@pikku/core 0.12.84 → 0.12.86

package/dist/classification/secret-value.d.ts

@@ -0,0 +1,56 @@
+import type { Secret } from './data-classification.js';
+declare const secretValueBrand: unique symbol;
+export declare const REDACTED = "[secret]";
+/** Runtime marker, resilient to duplicate copies of core. */
+declare const SECRET_VALUE: unique symbol;
+declare const NODE_INSPECT: unique symbol;
+export declare class SecretCoercionError extends Error {
+    constructor();
+}
+/**
+ * A vault secret. Nominal, so it is not assignable to `string` and every
+ * concretely-typed sink rejects it; `.reveal()` is the one way out, and every
+ * call is a deliberate, greppable disclosure.
+ *
+ * The revealed value carries the erasable `Secret<T>` classification brand, so
+ * the inspector can still follow it one hop past the call.
+ *
+ * Structured serialization redacts to `[secret]` — an audit or log write must
+ * stay honest about the field without crashing the request. String coercion
+ * throws, because a template literal or concatenation is always a leak.
+ */
+export declare class SecretValue<T = string> {
+    #private;
+    readonly [secretValueBrand]: true;
+    readonly [SECRET_VALUE] = true;
+    constructor(value: T);
+    reveal(): Secret<T>;
+    toJSON(): string;
+    [NODE_INSPECT](): string;
+    toString(): never;
+    [Symbol.toPrimitive](): never;
+}
+export declare const createSecretValue: <T>(value: T) => SecretValue<T>;
+export declare const isSecretValue: (value: unknown) => value is SecretValue<unknown>;
+type IsAny<T> = 0 extends 1 & T ? true : false;
+type Passthrough = Function | Date | RegExp | Error | ArrayBuffer | ArrayBufferView;
+/**
+ * Rejects a `SecretValue` anywhere in `T`, however deeply nested, by collapsing
+ * it to `never`.
+ *
+ * For sinks whose parameters are `any`, `unknown` or a free generic — loggers,
+ * queue payloads, channel messages — where nominality alone cannot help.
+ * `any` is passed through untouched: it cannot be guarded, and collapsing it
+ * would reject every legitimate call.
+ *
+ * `Promise`, `Map` and `Set` are recursed into rather than passed through. A
+ * mapped type cannot reach what they hold — mapping their keys yields their
+ * methods, not their contents — so treating them as opaque let a secret ride
+ * through inside one. `Promise` is the case that bites: `getSecret()` returns
+ * `Promise<SecretValue<T>>`, so a forgotten `await` would otherwise log a
+ * secret.
+ */
+export type Safe<T> = IsAny<T> extends true ? T : [Extract<T, SecretValue<any>>] extends [never] ? T extends Promise<infer V> ? Promise<Safe<V>> : T extends Map<infer K, infer V> ? Map<Safe<K>, Safe<V>> : T extends Set<infer V> ? Set<Safe<V>> : T extends Passthrough ? T : T extends object ? {
+    [K in keyof T]: Safe<T[K]>;
+} : T : never;
+export {};

package/dist/classification/secret-value.js

@@ -0,0 +1,46 @@
+export const REDACTED = '[secret]';
+/** Runtime marker, resilient to duplicate copies of core. */
+const SECRET_VALUE = Symbol.for('pikku.secretValue');
+const NODE_INSPECT = Symbol.for('nodejs.util.inspect.custom');
+export class SecretCoercionError extends Error {
+    constructor() {
+        super(`A secret was coerced to a string, which would write it out in the clear. Unwrap it deliberately with .reveal() at the point it reaches the wire.`);
+        this.name = 'SecretCoercionError';
+    }
+}
+/**
+ * A vault secret. Nominal, so it is not assignable to `string` and every
+ * concretely-typed sink rejects it; `.reveal()` is the one way out, and every
+ * call is a deliberate, greppable disclosure.
+ *
+ * The revealed value carries the erasable `Secret<T>` classification brand, so
+ * the inspector can still follow it one hop past the call.
+ *
+ * Structured serialization redacts to `[secret]` — an audit or log write must
+ * stay honest about the field without crashing the request. String coercion
+ * throws, because a template literal or concatenation is always a leak.
+ */
+export class SecretValue {
+    [SECRET_VALUE] = true;
+    #value;
+    constructor(value) {
+        this.#value = value;
+    }
+    reveal() {
+        return this.#value;
+    }
+    toJSON() {
+        return REDACTED;
+    }
+    [NODE_INSPECT]() {
+        return REDACTED;
+    }
+    toString() {
+        throw new SecretCoercionError();
+    }
+    [Symbol.toPrimitive]() {
+        throw new SecretCoercionError();
+    }
+}
+export const createSecretValue = (value) => new SecretValue(value);
+export const isSecretValue = (value) => typeof value === 'object' && value !== null && SECRET_VALUE in value;

package/dist/crypto-utils.d.ts

@@ -1,4 +1,4 @@
-import type { WrappedValue } from './data-classification.js';
+import type { WrappedValue } from './classification/data-classification.js';
 export declare const encryptJSON: (secret: string, value: unknown) => Promise<string>;
 export declare const decryptJSON: <T>(secret: string, token: string) => Promise<T>;
 /**

