@pikku/inspector 0.12.58 → 0.12.60

package/src/utils/post-process.ts

@@ -9,7 +9,7 @@ import type {
   FunctionServicesMeta,
   MiddlewareMetadata,
   PermissionMetadata,
-} from '@pikku/core'
+} from '@pikku/core/ecosystem/types'
 import type ts from 'typescript'
 import { existsSync, readFileSync } from 'node:fs'
 import { join } from 'node:path'
@@ -18,8 +18,8 @@ import { ErrorCode } from '../error-codes.js'
 import { findSecretAliasServices } from './secret-alias-services.js'
 import { relative } from 'node:path'
 import { AUTH_HANDLER_FUNC_ID } from '../add/add-auth.js'
-import { flattenScopeDefinitions } from '@pikku/core/scope'
-import type { WorkflowStepMeta } from '@pikku/core/workflow'
+import { flattenScopeDefinitions } from '@pikku/core/ecosystem/scope'
+import type { WorkflowStepMeta } from '@pikku/core/ecosystem/workflow'
 import { DYNAMIC_SCENARIO_STEP_TARGET } from './workflow/dsl/patterns.js'
 
 /**
@@ -308,12 +308,12 @@ export function aggregateRequiredServices(
     }
   }
 
-  // AI agents need aiStorage + aiRunState + agentRunService + aiAgentRunner
+  // AI agents need agentStorage + agentRunState + agentRunService + agentRunner
   if (Object.keys(state.agents.agentsMeta).length > 0) {
-    requiredServices.add('aiStorage')
-    requiredServices.add('aiRunState')
+    requiredServices.add('agentStorage')
+    requiredServices.add('agentRunState')
     requiredServices.add('agentRunService')
-    requiredServices.add('aiAgentRunner')
+    requiredServices.add('agentRunner')
   }
 
   // Channels need eventHub for pub/sub
@@ -383,10 +383,8 @@ export function validateSecretOverrides(
   )
 
   for (const [namespace, addonDecl] of wireAddonDeclarations.entries()) {
-    if (!addonDecl.secretOverrides) continue
-
     for (const [logicalName, resolvedName] of Object.entries(
-      addonDecl.secretOverrides
+      addonDecl.secretOverrides ?? {}
     )) {
       if (!secretIds.has(resolvedName)) {
         const availableSecrets = Array.from(secretIds)
@@ -396,6 +394,20 @@ export function validateSecretOverrides(
         )
       }
     }
+
+    // A grant names the secret as the addon reads it, so it resolves through
+    // the override map before it can be looked up in the project.
+    for (const logicalName of addonDecl.secretGrants ?? []) {
+      const resolvedName =
+        addonDecl.secretOverrides?.[logicalName] ?? logicalName
+      if (!secretIds.has(resolvedName)) {
+        const availableSecrets = Array.from(secretIds)
+        logger.critical(
+          ErrorCode.INVALID_VALUE,
+          `Secret grant '${logicalName}' in addon '${namespace}' (${addonDecl.package}) targets a secret that does not exist. Available secrets: ${availableSecrets.join(', ') || 'none'}`
+        )
+      }
+    }
   }
 }
 
@@ -411,10 +423,8 @@ export function validateCredentialOverrides(
   )
 
   for (const [namespace, addonDecl] of wireAddonDeclarations.entries()) {
-    if (!addonDecl.credentialOverrides) continue
-
     for (const [logicalName, resolvedName] of Object.entries(
-      addonDecl.credentialOverrides
+      addonDecl.credentialOverrides ?? {}
     )) {
       if (!credentialNames.has(resolvedName)) {
         const availableCredentials = Array.from(credentialNames)
@@ -424,6 +434,18 @@ export function validateCredentialOverrides(
         )
       }
     }
+
+    for (const logicalName of addonDecl.credentialGrants ?? []) {
+      const resolvedName =
+        addonDecl.credentialOverrides?.[logicalName] ?? logicalName
+      if (!credentialNames.has(resolvedName)) {
+        const availableCredentials = Array.from(credentialNames)
+        logger.critical(
+          ErrorCode.INVALID_VALUE,
+          `Credential grant '${logicalName}' in addon '${namespace}' (${addonDecl.package}) targets a credential that does not exist. Available credentials: ${availableCredentials.join(', ') || 'none'}`
+        )
+      }
+    }
   }
 }
 
