@pikku/inspector 0.12.58 → 0.12.60

package/dist/add/add-middleware.js

@@ -508,12 +508,12 @@ export const addMiddleware = (logger, node, checker, state) => {
         logger.debug(`• Found channel middleware factory with services: ${services.services.join(', ')}`);
         return;
     }
-    if (expression.text === 'pikkuAIMiddleware') {
+    if (expression.text === 'pikkuAgentMiddleware') {
         const arg = args[0];
         if (!arg)
             return;
         if (!ts.isObjectLiteralExpression(arg)) {
-            logger.error(`• pikkuAIMiddleware() requires an object literal argument.`);
+            logger.error(`• pikkuAgentMiddleware() requires an object literal argument.`);
             return;
         }
         const allServices = new Set();
@@ -542,12 +542,12 @@ export const addMiddleware = (logger, node, checker, state) => {
                 pikkuFuncId = node.parent.name.text;
             }
             else {
-                logger.error(`• pikkuAIMiddleware() must be assigned to a variable or object property. ` +
-                    `Extract it to a const: const myMiddleware = pikkuAIMiddleware(...)`);
+                logger.error(`• pikkuAgentMiddleware() must be assigned to a variable or object property. ` +
+                    `Extract it to a const: const myMiddleware = pikkuAgentMiddleware(...)`);
                 return;
             }
         }
-        state.aiMiddleware.definitions[pikkuFuncId] = {
+        state.agentMiddleware.definitions[pikkuFuncId] = {
             services,
             sourceFile: node.getSourceFile().fileName,
             position: node.getStart(),

package/dist/add/add-personas.js

@@ -1,5 +1,5 @@
 import * as ts from 'typescript';
-import { DISPOSITIONS } from '@pikku/core/virtual-user';
+import { DISPOSITIONS } from '@pikku/core/ecosystem/virtual-user';
 import { isRunnablePersona } from '@pikku/core/persona';
 import { ErrorCode } from '../error-codes.js';
 import { claimSingleDeclaration } from '../utils/single-declaration.js';

package/dist/add/add-wire-addon.js

@@ -53,6 +53,8 @@ export function addWireAddon(node, state, logger) {
     let secretOverrides;
     let variableOverrides;
     let credentialOverrides;
+    let secretGrants;
+    let credentialGrants;
     let globalSecrets;
     let globalCredentials;
     for (const prop of firstArg.properties) {
@@ -96,6 +98,12 @@ export function addWireAddon(node, state, logger) {
             ts.isObjectLiteralExpression(prop.initializer)) {
             credentialOverrides = parseStringRecord(prop.initializer);
         }
+        else if (key === 'secretGrants') {
+            secretGrants = parseStringArray(prop.initializer);
+        }
+        else if (key === 'credentialGrants') {
+            credentialGrants = parseStringArray(prop.initializer);
+        }
         else if (key === 'globalSecrets') {
             // The grant is real at runtime whatever the reason evaluates to, so a
             // non-literal is recorded as its source text rather than dropped.
@@ -122,6 +130,8 @@ export function addWireAddon(node, state, logger) {
         secretOverrides,
         variableOverrides,
         credentialOverrides,
+        secretGrants,
+        credentialGrants,
         globalSecrets,
         globalCredentials,
     });

package/dist/add/add-workflow.d.ts

@@ -1,5 +1,5 @@
 import type { AddWiring } from '../types.js';
-import type { WorkflowStepMeta } from '@pikku/core/workflow';
+import type { WorkflowStepMeta } from '@pikku/core/ecosystem/workflow';
 /**
  * Recursively collect all RPC names from workflow steps
  */

package/dist/error-codes.d.ts

@@ -69,6 +69,7 @@ export declare enum ErrorCode {
     FUNCTION_DYNAMIC_IMPORT = "PKU498",
     DUPLICATE_CORE_VERSION = "PKU717",
     CORE_VERSION_SKEW = "PKU718",
+    SPLIT_TYPE_IDENTITY = "PKU719",
     PII_IN_OUTPUT = "PKU910",
     ADDON_WIRING_NOT_ALLOWED = "PKU920",
     ADDON_CONTRACT_HANDLERS_NOT_ALLOWED = "PKU921",