package/dist/ecosystem/agent-scorer.d.ts

@@ -3,7 +3,7 @@ export { addAgentScorer } from '../wirings/agent-scorer/agent-scorer-registry.js
 export { enableScoreSnapshots, getScoreSnapshot, } from '../wirings/agent-scorer/agent-scorer-snapshots.js';
 export { wireAgentScorerQueueWorkers } from '../wirings/agent-scorer/agent-scorer-worker.js';
 export { pikkuAgentJudge, pikkuAgentScorer, } from '../wirings/agent-scorer/agent-scorer.js';
-export type { ScorerMeta } from '../wirings/agent-scorer/agent-scorer.types.js';
+export type { AgentRunScore, ScorerMeta, } from '../wirings/agent-scorer/agent-scorer.types.js';
 /**
  * Types the exports above mention but do not themselves export. Without
  * them a consumer's declaration emit has no name for the type it infers,

package/dist/ecosystem/agent.d.ts

@@ -1,8 +1,11 @@
+export type { AgentRunStateService, CreateRunInput, SaveScoreInput, } from '../services/agent-run-state-service.js';
+export type { AgentRunnerParams, AgentRunnerService, AgentStepResult, } from '../services/agent-runner-service.js';
+export type { AgentStorageService } from '../services/agent-storage-service.js';
 export { agent, agentApprove, agentResume, agentStream, } from '../wirings/agent/agent-helpers.js';
 export { resolveModelAlias } from '../wirings/agent/agent-model-config.js';
 export { canAccessThread, isOwnedByPrincipal, threadOwnerConstraint, } from '../wirings/agent/agent-prepare.js';
 export { addAgent } from '../wirings/agent/agent-registry.js';
-export type { AgentInput, AgentMemoryConfig, AgentsMeta, AgentStep, AgentContentPart, AgentRunRow, AgentRunService, CoreAgent, PendingApproval, PikkuAgentMiddlewareHooks, } from '../wirings/agent/agent.types.js';
+export type { AgentInput, AgentMemoryConfig, AgentMessage, AgentsMeta, AgentStep, AgentContentPart, AgentRunRow, AgentRunService, AgentRunState, AgentStreamChannel, AgentThread, CoreAgent, PendingApproval, PikkuAgentMiddlewareHooks, } from '../wirings/agent/agent.types.js';
 export { voiceInput } from '../wirings/agent/voice-input.js';
 export { voiceOutput } from '../wirings/agent/voice-output.js';
 /**

package/dist/ecosystem/channel/local.d.ts

@@ -1 +1,3 @@
 export { PikkuLocalChannelHandler } from '../../wirings/channel/local/local-channel-handler.js';
+export { runLocalChannel } from '../../wirings/channel/local/local-channel-runner.js';
+export { LocalEventHubService } from '../../wirings/channel/local/local-eventhub-service.js';

package/dist/ecosystem/channel/local.js

@@ -1 +1,3 @@
 export { PikkuLocalChannelHandler } from '../../wirings/channel/local/local-channel-handler.js';
+export { runLocalChannel } from '../../wirings/channel/local/local-channel-runner.js';
+export { LocalEventHubService } from '../../wirings/channel/local/local-eventhub-service.js';

package/dist/ecosystem/channel/serverless.d.ts

@@ -0,0 +1,9 @@
+export { runChannelConnect, runChannelDisconnect, runChannelMessage, } from '../../wirings/channel/serverless/serverless-channel-runner.js';
+export type { RunServerlessChannelParams } from '../../wirings/channel/serverless/serverless-channel-runner.js';
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type { ChannelStore } from '../../wirings/channel/channel-store.js';
+export type { PikkuChannelHandlerFactory } from '../../wirings/channel/channel.types.js';

package/dist/ecosystem/channel/serverless.js

@@ -0,0 +1 @@
+export { runChannelConnect, runChannelDisconnect, runChannelMessage, } from '../../wirings/channel/serverless/serverless-channel-runner.js';

package/dist/ecosystem/channel.d.ts

@@ -1,6 +1,9 @@
 export { addChannelMiddleware } from '../wirings/channel/channel-middleware-runner.js';
 export type { Capabilities } from '../wirings/channel/channel-rpc.types.js';
+export { ChannelStore } from '../wirings/channel/channel-store.js';
+export type { Channel } from '../wirings/channel/channel-store.js';
 export type { BinaryData, ChannelMessageMeta, ChannelMeta, ChannelsMeta, CoreChannel, CorePikkuChannelMiddleware, CorePikkuChannelMiddlewareFactory, PikkuChannelHandlerFactory, } from '../wirings/channel/channel.types.js';
+export type { EventHubService } from '../wirings/channel/eventhub-service.js';
 export { EventHubStore } from '../wirings/channel/eventhub-store.js';
 export { logChannels } from '../wirings/channel/log-channels.js';
 export { PikkuAbstractChannelHandler } from '../wirings/channel/pikku-abstract-channel-handler.js';

package/dist/ecosystem/channel.js

@@ -1,4 +1,5 @@
 export { addChannelMiddleware } from '../wirings/channel/channel-middleware-runner.js';
+export { ChannelStore } from '../wirings/channel/channel-store.js';
 export { EventHubStore } from '../wirings/channel/eventhub-store.js';
 export { logChannels } from '../wirings/channel/log-channels.js';
 export { PikkuAbstractChannelHandler } from '../wirings/channel/pikku-abstract-channel-handler.js';

