@pikku/core 0.12.84 → 0.12.88

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (577) hide show
  1. package/CHANGELOG.md +503 -0
  2. package/dist/bootstrap-compat/root.d.ts +20 -0
  3. package/dist/classification/column-form.d.ts +32 -0
  4. package/dist/classification/column-form.js +42 -0
  5. package/dist/classification/data-classification.d.ts +64 -0
  6. package/dist/classification/index.d.ts +13 -0
  7. package/dist/classification/index.js +2 -0
  8. package/dist/classification/secret-value.d.ts +56 -0
  9. package/dist/classification/secret-value.js +46 -0
  10. package/dist/crypto-utils.d.ts +1 -1
  11. package/dist/dev/hot-reload.d.ts +1 -1
  12. package/dist/dev/hot-reload.js +1 -1
  13. package/dist/ecosystem/agent-scorer.d.ts +1 -1
  14. package/dist/ecosystem/agent.d.ts +4 -1
  15. package/dist/ecosystem/channel/local.d.ts +2 -0
  16. package/dist/ecosystem/channel/local.js +2 -0
  17. package/dist/ecosystem/channel/serverless.d.ts +9 -0
  18. package/dist/ecosystem/channel/serverless.js +1 -0
  19. package/dist/ecosystem/channel.d.ts +3 -0
  20. package/dist/ecosystem/channel.js +1 -0
  21. package/dist/ecosystem/cli.d.ts +1 -1
  22. package/dist/ecosystem/cli.js +1 -1
  23. package/dist/ecosystem/credential.d.ts +1 -0
  24. package/dist/ecosystem/crypto-utils.d.ts +8 -0
  25. package/dist/ecosystem/crypto-utils.js +1 -0
  26. package/dist/ecosystem/dev.d.ts +1 -0
  27. package/dist/ecosystem/dev.js +1 -0
  28. package/{src/ecosystem/testing.ts → dist/ecosystem/errors.d.ts} +3 -3
  29. package/dist/ecosystem/errors.js +2 -0
  30. package/dist/ecosystem/function.d.ts +1 -1
  31. package/dist/ecosystem/function.js +1 -1
  32. package/dist/ecosystem/http.d.ts +3 -1
  33. package/dist/ecosystem/http.js +3 -1
  34. package/dist/ecosystem/mcp.d.ts +1 -1
  35. package/dist/ecosystem/mcp.js +1 -1
  36. package/dist/ecosystem/middleware.d.ts +2 -1
  37. package/dist/ecosystem/middleware.js +2 -1
  38. package/dist/ecosystem/persona.d.ts +4 -2
  39. package/dist/ecosystem/persona.js +2 -1
  40. package/dist/ecosystem/queue.d.ts +4 -2
  41. package/dist/ecosystem/queue.js +3 -1
  42. package/dist/ecosystem/role.d.ts +1 -0
  43. package/dist/ecosystem/rpc.d.ts +2 -0
  44. package/dist/ecosystem/rpc.js +1 -0
  45. package/dist/ecosystem/scenario.d.ts +8 -2
  46. package/dist/ecosystem/scenario.js +5 -1
  47. package/dist/ecosystem/scheduler.d.ts +2 -1
  48. package/dist/ecosystem/scheduler.js +2 -1
  49. package/dist/ecosystem/schema.d.ts +2 -1
  50. package/dist/ecosystem/schema.js +1 -1
  51. package/dist/ecosystem/scope.d.ts +2 -0
  52. package/dist/ecosystem/scope.js +1 -0
  53. package/dist/ecosystem/secret.d.ts +2 -0
  54. package/dist/ecosystem/secret.js +1 -0
  55. package/dist/ecosystem/services/local-content.d.ts +2 -1
  56. package/dist/ecosystem/services/local-content.js +1 -1
  57. package/dist/ecosystem/services/local-meta.d.ts +1 -0
  58. package/dist/ecosystem/services/local-meta.js +1 -0
  59. package/dist/ecosystem/services.d.ts +11 -3
  60. package/dist/ecosystem/services.js +7 -1
  61. package/dist/ecosystem/trigger.d.ts +1 -0
  62. package/dist/ecosystem/trigger.js +1 -1
  63. package/dist/ecosystem/types.d.ts +6 -3
  64. package/dist/ecosystem/types.js +3 -2
  65. package/dist/ecosystem/variable.d.ts +1 -0
  66. package/dist/ecosystem/virtual-user.d.ts +3 -0
  67. package/dist/ecosystem/virtual-user.js +3 -0
  68. package/dist/ecosystem/workflow.d.ts +2 -0
  69. package/dist/ecosystem/workflow.js +2 -0
  70. package/dist/errors/index.d.ts +8 -0
  71. package/dist/errors/index.js +1 -0
  72. package/dist/errors/serialized-error.d.ts +7 -0
  73. package/dist/function/function-meta.types.d.ts +139 -0
  74. package/dist/function/function-runner.d.ts +3 -2
  75. package/dist/function/function-runner.js +31 -11
  76. package/dist/function/functions.types.d.ts +10 -2
  77. package/dist/function/index.d.ts +8 -2
  78. package/dist/function/index.js +4 -1
  79. package/dist/function/pikku-request.d.ts +8 -0
  80. package/dist/function/pikku-request.js +15 -0
  81. package/dist/middleware/auth-apikey.d.ts +2 -10
  82. package/dist/middleware/auth-apikey.js +1 -1
  83. package/dist/middleware/auth-bearer.d.ts +2 -10
  84. package/dist/middleware/auth-bearer.js +1 -1
  85. package/dist/middleware/auth-cookie.d.ts +2 -10
  86. package/dist/middleware/auth-cookie.js +1 -1
  87. package/dist/middleware/cors.d.ts +5 -11
  88. package/dist/middleware/cors.js +13 -6
  89. package/dist/middleware/index.d.ts +3 -0
  90. package/dist/middleware/index.js +1 -0
  91. package/dist/middleware/middleware-factories.d.ts +9 -0
  92. package/dist/middleware/middleware-factories.js +19 -0
  93. package/dist/middleware/middleware.types.d.ts +27 -0
  94. package/dist/middleware/middleware.types.js +1 -0
  95. package/dist/middleware/remote-auth.d.ts +2 -2
  96. package/dist/middleware/remote-auth.js +1 -1
  97. package/dist/middleware/telemetry.d.ts +4 -20
  98. package/dist/middleware/telemetry.js +1 -1
  99. package/dist/middleware-runner.d.ts +2 -1
  100. package/dist/pikku-state.d.ts +2 -1
  101. package/dist/services/audit-service.d.ts +1 -1
  102. package/dist/services/credential-wire-service.js +1 -1
  103. package/dist/services/email-service.d.ts +1 -1
  104. package/dist/services/file-scenario-run-store.d.ts +58 -0
  105. package/dist/services/file-scenario-run-store.js +214 -0
  106. package/dist/services/in-memory-workflow-service.d.ts +1 -1
  107. package/dist/services/index.d.ts +5 -1
  108. package/dist/services/index.js +3 -0
  109. package/dist/services/local-secrets.d.ts +1 -1
  110. package/dist/services/local-secrets.js +1 -1
  111. package/dist/services/logger.d.ts +7 -7
  112. package/dist/services/meta-service.d.ts +2 -1
  113. package/dist/services/scoped-secret-service.d.ts +1 -1
  114. package/dist/services/secret-service.d.ts +1 -1
  115. package/dist/services/typed-secret-service.d.ts +16 -2
  116. package/dist/services/typed-secret-service.js +5 -0
  117. package/dist/services/webhook-service.d.ts +1 -1
  118. package/dist/services/workflow-service.d.ts +2 -1
  119. package/dist/testing/index.d.ts +1 -0
  120. package/dist/testing/index.js +1 -0
  121. package/dist/types/core.types.d.ts +30 -180
  122. package/dist/types/core.types.js +1 -19
  123. package/dist/types/index.d.ts +2 -0
  124. package/dist/types/index.js +1 -0
  125. package/dist/types/state.types.d.ts +3 -1
  126. package/dist/utils.d.ts +13 -0
  127. package/dist/utils.js +2 -0
  128. package/dist/wirings/addon/addon-runner.d.ts +17 -0
  129. package/dist/wirings/addon/addon-runner.js +150 -0
  130. package/dist/wirings/addon/index.d.ts +6 -0
  131. package/dist/wirings/addon/index.js +3 -0
  132. package/dist/wirings/addon/remote-addon-auth.d.ts +16 -0
  133. package/dist/wirings/addon/remote-addon-auth.js +39 -0
  134. package/dist/wirings/addon/wire-addon.d.ts +80 -0
