is enormous.
|
|
14
|
+
*/
|
|
15
|
+
keep?: number;
|
|
16
|
+
}
|
|
17
|
+
/**
|
|
18
|
+
* Scenario run history as files on disk — the OSS store.
|
|
19
|
+
*
|
|
20
|
+
* One folder per run holding its record and everything it filed, which makes a
|
|
21
|
+
* run a thing you can open, copy, attach to an issue or delete with `rm -rf`.
|
|
22
|
+
* A hosted project swaps this for a table and an object store; the console
|
|
23
|
+
* reads the same shapes from either.
|
|
24
|
+
*
|
|
25
|
+
* Writes are serialised through one chain. Scenarios finish one at a time, but
|
|
26
|
+
* `recordScenario` is read-modify-write on a single file, and a store that
|
|
27
|
+
* corrupts its own history the first time two things overlap is worse than no
|
|
28
|
+
* history.
|
|
29
|
+
*/
|
|
30
|
+
export declare class FileScenarioRunStore implements ScenarioRunStore {
|
|
31
|
+
private readonly options;
|
|
32
|
+
private writes;
|
|
33
|
+
constructor(options: FileScenarioRunStoreOptions);
|
|
34
|
+
start(record: ScenarioRunRecord): Promise<void>;
|
|
35
|
+
recordScenario(runId: string, result: ScenarioResult): Promise<void>;
|
|
36
|
+
attachArtifacts(runId: string, artifacts: ScenarioArtifact[]): Promise<void>;
|
|
37
|
+
finish(runId: string, outcome: Pick<ScenarioRunRecord, 'status' | 'finishedAt' | 'skipped' | 'hookFailures'>): Promise<void>;
|
|
38
|
+
readArtifact(runId: string, path: string): Promise<{
|
|
39
|
+
body: Uint8Array<ArrayBuffer>;
|
|
40
|
+
contentType: string;
|
|
41
|
+
} | undefined>;
|
|
42
|
+
list(options?: {
|
|
43
|
+
limit?: number;
|
|
44
|
+
}): Promise<ScenarioRunSummary[]>;
|
|
45
|
+
get(runId: string): Promise<ScenarioRunRecord | undefined>;
|
|
46
|
+
remove(runId: string): Promise<void>;
|
|
47
|
+
/** Where this run's artifacts live, for a driver writing into it. */
|
|
48
|
+
runDir(runId: string): string;
|
|
49
|
+
private serialise;
|
|
50
|
+
private read;
|
|
51
|
+
private write;
|
|
52
|
+
private runIds;
|
|
53
|
+
/**
|
|
54
|
+
* Drop the oldest runs past the limit, never the one just opened — a `keep`
|
|
55
|
+
* of zero or one must still leave the run being started.
|
|
56
|
+
*/
|
|
57
|
+
private prune;
|
|
58
|
+
}
|
|
@@ -0,0 +1,214 @@
|
|
|
1
|
+
import { mkdir, readFile, readdir, rm, writeFile } from 'node:fs/promises';
|
|
2
|
+
import { join } from 'node:path';
|
|
3
|
+
/** The record, beside the images and footage the same run produced. */
|
|
4
|
+
const RECORD_FILE = 'run.json';
|
|
5
|
+
/**
|
|
6
|
+
* A run id is a path segment, and `get('../../etc')` is a file read.
|
|
7
|
+
*
|
|
8
|
+
* Ids are generated here, so anything failing this arrived from outside and is
|
|
9
|
+
* refused rather than sanitised — a request for a run that cannot exist is a
|
|
10
|
+
* request for a run that does not exist.
|
|
11
|
+
*/
|
|
12
|
+
const SAFE_RUN_ID = /^[A-Za-z0-9][A-Za-z0-9_-]*$/;
|
|
13
|
+
/** Counts and duration, derived rather than stored so they cannot disagree. */
|
|
14
|
+
export const scenarioRunSummary = (record) => ({
|
|
15
|
+
runId: record.runId,
|
|
16
|
+
environment: record.environment,
|
|
17
|
+
surface: record.surface,
|
|
18
|
+
status: record.status,
|
|
19
|
+
startedAt: record.startedAt,
|
|
20
|
+
finishedAt: record.finishedAt,
|
|
21
|
+
durationMs: record.finishedAt
|
|
22
|
+
? new Date(record.finishedAt).getTime() -
|
|
23
|
+
new Date(record.startedAt).getTime()
|
|
24
|
+
: undefined,
|
|
25
|
+
passed: record.results.filter((r) => r.status === 'passed').length,
|
|
26
|
+
failed: record.results.filter((r) => r.status === 'failed').length,
|
|
27
|
+
skipped: record.skipped.length,
|
|
28
|
+
artifacts: record.results.reduce((total, result) => total + (result.artifacts?.length ?? 0), 0),
|
|
29
|
+
});
|
|
30
|
+
/**
|
|
31
|
+
* What a scenario artifact is served as.