package/dist/ecosystem/cli.d.ts

@@ -1,4 +1,4 @@
-export { CLIError, executeCLI } from '../wirings/cli/cli-runner.js';
+export { CLIError, executeCLI, pikkuCLIRender, } from '../wirings/cli/cli-runner.js';
 export type { CLICommandMeta, CLIMeta, CLIProgramMeta, CoreCLI, CoreCLICommandConfig, CorePikkuCLIRender, } from '../wirings/cli/cli.types.js';
 export { generateCommandHelp } from '../wirings/cli/command-parser.js';
 /**

package/dist/ecosystem/cli.js

@@ -1,2 +1,2 @@
-export { CLIError, executeCLI } from '../wirings/cli/cli-runner.js';
+export { CLIError, executeCLI, pikkuCLIRender, } from '../wirings/cli/cli-runner.js';
 export { generateCommandHelp } from '../wirings/cli/command-parser.js';

package/dist/ecosystem/credential.d.ts

@@ -1,3 +1,4 @@
+export type { CredentialService } from '../services/credential-service.js';
 export type { CredentialDefinitions } from '../wirings/credential/credential.types.js';
 export { validateAndBuildCredentialDefinitionsMeta } from '../wirings/credential/validate-credential-definitions.js';
 /**

package/dist/ecosystem/crypto-utils.d.ts

@@ -0,0 +1,8 @@
+export { deriveKEK, envelopeDecrypt, envelopeEncrypt, envelopeRewrap, generateKEKSalt, } from '../crypto-utils.js';
+export type { EnvelopeEncryptResult } from '../crypto-utils.js';
+/**
+ * Types the exports above mention but do not themselves export. Without
+ * them a consumer's declaration emit has no name for the type it infers,
+ * and fails with TS2883 rather than reaching for the original entry point.
+ */
+export type { WrappedValue } from '../data-classification.js';

package/dist/ecosystem/crypto-utils.js

@@ -0,0 +1 @@
+export { deriveKEK, envelopeDecrypt, envelopeEncrypt, envelopeRewrap, generateKEKSalt, } from '../crypto-utils.js';

package/dist/ecosystem/dev.d.ts

@@ -1,3 +1,4 @@
+export { pikkuDevReloader } from '../dev/hot-reload.js';
 export { reconcileAddonRegistry, reloadGeneratedMeta, } from '../dev/reload-meta.js';
 /**
  * Types the exports above mention but do not themselves export. Without

package/dist/ecosystem/dev.js

@@ -1 +1,2 @@
+export { pikkuDevReloader } from '../dev/hot-reload.js';
 export { reconcileAddonRegistry, reloadGeneratedMeta, } from '../dev/reload-meta.js';

package/{src/ecosystem/testing.ts → dist/ecosystem/errors.d.ts}

@@ -1,8 +1,8 @@
-export { defineServiceTests } from '../testing/service-tests.js'
-
+export * from '../errors/errors.js';
+export { PikkuError, addError } from '../errors/error-handler.js';
 /**
  * Types the exports above mention but do not themselves export. Without
  * them a consumer's declaration emit has no name for the type it infers,
  * and fails with TS2883 rather than reaching for the original entry point.
  */
-export type { ServiceTestConfig } from '../testing/service-tests.js'
+export type { ErrorDetails } from '../errors/error-handler.js';

package/dist/ecosystem/errors.js

@@ -0,0 +1,2 @@
+export * from '../errors/errors.js';
+export { PikkuError, addError } from '../errors/error-handler.js';

package/dist/ecosystem/function.d.ts

@@ -1,4 +1,4 @@
-export { getAllFunctionNames } from '../function/function-runner.js';
+export { addFunction, getAllFunctionNames, } from '../function/function-runner.js';
 export { pikkuAuth } from '../function/functions.types.js';
 export type { CorePikkuAuth, CorePikkuAuthConfig, CorePikkuFunction, CorePikkuFunctionConfig, CorePikkuFunctionSessionless, CorePikkuPermission, CorePikkuSessionlessFunctionConfig, } from '../function/functions.types.js';
 export type { ListInput, ListOutput } from '../function/list.types.js';

package/dist/ecosystem/function.js

@@ -1,2 +1,2 @@
-export { getAllFunctionNames } from '../function/function-runner.js';
+export { addFunction, getAllFunctionNames, } from '../function/function-runner.js';
 export { pikkuAuth } from '../function/functions.types.js';

package/dist/ecosystem/http.d.ts

@@ -1,6 +1,8 @@
+export { fetch, fetchData, wireHTTP } from '../wirings/http/http-runner.js';
 export type { AssertHTTPWiringParams, CoreHTTPFunctionWiring, HTTPMethod, HTTPRouteBaseConfig, HTTPWiringsMeta, PikkuHTTP, PikkuHTTPResponse, PikkuQuery, RunHTTPWiringOptions, } from '../wirings/http/http.types.js';
 export { logRoutes } from '../wirings/http/log-http-routes.js';
-export { DEFAULT_MAX_BODY_SIZE } from '../wirings/http/pikku-fetch-http-request.js';
+export { DEFAULT_MAX_BODY_SIZE, PikkuFetchHTTPRequest, } from '../wirings/http/pikku-fetch-http-request.js';
+export { PikkuFetchHTTPResponse } from '../wirings/http/pikku-fetch-http-response.js';
 export { toWebRequest } from '../wirings/http/web-request.js';
 /**
  * Types the exports above mention but do not themselves export. Without