  135. package/dist/wirings/addon/wire-addon.js +120 -0
  136. package/dist/wirings/addon/wire-remote-addon.d.ts +22 -0
  137. package/dist/wirings/addon/wire-remote-addon.js +11 -0
  138. package/dist/wirings/agent/agent-memory.d.ts +11 -0
  139. package/dist/wirings/agent/agent-memory.js +17 -2
  140. package/dist/wirings/agent/agent-prepare.d.ts +3 -3
  141. package/dist/wirings/agent/agent-prepare.js +1 -1
  142. package/dist/wirings/agent/agent-runner.js +2 -3
  143. package/dist/wirings/agent/agent-stream.js +117 -93
  144. package/dist/wirings/agent/agent-utils.d.ts +13 -0
  145. package/dist/wirings/agent/agent-utils.js +16 -0
  146. package/dist/wirings/agent/agent.types.d.ts +12 -10
  147. package/dist/wirings/agent/index.d.ts +1 -1
  148. package/dist/wirings/agent/voice-input.js +1 -1
  149. package/dist/wirings/agent/voice-output.js +1 -1
  150. package/dist/wirings/agent-scorer/agent-scorer-judge.d.ts +13 -0
  151. package/dist/wirings/agent-scorer/agent-scorer-judge.js +52 -0
  152. package/dist/wirings/agent-scorer/agent-scorer.d.ts +7 -1
  153. package/dist/wirings/agent-scorer/agent-scorer.js +1 -0
  154. package/dist/wirings/agent-scorer/agent-scorer.types.d.ts +20 -0
  155. package/dist/wirings/agent-scorer/index.d.ts +1 -1
  156. package/dist/wirings/channel/channel-common.d.ts +2 -1
  157. package/dist/wirings/channel/channel-middleware-runner.d.ts +2 -1
  158. package/dist/wirings/channel/channel.types.d.ts +1 -1
  159. package/dist/wirings/channel/serverless/index.d.ts +1 -0
  160. package/dist/wirings/cli/channel/index.d.ts +1 -1
  161. package/dist/wirings/cli/cli-runner.d.ts +2 -1
  162. package/dist/wirings/cli/cli-runner.js +4 -1
  163. package/dist/wirings/cli/cli.types.d.ts +21 -2
  164. package/dist/wirings/cli/command-parser.js +157 -23
  165. package/dist/wirings/gateway/gateway.types.d.ts +2 -1
  166. package/dist/wirings/http/http-runner.d.ts +1 -1
  167. package/dist/wirings/http/http-runner.js +1 -1
  168. package/dist/wirings/http/http.types.d.ts +2 -2
  169. package/dist/wirings/http/index.d.ts +1 -0
  170. package/dist/wirings/http/index.js +1 -0
  171. package/dist/wirings/http/pikku-fetch-http-request.js +1 -1
  172. package/dist/wirings/http/pikku-fetch-http-response.js +2 -2
  173. package/dist/wirings/mcp/mcp.types.d.ts +1 -1
  174. package/dist/wirings/persona/index.d.ts +1 -1
  175. package/dist/wirings/persona/index.js +1 -1
  176. package/dist/wirings/persona/persona.types.d.ts +14 -0
  177. package/dist/wirings/queue/queue.types.d.ts +1 -1
  178. package/dist/wirings/queue/signed-queue-service.d.ts +1 -1
  179. package/dist/wirings/rpc/index.d.ts +0 -6
  180. package/dist/wirings/rpc/index.js +0 -3
  181. package/dist/wirings/rpc/remote-addon-auth.d.ts +1 -1
  182. package/dist/wirings/rpc/remote-addon-auth.js +1 -1
  183. package/dist/wirings/rpc/rpc-runner.js +2 -2
  184. package/dist/wirings/rpc/wire-addon.d.ts +1 -1
  185. package/dist/wirings/scheduler/scheduler.types.d.ts +2 -1
  186. package/dist/wirings/scope/index.d.ts +1 -0
  187. package/dist/wirings/scope/index.js +1 -0
  188. package/dist/wirings/secret/secret.types.d.ts +10 -0
  189. package/dist/wirings/secret/validate-secret-definitions.js +2 -0
  190. package/dist/wirings/variable/validate-variable-definitions.js +2 -0
  191. package/dist/wirings/variable/variable.types.d.ts +15 -0
  192. package/dist/wirings/virtual-user/index.d.ts +1 -1
  193. package/dist/wirings/virtual-user/index.js +1 -1
  194. package/dist/wirings/virtual-user/prepare-virtual-user-run.d.ts +1 -1
  195. package/dist/wirings/virtual-user/virtual-user-derive.d.ts +1 -1
  196. package/dist/wirings/workflow/graph/graph-node.d.ts +9 -2
  197. package/dist/wirings/workflow/graph/graph-node.js +2 -0
  198. package/dist/wirings/workflow/graph/graph-runner.d.ts +1 -0
  199. package/dist/wirings/workflow/graph/graph-runner.js +283 -31
  200. package/dist/wirings/workflow/graph/workflow-graph.types.d.ts +16 -1
  201. package/dist/wirings/workflow/index.d.ts +2 -0
  202. package/dist/wirings/workflow/index.js +1 -0
  203. package/dist/wirings/workflow/pikku-scenario-service.d.ts +15 -5
  204. package/dist/wirings/workflow/pikku-scenario-service.js +44 -16
  205. package/dist/wirings/workflow/pikku-workflow-service.d.ts +22 -7
  206. package/dist/wirings/workflow/pikku-workflow-service.js +28 -29
  207. package/dist/wirings/workflow/run-timeline.d.ts +1 -1
  208. package/dist/wirings/workflow/scenario-run.types.d.ts +171 -0
  209. package/dist/wirings/workflow/scenario-run.types.js +1 -0
  210. package/dist/wirings/workflow/scenario-step-guards.d.ts +1 -2
  211. package/dist/wirings/workflow/scenario-step-guards.js +0 -8
  212. package/dist/wirings/workflow/scenario-step.types.d.ts +27 -12
  213. package/dist/wirings/workflow/workflow-approval.js +2 -1
  214. package/dist/wirings/workflow/workflow-run-engine.types.d.ts +2 -1
  215. package/dist/wirings/workflow/workflow-step-claim.d.ts +16 -0
  216. package/dist/wirings/workflow/workflow-step-claim.js +27 -0
  217. package/dist/wirings/workflow/workflow.types.d.ts +2 -1
  218. package/knowledge/decisions/index.md +2 -0
  219. package/knowledge/decisions/internals/a-scenario-step-template-is-offered-unfilled.md +1 -1
  220. package/knowledge/decisions/internals/a-secret-that-fails-to-decrypt-fails-the-whole-read.md +1 -1
  221. package/knowledge/decisions/internals/a-virtual-user-run-is-not-a-workflow-and-not-a-queued-job.md +2 -2
  222. package/knowledge/decisions/internals/a-wall-clock-threshold-is-a-load-test-in-disguise.md +6 -6
  223. package/knowledge/decisions/internals/a-workflow-wire-is-built-from-the-run-not-from-the-rpc-service.md +1 -1
  224. package/knowledge/decisions/internals/addon-singleton-services-are-cached-per-namespace-not-per-package.md +1 -1
  225. package/knowledge/decisions/internals/addon-workflow-names-are-prefixed-with-the-consumer-namespace.md +1 -1
  226. package/knowledge/decisions/internals/an-addon-scope-root-loses-to-a-root-the-host-already-declares.md +1 -1
  227. package/knowledge/decisions/internals/channel-message-handlers-accept-three-config-shapes.md +1 -1
  228. package/knowledge/decisions/internals/channel-middleware-caches-only-statically-resolved-middleware.md +1 -1
  229. package/knowledge/decisions/internals/channel-user-id-is-persisted-after-onconnect-middleware-runs.md +1 -1
  230. package/knowledge/decisions/internals/cli-option-names-are-camelcase-in-state-and-kebab-on-the-command-line.md +1 -1
  231. package/knowledge/decisions/internals/cli-parse-errors-are-routed-by-message-prefix.md +1 -1
  232. package/knowledge/decisions/internals/cli-unknown-long-options-warn-instead-of-failing.md +1 -1
  233. package/knowledge/decisions/internals/core-column-form-is-an-axis-of-its-own.md +4 -4
  234. package/knowledge/decisions/internals/core-data-classification-brand-is-an-optional-property.md +1 -1