|
|
32
|
+
*
|
|
33
|
+
* A short, closed list rather than a MIME database: a run produces images and
|
|
34
|
+
* recordings and nothing else, and anything unrecognised is served as bytes the
|
|
35
|
+
* browser is told not to interpret.
|
|
36
|
+
*/
|
|
37
|
+
const CONTENT_TYPES = {
|
|
38
|
+
png: 'image/png',
|
|
39
|
+
jpg: 'image/jpeg',
|
|
40
|
+
jpeg: 'image/jpeg',
|
|
41
|
+
webp: 'image/webp',
|
|
42
|
+
mp4: 'video/mp4',
|
|
43
|
+
webm: 'video/webm',
|
|
44
|
+
};
|
|
45
|
+
export const scenarioArtifactContentType = (path) => CONTENT_TYPES[path.split('.').pop()?.toLowerCase() ?? ''] ??
|
|
46
|
+
'application/octet-stream';
|
|
47
|
+
/**
|
|
48
|
+
* An artifact path is a content key from the record, but it arrives from a
|
|
49
|
+
* client and is joined onto a directory. Anything that could climb out of the
|
|
50
|
+
* run, or name something other than a file inside it, is refused.
|
|
51
|
+
*/
|
|
52
|
+
const SAFE_ARTIFACT_PATH = /^[A-Za-z0-9][A-Za-z0-9._-]*(\/[A-Za-z0-9][A-Za-z0-9._-]*)*$/;
|
|
53
|
+
const DEFAULT_KEEP = 20;
|
|
54
|
+
/**
|
|
55
|
+
* Scenario run history as files on disk — the OSS store.
|
|
56
|
+
*
|
|
57
|
+
* One folder per run holding its record and everything it filed, which makes a
|
|
58
|
+
* run a thing you can open, copy, attach to an issue or delete with `rm -rf`.
|
|
59
|
+
* A hosted project swaps this for a table and an object store; the console
|
|
60
|
+
* reads the same shapes from either.
|
|
61
|
+
*
|
|
62
|
+
* Writes are serialised through one chain. Scenarios finish one at a time, but
|
|
63
|
+
* `recordScenario` is read-modify-write on a single file, and a store that
|
|
64
|
+
* corrupts its own history the first time two things overlap is worse than no
|
|
65
|
+
* history.
|
|
66
|
+
*/
|
|
67
|
+
export class FileScenarioRunStore {
|
|
68
|
+
options;
|
|
69
|
+
writes = Promise.resolve();
|
|
70
|
+
constructor(options) {
|
|
71
|
+
this.options = options;
|
|
72
|
+
}
|
|
73
|
+
async start(record) {
|
|
74
|
+
await this.serialise(async () => {
|
|
75
|
+
await this.write(record);
|
|
76
|
+
await this.prune(record.runId);
|
|
77
|
+
});
|
|
78
|
+
}
|
|
79
|
+
async recordScenario(runId, result) {
|
|
80
|
+
await this.serialise(async () => {
|
|
81
|
+
const record = await this.read(runId);
|
|
82
|
+
if (!record) {
|
|
83
|
+
return;
|
|
84
|
+
}
|
|
85
|
+
record.results.push(result);
|
|
86
|
+
await this.write(record);
|
|
87
|
+
});
|
|
88
|
+
}
|
|
89
|
+
async attachArtifacts(runId, artifacts) {
|
|
90
|
+
if (artifacts.length === 0) {
|
|
91
|
+
return;
|
|
92
|
+
}
|
|
93
|
+
await this.serialise(async () => {
|
|
94
|
+
const record = await this.read(runId);
|
|
95
|
+
if (!record) {
|
|
96
|
+
return;
|
|
97
|
+
}
|
|
98
|
+
for (const artifact of artifacts) {
|
|
99
|
+
const result = record.results.find((candidate) => candidate.name === artifact.scenario);
|
|
100
|
+
// An artifact whose scenario is not in the results belongs to a
|
|
101
|
+
// scenario that never produced one — it is dropped rather than filed
|
|
102
|
+
// under a run-level bucket nothing renders.