package/dist/ecosystem/http.js

@@ -1,3 +1,5 @@
+export { fetch, fetchData, wireHTTP } from '../wirings/http/http-runner.js';
 export { logRoutes } from '../wirings/http/log-http-routes.js';
-export { DEFAULT_MAX_BODY_SIZE } from '../wirings/http/pikku-fetch-http-request.js';
+export { DEFAULT_MAX_BODY_SIZE, PikkuFetchHTTPRequest, } from '../wirings/http/pikku-fetch-http-request.js';
+export { PikkuFetchHTTPResponse } from '../wirings/http/pikku-fetch-http-response.js';
 export { toWebRequest } from '../wirings/http/web-request.js';

package/dist/ecosystem/mcp.d.ts

@@ -1,3 +1,3 @@
 export { MCPEndpointRegistry } from '../wirings/mcp/mcp-endpoint-registry.js';
-export { MCPError, getMCPPromptsMeta, getMCPResourcesMeta, getMCPToolsMeta, } from '../wirings/mcp/mcp-runner.js';
+export { MCPError, getMCPPromptsMeta, getMCPResourcesMeta, getMCPToolsMeta, runMCPPrompt, runMCPResource, runMCPTool, } from '../wirings/mcp/mcp-runner.js';
 export type { AssertMCPResourceURIParams, CoreMCPPrompt, CoreMCPResource, MCPPromptMeta, MCPResourceMeta, MCPToolMeta, MCPToolResponse, PikkuMCP, } from '../wirings/mcp/mcp.types.js';

package/dist/ecosystem/mcp.js

@@ -1,2 +1,2 @@
 export { MCPEndpointRegistry } from '../wirings/mcp/mcp-endpoint-registry.js';
-export { MCPError, getMCPPromptsMeta, getMCPResourcesMeta, getMCPToolsMeta, } from '../wirings/mcp/mcp-runner.js';
+export { MCPError, getMCPPromptsMeta, getMCPResourcesMeta, getMCPToolsMeta, runMCPPrompt, runMCPResource, runMCPTool, } from '../wirings/mcp/mcp-runner.js';

package/dist/ecosystem/middleware.d.ts

@@ -1,9 +1,10 @@
-export { runMiddleware } from '../middleware-runner.js';
+export { addGlobalMiddleware, runMiddleware } from '../middleware-runner.js';
 export { authAPIKey } from '../middleware/auth-apikey.js';
 export { authCookie } from '../middleware/auth-cookie.js';
 export { pikkuRemoteAuthMiddleware } from '../middleware/remote-auth.js';
 export { telemetryInner, telemetryOuter } from '../middleware/telemetry.js';
 export { addGlobalPermission } from '../permissions.js';
+export { pikkuMiddleware } from '../types/core.types.js';
 /**
  * Types the exports above mention but do not themselves export. Without
  * them a consumer's declaration emit has no name for the type it infers,

package/dist/ecosystem/middleware.js

@@ -1,6 +1,7 @@
-export { runMiddleware } from '../middleware-runner.js';
+export { addGlobalMiddleware, runMiddleware } from '../middleware-runner.js';
 export { authAPIKey } from '../middleware/auth-apikey.js';
 export { authCookie } from '../middleware/auth-cookie.js';
 export { pikkuRemoteAuthMiddleware } from '../middleware/remote-auth.js';
 export { telemetryInner, telemetryOuter } from '../middleware/telemetry.js';
 export { addGlobalPermission } from '../permissions.js';
+export { pikkuMiddleware } from '../types/core.types.js';

package/dist/ecosystem/persona.d.ts

@@ -1,9 +1,11 @@
 export { HttpPersona, createHttpPersonas } from '../services/http-personas.js';
 export type { HttpPersonasConfig } from '../services/http-personas.js';
+export { postScenarioJson, readScenarioHttpResponse, } from '../services/personas-service.js';
+export type { ScenarioHttpResponse } from '../services/personas-service.js';
 export { personaEmails } from '../wirings/persona/persona-email.js';
 export { personaEnvironmentErrors, personaEnvironmentRefusal, } from '../wirings/persona/persona-environments.js';
-export type { CorePersona, PersonaAccountMeta, PersonaDefinitions, } from '../wirings/persona/persona.types.js';
-export { roleMismatchMessage, validateAndBuildPersonasMeta, verifyPersonaRoles, } from '../wirings/persona/validate-personas.js';
+export type { CorePersona, PersonaAccountMeta, PersonaDefinitions, PersonaMeta, } from '../wirings/persona/persona.types.js';
+export { isRunnablePersona, roleMismatchMessage, validateAndBuildPersonasMeta, verifyPersonaRoles, } from '../wirings/persona/validate-personas.js';
 /**
  * Types the exports above mention but do not themselves export. Without
  * them a consumer's declaration emit has no name for the type it infers,

package/dist/ecosystem/persona.js

@@ -1,4 +1,5 @@
 export { HttpPersona, createHttpPersonas } from '../services/http-personas.js';
+export { postScenarioJson, readScenarioHttpResponse, } from '../services/personas-service.js';
 export { personaEmails } from '../wirings/persona/persona-email.js';
 export { personaEnvironmentErrors, personaEnvironmentRefusal, } from '../wirings/persona/persona-environments.js';
-export { roleMismatchMessage, validateAndBuildPersonasMeta, verifyPersonaRoles, } from '../wirings/persona/validate-personas.js';
+export { isRunnablePersona, roleMismatchMessage, validateAndBuildPersonasMeta, verifyPersonaRoles, } from '../wirings/persona/validate-personas.js';