package/dist/error-codes.js

@@ -90,6 +90,7 @@ export var ErrorCode;
     // Dependency integrity errors
     ErrorCode["DUPLICATE_CORE_VERSION"] = "PKU717";
     ErrorCode["CORE_VERSION_SKEW"] = "PKU718";
+    ErrorCode["SPLIT_TYPE_IDENTITY"] = "PKU719";
     // Data classification errors
     ErrorCode["PII_IN_OUTPUT"] = "PKU910";
     // Addon authoring errors

package/dist/inspector.js

@@ -177,7 +177,7 @@ export function getInitialInspectorState(rootDir) {
             instances: {},
             tagMiddleware: new Map(),
         },
-        aiMiddleware: {
+        agentMiddleware: {
             definitions: {},
         },
         permissions: {

package/dist/types.d.ts

@@ -1,26 +1,27 @@
 import type * as ts from 'typescript';
 import type { SecretUsage } from './utils/extract-secret-usage.js';
-import type { ChannelMessageMeta, ChannelsMeta } from '@pikku/core/channel';
-import type { GatewaysMeta } from '@pikku/core/gateway';
-import type { HTTPWiringsMeta } from '@pikku/core/http';
-import type { ScheduledTasksMeta } from '@pikku/core/scheduler';
-import type { TriggerMeta, TriggerSourceMeta } from '@pikku/core/trigger';
-import type { QueueWorkersMeta } from '@pikku/core/queue';
-import type { WorkflowsMeta } from '@pikku/core/workflow';
-import type { MCPResourceMeta, MCPToolMeta, MCPPromptMeta } from '@pikku/core/mcp';
-import type { AIAgentMeta } from '@pikku/core/ai-agent';
-import type { ScorerMeta } from '@pikku/core/ai-scorer';
-import type { CLIMeta } from '@pikku/core/cli';
-import type { CLICommandMeta } from '@pikku/core/cli';
-import type { NodesMeta } from '@pikku/core/node';
-import type { SecretDefinitions } from '@pikku/core/secret';
-import type { CredentialDefinitions } from '@pikku/core/credential';
-import type { ScopeDefinitions } from '@pikku/core/scope';
-import type { SystemRoleDefinitions } from '@pikku/core/role';
-import type { PersonaDefinitions } from '@pikku/core/persona';
-import type { VariableDefinitions } from '@pikku/core/variable';
+import type { ChannelMessageMeta, ChannelsMeta } from '@pikku/core/ecosystem/channel';
+import type { GatewaysMeta } from '@pikku/core/ecosystem/gateway';
+import type { HTTPWiringsMeta } from '@pikku/core/ecosystem/http';
+import type { ScheduledTasksMeta } from '@pikku/core/ecosystem/scheduler';
+import type { TriggerMeta, TriggerSourceMeta } from '@pikku/core/ecosystem/trigger';
+import type { QueueWorkersMeta } from '@pikku/core/ecosystem/queue';
+import type { WorkflowsMeta } from '@pikku/core/ecosystem/workflow';
+import type { MCPResourceMeta, MCPToolMeta, MCPPromptMeta } from '@pikku/core/ecosystem/mcp';
+import type { AgentsMeta } from '@pikku/core/ecosystem/agent';
+import type { ScorerMeta } from '@pikku/core/ecosystem/agent-scorer';
+import type { CLIMeta } from '@pikku/core/ecosystem/cli';
+import type { CLICommandMeta } from '@pikku/core/ecosystem/cli';
+import type { NodesMeta } from '@pikku/core/ecosystem/node';
+import type { SecretDefinitions } from '@pikku/core/ecosystem/secret';
+import type { CredentialDefinitions } from '@pikku/core/ecosystem/credential';
+import type { ScopeDefinitions } from '@pikku/core/ecosystem/scope';
+import type { SystemRoleDefinitions } from '@pikku/core/ecosystem/role';
+import type { PersonaDefinitions } from '@pikku/core/ecosystem/persona';
+import type { VariableDefinitions } from '@pikku/core/ecosystem/variable';
 import type { TypesMap } from './types-map.js';
-import type { FunctionsMeta, FunctionServicesMeta, FunctionWiresMeta, JSONValue } from '@pikku/core';
+import type { FunctionsMeta } from '@pikku/core/ecosystem/services';
+import type { FunctionServicesMeta, FunctionWiresMeta, JSONValue } from '@pikku/core/ecosystem/types';
 import type { OpenAPISpecInfo } from './utils/serialize-openapi-json.js';
 import type { ErrorCode, CodedDiagnostic } from './error-codes.js';
 import type { VersionManifest, VersionValidateError } from './utils/contract-hashes.js';
@@ -521,6 +522,10 @@ export interface InspectorState {
             secretOverrides?: Record<string, string>;
             variableOverrides?: Record<string, string>;
             credentialOverrides?: Record<string, string>;
+            /** Secrets the app lends this instance, named as the addon reads them. */
+            secretGrants?: string[];
+            /** Credentials the app lends this instance, named as the addon reads them. */
+            credentialGrants?: string[];
             /**
              * The app's stated reason for handing this instance the whole
              * `SecretService` instead of one scoped to its declared secrets.
@@ -541,7 +546,7 @@ export interface InspectorState {
         files: Set<string>;
     };
     agents: {
-        agentsMeta: AIAgentMeta;
+        agentsMeta: AgentsMeta;
         files: Map<string, {
             path: string;
             exportedName: string;
@@ -615,7 +620,7 @@ export interface InspectorState {
     };
     middleware: InspectorMiddlewareState;
     channelMiddleware: InspectorChannelMiddlewareState;
-    aiMiddleware: InspectorAIMiddlewareState;
+    agentMiddleware: InspectorAIMiddlewareState;
     permissions: InspectorPermissionState;
     serviceAggregation: {
         requiredServices: Set<string>;