|
|
103
|
+
if (result) {
|
|
104
|
+
result.artifacts = [...(result.artifacts ?? []), artifact];
|
|
105
|
+
}
|
|
106
|
+
}
|
|
107
|
+
await this.write(record);
|
|
108
|
+
});
|
|
109
|
+
}
|
|
110
|
+
async finish(runId, outcome) {
|
|
111
|
+
await this.serialise(async () => {
|
|
112
|
+
const record = await this.read(runId);
|
|
113
|
+
if (!record) {
|
|
114
|
+
return;
|
|
115
|
+
}
|
|
116
|
+
await this.write({ ...record, ...outcome });
|
|
117
|
+
});
|
|
118
|
+
}
|
|
119
|
+
async readArtifact(runId, path) {
|
|
120
|
+
if (!SAFE_RUN_ID.test(runId) || !SAFE_ARTIFACT_PATH.test(path)) {
|
|
121
|
+
return undefined;
|
|
122
|
+
}
|
|
123
|
+
try {
|
|
124
|
+
const file = await readFile(join(this.options.dir, runId, ...path.split('/')));
|
|
125
|
+
return {
|
|
126
|
+
body: new Uint8Array(file),
|
|
127
|
+
contentType: scenarioArtifactContentType(path),
|
|
128
|
+
};
|
|
129
|
+
}
|
|
130
|
+
catch {
|
|
131
|
+
return undefined;
|
|
132
|
+
}
|
|
133
|
+
}
|
|
134
|
+
async list(options = {}) {
|
|
135
|
+
const summaries = [];
|
|
136
|
+
for (const runId of await this.runIds()) {
|
|
137
|
+
const record = await this.read(runId);
|
|
138
|
+
if (record) {
|
|
139
|
+
summaries.push(scenarioRunSummary(record));
|
|
140
|
+
}
|
|
141
|
+
}
|
|
142
|
+
summaries.sort((a, b) => b.startedAt.localeCompare(a.startedAt));
|
|
143
|
+
return options.limit ? summaries.slice(0, options.limit) : summaries;
|
|
144
|
+
}
|
|
145
|
+
async get(runId) {
|
|
146
|
+
return this.read(runId);
|
|
147
|
+
}
|
|
148
|
+
async remove(runId) {
|
|
149
|
+
if (!SAFE_RUN_ID.test(runId)) {
|
|
150
|
+
return;
|
|
151
|
+
}
|
|
152
|
+
await rm(join(this.options.dir, runId), { recursive: true, force: true });
|
|
153
|
+
}
|
|
154
|
+
/** Where this run's artifacts live, for a driver writing into it. */
|
|
155
|
+
runDir(runId) {
|
|
156
|
+
return join(this.options.dir, runId);
|
|
157
|
+
}
|
|
158
|
+
serialise(work) {
|
|
159
|
+
const next = this.writes.then(work, work);
|
|
160
|
+
// Swallowed on the CHAIN only, so one failed write does not reject every
|
|
161
|
+
// later one; the caller still sees its own rejection through `next`.
|
|
162
|
+
this.writes = next.catch(() => { });
|
|
163
|
+
return next;
|
|
164
|
+
}
|
|
165
|
+
async read(runId) {
|
|
166
|
+
if (!SAFE_RUN_ID.test(runId)) {
|
|
167
|
+
return undefined;
|
|
168
|
+
}
|
|
169
|
+
try {
|
|
170
|
+
const raw = await readFile(join(this.options.dir, runId, RECORD_FILE), 'utf-8');
|
|
171
|
+
return JSON.parse(raw);
|
|
172
|
+
}
|
|
173
|
+
catch {
|
|
174
|
+
// A folder with artifacts but no readable record is a run that was killed
|
|
175
|
+
// mid-write. It is not listable, and it is not an error either.
|
|
176
|
+
return undefined;
|
|
177
|
+
}
|
|
178
|
+
}
|
|
179
|
+
async write(record) {
|
|
180
|
+
const dir = join(this.options.dir, record.runId);
|
|
181
|
+
await mkdir(dir, { recursive: true });
|
|
182
|
+
await writeFile(join(dir, RECORD_FILE), JSON.stringify(record, null, 2) + '\n');
|
|
183
|
+
}
|
|
184
|
+
async runIds() {
|
|
185
|
+
try {
|
|
186
|
+
const entries = await readdir(this.options.dir, { withFileTypes: true });
|
|
187
|
+
return entries
|
|
188
|
+
.filter((entry) => entry.isDirectory() && SAFE_RUN_ID.test(entry.name))
|
|
189
|
+
.map((entry) => entry.name);
|
|
190
|
+
}
|
|
191
|
+
catch {
|
|
192
|
+
return [];
|
|
193
|
+
}
|
|
194
|
+
}
|
|
195
|
+
/**
|
|
196
|
+
* Drop the oldest runs past the limit, never the one just opened — a `keep`
|
|
197
|
+
* of zero or one must still leave the run being started.
|
|
198
|
+
*/
|
|
199
|
+
async prune(keeping) {
|
|
200
|
+
const keep = this.options.keep ?? DEFAULT_KEEP;
|
|
201
|
+
const dated = [];
|
|
202
|
+
for (const runId of await this.runIds()) {
|
|
203
|
+
if (runId === keeping) {
|
|
204
|
+
continue;
|
|
205
|
+
}
|
|
206
|
+
const record = await this.read(runId);
|
|
207
|
+
dated.push({ runId, startedAt: record?.startedAt ?? '' });
|
|
208
|
+
}
|
|
209
|
+
dated.sort((a, b) => b.startedAt.localeCompare(a.startedAt));
|
|
210
|
+
for (const { runId } of dated.slice(Math.max(keep - 1, 0))) {
|
|
211
|
+
await rm(join(this.options.dir, runId), { recursive: true, force: true });
|
|
212
|
+
}
|
|
213
|
+
}
|
|
214
|
+
}
|
|
@@ -24,7 +24,7 @@ export interface HttpPersonasConfig {
|
|
|
24
24
|
/**
|
|
25
25
|
* Default model a persona thinks with when `converse(...)` is called without
|
|
26
26
|
* an explicit `model`. Its own turns/approvals/evaluation run in-process via
|
|
27
|
-
* the configured `
|
|
27
|
+
* the configured `agentRunner`.