  235. package/knowledge/decisions/internals/core-function-runner-restores-the-wire-fields-it-overwrites.md +3 -3
  236. package/knowledge/decisions/internals/core-hot-reload-merges-generated-meta-never-replaces-it.md +2 -2
  237. package/knowledge/decisions/internals/core-hot-reload-owns-its-module-registry.md +2 -2
  238. package/knowledge/decisions/internals/core-middleware-order-is-scope-then-priority.md +1 -1
  239. package/knowledge/decisions/internals/core-schema-defaults-apply-on-every-transport.md +1 -1
  240. package/knowledge/decisions/internals/core-scopes-are-an-and-gate-separate-from-permissions.md +3 -3
  241. package/knowledge/decisions/internals/gateway-adapters-resolve-lazily-and-are-promise-cached.md +1 -1
  242. package/knowledge/decisions/internals/gateway-listener-middleware-runs-without-an-rpc-on-the-wire.md +4 -4
  243. package/knowledge/decisions/internals/gateway-wiring-is-a-meta-wiring-over-http-and-channels.md +1 -1
  244. package/knowledge/decisions/internals/http-router-matches-normalized-paths-but-returns-registered-ones.md +1 -1
  245. package/knowledge/decisions/internals/in-a-scenario-a-4xx-is-data-not-an-exception.md +1 -1
  246. package/knowledge/decisions/internals/in-memory-workflow-history-aliases-the-live-step-object.md +1 -1
  247. package/knowledge/decisions/internals/index.md +4 -2
  248. package/knowledge/decisions/internals/istanbul-statement-counts-attach-to-the-start-line-only.md +1 -1
  249. package/knowledge/decisions/internals/one-project-shape-check-two-validators.md +1 -1
  250. package/knowledge/decisions/internals/queue-jobs-always-carry-an-explicit-attempts-count.md +1 -1
  251. package/knowledge/decisions/internals/remote-addons-dispatch-over-http-instead-of-local-meta.md +1 -1
  252. package/knowledge/decisions/internals/rpc-names-resolve-through-package-scope-before-root.md +1 -1
  253. package/knowledge/decisions/internals/scenario-given-and-when-are-sugar-but-then-is-not.md +2 -2
  254. package/knowledge/decisions/internals/scenarios-live-in-files-named-for-them.md +5 -5
  255. package/knowledge/decisions/internals/the-actor-prompt-says-json-because-of-json-object-mode.md +1 -1
  256. package/knowledge/decisions/internals/the-api-report-pins-members-not-just-names.md +1 -1
  257. package/knowledge/decisions/internals/the-ecosystem-entry-point-carries-the-adapter-surface.md +43 -19
  258. package/knowledge/decisions/internals/the-persona-runtime-is-exported-from-the-persona-entry-point.md +1 -1
  259. package/knowledge/decisions/internals/the-worker-disposition-is-the-one-that-is-not-testing.md +1 -1
  260. package/knowledge/decisions/internals/validate-runs-checks-by-precondition.md +3 -3
  261. package/knowledge/decisions/internals/virtual-user-step-order-comes-from-insertion-order.md +1 -1
  262. package/knowledge/decisions/internals/webhook-delivery-history-records-every-attempt-best-effort.md +1 -1
  263. package/knowledge/decisions/internals/wiring-registries-erase-the-generics-their-wire-functions-capture.md +1 -1
  264. package/knowledge/decisions/internals/workflow-approval-expiry-is-decided-from-a-recorded-deadline.md +1 -1
  265. package/knowledge/decisions/internals/workflow-core-never-imports-a-browser-driver.md +1 -1
  266. package/knowledge/decisions/internals/workflow-inline-runs-report-their-run-id-before-they-can-fail.md +1 -1
  267. package/knowledge/decisions/internals/workflow-invocation-id-is-the-dedupe-key-not-step-id.md +1 -1
  268. package/knowledge/decisions/internals/workflow-run-capabilities-are-extensions-not-subclasses.md +1 -1
  269. package/knowledge/decisions/internals/workflow-run-timeline-is-a-pure-fold-over-durable-history.md +1 -1
  270. package/knowledge/decisions/internals/workflow-scenario-assertions-never-retry-and-record-one-step.md +9 -5
  271. package/knowledge/decisions/internals/workflow-scenario-hooks-are-a-scenario-only-affordance.md +1 -1
  272. package/knowledge/decisions/internals/workflow-step-rpc-name-is-provenance-only.md +2 -2
  273. package/knowledge/decisions/internals/workflow-suspend-and-approval-reasons-are-durable-step-identities.md +1 -1
  274. package/knowledge/decisions/security/a-function-never-receives-the-secret-service.md +1 -1
  275. package/knowledge/decisions/security/a-scaffold-flag-says-a-surface-exists-not-who-may-call-it.md +47 -0
  276. package/knowledge/decisions/security/a-step-runs-the-function-the-workflow-dispatched-it-with.md +1 -1
  277. package/knowledge/decisions/security/a-virtual-user-is-never-offered-a-step-that-would-forge-its-own-oracle.md +2 -3
  278. package/knowledge/decisions/security/actor-sign-in-is-proven-by-set-cookie-not-a-non-empty-jar.md +1 -1
  279. package/knowledge/decisions/security/addon-auth-and-tags-only-tighten.md +1 -1
  280. package/knowledge/decisions/security/agent-gate-requires-a-session-only-when-auth-is-true.md +1 -1
  281. package/knowledge/decisions/security/an-approval-answer-outlives-the-run-it-answered.md +3 -3
  282. package/knowledge/decisions/security/console-addon-privileged-functions-gate-themselves.md +4 -3
  283. package/knowledge/decisions/security/core-safe-fetch-blocks-ssrf-by-host-literal-not-dns.md +1 -1
  284. package/knowledge/decisions/security/gateway-middleware-sessions-must-be-bridged-onto-the-wire.md +2 -2
  285. package/knowledge/decisions/security/global-permissions-and-function-permissions-are-independent-gates.md +1 -1
  286. package/knowledge/decisions/security/http-request-bodies-are-bounded-before-they-are-buffered.md +2 -2
  287. package/knowledge/decisions/security/index.md +4 -1
  288. package/knowledge/decisions/security/mcp-internal-error-details-are-double-gated-on-production.md +1 -1
  289. package/knowledge/decisions/security/queue-jobs-carry-the-producers-pikku-user-id.md +3 -3
  290. package/knowledge/decisions/security/remote-addon-tokens-are-client-credentials-not-mesh-trust.md +1 -1
  291. package/knowledge/decisions/security/scaffold-features-are-authenticated-unless-opted-out.md +8 -2
  292. package/knowledge/decisions/security/self-authentication-is-declared-not-detected.md +1 -1
  293. package/knowledge/decisions/security/signed-content-urls-bind-the-request-path.md +2 -2
  294. package/knowledge/index.md +3 -1
  295. package/knowledge/questions/channel-middleware-accepts-bare-factories-that-nothing-resolves.md +1 -1
  296. package/knowledge/questions/index.md +2 -0
  297. package/package.json +14 -13
  298. package/run-tests.sh +0 -0
  299. package/scripts/generate-api-report.d.mts +1 -1
  300. package/scripts/generate-api-report.mjs +67 -60
  301. package/scripts/generate-api-report.mts +11 -45
  302. package/src/api-report.test.ts +70 -1
  303. package/src/app-alias-surface.test.ts +179 -0
  304. package/src/app-leaf-surface.test.ts +217 -0
  305. package/src/bootstrap-compat/root.ts +20 -0
  306. package/src/{column-form.test.ts → classification/column-form.test.ts} +2 -2