package/dist/utils/compute-required-schemas.d.ts

@@ -1,4 +1,4 @@
-import type { FunctionsMeta } from '@pikku/core';
+import type { FunctionsMeta } from '@pikku/core/ecosystem/services';
 import type { TypesMap } from '../types-map.js';
 import type { SchemaRef } from '../types.js';
 export declare function computeRequiredSchemas(functionsMeta: FunctionsMeta, typesMap: TypesMap, additionalTypes?: string[], schemaLookup?: Map<string, SchemaRef>): Set<string>;

package/dist/utils/contract-hashes.d.ts

@@ -1,4 +1,5 @@
-import type { FunctionsMeta, JSONValue } from '@pikku/core';
+import type { FunctionsMeta } from '@pikku/core/ecosystem/services';
+import type { JSONValue } from '@pikku/core/ecosystem/types';
 import type { TypesMap } from '../types-map.js';
 import { ErrorCode } from '../error-codes.js';
 export type ContractEntry = {

package/dist/utils/contract-hashes.js

@@ -1,4 +1,4 @@
-import { parseVersionedId } from '@pikku/core';
+import { parseVersionedId } from '@pikku/core/ecosystem/types';
 import { ErrorCode } from '../error-codes.js';
 import { canonicalJSON, hashString } from './hash.js';
 function isHashEntry(v) {

package/dist/utils/extract-function-name.js

@@ -1,7 +1,7 @@
 import * as ts from 'typescript';
 import { createHash } from 'crypto';
 import { relative } from 'path';
-import { formatVersionedId } from '@pikku/core';
+import { formatVersionedId } from '@pikku/core/ecosystem/types';
 /**
  * Deterministic placeholder id for an anonymous/unnamed pikku function or
  * permission. Derived from the call expression's source location (relative path

package/dist/utils/extract-services.d.ts

@@ -1,5 +1,5 @@
 import * as ts from 'typescript';
-import type { FunctionServicesMeta, FunctionWiresMeta } from '@pikku/core';
+import type { FunctionServicesMeta, FunctionWiresMeta } from '@pikku/core/ecosystem/types';
 /**
  * Extract services from a function's first parameter destructuring pattern
  */