|
|
28
28
|
*/
|
|
29
29
|
model?: string;
|
|
30
30
|
}
|
|
@@ -53,8 +53,8 @@ export class HttpPersona {
|
|
|
53
53
|
return readScenarioHttpResponse(res);
|
|
54
54
|
}
|
|
55
55
|
async converse(options) {
|
|
56
|
-
const {
|
|
57
|
-
if (!
|
|
56
|
+
const { agentRunner } = getSingletonServices();
|
|
57
|
+
if (!agentRunner) {
|
|
58
58
|
throw new AIProviderNotConfiguredError();
|
|
59
59
|
}
|
|
60
60
|
const model = options.model ?? this.config.model;
|
|
@@ -72,7 +72,7 @@ export class HttpPersona {
|
|
|
72
72
|
approvals: options.approvals,
|
|
73
73
|
model,
|
|
74
74
|
maxTurns: options.maxTurns,
|
|
75
|
-
llm: (params) =>
|
|
75
|
+
llm: (params) => agentRunner.run(params),
|
|
76
76
|
target: {
|
|
77
77
|
run: (message) => this.agentRun(options.agent, message, threadId, resourceId),
|
|
78
78
|
approve: (runId, decisions) => this.agentApprove(options.agent, runId, decisions),
|
package/dist/services/{in-memory-ai-run-state-service.d.ts → in-memory-agent-run-state-service.d.ts}
RENAMED
|
@@ -1,7 +1,7 @@
|
|
|
1
|
-
import type {
|
|
2
|
-
import type { AgentRunState, PendingApproval } from '../wirings/
|
|
3
|
-
import type {
|
|
4
|
-
export declare class
|
|
1
|
+
import type { AgentRunStateService, CreateRunInput, SaveScoreInput } from './agent-run-state-service.js';
|
|
2
|
+
import type { AgentRunState, PendingApproval } from '../wirings/agent/agent.types.js';
|
|
3
|
+
import type { AgentRunScore } from '../wirings/agent-scorer/agent-scorer.types.js';
|
|
4
|
+
export declare class InMemoryAgentRunStateService implements AgentRunStateService {
|
|
5
5
|
private runs;
|
|
6
6
|
private scores;
|
|
7
7
|
private counter;
|
|
@@ -15,5 +15,5 @@ export declare class InMemoryAIRunStateService implements AIRunStateService {
|
|
|
15
15
|
approval: PendingApproval;
|
|
16
16
|
} | null>;
|
|
17
17
|
saveScore(score: SaveScoreInput): Promise<void>;
|
|
18
|
-
getScores(runId: string): Promise<
|
|
18
|
+
getScores(runId: string): Promise<AgentRunScore[]>;
|
|
19
19
|
}
|
|
@@ -1,5 +1,5 @@
|
|
|
1
1
|
import { PikkuWorkflowService } from '../wirings/workflow/pikku-workflow-service.js';
|
|
2
|
-
import type { SerializedError } from '../
|
|
2
|
+
import type { SerializedError } from '../errors/serialized-error.js';
|
|
3
3
|
import type { WorkflowPlannedStep, WorkflowQueueOptions, WorkflowRun, WorkflowRunService, WorkflowRunWire, StepState, StepStatus, WorkflowStatus, WorkflowVersionStatus, WorkflowStepOptions } from '../wirings/workflow/workflow.types.js';
|
|
4
4
|
export declare class InMemoryWorkflowService extends PikkuWorkflowService implements WorkflowRunService {
|
|
5
5
|
constructor(options?: WorkflowQueueOptions);
|
package/dist/services/index.d.ts
CHANGED
|
@@ -14,8 +14,9 @@ export { InMemoryWorkflowService } from './in-memory-workflow-service.js';
|
|
|
14
14
|
export { QueueWebhookService, pikkuWebhookWorkerFunc, } from './queue-webhook-service.js';
|
|
15
15
|
export { InMemoryQueueService } from './in-memory-queue-service.js';
|
|
16
16
|
export { InMemoryTriggerService } from './in-memory-trigger-service.js';
|
|
17
|
-
export {
|
|
17
|
+
export { InMemoryAgentRunStateService } from './in-memory-agent-run-state-service.js';
|
|
18
18
|
export { LocalGatewayService } from './local-gateway-service.js';
|
|
19
|
+
export { FileScenarioRunStore, scenarioArtifactContentType, scenarioRunSummary, type FileScenarioRunStoreOptions, } from './file-scenario-run-store.js';
|
|
19
20
|
export type { ContentService, SignContentKeyArgs, SignURLArgs, GetUploadURLArgs, UploadURLResult, BucketKeyArgs, WriteFileArgs, CopyFileArgs, } from './content-service.js';
|
|
20
21
|
export type { ScenarioPersona, ResolvedPersona, ScenarioPersonas, } from './personas-service.js';
|
|
21
22
|
export type { JWTService } from './jwt-service.js';
|
|
@@ -26,14 +27,15 @@ export type { SecretService, SecretValues } from './secret-service.js';
|
|
|
26
27
|
export type { VariablesService } from './variables-service.js';