  307. package/src/{data-classification.ts → classification/data-classification.ts} +1 -5
  308. package/src/classification/index.ts +38 -0
  309. package/src/{secret-value.test.ts → classification/secret-value.test.ts} +2 -2
  310. package/src/{secret-value.ts → classification/secret-value.ts} +1 -6
  311. package/src/crypto-utils.ts +1 -1
  312. package/src/dev/hot-reload.ts +1 -1
  313. package/src/dev/reload-meta.test.ts +1 -1
  314. package/src/errors/index.ts +9 -0
  315. package/src/errors/serialized-error.ts +9 -0
  316. package/src/factory-functions.test.ts +4 -2
  317. package/src/function/function-meta.types.ts +151 -0
  318. package/src/function/function-runner.test.ts +4 -2
  319. package/src/function/function-runner.ts +47 -14
  320. package/src/function/functions.types.ts +11 -7
  321. package/src/function/index.ts +24 -5
  322. package/src/function/list.types.ts +1 -3
  323. package/src/middleware/auth-apikey.ts +4 -2
  324. package/src/middleware/auth-bearer.test.ts +1 -1
  325. package/src/middleware/auth-bearer.ts +4 -2
  326. package/src/middleware/auth-cookie.ts +4 -1
  327. package/src/middleware/cors.test.ts +126 -5
  328. package/src/middleware/cors.ts +19 -8
  329. package/src/middleware/index.ts +16 -0
  330. package/src/middleware/middleware-factories.ts +62 -0
  331. package/src/middleware/middleware.types.ts +61 -0
  332. package/src/middleware/remote-auth.test.ts +1 -1
  333. package/src/middleware/remote-auth.ts +1 -1
  334. package/src/middleware/telemetry.ts +4 -2
  335. package/src/middleware-runner.test.ts +2 -3
  336. package/src/middleware-runner.ts +2 -2
  337. package/src/no-root-barrel.test.ts +114 -0
  338. package/src/permissions.ts +2 -4
  339. package/src/pikku-state.ts +3 -1
  340. package/src/public-surface.json +56 -241
  341. package/src/public-surface.json.README +3 -3
  342. package/src/public-surface.test.ts +5 -5
  343. package/src/remote.test.ts +1 -1
  344. package/src/removed-legacy-exports.test.ts +5 -1
  345. package/src/services/audit-service.ts +1 -1
  346. package/src/services/credential-wire-service.ts +1 -1
  347. package/src/services/email-service.ts +2 -4
  348. package/src/services/file-scenario-run-store.test.ts +349 -0
  349. package/src/services/file-scenario-run-store.ts +282 -0
  350. package/src/services/in-memory-workflow-service.ts +1 -1
  351. package/src/services/index.ts +13 -1
  352. package/src/services/local-content-request-handler.ts +1 -2
  353. package/src/services/local-secrets.ts +1 -1
  354. package/src/services/logger.ts +7 -7
  355. package/src/services/meta-service.ts +2 -2
  356. package/src/services/queue-webhook-service.test.ts +1 -1
  357. package/src/services/scoped-secret-service.ts +1 -1
  358. package/src/services/secret-service.ts +1 -1
  359. package/src/services/typed-secret-service.test.ts +52 -0
  360. package/src/services/typed-secret-service.ts +26 -2
  361. package/src/services/webhook-service.ts +1 -1
  362. package/src/services/workflow-service.ts +2 -1
  363. package/src/template-alias-surface.test.ts +240 -0
  364. package/src/testing/index.ts +1 -0
  365. package/src/types/core.types.ts +33 -285
  366. package/src/types/index.ts +25 -0
  367. package/src/types/state.types.ts +6 -5
  368. package/src/types/typed-credentials.test.ts +72 -0
  369. package/src/utils.ts +34 -0
  370. package/src/wirings/{rpc → addon}/addon-scopes.test.ts +1 -1
  371. package/src/wirings/addon/index.ts +12 -0
  372. package/src/wirings/{rpc → addon}/remote-addon-auth.ts +4 -1
  373. package/src/wirings/{rpc → addon}/wire-addon.ts +37 -2
  374. package/src/wirings/agent/agent-memory.test.ts +73 -0
  375. package/src/wirings/agent/agent-memory.ts +16 -2
  376. package/src/wirings/agent/agent-middleware.types.test.ts +41 -0
  377. package/src/wirings/agent/agent-prepare.ts +8 -5
  378. package/src/wirings/agent/agent-runner.ts +2 -3
  379. package/src/wirings/agent/agent-stream-delegate.test.ts +381 -0
  380. package/src/wirings/agent/agent-stream.ts +160 -81
  381. package/src/wirings/agent/agent-utils.ts +19 -0
  382. package/src/wirings/agent/agent.types.ts +12 -11
  383. package/src/wirings/agent/index.ts +1 -0
  384. package/src/wirings/agent/voice-input.ts +1 -1
  385. package/src/wirings/agent/voice-output.test.ts +2 -4
  386. package/src/wirings/agent/voice-output.ts +1 -1
  387. package/src/wirings/agent-scorer/agent-scorer-judge.test.ts +145 -0
  388. package/src/wirings/agent-scorer/agent-scorer-judge.ts +60 -0
  389. package/src/wirings/agent-scorer/agent-scorer.ts +8 -0
  390. package/src/wirings/agent-scorer/agent-scorer.types.ts +21 -0
  391. package/src/wirings/agent-scorer/index.ts +1 -0
  392. package/src/wirings/channel/channel-common.ts +4 -2
  393. package/src/wirings/channel/channel-handler.ts +2 -5
  394. package/src/wirings/channel/channel-middleware-runner.ts +1 -1
  395. package/src/wirings/channel/channel-rpc.types.ts +1 -5
  396. package/src/wirings/channel/channel.types.ts +1 -2
  397. package/src/wirings/channel/local/local-channel-runner.test.ts +1 -2
  398. package/src/wirings/channel/serverless/index.ts +1 -0
  399. package/src/wirings/cli/channel/cli-raw-channel-runner.ts +2 -2
  400. package/src/wirings/cli/channel/index.ts +1 -3
  401. package/src/wirings/cli/cli-runner.test.ts +1 -1
  402. package/src/wirings/cli/cli-runner.ts +11 -7
  403. package/src/wirings/cli/cli.types.ts +24 -3
  404. package/src/wirings/cli/command-parser.test.ts +388 -1
  405. package/src/wirings/cli/command-parser.ts +189 -29
  406. package/src/wirings/gateway/gateway-runner.test.ts +1 -2
  407. package/src/wirings/gateway/gateway-runner.ts +3 -6
  408. package/src/wirings/gateway/gateway.types.ts +5 -4
  409. package/src/wirings/http/http-routes.test.ts +1 -2
  410. package/src/wirings/http/http-runner-addon-ref.test.ts +238 -0
  411. package/src/wirings/http/http-runner.test.ts +3 -8
  412. package/src/wirings/http/http-runner.ts +9 -3
  413. package/src/wirings/http/http.types.ts +3 -12
  414. package/src/wirings/http/index.ts +1 -0
  415. package/src/wirings/http/pikku-fetch-http-request.ts +1 -1
  416. package/src/wirings/http/pikku-fetch-http-response.ts +3 -2
  417. package/src/wirings/mcp/mcp-runner.test.ts +1 -1
  418. package/src/wirings/mcp/mcp.types.ts +1 -2
  419. package/src/wirings/persona/index.ts +1 -4
  420. package/src/wirings/persona/persona.types.ts +14 -0
  421. package/src/wirings/queue/queue-identity.test.ts +1 -1
  422. package/src/wirings/queue/queue.types.ts +2 -6
  423. package/src/wirings/queue/signed-queue-service.ts +1 -1
  424. package/src/wirings/rpc/index.ts +0 -12
  425. package/src/wirings/rpc/rpc-runner.test.ts +4 -4
  426. package/src/wirings/rpc/rpc-runner.ts +3 -3
  427. package/src/wirings/scheduler/scheduler.types.ts +2 -5
  428. package/src/wirings/scope/index.ts +1 -0
  429. package/src/wirings/secret/secret.types.ts +10 -0