package/dist/utils/filter-inspector-state.js

@@ -1,4 +1,4 @@
-import { parseVersionedId } from '@pikku/core';
+import { parseVersionedId } from '@pikku/core/ecosystem/types';
 import { aggregateRequiredServices } from './post-process.js';
 import { resolveDeployTarget } from './resolve-deploy-target.js';
 // Module-level Set to track warned groups across multiple filter calls

package/dist/utils/filter-utils.d.ts

@@ -1,5 +1,5 @@
 import type { InspectorFilters, InspectorLogger } from '../types.js';
-import type { PikkuWiringTypes } from '@pikku/core';
+import type { PikkuWiringTypes } from '@pikku/core/ecosystem/types';
 /**
  * Match a value against a pattern with wildcard support
  * Supports "*" at the beginning, end, or both (e.g., "send*", "*Payment", "*process*")

package/dist/utils/middleware.d.ts

@@ -1,5 +1,5 @@
 import * as ts from 'typescript';
-import type { MiddlewareMetadata } from '@pikku/core';
+import type { MiddlewareMetadata } from '@pikku/core/ecosystem/types';
 import type { InspectorState } from '../types.js';
 export interface MiddlewareRef {
     definitionId: string;
@@ -12,5 +12,5 @@ export declare function routeMatchesPattern(route: string, pattern: string): boo
 export declare function resolveHTTPMiddleware(state: InspectorState, route: string, tags: string[] | undefined, explicitMiddlewareNode: ts.Expression | undefined, checker: ts.TypeChecker): MiddlewareMetadata[] | undefined;
 export declare function resolveMiddleware(state: InspectorState, obj: ts.ObjectLiteralExpression, tags: string[] | undefined, checker: ts.TypeChecker): MiddlewareMetadata[] | undefined;
 export declare function resolveHTTPMiddlewareFromObject(state: InspectorState, route: string, obj: ts.ObjectLiteralExpression, tags: string[] | undefined, checker: ts.TypeChecker): MiddlewareMetadata[] | undefined;
-export declare function resolveAIMiddleware(state: InspectorState, obj: ts.ObjectLiteralExpression, checker: ts.TypeChecker): MiddlewareMetadata[] | undefined;
+export declare function resolveAgentMiddleware(state: InspectorState, obj: ts.ObjectLiteralExpression, checker: ts.TypeChecker): MiddlewareMetadata[] | undefined;
 export declare function resolveChannelMiddleware(state: InspectorState, obj: ts.ObjectLiteralExpression, tags: string[] | undefined, checker: ts.TypeChecker): MiddlewareMetadata[] | undefined;

package/dist/utils/middleware.js

@@ -116,19 +116,19 @@ export function resolveHTTPMiddlewareFromObject(state, route, obj, tags, checker
     const explicitMiddlewareNode = getMiddlewareNode(obj);
     return resolveHTTPMiddleware(state, route, tags, explicitMiddlewareNode, checker);
 }
-function getAIMiddlewareNode(obj) {
+function getAgentMiddlewareNode(obj) {
     const prop = obj.properties.find((p) => ts.isPropertyAssignment(p) &&
         ts.isIdentifier(p.name) &&
-        p.name.text === 'aiMiddleware');
+        p.name.text === 'agentMiddleware');
     return prop?.initializer;
 }
-export function resolveAIMiddleware(state, obj, checker) {
-    const explicitNode = getAIMiddlewareNode(obj);
+export function resolveAgentMiddleware(state, obj, checker) {
+    const explicitNode = getAgentMiddlewareNode(obj);
     if (!explicitNode)
         return undefined;
     const names = extractMiddlewarePikkuNames(explicitNode, checker, state.rootDir);
     const resolved = names.map((name) => {
-        const def = state.aiMiddleware.definitions[name];
+        const def = state.agentMiddleware.definitions[name];
         return {
             type: 'wire',
             name,

package/dist/utils/permissions.d.ts

@@ -1,5 +1,5 @@
 import * as ts from 'typescript';
-import type { PermissionMetadata } from '@pikku/core';
+import type { PermissionMetadata } from '@pikku/core/ecosystem/types';
 import type { InspectorState } from '../types.js';
 /**
  * Extract permission pikkuFuncIds from an expression (array or object literal)