package/dist/ecosystem/queue.d.ts

@@ -1,5 +1,7 @@
-export { QueueJobDiscardedError, QueueJobFailedError, } from '../wirings/queue/queue-runner.js';
-export type { ConfigValidationResult, CoreQueueWorker, JobOptions, PikkuJobConfig, PikkuWorkerConfig, QueueWorkers, QueueWorkersMeta, } from '../wirings/queue/queue.types.js';
+export { InMemoryQueueService } from '../services/in-memory-queue-service.js';
+export { QueueWebhookService } from '../services/queue-webhook-service.js';
+export { QueueJobDiscardedError, QueueJobFailedError, runQueueJob, } from '../wirings/queue/queue-runner.js';
+export type { ConfigValidationResult, CoreQueueWorker, JobOptions, PikkuJobConfig, PikkuWorkerConfig, QueueJob, QueueJobStatus, QueueService, QueueWorkers, QueueWorkersMeta, } from '../wirings/queue/queue.types.js';
 export { registerQueueWorkers } from '../wirings/queue/register-queue-helper.js';
 export type { QueueConfigMapping } from '../wirings/queue/validate-worker-config.js';
 /**

package/dist/ecosystem/queue.js

@@ -1,2 +1,4 @@
-export { QueueJobDiscardedError, QueueJobFailedError, } from '../wirings/queue/queue-runner.js';
+export { InMemoryQueueService } from '../services/in-memory-queue-service.js';
+export { QueueWebhookService } from '../services/queue-webhook-service.js';
+export { QueueJobDiscardedError, QueueJobFailedError, runQueueJob, } from '../wirings/queue/queue-runner.js';
 export { registerQueueWorkers } from '../wirings/queue/register-queue-helper.js';

package/dist/ecosystem/role.d.ts

@@ -1,3 +1,4 @@
+export type { Role } from '../services/scope-service.js';
 export { defineSystemRole } from '../wirings/role/define-system-role.js';
 export type { CoreSystemRole, CoreSystemRoles, SystemRole, SystemRoleDefinitionMeta, SystemRoleDefinitions, SystemRoleDefinitionsMeta, } from '../wirings/role/role.types.js';
 export { flattenSystemRoleDefinitions, validateAndBuildSystemRoleDefinitionsMeta, } from '../wirings/role/validate-role-definitions.js';

package/dist/ecosystem/rpc.d.ts

@@ -1,3 +1,5 @@
+export { rpcService } from '../wirings/rpc/rpc-runner.js';
+export type { PikkuRPC } from '../wirings/rpc/rpc-types.js';
 export { wireAddon } from '../wirings/rpc/wire-addon.js';
 export type { WireAddonConfig } from '../wirings/rpc/wire-addon.js';
 export { wireRemoteAddon } from '../wirings/rpc/wire-remote-addon.js';

package/dist/ecosystem/rpc.js

@@ -1,2 +1,3 @@
+export { rpcService } from '../wirings/rpc/rpc-runner.js';
 export { wireAddon } from '../wirings/rpc/wire-addon.js';
 export { wireRemoteAddon } from '../wirings/rpc/wire-remote-addon.js';

package/dist/ecosystem/scenario.d.ts

@@ -1,10 +1,16 @@
 export type { PikkuScenarioWire, ScenarioStepMeta, } from '../wirings/workflow/dsl/workflow-dsl.types.js';
+export { FileScenarioRunStore } from '../services/file-scenario-run-store.js';
+export type { FileScenarioRunStoreOptions } from '../services/file-scenario-run-store.js';
 export { addFeature, resolveFeatureScenarios, } from '../wirings/workflow/feature.js';
-export { PikkuScenarioService } from '../wirings/workflow/pikku-scenario-service.js';
+export { PikkuScenarioService, createScenarioRunner, } from '../wirings/workflow/pikku-scenario-service.js';
+export { createCookieJar } from '../wirings/workflow/scenario-cookie-jar.js';
+export { pollUntil } from '../wirings/workflow/scenario-poll.js';
 export { composeStepProse } from '../wirings/workflow/scenario-prose.js';
+export { requireActor, requireScenarioEnv, } from '../wirings/workflow/scenario-step-guards.js';
 export { SCENARIO_SURFACES } from '../wirings/workflow/scenario-step.types.js';
-export type { PikkuBrowserWire, ScenarioBrowserFailure, ScenarioBrowserProvider, ScenarioStepKind, ScenarioStepOptions, ScenarioStepPhase, } from '../wirings/workflow/scenario-step.types.js';
+export type { PikkuBrowserWire, ScenarioBrowserFailure, ScenarioBrowserProvider, ScenarioStepKind, ScenarioStepOptions, ScenarioStepPhase, TestIdSelector, } from '../wirings/workflow/scenario-step.types.js';
 export type { CoreFeature, FeaturesMeta, } from '../wirings/workflow/scenario.types.js';
+export type { ScenarioArtifact, ScenarioArtifactKind, ScenarioFailureDetail, ScenarioResult, ScenarioRunRecord, ScenarioRunReport, ScenarioRunStatus, ScenarioRunStore, ScenarioRunSummary, ScenarioSkip, ScenarioStepRow, } from '../wirings/workflow/scenario-run.types.js';
 /**
  * Types the exports above mention but do not themselves export. Without
  * them a consumer's declaration emit has no name for the type it infers,