  430. package/src/wirings/secret/validate-secret-definitions.test.ts +23 -0
  431. package/src/wirings/secret/validate-secret-definitions.ts +2 -0
  432. package/src/wirings/variable/validate-variable-definitions.test.ts +24 -0
  433. package/src/wirings/variable/validate-variable-definitions.ts +2 -0
  434. package/src/wirings/variable/variable.types.ts +15 -0
  435. package/src/wirings/virtual-user/index.ts +1 -4
  436. package/src/wirings/virtual-user/prepare-virtual-user-run.ts +1 -1
  437. package/src/wirings/virtual-user/virtual-user-derive.test.ts +1 -1
  438. package/src/wirings/virtual-user/virtual-user-derive.ts +1 -1
  439. package/src/wirings/virtual-user/virtual-user.types.ts +1 -5
  440. package/src/wirings/workflow/graph/graph-foreach-queued.test.ts +569 -0
  441. package/src/wirings/workflow/graph/graph-foreach.test.ts +626 -0
  442. package/src/wirings/workflow/graph/graph-node.ts +16 -1
  443. package/src/wirings/workflow/graph/graph-runner.ts +387 -61
  444. package/src/wirings/workflow/graph/workflow-graph.types.ts +28 -3
  445. package/src/wirings/workflow/index.ts +8 -0
  446. package/src/wirings/workflow/pikku-scenario-service.ts +83 -20
  447. package/src/wirings/workflow/pikku-workflow-service.ts +37 -35
  448. package/src/wirings/workflow/run-timeline.ts +1 -1
  449. package/src/wirings/workflow/scenario-expectations.test.ts +28 -13
  450. package/src/wirings/workflow/scenario-run.types.ts +186 -0
  451. package/src/wirings/workflow/scenario-step-guards.ts +1 -14
  452. package/src/wirings/workflow/scenario-step.test.ts +32 -7
  453. package/src/wirings/workflow/scenario-step.types.ts +27 -12
  454. package/src/wirings/workflow/workflow-approval-policy.test.ts +117 -47
  455. package/src/wirings/workflow/workflow-approval.ts +2 -1
  456. package/src/wirings/workflow/workflow-run-engine.types.ts +2 -1
  457. package/src/wirings/workflow/workflow-step-claim.ts +46 -0
  458. package/src/wirings/workflow/workflow.types.ts +4 -12
  459. package/src/wirings-stay-decoupled.test.ts +6 -3
  460. package/tsconfig.tsbuildinfo +1 -1
  461. package/tsconfig.type-tests.json +4 -2
  462. package/dist/ecosystem/ai-agent.d.ts +0 -18
  463. package/dist/ecosystem/ai-agent.js +0 -6
  464. package/dist/ecosystem/ai-scorer.d.ts +0 -12
  465. package/dist/ecosystem/ai-scorer.js +0 -5
  466. package/dist/services/ai-agent-runner-service.d.ts +0 -220
  467. package/dist/services/ai-run-state-service.d.ts +0 -29
  468. package/dist/services/ai-storage-service.d.ts +0 -18
  469. package/dist/services/in-memory-ai-run-state-service.d.ts +0 -19
  470. package/dist/services/in-memory-ai-run-state-service.js +0 -54
  471. package/dist/testing/service-tests/ai-storage-service-tests.d.ts +0 -3
  472. package/dist/testing/service-tests/ai-storage-service-tests.js +0 -302
  473. package/dist/wirings/ai-agent/agent-rpc.d.ts +0 -15
  474. package/dist/wirings/ai-agent/agent-rpc.js +0 -53
  475. package/dist/wirings/ai-agent/ai-agent-agui.d.ts +0 -79
  476. package/dist/wirings/ai-agent/ai-agent-agui.js +0 -327
  477. package/dist/wirings/ai-agent/ai-agent-finalize.d.ts +0 -58
  478. package/dist/wirings/ai-agent/ai-agent-finalize.js +0 -138
  479. package/dist/wirings/ai-agent/ai-agent-helpers.d.ts +0 -35
  480. package/dist/wirings/ai-agent/ai-agent-helpers.js +0 -47
  481. package/dist/wirings/ai-agent/ai-agent-interrupt.d.ts +0 -153
  482. package/dist/wirings/ai-agent/ai-agent-interrupt.js +0 -257
  483. package/dist/wirings/ai-agent/ai-agent-memory.d.ts +0 -42
  484. package/dist/wirings/ai-agent/ai-agent-memory.js +0 -333
  485. package/dist/wirings/ai-agent/ai-agent-model-config.d.ts +0 -16
  486. package/dist/wirings/ai-agent/ai-agent-model-config.js +0 -51
  487. package/dist/wirings/ai-agent/ai-agent-prepare.d.ts +0 -117
  488. package/dist/wirings/ai-agent/ai-agent-prepare.js +0 -728
  489. package/dist/wirings/ai-agent/ai-agent-registry.d.ts +0 -16
  490. package/dist/wirings/ai-agent/ai-agent-registry.js +0 -51
  491. package/dist/wirings/ai-agent/ai-agent-runner.d.ts +0 -7
  492. package/dist/wirings/ai-agent/ai-agent-runner.js +0 -580
  493. package/dist/wirings/ai-agent/ai-agent-stream.d.ts +0 -41
  494. package/dist/wirings/ai-agent/ai-agent-stream.js +0 -1029
  495. package/dist/wirings/ai-agent/ai-agent-turn.d.ts +0 -57
  496. package/dist/wirings/ai-agent/ai-agent-turn.js +0 -82
  497. package/dist/wirings/ai-agent/ai-agent-utils.d.ts +0 -1
  498. package/dist/wirings/ai-agent/ai-agent-utils.js +0 -1
  499. package/dist/wirings/ai-agent/ai-agent.types.d.ts +0 -625
  500. package/dist/wirings/ai-agent/index.d.ts +0 -12
  501. package/dist/wirings/ai-agent/index.js +0 -10
  502. package/dist/wirings/ai-agent/voice-input.d.ts +0 -69
  503. package/dist/wirings/ai-agent/voice-input.js +0 -150
  504. package/dist/wirings/ai-agent/voice-output.d.ts +0 -85
  505. package/dist/wirings/ai-agent/voice-output.js +0 -196
  506. package/dist/wirings/ai-scorer/ai-scorer-grade.d.ts +0 -26
  507. package/dist/wirings/ai-scorer/ai-scorer-grade.js +0 -33
  508. package/dist/wirings/ai-scorer/ai-scorer-judge.d.ts +0 -17
  509. package/dist/wirings/ai-scorer/ai-scorer-judge.js +0 -92
  510. package/dist/wirings/ai-scorer/ai-scorer-live.d.ts +0 -15
  511. package/dist/wirings/ai-scorer/ai-scorer-live.js +0 -38
  512. package/dist/wirings/ai-scorer/ai-scorer-registry.d.ts +0 -18
  513. package/dist/wirings/ai-scorer/ai-scorer-registry.js +0 -46
  514. package/dist/wirings/ai-scorer/ai-scorer-sampling.d.ts +0 -8
  515. package/dist/wirings/ai-scorer/ai-scorer-sampling.js +0 -31
  516. package/dist/wirings/ai-scorer/ai-scorer-snapshots.d.ts +0 -10
  517. package/dist/wirings/ai-scorer/ai-scorer-snapshots.js +0 -40
  518. package/dist/wirings/ai-scorer/ai-scorer-worker.d.ts +0 -15
  519. package/dist/wirings/ai-scorer/ai-scorer-worker.js +0 -58
  520. package/dist/wirings/ai-scorer/ai-scorer.d.ts +0 -39
  521. package/dist/wirings/ai-scorer/ai-scorer.js +0 -40
  522. package/dist/wirings/ai-scorer/ai-scorer.types.d.ts +0 -90
  523. package/dist/wirings/ai-scorer/ai-scorer.types.js +0 -4
  524. package/dist/wirings/ai-scorer/index.d.ts +0 -6
  525. package/dist/wirings/ai-scorer/index.js +0 -5
  526. package/src/ecosystem/agent-scorer.ts +0 -24
  527. package/src/ecosystem/agent.ts +0 -42
  528. package/src/ecosystem/channel/local.ts +0 -1
  529. package/src/ecosystem/channel.ts +0 -22
  530. package/src/ecosystem/cli/channel.ts +0 -25
  531. package/src/ecosystem/cli.ts +0 -21
  532. package/src/ecosystem/credential.ts +0 -10
  533. package/src/ecosystem/dev.ts +0 -12
  534. package/src/ecosystem/function.ts +0 -28
  535. package/src/ecosystem/gateway.ts +0 -4
  536. package/src/ecosystem/hmac.ts +0 -1
  537. package/src/ecosystem/http.ts +0 -22
  538. package/src/ecosystem/mcp.ts +0 -17
  539. package/src/ecosystem/middleware.ts +0 -27
  540. package/src/ecosystem/node-host-resolver.ts +0 -1