|
|
27
28
|
export type { SchemaService } from './schema-service.js';
|
|
28
29
|
export type { SessionService } from './user-session-service.js';
|
|
29
|
-
export type { ScheduledTaskSummary, ScheduledTaskInfo,
|
|
30
|
+
export type { ScheduledTaskSummary, ScheduledTaskInfo, } from './scheduler-service.js';
|
|
31
|
+
export { SchedulerService } from './scheduler-service.js';
|
|
30
32
|
export type { TriggerService } from './trigger-service.js';
|
|
31
33
|
export type { GatewayService } from './gateway-service.js';
|
|
32
34
|
export type { DeploymentService, DeploymentConfig, DeploymentInfo, DeploymentServiceConfig, } from './deployment-service.js';
|
|
33
|
-
export type {
|
|
34
|
-
export type {
|
|
35
|
+
export type { AgentStorageService } from './agent-storage-service.js';
|
|
36
|
+
export type { AgentRunnerParams, AgentRunnerResult, AgentStepResult, AgentRunnerService, } from './agent-runner-service.js';
|
|
35
37
|
export type { AIEmbeddingService } from './ai-embedding-service.js';
|
|
36
|
-
export type { CreateRunInput, SaveScoreInput,
|
|
38
|
+
export type { CreateRunInput, SaveScoreInput, AgentRunStateService, } from './agent-run-state-service.js';
|
|
37
39
|
export type { CredentialMeta } from './typed-secret-service.js';
|
|
38
40
|
export type { CredentialService } from './credential-service.js';
|
|
39
41
|
export { TypedCredentialService } from './typed-credential-service.js';
|
|
@@ -50,3 +52,5 @@ export type { MCPMeta, RPCMetaRecord, ServiceMeta, ServicesMetaRecord, Middlewar
|
|
|
50
52
|
export type { CoverageService, ScriptCoverage, FunctionCoverageEntry, FunctionCoverageReport, CoverageFunctionMeta, } from './v8-coverage-service.js';
|
|
51
53
|
export { StubTracker, createStubProxy, getStubTracker, isTestRun, stub, spy, type StubCall, } from './stub-tracker.js';
|
|
52
54
|
export { SecretHostNotAllowedError, assertSecretAllowedForHost, } from './secret-host-binding.js';
|
|
55
|
+
export type { AuditFacets, AuditQuery, AuditQueryResult, } from './audit-service.js';
|
|
56
|
+
export { SecretAccessDeniedError, withoutSecrets } from './secretless.js';
|
package/dist/services/index.js
CHANGED
|
@@ -14,11 +14,14 @@ export { InMemoryWorkflowService } from './in-memory-workflow-service.js';
|
|
|
14
14
|
export { QueueWebhookService, pikkuWebhookWorkerFunc, } from './queue-webhook-service.js';
|
|
15
15
|
export { InMemoryQueueService } from './in-memory-queue-service.js';
|
|
16
16
|
export { InMemoryTriggerService } from './in-memory-trigger-service.js';
|
|
17
|
-
export {
|
|
17
|
+
export { InMemoryAgentRunStateService } from './in-memory-agent-run-state-service.js';
|
|
18
18
|
export { LocalGatewayService } from './local-gateway-service.js';
|
|
19
|
+
export { FileScenarioRunStore, scenarioArtifactContentType, scenarioRunSummary, } from './file-scenario-run-store.js';
|
|
19
20
|
export { DEFAULT_WEBHOOK_RETRIES, PIKKU_OUTGOING_WEBHOOK_QUEUE_NAME, WebhookService, } from './webhook-service.js';
|
|
21
|
+
export { SchedulerService } from './scheduler-service.js';
|
|
20
22
|
export { TypedCredentialService } from './typed-credential-service.js';
|
|
21
23
|
export { NoopAuditService, createInvocationAudit } from './audit-service.js';
|
|
22
24
|
export { InMemorySessionStore } from './in-memory-session-store.js';
|
|
23
25
|
export { StubTracker, createStubProxy, getStubTracker, isTestRun, stub, spy, } from './stub-tracker.js';
|
|
24
26
|
export { SecretHostNotAllowedError, assertSecretAllowedForHost, } from './secret-host-binding.js';
|
|
27
|
+
export { SecretAccessDeniedError, withoutSecrets } from './secretless.js';
|
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
import { type SecretValue } from '../secret-value.js';
|
|
1
|
+
import { type SecretValue } from '../classification/secret-value.js';
|
|
2
2
|
import type { SecretService, SecretValues } from './secret-service.js';
|
|
3
3
|
import type { VariablesService } from './variables-service.js';