package/dist/ecosystem/scenario.js

@@ -1,4 +1,8 @@
+export { FileScenarioRunStore } from '../services/file-scenario-run-store.js';
 export { addFeature, resolveFeatureScenarios, } from '../wirings/workflow/feature.js';
-export { PikkuScenarioService } from '../wirings/workflow/pikku-scenario-service.js';
+export { PikkuScenarioService, createScenarioRunner, } from '../wirings/workflow/pikku-scenario-service.js';
+export { createCookieJar } from '../wirings/workflow/scenario-cookie-jar.js';
+export { pollUntil } from '../wirings/workflow/scenario-poll.js';
 export { composeStepProse } from '../wirings/workflow/scenario-prose.js';
+export { requireActor, requireScenarioEnv, } from '../wirings/workflow/scenario-step-guards.js';
 export { SCENARIO_SURFACES } from '../wirings/workflow/scenario-step.types.js';

package/dist/ecosystem/scheduler.d.ts

@@ -1,2 +1,3 @@
-export { getScheduledTasks } from '../wirings/scheduler/scheduler-runner.js';
+export { SchedulerService } from '../services/scheduler-service.js';
+export { getScheduledTasks, runScheduledTask, } from '../wirings/scheduler/scheduler-runner.js';
 export type { CoreScheduledTask, ScheduledTasksMeta, } from '../wirings/scheduler/scheduler.types.js';

package/dist/ecosystem/scheduler.js

@@ -1 +1,2 @@
-export { getScheduledTasks } from '../wirings/scheduler/scheduler-runner.js';
+export { SchedulerService } from '../services/scheduler-service.js';
+export { getScheduledTasks, runScheduledTask, } from '../wirings/scheduler/scheduler-runner.js';

package/dist/ecosystem/schema.d.ts

@@ -1 +1,2 @@
-export { addSchema } from '../schema.js';
+export { addSchema, compileAllSchemas, getSchema } from '../schema.js';
+export type { SchemaService } from '../services/schema-service.js';

package/dist/ecosystem/schema.js

@@ -1 +1 @@
-export { addSchema } from '../schema.js';
+export { addSchema, compileAllSchemas, getSchema } from '../schema.js';

package/dist/ecosystem/scope.d.ts

@@ -1,3 +1,5 @@
+export { hasScopes, verifyScopes } from '../scopes.js';
+export type { ScopeService } from '../services/scope-service.js';
 export { defineScope } from '../wirings/scope/define-scope.js';
 export type { CoreScopeNode, CoreScopes, FlatScope, ScopeDefinitionMeta, ScopeDefinitions, ScopeDefinitionsMeta, ScopeNodeMeta, } from '../wirings/scope/scope.types.js';
 export { flattenScopeDefinitions, validateAndBuildScopeDefinitionsMeta, } from '../wirings/scope/validate-scope-definitions.js';

package/dist/ecosystem/scope.js

@@ -1,2 +1,3 @@
+export { hasScopes, verifyScopes } from '../scopes.js';
 export { defineScope } from '../wirings/scope/define-scope.js';
 export { flattenScopeDefinitions, validateAndBuildScopeDefinitionsMeta, } from '../wirings/scope/validate-scope-definitions.js';

package/dist/ecosystem/secret.d.ts

@@ -1,3 +1,5 @@
+export { assertSecretAllowedForHost } from '../services/secret-host-binding.js';
+export type { SecretService, SecretValues } from '../services/secret-service.js';
 export type { CoreSecret, OAuth2CredentialConfig, SecretDefinitionMeta, SecretDefinitions, } from '../wirings/secret/secret.types.js';
 export { validateAndBuildSecretDefinitionsMeta } from '../wirings/secret/validate-secret-definitions.js';
 /**

package/dist/ecosystem/secret.js

@@ -1 +1,2 @@
+export { assertSecretAllowedForHost } from '../services/secret-host-binding.js';
 export { validateAndBuildSecretDefinitionsMeta } from '../wirings/secret/validate-secret-definitions.js';

package/dist/ecosystem/services/local-content.d.ts

@@ -1 +1,2 @@
-export { signedContentPath } from '../../services/local-content.js';
+export { LocalContent, signedContentPath, } from '../../services/local-content.js';
+export type { LocalContentConfig } from '../../services/local-content.js';

package/dist/ecosystem/services/local-content.js

@@ -1 +1 @@
-export { signedContentPath } from '../../services/local-content.js';
+export { LocalContent, signedContentPath, } from '../../services/local-content.js';

package/dist/ecosystem/services/local-meta.d.ts

@@ -0,0 +1 @@
+export { LocalMetaService } from '../../services/meta-service.js';

package/dist/ecosystem/services/local-meta.js

@@ -0,0 +1 @@
+export { LocalMetaService } from '../../services/meta-service.js';