package/dist/utils/post-process.d.ts

@@ -1,5 +1,5 @@
 import type { InspectorState, InspectorLogger, InspectorOptions } from '../types.js';
-import type { MiddlewareMetadata, PermissionMetadata } from '@pikku/core';
+import type { MiddlewareMetadata, PermissionMetadata } from '@pikku/core/ecosystem/types';
 import type ts from 'typescript';
 /**
  * Stamp the inspected authorize/callbacks service set onto the generated auth
@@ -153,7 +153,7 @@ export declare function validateScopeReferences(logger: InspectorLogger, state:
  *
  * The description check is separate and opt-in (`--strict-meta`), because the
  * description is what the model is told the tool does: without one, the tool is
- * offered to it under its own name (`ai-agent-prepare.ts`), which is a silent
+ * offered to it under its own name (`agent-prepare.ts`), which is a silent
  * quality loss rather than a failure. A title deliberately does not satisfy it —
  * a title labels a tool in a UI, it does not tell a model when to reach for it.
  */

package/dist/utils/post-process.js

@@ -5,7 +5,7 @@ import { ErrorCode } from '../error-codes.js';
 import { findSecretAliasServices } from './secret-alias-services.js';
 import { relative } from 'node:path';
 import { AUTH_HANDLER_FUNC_ID } from '../add/add-auth.js';
-import { flattenScopeDefinitions } from '@pikku/core/scope';
+import { flattenScopeDefinitions } from '@pikku/core/ecosystem/scope';
 import { DYNAMIC_SCENARIO_STEP_TARGET } from './workflow/dsl/patterns.js';
 /**
  * Stamp the inspected authorize/callbacks service set onto the generated auth
@@ -254,12 +254,12 @@ export function aggregateRequiredServices(state) {
             }
         }
     }
-    // AI agents need aiStorage + aiRunState + agentRunService + aiAgentRunner
+    // AI agents need agentStorage + agentRunState + agentRunService + agentRunner
     if (Object.keys(state.agents.agentsMeta).length > 0) {
-        requiredServices.add('aiStorage');
-        requiredServices.add('aiRunState');
+        requiredServices.add('agentStorage');
+        requiredServices.add('agentRunState');
         requiredServices.add('agentRunService');
-        requiredServices.add('aiAgentRunner');
+        requiredServices.add('agentRunner');
     }
     // Channels need eventHub for pub/sub
     if (Object.keys(state.channels.meta).length > 0) {
@@ -317,14 +317,21 @@ export function validateSecretOverrides(logger, state) {
     // older meta without a secretId field.
     const secretIds = new Set(state.secrets.definitions.map((d) => d.secretId ?? d.name));
     for (const [namespace, addonDecl] of wireAddonDeclarations.entries()) {
-        if (!addonDecl.secretOverrides)
-            continue;
-        for (const [logicalName, resolvedName] of Object.entries(addonDecl.secretOverrides)) {
+        for (const [logicalName, resolvedName] of Object.entries(addonDecl.secretOverrides ?? {})) {
             if (!secretIds.has(resolvedName)) {
                 const availableSecrets = Array.from(secretIds);
                 logger.critical(ErrorCode.INVALID_VALUE, `Secret override '${logicalName}' -> '${resolvedName}' in addon '${namespace}' (${addonDecl.package}) targets a secret that does not exist. Available secrets: ${availableSecrets.join(', ') || 'none'}`);
             }
         }
+        // A grant names the secret as the addon reads it, so it resolves through
+        // the override map before it can be looked up in the project.
+        for (const logicalName of addonDecl.secretGrants ?? []) {
+            const resolvedName = addonDecl.secretOverrides?.[logicalName] ?? logicalName;
+            if (!secretIds.has(resolvedName)) {
+                const availableSecrets = Array.from(secretIds);
+                logger.critical(ErrorCode.INVALID_VALUE, `Secret grant '${logicalName}' in addon '${namespace}' (${addonDecl.package}) targets a secret that does not exist. Available secrets: ${availableSecrets.join(', ') || 'none'}`);
+            }
+        }
     }
 }
 export function validateCredentialOverrides(logger, state) {
@@ -333,14 +340,19 @@ export function validateCredentialOverrides(logger, state) {
         return;
     const credentialNames = new Set(state.credentials?.definitions.map((d) => d.name) ?? []);
     for (const [namespace, addonDecl] of wireAddonDeclarations.entries()) {
-        if (!addonDecl.credentialOverrides)
-            continue;
-        for (const [logicalName, resolvedName] of Object.entries(addonDecl.credentialOverrides)) {
+        for (const [logicalName, resolvedName] of Object.entries(addonDecl.credentialOverrides ?? {})) {
             if (!credentialNames.has(resolvedName)) {
                 const availableCredentials = Array.from(credentialNames);
                 logger.critical(ErrorCode.INVALID_VALUE, `Credential override '${logicalName}' -> '${resolvedName}' in addon '${namespace}' (${addonDecl.package}) targets a credential that does not exist. Available credentials: ${availableCredentials.join(', ') || 'none'}`);
             }
         }
+        for (const logicalName of addonDecl.credentialGrants ?? []) {
+            const resolvedName = addonDecl.credentialOverrides?.[logicalName] ?? logicalName;
+            if (!credentialNames.has(resolvedName)) {
+                const availableCredentials = Array.from(credentialNames);
+                logger.critical(ErrorCode.INVALID_VALUE, `Credential grant '${logicalName}' in addon '${namespace}' (${addonDecl.package}) targets a credential that does not exist. Available credentials: ${availableCredentials.join(', ') || 'none'}`);
+            }
+        }
     }
 }
 export function validateVariableOverrides(logger, state) {
@@ -983,7 +995,7 @@ export function validateScopeReferences(logger, state) {
  *
  * The description check is separate and opt-in (`--strict-meta`), because the
  * description is what the model is told the tool does: without one, the tool is
- * offered to it under its own name (`ai-agent-prepare.ts`), which is a silent
+ * offered to it under its own name (`agent-prepare.ts`), which is a silent
  * quality loss rather than a failure. A title deliberately does not satisfy it —
  * a title labels a tool in a UI, it does not tell a model when to reach for it.
  */