  541. package/src/ecosystem/node.ts +0 -5
  542. package/src/ecosystem/oauth2.ts +0 -4
  543. package/src/ecosystem/persona.ts +0 -30
  544. package/src/ecosystem/queue.ts +0 -23
  545. package/src/ecosystem/remote.ts +0 -9
  546. package/src/ecosystem/role.ts +0 -13
  547. package/src/ecosystem/rpc.ts +0 -7
  548. package/src/ecosystem/safe-fetch.ts +0 -8
  549. package/src/ecosystem/scenario.ts +0 -32
  550. package/src/ecosystem/scheduler.ts +0 -5
  551. package/src/ecosystem/schema.ts +0 -1
  552. package/src/ecosystem/scope.ts +0 -14
  553. package/src/ecosystem/secret.ts +0 -15
  554. package/src/ecosystem/services/istanbul-coverage.ts +0 -1
  555. package/src/ecosystem/services/local-content-request-handler.ts +0 -16
  556. package/src/ecosystem/services/local-content.ts +0 -1
  557. package/src/ecosystem/services/v8-coverage.ts +0 -1
  558. package/src/ecosystem/services.ts +0 -82
  559. package/src/ecosystem/trigger.ts +0 -7
  560. package/src/ecosystem/types.ts +0 -34
  561. package/src/ecosystem/variable.ts +0 -14
  562. package/src/ecosystem/virtual-user.ts +0 -48
  563. package/src/ecosystem/workflow.ts +0 -68
  564. package/src/ecosystem.ts +0 -40
  565. package/src/index.ts +0 -244
  566. /package/dist/{services/ai-agent-runner-service.js → bootstrap-compat/root.js} +0 -0
  567. /package/dist/{services/ai-run-state-service.js → classification/data-classification.js} +0 -0
  568. /package/dist/{services/ai-storage-service.js → errors/serialized-error.js} +0 -0
  569. /package/dist/{wirings/ai-agent/ai-agent.types.js → function/function-meta.types.js} +0 -0
  570. /package/src/{column-form.ts → classification/column-form.ts} +0 -0
  571. /package/src/{pikku-request.test.ts → function/pikku-request.test.ts} +0 -0
  572. /package/src/{pikku-request.ts → function/pikku-request.ts} +0 -0
  573. /package/src/wirings/{rpc → addon}/addon-auth-tags.test.ts +0 -0
  574. /package/src/wirings/{rpc → addon}/addon-runner.ts +0 -0
  575. /package/src/wirings/{rpc → addon}/addon-secrets.test.ts +0 -0
  576. /package/src/wirings/{rpc → addon}/wire-addon.test.ts +0 -0
  577. /package/src/wirings/{rpc → addon}/wire-remote-addon.ts +0 -0
@@ -74,6 +74,72 @@ describe('agent-memory', () => {
74
74
  })
75
75
  })
76
76
 
77
+ test('deepMergeWorkingMemory replaces an array re-emitted in full', () => {
78
+ const result = deepMergeWorkingMemory(
79
+ { steps: [{ id: 1 }, { id: 2 }], other: 'kept' },
80
+ { steps: [{ id: 1 }, { id: 2 }, { id: 3 }] }
81
+ )
82
+
83
+ assert.deepEqual(result, {
84
+ steps: [{ id: 1 }, { id: 2 }, { id: 3 }],
85
+ other: 'kept',
86
+ })
87
+ })
88
+
89
+ test('deepMergeWorkingMemory replaces rather than appends a partial array', () => {
90
+ const result = deepMergeWorkingMemory(
91
+ { steps: [{ id: 1 }, { id: 2 }] },
92
+ { steps: [{ id: 3 }] }
93
+ )
94
+
95
+ assert.deepEqual(result, { steps: [{ id: 3 }] })
96
+ })
97
+
98
+ test('deepMergeWorkingMemory clears an array field set to null', () => {
99
+ const result = deepMergeWorkingMemory(
100
+ { steps: [1, 2, 3], city: 'Berlin' },
101
+ {
102
+ steps: null,
103
+ }
104
+ )
105
+
106
+ assert.deepEqual(result, { city: 'Berlin' })
107
+ })
108
+
109
+ test('deepMergeWorkingMemory replaces arrays nested inside merged objects', () => {
110
+ const result = deepMergeWorkingMemory(
111
+ {
112
+ profile: {
113
+ name: 'Yasser',
114
+ tags: ['a', 'b'],
115
+ },
116
+ },
117
+ {
118
+ profile: {
119
+ tags: ['c'],
120
+ },
121
+ }
122
+ )
123
+
124
+ assert.deepEqual(result, {
125
+ profile: {
126
+ name: 'Yasser',
127
+ tags: ['c'],
128
+ },
129
+ })
130
+ })
131
+
132
+ test('deepMergeWorkingMemory replaces across array and object shape changes', () => {
133
+ assert.deepEqual(
134
+ deepMergeWorkingMemory({ value: { a: 1 } }, { value: [1, 2] }),
135
+ { value: [1, 2] }
136
+ )
137
+ assert.deepEqual(
138
+ deepMergeWorkingMemory({ value: [1, 2] }, { value: { a: 1 } }),
139
+ { value: { a: 1 } }
140
+ )
141
+ })
142
+
77
143
  test('deepMergeWorkingMemory ignores prototype-polluting keys', () => {
78
144
  const before = ({} as any).isAdmin
79
145
  deepMergeWorkingMemory(
@@ -107,6 +173,13 @@ describe('agent-memory', () => {
107
173
  assert.match(prompt, /<working_memory>/)
108
174
  })
109
175
 
176
+ test('buildWorkingMemoryPrompt tells the model arrays are replaced whole', () => {
177
+ const prompt = buildWorkingMemoryPrompt({ steps: [1] })
178
+
179
+ assert.match(prompt, /Arrays are replaced, not merged/)
180
+ assert.match(prompt, /repeat every item you want to keep/)
181
+ })
182
+
110
183
  test('buildWorkingMemoryPrompt marks empty memory explicitly', () => {
111
184
  const prompt = buildWorkingMemoryPrompt(null)
112
185
  assert.match(prompt, /Current working memory: \(empty\)/)
@@ -39,6 +39,17 @@ export function isWorkingMemoryEnabled(
39
39
  return !!memoryConfig?.workingMemory && !!storage
40
40
  }
41
41
 
42
+ /**
43
+ * Merges a model-emitted working memory update into the stored state.
44
+ *
45
+ * Objects merge key by key, and `null` deletes a key. Arrays are replaced
46
+ * wholesale — deliberately, not as a side effect of the object guard below.
47
+ * The full state is echoed back to the model every turn by
48
+ * {@link buildWorkingMemoryPrompt}, so it can always re-emit an array in full,
49
+ * and appending instead would duplicate every item each time it did.
50
+ * `buildWorkingMemoryPrompt` states this contract to the model; the two must
51
+ * stay in agreement.
52
+ */
42
53
  export function deepMergeWorkingMemory(
43
54
  existing: Record<string, unknown>,
44
55
  updates: Record<string, unknown>
@@ -51,9 +62,10 @@ export function deepMergeWorkingMemory(
51
62
  const value = updates[key]
52
63
  if (value === null) {
53
64
  delete result[key]
65
+ } else if (Array.isArray(value)) {
66
+ result[key] = value
54
67
  } else if (
55
68
  typeof value === 'object' &&
56
- !Array.isArray(value) &&
57
69
  typeof result[key] === 'object' &&
58
70
  result[key] !== null &&
59
71
  !Array.isArray(result[key])
@@ -100,7 +112,9 @@ export function buildWorkingMemoryPrompt(
100
112
  'When you learn new information, output a partial JSON update in <working_memory> tags. ' +
101
113
  'Only include durable facts you have actually derived or the user has confirmed. ' +
102
114
  'Do not output templates, placeholders, or narration. ' +
103
- 'Only include changed fields. Leave unknown fields untouched. Set a field to null to delete it.'
115
+ 'Only include changed fields. Leave unknown fields untouched. Set a field to null to delete it. ' +
116
+ 'Arrays are replaced, not merged: to change one, repeat every item you want to keep alongside the new ones, ' +
117
+ 'because any item you leave out is deleted.'
104
118
  )
105
119
 
106
120
  return parts.join('\n\n')
@@ -0,0 +1,41 @@
1
+ // Type-checked via tsconfig.type-tests.json; no runtime assertions.