package/dist/ecosystem/services.d.ts

@@ -1,12 +1,20 @@
-export type { AuditDurability, AuditEvent, AuditEventBatch, } from '../services/audit-service.js';
+export { NoopAuditService } from '../services/audit-service.js';
+export type { AuditDurability, AuditEvent, AuditEventBatch, AuditLog, AuditService, } from '../services/audit-service.js';
+export type { BucketKeyArgs, ContentService, CopyFileArgs, GetUploadURLArgs, SignContentKeyArgs, SignURLArgs, UploadURLResult, WriteFileArgs, } from '../services/content-service.js';
 export type { DeploymentConfig, DeploymentService, DeploymentServiceConfig, } from '../services/deployment-service.js';
 export { InMemoryAgentRunStateService } from '../services/in-memory-agent-run-state-service.js';
+export type { JWTService } from '../services/jwt-service.js';
+export { LocalEmailService } from '../services/local-email-service.js';
+export { LocalSecretService } from '../services/local-secrets.js';
+export { LocalVariablesService } from '../services/local-variables.js';
+export { ConsoleLogger } from '../services/logger-console.js';
+export { LogLevel } from '../services/logger.js';
 export type { AgentMeta, AgentsMeta, EmailTemplateMeta, EmailsMeta, GroupMeta, MCPMeta, MetaService, MiddlewareDefinitionMeta, MiddlewareGroupsMeta, MiddlewareInstanceMeta, PermissionDefinitionMeta, PermissionsGroupsMeta, RPCMetaRecord, ServiceMeta, ServicesMetaRecord, } from '../services/meta-service.js';
 export type { ResolvedPersona, ScenarioPersonas, } from '../services/personas-service.js';
 export { pikkuWebhookWorkerFunc } from '../services/queue-webhook-service.js';
 export type { ScheduledTaskInfo, ScheduledTaskSummary, } from '../services/scheduler-service.js';
-export type { Role } from '../services/scope-service.js';
-export { getStubTracker, spy } from '../services/stub-tracker.js';
+export type { SessionStore } from '../services/session-store.js';
+export { getStubTracker, isTestRun, spy } from '../services/stub-tracker.js';
 export type { CredentialMetaInfo } from '../services/typed-credential-service.js';
 export type { CredentialMeta } from '../services/typed-secret-service.js';
 export { TypedVariablesService } from '../services/typed-variables-service.js';

package/dist/ecosystem/services.js

@@ -1,6 +1,12 @@
+export { NoopAuditService } from '../services/audit-service.js';
 export { InMemoryAgentRunStateService } from '../services/in-memory-agent-run-state-service.js';
+export { LocalEmailService } from '../services/local-email-service.js';
+export { LocalSecretService } from '../services/local-secrets.js';
+export { LocalVariablesService } from '../services/local-variables.js';
+export { ConsoleLogger } from '../services/logger-console.js';
+export { LogLevel } from '../services/logger.js';
 export { pikkuWebhookWorkerFunc } from '../services/queue-webhook-service.js';
-export { getStubTracker, spy } from '../services/stub-tracker.js';
+export { getStubTracker, isTestRun, spy } from '../services/stub-tracker.js';
 export { TypedVariablesService } from '../services/typed-variables-service.js';
 export { PikkuSessionService, createMiddlewareSessionWireProps, } from '../services/user-session-service.js';
 export { PIKKU_OUTGOING_WEBHOOK_QUEUE_NAME } from '../services/webhook-service.js';

package/dist/ecosystem/trigger.d.ts

@@ -1 +1,2 @@
+export { InMemoryTriggerService } from '../services/in-memory-trigger-service.js';
 export type { CorePikkuTriggerFunction, CorePikkuTriggerFunctionConfig, CoreTrigger, TriggerMeta, TriggerSourceMeta, } from '../wirings/trigger/trigger.types.js';

package/dist/ecosystem/trigger.js

@@ -1 +1 @@
-export {};
+export { InMemoryTriggerService } from '../services/in-memory-trigger-service.js';

package/dist/ecosystem/types.d.ts

@@ -1,9 +1,12 @@
+export type { ClassificationManifest } from '../data-classification.js';
 export { isExpectedError } from '../errors/error-handler.js';
 export type { CorePermissionGroup } from '../function/functions.types.js';
 export { PikkuRequest } from '../pikku-request.js';
+export { SecretValue, createSecretValue, isSecretValue, } from '../secret-value.js';
+export type { Safe } from '../secret-value.js';
 export type { AuditFacets, AuditQuery, AuditQueryResult, } from '../services/audit-service.js';
-export { parseDurationString } from '../time-utils.js';
+export { getRelativeTimeOffsetFromNow, parseDurationString, } from '../time-utils.js';
 export type { RelativeTimeInput } from '../time-utils.js';
-export type { AuthInstance, FunctionServicesMeta, FunctionWiresMeta, JSONValue, MiddlewareMetadata, PermissionMetadata, PikkuWire, PikkuWiringTypes, PostgresConfig, SecretlessServices, SecurityAuditIssue, SecurityAuditReport, SecurityAuditUpdate, SecuritySeverity, SecurityUpdateLevel, SerializedError, } from '../types/core.types.js';
-export { isSerializable } from '../utils.js';
+export type { AuthInstance, CoreConfig, CorePikkuMiddleware, CoreServices, CoreSingletonServices, CoreUserSession, CreateConfig, FunctionServicesMeta, FunctionWiresMeta, JSONValue, MiddlewareMetadata, PermissionMetadata, PikkuWire, PikkuWiringTypes, PostgresConfig, SecretlessServices, SecurityAuditIssue, SecurityAuditReport, SecurityAuditUpdate, SecuritySeverity, SecurityUpdateLevel, SerializedError, } from '../types/core.types.js';
+export { isSerializable, stopSingletonServices } from '../utils.js';
 export { formatVersionedId, isVersionedId, parseVersionedId, } from '../version.js';