package/dist/utils/resolve-deploy-target.d.ts

@@ -1,4 +1,4 @@
-import type { FunctionMeta } from '@pikku/core';
+import type { FunctionMeta } from '@pikku/core/ecosystem/services';
 /**
  * Thrown when a function's explicit `deploy: 'serverless'` conflicts
  * with one of its services being declared `serverlessIncompatible`.

package/dist/utils/resolve-function-meta.d.ts

@@ -1,4 +1,4 @@
-import type { FunctionMeta, FunctionsMeta } from '@pikku/core';
+import type { FunctionMeta, FunctionsMeta } from '@pikku/core/ecosystem/services';
 /**
  * Look up function metadata by pikkuFuncId, checking both local functions
  * and addon functions. Addon functions use namespaced IDs like 'namespace:funcName'.

package/dist/utils/resolve-function-types.d.ts

@@ -1,5 +1,5 @@
 import type { TypesMap } from '../types-map.js';
-import type { FunctionsMeta } from '@pikku/core';
+import type { FunctionsMeta } from '@pikku/core/ecosystem/services';
 export declare function resolveFunctionIOTypes(pikkuFuncId: string, functionsMeta: FunctionsMeta, typesMap: TypesMap, requiredTypes: Set<string>): {
     inputType: string;
     outputType: string;

package/dist/utils/resolve-versions.js

@@ -1,4 +1,4 @@
-import { parseVersionedId, formatVersionedId } from '@pikku/core';
+import { parseVersionedId, formatVersionedId, } from '@pikku/core/ecosystem/types';
 import { ErrorCode } from '../error-codes.js';
 export function resolveLatestVersions(state, logger) {
     const functionsMeta = state.functions.meta;