2
+
3
+ import { pikkuAgentMiddleware } from '../../middleware/middleware-factories.js'
4
+ import type { PikkuAgentMiddlewareHooks } from './agent.types.js'
5
+
6
+ const _singletonServicesCompile = pikkuAgentMiddleware<{ count: number }>({
7
+ modifyInput: async ({ logger }, { messages, instructions }) => {
8
+ logger.info(`agent input: ${messages.length} messages`)
9
+ return { messages, instructions }
10
+ },
11
+ modifyOutputStream: async ({ logger }, { event, state }) => {
12
+ state.count = (state.count ?? 0) + 1
13
+ logger.info(`event: ${event.type}`)
14
+ return event
15
+ },
16
+ afterStep: async ({ variables }, { stepNumber }) => {
17
+ variables.get(`STEP_${stepNumber}`)
18
+ },
19
+ onError: async ({ logger }, { error }) => {
20
+ logger.error(error.message)
21
+ },
22
+ })
23
+ void _singletonServicesCompile
24
+
25
+ const _wireServiceIsNotAvailable: PikkuAgentMiddlewareHooks = {
26
+ // @ts-expect-error — `http` is a wire service, and an agent run has no wire
27
+ modifyInput: async ({ http }, { messages, instructions }) => {
28
+ void http
29
+ return { messages, instructions }
30
+ },
31
+ }
32
+ void _wireServiceIsNotAvailable
33
+
34
+ const _wireServiceIsNotAvailableToTheFactory = pikkuAgentMiddleware({
35
+ // @ts-expect-error — `channel` is a wire service, and an agent run has no wire
36
+ afterToolCall: async ({ channel }, { result }) => {
37
+ void channel
38
+ return { result }
39
+ },
40
+ })
41
+ void _wireServiceIsNotAvailableToTheFactory
@@ -1,4 +1,8 @@
1
- import type { PikkuRawWire, CoreUserSession } from '../../types/core.types.js'
1
+ import type {
2
+ PikkuRawWire,
3
+ CoreUserSession,
4
+ GetCredential,
5
+ } from '../../types/core.types.js'
2
6
  import type {
3
7
  CoreAgent,
4
8
  AgentInput,
@@ -31,7 +35,7 @@ import {
31
35
  resolveNamespace,
32
36
  ContextAwareRPCService,
33
37
  } from '../../wirings/rpc/rpc-runner.js'
34
- import { getOrCreatePackageSingletonServices } from '../../wirings/rpc/addon-runner.js'
38
+ import { getOrCreatePackageSingletonServices } from '../../wirings/addon/addon-runner.js'
35
39
  import {
36
40
  resolveMemoryServices,
37
41
  loadContextMessages,
@@ -42,7 +46,7 @@ import { resolveModelConfig } from './agent-model-config.js'
42
46
  export type RunAgentParams = {
43
47
  sessionService?: SessionService<CoreUserSession>
44
48
  /** Credential accessor for the current request — used to read per-user overrides (e.g. AI_API_KEY). */
45
- getCredential?: <T = unknown>(name: string) => T | null | Promise<T | null>
49
+ getCredential?: GetCredential
46
50
  /** Ephemeral owner identity minted for a sessionless request; never client-supplied, never reused across requests. */
47
51
  anonymousOwnerResourceId?: string
48
52
  }
@@ -542,8 +546,7 @@ export async function buildToolDefs(
542
546
  (approvalPolicy === 'explicit' && fnMeta?.approvalRequired)
543
547
 
544
548
  let approvalDescriptionFn:
545
- | ((input: unknown) => Promise<string>)
546
- | undefined
549
+ ((input: unknown) => Promise<string>) | undefined
547
550
  if (needsApproval && pikkuFuncId) {
548
551
  const funcConfig = pikkuState(resolvedPkg, 'function', 'functions').get(
549
552
  pikkuFuncId
@@ -56,7 +56,7 @@ import {
56
56
  } from './agent-finalize.js'
57
57
  import { resolveModelConfig } from './agent-model-config.js'
58
58
  import { AIProviderNotConfiguredError } from '../../errors/errors.js'
59
- import { randomUUID } from './agent-utils.js'
59
+ import { deniedToolResult, randomUUID } from './agent-utils.js'
60
60
 
61
61
  function stripNulls(obj: unknown): unknown {
62
62
  if (obj === null) return undefined
@@ -484,8 +484,7 @@ export async function resumeAgentSync(
484
484
  let toolError: string | undefined
485
485
 
486
486
  if (rejectedIds.has(toolCallId)) {
487
- resultStr =
488
- 'The user explicitly declined this action. Inform them that it was declined and do not retry.'
487
+ resultStr = deniedToolResult()
489
488
  } else if (approvedIds.has(toolCallId)) {
490
489
  const matchingTool = tools.find((t) => t.name === pending.toolName)
491
490
  if (!matchingTool) {
@@ -0,0 +1,381 @@
1
+ import { beforeEach, describe, test } from 'node:test'
2
+ import assert from 'node:assert/strict'
3
+
4
+ import { resetPikkuState, pikkuState } from '../../pikku-state.js'
5
+ import { streamAgent, resumeAgent } from './agent-stream.js'
6
+ import type {
7
+ CoreAgent,
8
+ AgentStreamChannel,
9
+ AgentStreamEvent,
10
+ } from './agent.types.js'
11
+ import type {
12
+ AgentStepResult,
13
+ AgentRunnerParams,
14
+ } from '../../services/agent-runner-service.js'
15
+
16
+ beforeEach(() => {
17
+ resetPikkuState()
18
+ })
19
+
20
+ const registerAgent = (
21
+ name: string,
22
+ overrides: Partial<CoreAgent> = {},
23
+ metaOverrides: Record<string, unknown> = {}
24
+ ) => {
25
+ const agent: CoreAgent = {
26
+ name,
27
+ description: `${name} agent`,
28
+ instructions: name,
29
+ model: 'test/test-model',
30
+ ...overrides,
31
+ }
32
+
33
+ pikkuState(null, 'agent', 'agentsMeta')[name] = {
34
+ ...agent,
35
+ inputSchema: null,
36
+ outputSchema: null,
37
+ workingMemorySchema: null,
38
+ ...metaOverrides,
39
+ } as any
40
+ pikkuState(null, 'agent', 'agents').set(name, agent)
41
+ return agent
42
+ }
43
+
44
+ const makeStepResult = (
45
+ overrides?: Partial<AgentStepResult>
46
+ ): AgentStepResult => ({
47
+ text: '',
48
+ toolCalls: [],
49
+ toolResults: [],
50
+ usage: { inputTokens: 0, outputTokens: 0 },
51
+ finishReason: 'stop',
52
+ ...overrides,
53
+ })
54
+
55
+ const recordingChannel = (channelId: string) => {
56
+ const events: AgentStreamEvent[] = []
57
+ const channel = {
58
+ channelId,
59
+ openingData: undefined,
60
+ state: 'open',
61
+ send: (event: AgentStreamEvent) => {
62
+ events.push(event)
63
+ },
64
+ sendBinary: () => {},
65
+ setState: () => {},
66
+ close: () => {},
67
+ } as unknown as AgentStreamChannel
68
+ return { channel, events }
69
+ }
70
+
71
+ const parentTextOf = (events: AgentStreamEvent[]) =>
72
+ events
73
+ .filter((e) => e.type === 'text-delta' && !(e as any).agent)
74
+ .map((e) => (e as any).text as string)
75
+ .join('')
76
+
77
+ /**
78
+ * A parent that speaks either side of a hand-off to a specialist — the shape
79
+ * the issue describes, with the model's text made deterministic so the
80
+ * plumbing can be observed without a live call.