|
|
4
4
|
export declare class LocalSecretService implements SecretService {
|
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
import { createSecretValue, isSecretValue, } from '../secret-value.js';
|
|
1
|
+
import { createSecretValue, isSecretValue, } from '../classification/secret-value.js';
|
|
2
2
|
import { LocalVariablesService } from './local-variables.js';
|
|
3
3
|
export class LocalSecretService {
|
|
4
4
|
variables;
|
|
@@ -1,11 +1,11 @@
|
|
|
1
|
-
import type { Safe } from '../secret-value.js';
|
|
1
|
+
import type { Safe } from '../classification/secret-value.js';
|
|
2
2
|
export declare enum LogLevel {
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
|
|
6
|
-
|
|
7
|
-
|
|
8
|
-
|
|
3
|
+
trace = 0,
|
|
4
|
+
debug = 1,
|
|
5
|
+
info = 2,
|
|
6
|
+
warn = 3,
|
|
7
|
+
error = 4,
|
|
8
|
+
critical = 5
|
|
9
9
|
}
|
|
10
10
|
/**
|
|
11
11
|
* A log line is the easiest place to leak a vault secret, so every parameter is
|
|
@@ -13,12 +13,13 @@ import type { TriggerMeta, TriggerSourceMeta } from '../wirings/trigger/trigger.
|
|
|
13
13
|
import type { SecretDefinitionsMeta } from '../wirings/secret/secret.types.js';
|
|
14
14
|
import type { CredentialDefinitionsMeta } from '../wirings/credential/credential.types.js';
|
|
15
15
|
import type { VariableDefinitionsMeta } from '../wirings/variable/variable.types.js';
|
|
16
|
-
import type { FunctionMeta, FunctionsMeta,
|
|
17
|
-
import type {
|
|
16
|
+
import type { FunctionMeta, FunctionsMeta, PermissionMetadata } from '../function/function-meta.types.js';
|
|
17
|
+
import type { MiddlewareMetadata } from '../middleware/middleware.types.js';
|
|
18
|
+
import type { AgentsMeta } from '../wirings/agent/agent.types.js';
|
|
18
19
|
import type { GatewaysMeta } from '../wirings/gateway/gateway.types.js';
|
|
19
20
|
export type { FunctionMeta, FunctionsMeta, MiddlewareMetadata as MiddlewareMeta, PermissionMetadata as PermissionMeta, };
|
|
20
|
-
export type AgentsMeta
|
|
21
|
-
export type AgentMeta =
|
|
21
|
+
export type { AgentsMeta };
|
|
22
|
+
export type AgentMeta = AgentsMeta[string];
|
|
22
23
|
export interface MCPMeta {
|
|
23
24
|
resources: MCPResourceMeta;
|
|
24
25
|
tools: MCPToolMeta;
|
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
import type { SecretValue } from '../secret-value.js';
|
|
1
|
+
import type { SecretValue } from '../classification/secret-value.js';
|
|
2
2
|
import type { SecretService, SecretValues } from './secret-service.js';
|
|
3
3
|
export declare class ScopedSecretService implements SecretService {
|
|
4
4
|
private secrets;
|
|
@@ -1,5 +1,13 @@
|
|
|
1
|
-
import type { SecretValue } from '../secret-value.js';
|
|
1
|
+
import type { SecretValue } from '../classification/secret-value.js';
|
|
2
2
|
import type { SecretService, SecretValues } from './secret-service.js';
|
|
3
|
+
/**
|
|
4
|
+
* The wrapper, or `undefined` when the generated map declares the key as an
|
|
5
|
+
* optional property. The `undefined` has to be lifted OUT of `SecretValue` —
|
|
6
|
+
* a missing optional secret resolves to `undefined` itself, not to a wrapper
|
|
7
|
+
* around it, so `SecretValue<T | undefined>` would type a value that never
|
|
8
|
+
* exists and hide the `undefined` behind a `.reveal()` the caller never reaches.
|
|
9
|
+
*/
|
|
10
|
+
export type SecretResult<T> = undefined extends T ? SecretValue<Exclude<T, undefined>> | undefined : SecretValue<T>;
|
|
3
11
|
export interface CredentialStatus {
|
|
4
12
|
secretId: string;
|
|
5
13
|
name: string;
|
|
@@ -12,6 +20,12 @@ export interface CredentialStatus {
|
|
|
12
20
|
export type CredentialMeta = {
|
|
13
21
|
name: string;
|
|
14
22
|
displayName: string;
|
|
23
|
+
/**
|
|
24
|
+
* Declared `optional: true`, so absence is a supported state rather than a
|
|
25
|
+
* misconfiguration. The generated map types the key as an optional property,
|
|
26
|
+
* which is what puts `undefined` in `getSecret`'s return type.