package/dist/utils/schema-generator.d.ts

@@ -1,4 +1,4 @@
-import type { JSONValue } from '@pikku/core';
+import type { JSONValue } from '@pikku/core/ecosystem/types';
 import type { InspectorLogger, InspectorState } from '../types.js';
 /** One file the generated schemas were derived from, as of when they were generated. */
 export type SchemaDep = {

package/dist/utils/serialize-inspector-state.d.ts

@@ -1,5 +1,5 @@
 import type { SecretUsage } from './extract-secret-usage.js';
-import type { JSONValue } from '@pikku/core';
+import type { JSONValue } from '@pikku/core/ecosystem/types';
 import type { InspectorDiagnostic, InspectorFeature, InspectorState } from '../types.js';
 /**
  * Serializable version of InspectorState that can be saved to JSON
@@ -195,6 +195,8 @@ export interface SerializableInspectorState {
                 secretOverrides?: Record<string, string>;
                 variableOverrides?: Record<string, string>;
                 credentialOverrides?: Record<string, string>;
+                secretGrants?: string[];
+                credentialGrants?: string[];
                 globalSecrets?: string;
                 globalCredentials?: string;
             }
@@ -277,8 +279,8 @@ export interface SerializableInspectorState {
             InspectorState['channelMiddleware']['tagMiddleware'] extends Map<string, infer V> ? V : never
         ]>;
     };
-    aiMiddleware: {
-        definitions: InspectorState['aiMiddleware']['definitions'];
+    agentMiddleware: {
+        definitions: InspectorState['agentMiddleware']['definitions'];
     };
     permissions: {
         definitions: InspectorState['permissions']['definitions'];

package/dist/utils/serialize-inspector-state.js

@@ -149,8 +149,8 @@ export function serializeInspectorState(state) {
             instances: state.channelMiddleware.instances,
             tagMiddleware: Array.from(state.channelMiddleware.tagMiddleware.entries()),
         },
-        aiMiddleware: {
-            definitions: state.aiMiddleware.definitions,
+        agentMiddleware: {
+            definitions: state.agentMiddleware.definitions,
         },
         permissions: {
             definitions: state.permissions.definitions,
@@ -326,8 +326,8 @@ export function deserializeInspectorState(data) {
             instances: data.channelMiddleware?.instances || {},
             tagMiddleware: new Map(data.channelMiddleware?.tagMiddleware || []),
         },
-        aiMiddleware: {
-            definitions: data.aiMiddleware?.definitions || {},
+        agentMiddleware: {
+            definitions: data.agentMiddleware?.definitions || {},
         },
         permissions: {
             definitions: data.permissions.definitions,

package/dist/utils/serialize-openapi-json.d.ts

@@ -1,5 +1,5 @@
-import type { FunctionsMeta } from '@pikku/core';
-import type { HTTPWiringsMeta } from '@pikku/core/http';
+import type { FunctionsMeta } from '@pikku/core/ecosystem/services';
+import type { HTTPWiringsMeta } from '@pikku/core/ecosystem/http';
 import type { InspectorLogger } from '../types.js';
 interface ErrorDetails {
     status: number;

package/dist/utils/workflow/derive-workflow-plan.d.ts

@@ -1,4 +1,4 @@
-import type { WorkflowStepMeta, WorkflowPlannedStep } from '@pikku/core/workflow';
+import type { WorkflowStepMeta, WorkflowPlannedStep } from '@pikku/core/ecosystem/workflow';
 /**
  * Derive the static UI plan for a DSL workflow from its extracted step tree.
  *

package/dist/utils/workflow/dsl/extract-dsl-workflow.d.ts

@@ -1,5 +1,5 @@
 import * as ts from 'typescript';
-import type { WorkflowStepMeta, WorkflowContext } from '@pikku/core/workflow';
+import type { WorkflowStepMeta, WorkflowContext } from '@pikku/core/ecosystem/workflow';
 /**
  * Result of DSL workflow extraction
  */

package/dist/utils/workflow/graph/convert-dsl-to-graph.d.ts

@@ -1,7 +1,7 @@
 /**
  * Converts DSL (Domain Specific Language) step-based format to graph node format
  */
-import type { WorkflowsMeta } from '@pikku/core/workflow';
+import type { WorkflowsMeta } from '@pikku/core/ecosystem/workflow';
 import type { SerializedWorkflowGraph } from './workflow-graph.types.js';
 /**
  * Convert a DSL workflow to graph format