package/dist/ecosystem/types.js

@@ -1,5 +1,6 @@
 export { isExpectedError } from '../errors/error-handler.js';
 export { PikkuRequest } from '../pikku-request.js';
-export { parseDurationString } from '../time-utils.js';
-export { isSerializable } from '../utils.js';
+export { SecretValue, createSecretValue, isSecretValue, } from '../secret-value.js';
+export { getRelativeTimeOffsetFromNow, parseDurationString, } from '../time-utils.js';
+export { isSerializable, stopSingletonServices } from '../utils.js';
 export { formatVersionedId, isVersionedId, parseVersionedId, } from '../version.js';

package/dist/ecosystem/variable.d.ts

@@ -1,3 +1,4 @@
+export type { VariablesService } from '../services/variables-service.js';
 export { validateAndBuildVariableDefinitionsMeta } from '../wirings/variable/validate-variable-definitions.js';
 export type { CoreVariable, VariableDefinitionMeta, VariableDefinitions, VariableDefinitionsMeta, } from '../wirings/variable/variable.types.js';
 /**

package/dist/ecosystem/virtual-user.d.ts

@@ -1,9 +1,12 @@
 export { personaScopes, prepareVirtualUserRun, } from '../wirings/virtual-user/prepare-virtual-user-run.js';
+export { runVirtualUser } from '../wirings/virtual-user/run-virtual-user.js';
 export { catalogueClassification, isReadOnly, reachableCatalogue, unreachableCatalogue, } from '../wirings/virtual-user/virtual-user-catalogue.js';
+export { deriveCatalogue, deriveIntents, } from '../wirings/virtual-user/virtual-user-derive.js';
 export { DISPOSITIONS, dispositionProfile, } from '../wirings/virtual-user/virtual-user-dispositions.js';
 export type { DispositionProfile } from '../wirings/virtual-user/virtual-user-dispositions.js';
 export { intentsForPersona } from '../wirings/virtual-user/virtual-user-intents.js';
 export type { VirtualUserRunOutcome, VirtualUserRunRecord, VirtualUserRunStart, VirtualUserRunStore, } from '../wirings/virtual-user/virtual-user-run-store.js';
+export { personaVirtualUserTarget } from '../wirings/virtual-user/virtual-user-target.js';
 export { PRODUCTION_DISPOSITION } from '../wirings/virtual-user/virtual-user.types.js';
 export type { IntentSource, VirtualUserFinding, VirtualUserRunResult, } from '../wirings/virtual-user/virtual-user.types.js';
 /**

package/dist/ecosystem/virtual-user.js

@@ -1,5 +1,8 @@
 export { personaScopes, prepareVirtualUserRun, } from '../wirings/virtual-user/prepare-virtual-user-run.js';
+export { runVirtualUser } from '../wirings/virtual-user/run-virtual-user.js';
 export { catalogueClassification, isReadOnly, reachableCatalogue, unreachableCatalogue, } from '../wirings/virtual-user/virtual-user-catalogue.js';
+export { deriveCatalogue, deriveIntents, } from '../wirings/virtual-user/virtual-user-derive.js';
 export { DISPOSITIONS, dispositionProfile, } from '../wirings/virtual-user/virtual-user-dispositions.js';
 export { intentsForPersona } from '../wirings/virtual-user/virtual-user-intents.js';
+export { personaVirtualUserTarget } from '../wirings/virtual-user/virtual-user-target.js';
 export { PRODUCTION_DISPOSITION } from '../wirings/virtual-user/virtual-user.types.js';

package/dist/ecosystem/workflow.d.ts

@@ -1,8 +1,10 @@
+export { InMemoryWorkflowService } from '../services/in-memory-workflow-service.js';
 export type { WorkflowService } from '../services/workflow-service.js';
 export type { ApprovalStepMeta, ArrayPredicateStepMeta, BranchStepMeta, CancelStepMeta, Condition, FanoutStepMeta, FilterStepMeta, InlineStepMeta, InputSource, OutputBinding, ParallelGroupStepMeta, PikkuWorkflowWire, RpcStepMeta, SetStepMeta, SleepStepMeta, SuspendStepMeta, SwitchCaseMeta, SwitchStepMeta, WorkflowStepMeta, WorkflowStepOptions, WorkflowWireDoRPC, } from '../wirings/workflow/dsl/workflow-dsl.types.js';
 export { template } from '../wirings/workflow/graph/template.js';
 export type { PikkuWorkflowGraphConfig, PikkuWorkflowGraphResult, } from '../wirings/workflow/graph/wire-workflow-graph.js';
 export { isRef } from '../wirings/workflow/graph/workflow-graph.types.js';
+export { PikkuWorkflowService } from '../wirings/workflow/pikku-workflow-service.js';
 export { buildRunTimeline, reconstructFinalState, reconstructStateAt, } from '../wirings/workflow/run-timeline.js';
 export type { ReconstructedRunState, RunTimeline, } from '../wirings/workflow/run-timeline.js';
 export { assertWorkflowRunOwner } from '../wirings/workflow/workflow-run-ownership.js';