|
|
27
|
+
*/
|
|
28
|
+
optional?: boolean;
|
|
15
29
|
oauth2?: {
|
|
16
30
|
tokenSecretId: string;
|
|
17
31
|
};
|
|
@@ -21,7 +35,7 @@ export declare class TypedSecretService<TMap = Record<string, unknown>> implemen
|
|
|
21
35
|
private credentialsMeta;
|
|
22
36
|
private cache;
|
|
23
37
|
constructor(secrets: SecretService, credentialsMeta: Record<string, CredentialMeta>);
|
|
24
|
-
getSecret<K extends keyof TMap & string>(key: K): Promise<
|
|
38
|
+
getSecret<K extends keyof TMap & string>(key: K): Promise<SecretResult<TMap[K]>>;
|
|
25
39
|
getSecret<T = string>(key: string): Promise<SecretValue<T>>;
|
|
26
40
|
hasSecret(key: string): Promise<boolean>;
|
|
27
41
|
setSecret<K extends string>(key: K, value: K extends keyof TMap ? TMap[K] : unknown): Promise<void>;
|
|
@@ -11,6 +11,11 @@ export class TypedSecretService {
|
|
|
11
11
|
if (this.cache.has(key)) {
|
|
12
12
|
return this.cache.get(key);
|
|
13
13
|
}
|
|
14
|
+
if (this.credentialsMeta[key]?.optional &&
|
|
15
|
+
!(await this.secrets.hasSecret(key))) {
|
|
16
|
+
this.cache.set(key, undefined);
|
|
17
|
+
return undefined;
|
|
18
|
+
}
|
|
14
19
|
const value = await this.secrets.getSecret(key);
|
|
15
20
|
this.cache.set(key, value);
|
|
16
21
|
return value;
|
|
@@ -1,4 +1,5 @@
|
|
|
1
|
-
import type { CoreUserSession
|
|
1
|
+
import type { CoreUserSession } from '../types/core.types.js';
|
|
2
|
+
import type { SerializedError } from '../errors/serialized-error.js';
|
|
2
3
|
import type { WorkflowRun, WorkflowPlannedStep, WorkflowRunWire, WorkflowRunStatus, StepState, WorkflowStatus, WorkflowVersionStatus } from '../wirings/workflow/workflow.types.js';
|
|
3
4
|
import type { RunTimeline, ReconstructedRunState } from '../wirings/workflow/run-timeline.js';
|
|
4
5
|
export interface WorkflowService {
|
package/dist/testing/index.d.ts
CHANGED
package/dist/testing/index.js
CHANGED
|
@@ -7,4 +7,4 @@ export declare const defineAgentRunServiceTests: (name: string, agentRunService:
|
|
|
7
7
|
* only runs when a backend supplies both. Passed explicitly rather than
|
|
8
8
|
* closed over, so the dependency is visible in the signature.
|
|
9
9
|
*/
|
|
10
|
-
|
|
10
|
+
agentStorageService?: ServiceTestConfig["services"]["agentStorageService"]) => void;
|
|
@@ -8,7 +8,7 @@ export const defineAgentRunServiceTests = (name, agentRunService,
|
|
|
8
8
|
* only runs when a backend supplies both. Passed explicitly rather than
|
|
9
9
|
* closed over, so the dependency is visible in the signature.