package/dist/utils/workflow/graph/finalize-workflows.js

@@ -1,4 +1,4 @@
-import { isVersionedId, formatVersionedId, parseVersionedId } from '@pikku/core';
+import { isVersionedId, formatVersionedId, parseVersionedId, } from '@pikku/core/ecosystem/types';
 import { canonicalJSON, hashString } from '../../hash.js';
 import { convertDslToGraph } from './convert-dsl-to-graph.js';
 import { deriveWorkflowPlan } from '../derive-workflow-plan.js';

package/dist/utils/workflow/graph/serialize-workflow-graph.js

@@ -1,4 +1,4 @@
-import { isRef } from '@pikku/core/workflow';
+import { isRef } from '@pikku/core/ecosystem/workflow';
 /**
  * Convert a RefValue (from runtime) to DataRef (serialized)
  */

package/dist/utils/workflow/graph/workflow-graph.types.d.ts

@@ -67,7 +67,8 @@ export interface NodeOptions {
  * Flow node types for control flow (no RPC call)
  */
 export type FlowType = 'sleep' | 'suspend' | 'approval' | 'branch' | 'parallel' | 'fanout' | 'inline' | 'switch' | 'filter' | 'arrayPredicate' | 'return' | 'cancel' | 'set';
-import type { ContextVariable, ScenarioStepPhase, WorkflowContext, WorkflowPlannedStep } from '@pikku/core/workflow';
+import type { ContextVariable, WorkflowContext, WorkflowPlannedStep } from '@pikku/core/ecosystem/workflow';
+import type { ScenarioStepPhase } from '@pikku/core/ecosystem/scenario';
 export type { ContextVariable, WorkflowContext };
 /**
  * Base node properties shared by all node types

package/dist/visit.js

@@ -28,8 +28,8 @@ import { addPersonas } from './add/add-personas.js';
 import { addVariable } from './add/add-variable.js';
 import { addWorkflowGraph } from './add/add-workflow-graph.js';
 import { addFeature } from './add/add-feature.js';
-import { addAIAgent } from './add/add-ai-agent.js';
-import { addAIScorer } from './add/add-ai-scorer.js';
+import { addAgent } from './add/add-agent.js';
+import { addAgentScorer } from './add/add-agent-scorer.js';
 import { addApprovalDescription } from './add/add-approval-description.js';
 export const visitSetup = (logger, checker, node, state, options) => {
     addFileExtendsCoreType(node, checker, state.singletonServicesTypeImportMap, 'CoreSingletonServices', state);
@@ -88,7 +88,7 @@ export const visitRoutes = (logger, checker, node, state, options) => {
     addMCPPrompt(logger, node, checker, state, nextOptions);
     addWorkflowGraph(logger, node, checker, state, nextOptions);
     addFeature(logger, node, checker, state, nextOptions);
-    addAIAgent(logger, node, checker, state, nextOptions);
-    addAIScorer(logger, node, checker, state, nextOptions);
+    addAgent(logger, node, checker, state, nextOptions);
+    addAgentScorer(logger, node, checker, state, nextOptions);
     ts.forEachChild(node, (child) => visitRoutes(logger, checker, child, state, nextOptions));
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pikku/inspector",
-  "version": "0.12.58",
+  "version": "0.12.60",
   "description": "TypeScript inspector for Pikku — discovers functions and wirings to drive code generation",
   "author": "yasser.fadl@gmail.com",
   "license": "BUSL-1.1",
@@ -45,10 +45,10 @@
     "zod-to-ts": "^2.1.0"
   },
   "peerDependencies": {
-    "@pikku/core": "^0.12.82"
+    "@pikku/core": "^0.12.84"
   },
   "devDependencies": {
-    "@pikku/core": "^0.12.82",
+    "@pikku/core": "^0.12.84",
     "@types/node": "^24.11.0"
   },
   "engines": {