@@ -1208,7 +1230,7 @@ export function validateScopeReferences(
  *
  * The description check is separate and opt-in (`--strict-meta`), because the
  * description is what the model is told the tool does: without one, the tool is
- * offered to it under its own name (`ai-agent-prepare.ts`), which is a silent
+ * offered to it under its own name (`agent-prepare.ts`), which is a silent
  * quality loss rather than a failure. A title deliberately does not satisfy it —
  * a title labels a tool in a UI, it does not tell a model when to reach for it.
  */

package/src/utils/resolve-deploy-target.ts

@@ -1,4 +1,4 @@
-import type { FunctionMeta } from '@pikku/core'
+import type { FunctionMeta } from '@pikku/core/ecosystem/services'
 
 /**
  * Thrown when a function's explicit `deploy: 'serverless'` conflicts

package/src/utils/resolve-function-meta.ts

@@ -1,4 +1,7 @@
-import type { FunctionMeta, FunctionsMeta } from '@pikku/core'
+import type {
+  FunctionMeta,
+  FunctionsMeta,
+} from '@pikku/core/ecosystem/services'
 
 /**
  * Look up function metadata by pikkuFuncId, checking both local functions

package/src/utils/resolve-function-types.ts

@@ -1,5 +1,5 @@
 import type { TypesMap } from '../types-map.js'
-import type { FunctionsMeta } from '@pikku/core'
+import type { FunctionsMeta } from '@pikku/core/ecosystem/services'
 
 export function resolveFunctionIOTypes(
   pikkuFuncId: string,

package/src/utils/resolve-versions.ts

@@ -1,5 +1,8 @@
-import { parseVersionedId, formatVersionedId } from '@pikku/core'
-import type { CLICommandMeta } from '@pikku/core/cli'
+import {
+  parseVersionedId,
+  formatVersionedId,
+} from '@pikku/core/ecosystem/types'
+import type { CLICommandMeta } from '@pikku/core/ecosystem/cli'
 import type { InspectorState, InspectorLogger } from '../types.js'
 import { ErrorCode } from '../error-codes.js'
 

package/src/utils/schema-generator.ts

@@ -12,8 +12,9 @@ import { createGenerator, RootlessError } from 'ts-json-schema-generator'
 import { register } from 'tsx/esm/api'
 import * as z from 'zod'
 import { zodToTs, createAuxiliaryTypeStore } from 'zod-to-ts'
-import type { FunctionsMeta, JSONValue } from '@pikku/core'
-import type { HTTPWiringsMeta } from '@pikku/core/http'
+import type { FunctionsMeta } from '@pikku/core/ecosystem/services'
+import type { JSONValue } from '@pikku/core/ecosystem/types'
+import type { HTTPWiringsMeta } from '@pikku/core/ecosystem/http'
 import type { TypesMap } from '../types-map.js'
 import { ErrorCode } from '../error-codes.js'
 import type { InspectorLogger, InspectorState, SchemaRef } from '../types.js'

package/src/utils/serialize-inspector-state.ts

@@ -1,5 +1,5 @@
 import type { SecretUsage } from './extract-secret-usage.js'
-import type { JSONValue } from '@pikku/core'
+import type { JSONValue } from '@pikku/core/ecosystem/types'
 import type {
   InspectorDiagnostic,
   InspectorFeature,
@@ -170,6 +170,8 @@ export interface SerializableInspectorState {
           secretOverrides?: Record<string, string>
           variableOverrides?: Record<string, string>
           credentialOverrides?: Record<string, string>
+          secretGrants?: string[]
+          credentialGrants?: string[]
           globalSecrets?: string
           globalCredentials?: string
         },
@@ -261,8 +263,8 @@ export interface SerializableInspectorState {
       ]
     >
   }
-  aiMiddleware: {
-    definitions: InspectorState['aiMiddleware']['definitions']
+  agentMiddleware: {
+    definitions: InspectorState['agentMiddleware']['definitions']
   }
   permissions: {
     definitions: InspectorState['permissions']['definitions']
@@ -471,8 +473,8 @@ export function serializeInspectorState(
         state.channelMiddleware.tagMiddleware.entries()
       ),
     },
-    aiMiddleware: {
-      definitions: state.aiMiddleware.definitions,
+    agentMiddleware: {
+      definitions: state.agentMiddleware.definitions,
     },
     permissions: {
       definitions: state.permissions.definitions,
@@ -677,8 +679,8 @@ export function deserializeInspectorState(
       instances: data.channelMiddleware?.instances || {},
       tagMiddleware: new Map(data.channelMiddleware?.tagMiddleware || []),
     },
-    aiMiddleware: {
-      definitions: data.aiMiddleware?.definitions || {},
+    agentMiddleware: {
+      definitions: data.agentMiddleware?.definitions || {},
     },
     permissions: {
       definitions: data.permissions.definitions,