|
|
10
10
|
*/
|
|
11
|
-
|
|
11
|
+
agentStorageService) => {
|
|
12
12
|
const factory = agentRunService;
|
|
13
13
|
describe(`AgentRunService [${name}]`, () => {
|
|
14
14
|
let agentService;
|
|
@@ -19,8 +19,8 @@ aiStorageService) => {
|
|
|
19
19
|
const threads = await agentService.listThreads();
|
|
20
20
|
assert.ok(Array.isArray(threads));
|
|
21
21
|
});
|
|
22
|
-
if (
|
|
23
|
-
const storageFactory =
|
|
22
|
+
if (agentStorageService) {
|
|
23
|
+
const storageFactory = agentStorageService;
|
|
24
24
|
// The `owners` constraint is what keeps the generated thread-management
|
|
25
25
|
// functions from leaking across tenants: a caller may only list threads
|
|
26
26
|
// owned by one of their session principals, matching the
|
|
@@ -0,0 +1,3 @@
|
|
|
1
|
+
import type { ServiceTestConfig } from '../service-tests.js';
|
|
2
|
+
/** Conformance suite for `agentStorageService`. Runs only when a backend supplies one. */
|
|
3
|
+
export declare const defineAiStorageServiceTests: (name: string, agentStorageService: NonNullable<ServiceTestConfig["services"]["agentStorageService"]>) => void;
|
package/dist/testing/service-tests/{ai-storage-service-tests.js → agent-storage-service-tests.js}
RENAMED
|
@@ -1,9 +1,9 @@
|
|
|
1
1
|
import { describe, test, before } from 'node:test';
|
|
2
2
|
import assert from 'node:assert/strict';
|
|
3
|
-
/** Conformance suite for `
|
|
4
|
-
export const defineAiStorageServiceTests = (name,
|
|
5
|
-
const factory =
|
|
6
|
-
describe(`
|
|
3
|
+
/** Conformance suite for `agentStorageService`. Runs only when a backend supplies one. */
|
|
4
|
+
export const defineAiStorageServiceTests = (name, agentStorageService) => {
|
|
5
|
+
const factory = agentStorageService;
|
|
6
|
+
describe(`AgentStorageService [${name}]`, () => {
|
|
7
7
|
let storage;
|
|
8
8
|
before(async () => {
|
|
9
9
|
storage = await factory();
|
|
@@ -3,11 +3,11 @@ import type { EventHubStore } from '../wirings/channel/eventhub-store.js';
|
|
|
3
3
|
import type { PikkuWorkflowService } from '../wirings/workflow/pikku-workflow-service.js';
|
|
4
4
|
import type { WorkflowRunService } from '../wirings/workflow/workflow.types.js';
|
|
5
5
|
import type { DeploymentService } from '../services/deployment-service.js';
|
|
6
|
-
import type {
|
|
7
|
-
import type {
|
|
6
|
+
import type { AgentStorageService } from '../services/agent-storage-service.js';
|
|
7
|
+
import type { AgentRunStateService } from '../services/agent-run-state-service.js';
|
|
8
8
|
import type { SecretService } from '../services/secret-service.js';
|
|
9
9
|
import type { CredentialService } from '../services/credential-service.js';
|
|
10
|
-
import type { AgentRunService } from '../wirings/
|
|
10
|
+
import type { AgentRunService } from '../wirings/agent/agent.types.js';
|
|
11
11
|
import type { SessionStore } from '../services/session-store.js';
|
|
12
12
|
export interface ServiceTestConfig {
|
|
13
13
|
name: string;
|
|
@@ -19,7 +19,7 @@ export interface ServiceTestConfig {
|
|
|
19
19
|
deploymentService?: () => Promise<DeploymentService & {
|
|
20
20
|
stop(): Promise<void>;
|
|
21
21
|
}>;
|
|
22
|
-
|
|
22
|
+
agentStorageService?: () => Promise<AgentStorageService & AgentRunStateService>;
|
|
23
23
|
agentRunService?: () => Promise<AgentRunService>;
|
|
24
24
|
secretService?: (config: {
|
|
25
25
|
key: string;
|
|
@@ -2,7 +2,7 @@ import { defineChannelStoreTests } from './service-tests/channel-store-tests.js'
|
|
|
2
2
|
import { defineEventHubStoreTests } from './service-tests/event-hub-store-tests.js';
|
|
3
3
|
import { defineWorkflowServiceTests } from './service-tests/workflow-service-tests.js';
|
|
4
4
|
import { defineWorkflowRunServiceTests } from './service-tests/workflow-run-service-tests.js';
|
|
5
|
-
import { defineAiStorageServiceTests } from './service-tests/
|
|
5
|
+
import { defineAiStorageServiceTests } from './service-tests/agent-storage-service-tests.js';
|
|
6
6
|
import { defineDeploymentServiceTests } from './service-tests/deployment-service-tests.js';
|
|
7
7
|
import { defineSecretServiceTests } from './service-tests/secret-service-tests.js';
|
|
8
8
|
import { defineCredentialServiceTests } from './service-tests/credential-service-tests.js';
|
|
@@ -28,8 +28,8 @@ export function defineServiceTests(config) {
|
|
|
28
28
|
if (services.workflowRunService) {
|
|
29
29
|
defineWorkflowRunServiceTests(name, services.workflowRunService);
|
|
30
30
|
}
|
|
31
|
-
if (services.
|
|
32
|
-
defineAiStorageServiceTests(name, services.
|
|
31
|
+
if (services.agentStorageService) {
|
|
32
|
+
defineAiStorageServiceTests(name, services.agentStorageService);
|
|
33
33
|
}
|
|
34
34
|
if (services.deploymentService) {
|
|
35
35
|
defineDeploymentServiceTests(name, services.deploymentService);
|
|
@@ -41,7 +41,7 @@ export function defineServiceTests(config) {
|
|
|
41
41
|
defineCredentialServiceTests(name, services.credentialService);
|
|
42
42
|
}
|
|
43
43
|
if (services.agentRunService) {
|
|
44
|
-
defineAgentRunServiceTests(name, services.agentRunService, services.
|
|
44
|
+
defineAgentRunServiceTests(name, services.agentRunService, services.agentStorageService);
|
|
45
45
|
}
|
|
46
46
|
if (services.sessionStore) {
|
|
47
47
|
defineSessionStoreTests(name, services.sessionStore);
|