81
+ */
82
+ const delegatingRunner = (
83
+ script: { preHandoff: string; postHandoff: string } = {
84
+ preHandoff: 'Planning. ',
85
+ postHandoff: 'Handed off. <working_memory>{"phase":"two"}</working_memory>',
86
+ }
87
+ ) => {
88
+ let parentStep = 0
89
+ return {
90
+ stream: async (params: AgentRunnerParams, channel: AgentStreamChannel) => {
91
+ const subTool = params.tools.find((t) => t.name === 'sub')
92
+ if (!subTool) {
93
+ channel.send({ type: 'text-delta', text: 'specialist output' })
94
+ channel.send({
95
+ type: 'usage',
96
+ tokens: { input: 1, output: 1 },
97
+ } as AgentStreamEvent)
98
+ return makeStepResult({ text: 'specialist output' })
99
+ }
100
+
101
+ if (parentStep++ === 0) {
102
+ channel.send({ type: 'text-delta', text: script.preHandoff })
103
+
104
+ await subTool.execute!({ message: 'do phase two', session: 's1' })
105
+
106
+ channel.send({ type: 'text-delta', text: script.postHandoff })
107
+ channel.send({
108
+ type: 'usage',
109
+ tokens: { input: 1, output: 1 },
110
+ } as AgentStreamEvent)
111
+ return makeStepResult({
112
+ text: 'Planning. Handed off.',
113
+ toolCalls: [
114
+ {
115
+ toolCallId: 'call-1',
116
+ toolName: 'sub',
117
+ args: { message: 'do phase two', session: 's1' },
118
+ },
119
+ ],
120
+ toolResults: [
121
+ {
122
+ toolCallId: 'call-1',
123
+ toolName: 'sub',
124
+ result: 'specialist output',
125
+ },
126
+ ],
127
+ finishReason: 'tool-calls',
128
+ })
129
+ }
130
+
131
+ channel.send({
132
+ type: 'text-delta',
133
+ text: 'Done. <working_memory>{"phase":"three"}</working_memory>',
134
+ })
135
+ channel.send({
136
+ type: 'usage',
137
+ tokens: { input: 1, output: 1 },
138
+ } as AgentStreamEvent)
139
+ return makeStepResult({ text: 'Done.' })
140
+ },
141
+ }
142
+ }
143
+
144
+ const makeServices = (
145
+ runner: { stream: any },
146
+ savedWorkingMemory: unknown[],
147
+ savedMessages: any[] = []
148
+ ) => {
149
+ let stored: Record<string, unknown> = {}
150
+ return {
151
+ logger: {
152
+ info: () => {},
153
+ warn: () => {},
154
+ error: () => {},
155
+ debug: () => {},
156
+ },
157
+ agentRunner: runner,
158
+ agentRunState: {
159
+ createRun: async () => 'run-1',
160
+ updateRun: async () => {},
161
+ },
162
+ agentStorage: {
163
+ createThread: async () => {},
164
+ getMessages: async () => [],
165
+ saveMessages: async (threadId: string, messages: any[]) => {
166
+ savedMessages.push(
167
+ ...messages.map((message) => ({ threadId, message }))
168
+ )
169
+ },
170
+ getWorkingMemory: async () => stored,
171
+ saveWorkingMemory: async (
172
+ threadId: string,
173
+ scope: string,
174
+ value: any
175
+ ) => {
176
+ stored = value
177
+ savedWorkingMemory.push({ threadId, scope, value })
178
+ },
179
+ },
180
+ } as any
181
+ }
182
+
183
+ const wireDelegatingPair = (agentMode: 'delegate' | 'supervise') => {
184
+ registerAgent('sub', { instructions: 'sub' })
185
+ registerAgent(
186
+ 'parent',
187
+ {
188
+ instructions: 'parent',
189
+ agentMode,
190
+ memory: { workingMemory: true } as any,
191
+ },
192
+ { agents: ['sub'] }
193
+ )
194
+ }
195
+
196
+ const runParent = async (script?: {
197
+ preHandoff: string
198
+ postHandoff: string
199
+ }) => {
200
+ const savedWorkingMemory: unknown[] = []
201
+ const savedMessages: any[] = []
202
+ pikkuState(
203
+ null,
204
+ 'package',
205
+ 'singletonServices',
206
+ makeServices(delegatingRunner(script), savedWorkingMemory, savedMessages)
207
+ )
208
+ const { channel, events } = recordingChannel('c1')
209
+ const fullText = await streamAgent(
210
+ 'parent',
211
+ { message: 'go', threadId: 't1', resourceId: 'r1' },
212
+ channel,
213
+ {}
214
+ )
215
+ return { savedWorkingMemory, savedMessages, events, fullText }
216
+ }
217
+
218
+ describe('delegate mode and working memory', () => {
219
+ test('collects working memory the parent writes after a hand-off', async () => {
220
+ wireDelegatingPair('delegate')
221
+ const { savedWorkingMemory } = await runParent()
222
+
223
+ assert.deepEqual(
224
+ savedWorkingMemory.map((s: any) => s.value.phase),
225
+ ['two', 'three']
226
+ )
227
+ })
228
+
229
+ test('still collects working memory written before the hand-off', async () => {
230
+ wireDelegatingPair('delegate')
231
+ const { savedWorkingMemory } = await runParent({
232
+ preHandoff: 'Planning. <working_memory>{"phase":"one"}</working_memory>',
233
+ postHandoff: 'Handed off. ',
234
+ })
235
+
236
+ assert.deepEqual(
237
+ savedWorkingMemory.map((s: any) => s.value.phase),
238
+ ['one', 'three']
239
+ )
240
+ })
241
+
242
+ test('the client receives no parent text after the hand-off', async () => {
243
+ wireDelegatingPair('delegate')
244
+ const { events } = await runParent()
245
+
246
+ assert.equal(parentTextOf(events), 'Planning. ')
247
+ })
248
+
249
+ test('the parent assistant text persisted stays suppressed', async () => {
250
+ wireDelegatingPair('delegate')
251
+ const { fullText, savedMessages } = await runParent()
252
+
253
+ assert.equal(fullText, 'Planning. ')
254
+ const assistantText = savedMessages
255
+ .filter(
256
+ ({ threadId, message }: any) =>
257
+ threadId === 't1' && message.role === 'assistant'
258
+ )
259
+ .map(({ message }: any) =>
260
+ typeof message.content === 'string'
261
+ ? message.content
262
+ : (message.content ?? [])
263
+ .filter((part: any) => part.type === 'text')
264
+ .map((part: any) => part.text)
265
+ .join('')
266
+ )
267
+ .join('')
268
+ assert.equal(assistantText, 'Planning. ')
269
+ })
270
+
271
+ test('supervise mode streams every parent delta and collects every update', async () => {
272
+ wireDelegatingPair('supervise')
273
+ const { events, savedWorkingMemory } = await runParent()
274
+
275
+ assert.equal(parentTextOf(events), 'Planning. Handed off. Done. ')
276
+ assert.deepEqual(
277
+ savedWorkingMemory.map((s: any) => s.value.phase),
278
+ ['two', 'three']
279
+ )
280
+ })
281
+
282
+ test('user channel middleware sees exactly the deltas the client sees', async () => {
283
+ wireDelegatingPair('delegate')
284
+ const seen: string[] = []
285
+ const agent = pikkuState(null, 'agent', 'agents').get('parent')!
286
+ agent.channelMiddleware = [
287
+ async (_services: any, event: any, next: any) => {
288
+ if (event.type === 'text-delta') seen.push(event.text)
289
+ await next(event)
290
+ },
291
+ ] as any
292
+ pikkuState(null, 'agent', 'agents').set('parent', agent)
293
+
294
+ const { events } = await runParent({
295
+ preHandoff: 'Planning. <working_memory>{"phase":"one"}</working_memory>',
296
+ postHandoff: 'Handed off. ',
297
+ })
298
+
299
+ const clientDeltas = events
300
+ .filter((e) => e.type === 'text-delta' && !(e as any).agent)
301
+ .map((e) => (e as any).text as string)
302
+
303
+ assert.deepEqual(seen, clientDeltas)
304
+ assert.deepEqual(seen, ['Planning. '])
305
+ })
306
+
307
+ test('the raw text a delegating parent speaks still reaches afterStep', async () => {
308
+ wireDelegatingPair('delegate')
309
+
310
+ const stepTexts: string[] = []
311
+ const agent = pikkuState(null, 'agent', 'agents').get('parent')!
312
+ agent.agentMiddleware = [
313
+ {
314
+ afterStep: async (_services: any, ctx: any) => {
315
+ stepTexts.push(ctx.text)
316
+ },
317
+ },
318
+ ] as any
319
+ pikkuState(null, 'agent', 'agents').set('parent', agent)
320
+
321
+ await runParent()
322
+
323
+ assert.deepEqual(stepTexts, ['Planning. Handed off.', 'Done.'])
324
+ })
325
+ })
326
+
327
+ describe('delegate mode on the resume path', () => {
328
+ test('suppresses parent text after a hand-off and still collects working memory', async () => {
329
+ wireDelegatingPair('delegate')
330
+
331
+ const savedWorkingMemory: unknown[] = []
332
+ const services = makeServices(delegatingRunner(), savedWorkingMemory)
333
+ let pendingApprovals: unknown[] = [
334
+ {
335
+ type: 'tool-call',
336
+ toolCallId: 'tc-1',
337
+ toolName: 'sub',
338
+ args: { message: 'approved hand-off', session: 's0' },
339
+ runId: 'run-1',
340
+ },
341
+ ]
342
+ services.agentRunState = {
343
+ createRun: async () => 'run-1',
344
+ updateRun: async () => {},
345
+ resolveApproval: async () => {
346
+ pendingApprovals = []
347
+ return true
348
+ },
349
+ getRun: async () => ({
350
+ runId: 'run-1',
351
+ id: 'run-1',
352
+ agentName: 'parent',
353
+ threadId: 't1',
354
+ resourceId: 'r1',
355
+ status: 'suspended',
356
+ pendingApprovals,
357
+ messages: [],
358
+ }),
359
+ }
360
+ pikkuState(null, 'package', 'singletonServices', services)
361
+
362
+ const { channel, events } = recordingChannel('c1')
363
+ await resumeAgent(
364
+ { runId: 'run-1', toolCallId: 'tc-1', approved: true },
365
+ channel,
366
+ {
367
+ sessionService: {
368
+ get: () => ({ userId: 'r1' }),
369
+ setInitial: () => {},
370
+ sessionChanged: false,
371
+ },
372
+ } as any
373
+ )
374
+
375
+ assert.equal(parentTextOf(events), 'Planning. ')
376
+ assert.deepEqual(
377
+ savedWorkingMemory.map((s: any) => s.value.phase),
378
+ ['two', 'three']
379
+ )
380
+ })
381
+ })