package/src/utils/serialize-mcp-json.ts

@@ -1,5 +1,5 @@
 import type { InspectorLogger, InspectorState } from '../types.js'
-import type { JSONValue } from '@pikku/core'
+import type { JSONValue } from '@pikku/core/ecosystem/types'
 import { resolveFunctionMeta } from './resolve-function-meta.js'
 
 interface MCPEndpoint {

package/src/utils/serialize-openapi-json.ts

@@ -1,5 +1,5 @@
-import type { FunctionsMeta } from '@pikku/core'
-import type { HTTPWiringsMeta } from '@pikku/core/http'
+import type { FunctionsMeta } from '@pikku/core/ecosystem/services'
+import type { HTTPWiringsMeta } from '@pikku/core/ecosystem/http'
 import type { InspectorLogger } from '../types.js'
 import _convertSchema from '@openapi-contrib/json-schema-to-openapi-schema'
 const convertSchema =

package/src/utils/workflow/derive-workflow-plan.test.ts

@@ -1,6 +1,6 @@
 import { strict as assert } from 'assert'
 import { describe, test } from 'node:test'
-import type { WorkflowStepMeta } from '@pikku/core/workflow'
+import type { WorkflowStepMeta } from '@pikku/core/ecosystem/workflow'
 import { deriveWorkflowPlan } from './derive-workflow-plan.js'
 
 const rpc = (stepName: string, rpcName = 'rpc.fn'): WorkflowStepMeta =>

package/src/utils/workflow/derive-workflow-plan.ts

@@ -1,7 +1,7 @@
 import type {
   WorkflowStepMeta,
   WorkflowPlannedStep,
-} from '@pikku/core/workflow'
+} from '@pikku/core/ecosystem/workflow'
 
 /**
  * Derive the static UI plan for a DSL workflow from its extracted step tree.

package/src/utils/workflow/dsl/extract-approval-policy.test.ts

@@ -2,7 +2,7 @@ import { describe, test } from 'node:test'
 import assert from 'node:assert/strict'
 import * as ts from 'typescript'
 import { extractDSLWorkflow } from './extract-dsl-workflow.js'
-import type { ApprovalStepMeta } from '@pikku/core/workflow'
+import type { ApprovalStepMeta } from '@pikku/core/ecosystem/workflow'
 
 const checker = {
   getSymbolAtLocation: () => undefined,
@@ -26,7 +26,10 @@ const approvalStepFor = (options: string): ApprovalStepMeta => {
 
   let node: ts.Node | undefined
   const visit = (n: ts.Node) => {
-    if (ts.isCallExpression(n) && n.expression.getText() === 'pikkuWorkflowFunc') {
+    if (
+      ts.isCallExpression(n) &&
+      n.expression.getText() === 'pikkuWorkflowFunc'
+    ) {
       node = n
     }
     ts.forEachChild(n, visit)

package/src/utils/workflow/dsl/extract-dsl-workflow.ts

@@ -15,13 +15,13 @@ import type {
   SwitchCaseMeta,
   FilterStepMeta,
   ArrayPredicateStepMeta,
-  ScenarioStepMeta,
   InputSource,
   OutputBinding,
   Condition,
   WorkflowContext,
   ContextVariable,
-} from '@pikku/core/workflow'
+} from '@pikku/core/ecosystem/workflow'
+import type { ScenarioStepMeta } from '@pikku/core/ecosystem/scenario'
 import {
   isWorkflowDoCall,
   isWorkflowExpectEventuallyCall,

package/src/utils/workflow/graph/convert-dsl-to-graph-skip.test.ts

@@ -1,7 +1,7 @@
 import { test } from 'node:test'
 import assert from 'node:assert'
 import { convertDslToGraph } from './convert-dsl-to-graph.js'
-import type { WorkflowsMeta } from '@pikku/core'
+import type { WorkflowsMeta } from '@pikku/core/ecosystem/workflow'
 
 const scenarioMeta = (
   overrides: Partial<WorkflowsMeta[string]> = {}

package/src/utils/workflow/graph/convert-dsl-to-graph.ts

@@ -1,7 +1,10 @@
 /**
  * Converts DSL (Domain Specific Language) step-based format to graph node format
  */
-import type { WorkflowStepMeta, WorkflowsMeta } from '@pikku/core/workflow'
+import type {
+  WorkflowStepMeta,
+  WorkflowsMeta,
+} from '@pikku/core/ecosystem/workflow'
 import type {
   SerializedGraphNode,
   SerializedWorkflowGraph,

package/src/utils/workflow/graph/finalize-workflow-wires.ts

@@ -3,7 +3,7 @@ import type {
   SerializedWorkflowGraph,
   WorkflowWires,
 } from './workflow-graph.types.js'
-import type { CLICommandMeta } from '@pikku/core/cli'
+import type { CLICommandMeta } from '@pikku/core/ecosystem/cli'
 
 function parseWorkflowFuncId(
   pikkuFuncId: string

package/src/utils/workflow/graph/finalize-workflows.ts

@@ -1,5 +1,9 @@
-import type { FunctionsMeta } from '@pikku/core'
-import { isVersionedId, formatVersionedId, parseVersionedId } from '@pikku/core'
+import type { FunctionsMeta } from '@pikku/core/ecosystem/services'
+import {
+  isVersionedId,
+  formatVersionedId,
+  parseVersionedId,
+} from '@pikku/core/ecosystem/types'
 import type { SerializedWorkflowGraph } from './workflow-graph.types.js'
 import { canonicalJSON, hashString } from '../../hash.js'
 import { convertDslToGraph } from './convert-dsl-to-graph.js'

package/src/utils/workflow/graph/serialize-workflow-graph.ts

@@ -1,4 +1,4 @@
-import { isRef } from '@pikku/core/workflow'
+import { isRef } from '@pikku/core/ecosystem/workflow'
 import type {
   SerializedWorkflowGraph,
   SerializedGraphNode,

package/src/utils/workflow/graph/workflow-graph.types.ts

@@ -113,10 +113,10 @@ export type FlowType =
 // Import and re-export context types from core
 import type {
   ContextVariable,
-  ScenarioStepPhase,
   WorkflowContext,
   WorkflowPlannedStep,
-} from '@pikku/core/workflow'
+} from '@pikku/core/ecosystem/workflow'
+import type { ScenarioStepPhase } from '@pikku/core/ecosystem/scenario'
 
 export type { ContextVariable, WorkflowContext }
 

package/src/visit.ts

@@ -33,8 +33,8 @@ import { addPersonas } from './add/add-personas.js'
 import { addVariable } from './add/add-variable.js'
 import { addWorkflowGraph } from './add/add-workflow-graph.js'
 import { addFeature } from './add/add-feature.js'
-import { addAIAgent } from './add/add-ai-agent.js'
-import { addAIScorer } from './add/add-ai-scorer.js'
+import { addAgent } from './add/add-agent.js'
+import { addAgentScorer } from './add/add-agent-scorer.js'
 import { addApprovalDescription } from './add/add-approval-description.js'
 
 export const visitSetup = (
@@ -172,8 +172,8 @@ export const visitRoutes = (
   addMCPPrompt(logger, node, checker, state, nextOptions)
   addWorkflowGraph(logger, node, checker, state, nextOptions)
   addFeature(logger, node, checker, state, nextOptions)
-  addAIAgent(logger, node, checker, state, nextOptions)
-  addAIScorer(logger, node, checker, state, nextOptions)
+  addAgent(logger, node, checker, state, nextOptions)
+  addAgentScorer(logger, node, checker, state, nextOptions)
 
   ts.forEachChild(node, (child) =>
     visitRoutes(logger, checker, child, state, nextOptions)